httptoolkit

    httptoolkit/frida-interception-and-unpinning

    Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

    android
    certificate
    frida
    interception
    mitm
    JavaScript
    AGPL-3.0
    2.3K stars
    295 forks
    2.3K GitHub watchers
    Updated Oct 28, 2026
    View on GitHub

    Build with Backblaze B2

    SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.

    Explore Backblaze Labs

    Loading star history...

    Where it stands

    Rank, growth pace and release cadence relative to everything GStars tracks.

    The project lists 14 contributors on GitHub.

    Gained 28% fewer stars in the last 90 days than in the 90 days before.

    Use Cases & Benefits

    • Provides Frida scripts to intercept and modify HTTPS traffic on mobile apps by rewriting network behavior at runtime.
    • Enables fully automated MitM interception including certificate injection, pinning bypass, and root/jailbreak detection disabling.
    • Use for debugging and analyzing encrypted network traffic in Android apps with complex certificate pinning and obfuscation.
    • Use for intercepting HTTPS traffic on jailbroken iOS devices to inspect and modify app network requests in real time.
    • Use for security researchers testing app resilience against MitM attacks by bypassing certificate pinning and transparency checks.

    Should you depend on it?

    License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.

    License

    AGPL 3.0

    Network copyleft: like the GPL, and also triggered by offering the software over a network.

    Community files

    • README: present

    Watch-outs

    • AGPL-style copyleft also applies when the software is offered over a network.
    • No GitHub releases; pin a commit or tag instead of a release.

    General guidance from repository metadata, not legal advice. How we score

    From the README

    Part of HTTP Toolkit: powerful tools for building, testing & debugging HTTP(S)

    This repo contains Frida scripts designed to do everything required for fully automated HTTPS MitM interception on mobile devices.

    This set of scripts can be used all together, to handle interception, manage certificate trust & disable certificate pinning & transparency checks, for MitM interception of HTTP(S) traffic on Android and iOS, or they can be used and tweaked independently to hook just specific features.

    Excerpt from the httptoolkit/frida-interception-and-unpinning README on GitHub (AGPL-3.0 license). © its authors.Read the full README on GitHub

    Daily snapshots

    Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots

    Forks

    295+10

    Open issues

    78-2

    Compared with peers in Android

    Fastest-growing repositories GStars tracks in this cohort for the week of Nov 1, by 7-day star growth

    httptoolkit/frida-interception-and-unpinning compared with Android repositories by stars, 7-day star growth, health score and last release
    RepositoryStars+7dHealthLast release
    rustdesk/rustdesk128.3K+839654 days ago
    makecindy/cindy9.3K+77145today
    DioxusLabs/dioxus39.5K—5412 days ago
    MatsuriDayo/NekoBoxForAndroid23.3K—24262 days ago
    0x192/universal-android-debloater20.3K—32—
    httptoolkit/frida-interception-and-unpinning2.3K—15—
    Category median23.3K+80545—

    Discover Repositories

    Search across tracked repositories by name or description