🔐 SSL Pinning Bypass — Messenger App

This repository demonstrates how SSL/TLS certificate pinning works in the Messenger Android app, along with a practical example of bypass techniques and HTTPS traffic capture.

---

🎥 Demo Video

▶️ Watch the demonstration

---

⚙️ Supported Architectures

• arm64-v8a
• x86_64

---

Messenger App Version

• 537.0.0.52.109

---

📱 Mobile Device Requirements

• Android device (Rooted or Non-Rooted)
• One of the following traffic interception tools:
  • Proxypin
  • Reqable

---

💻 Emulator Setup

• Windows PC with:
  • Reqable, Burp Suite, or Mitmproxy installed
  • Nox or LDPlayer Android emulator
  • Root access enabled in the emulator

---

🚀 Bypass Procedure

1. Replace patched libcoldstart.so with /data/data/com.facebook.orca/lib-compressed/libcoldstart.so
2. Replace the patched library file:

   adb push D:\patched\libcoldstart.so /data/data/com.facebook.orca/lib-compressed/libcoldstart.so
   

3. Use Proxypin / Reqable / Burp Suite / Mitmproxy for capturing traffics.

For latest patched libcoldstart.so contract with me.