I want to sniff SSL/TLS encrypted traffic of my installed apps using BURP. After installing the burp certificate on my One Plus 5T and moving certificates through the Magisk tweak "Move Certificates" there are still applications like mcdonalds that I can't sniff because tell me there isn't Internet connections. I'm sure that Internet connections there is because another app like deliveroo work perfectly with burp.

I was wondering if there was a solution to this problem.

migrated from superuser.com Apr 9 at 6:08

This question came from our site for computer enthusiasts and power users.


If you have a rooted device with Magisk it is IMHO much simpler to just disable SSL/TLS certificate checking and pinning for traffic sniffing:

Install Xposed for Magisk and the Xposed modules Just trust me and "SSLUnpinning"

Note that for Just trust me the pre-compiled versions don't work on modern Android Systems, therefore you have to clone the linked Github repo and comppile it.

For the SSLUnpinning module you have to select in it's configuration UI to which apps unpinning will be applied.

  • Thank you so much, I appreciated your help and I solved with your advice. – zenmorro Apr 10 at 2:51
  • I appreciate this answer, but is there any work around that how can we protect this? Even when we are using tools like GuardSquare? What are possible solutions. – Muhammad Hannan Aug 9 at 13:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.