By default, when an Android app makes an HTTPS connection, it makes sure that it's talking to a trusted server by comparing the issuer of the server's certificate to Android's built-in list of trusted system certificate authorities. These apps include their own custom certificate validation, to specify the exact HTTPS certificate issuers they're prepared to trust, instead of trusting all of the device's trusted certificate authorities. Connect ADB to a rooted device or emulator Install and start Frida on the device/emulator Install Frida on your computer Tell Frida the app that you want to edit, and provide a script that knows how to remove the certificate pinning logic