$ filter --tag burpsuite

Android Pentest Toolkit — Overview

The big picture: a BurpSuite + Frida workflow for intercepting HTTPS traffic and bypassing security controls on rooted Android, and how the rest of this series fits together.

Android · 2026-03-07

Certificate Injection — Android < 14

Installing a BurpSuite CA into the system trust store on Android 13 and below via direct /system remount, the hash-based filename rule, plus an OpenSSL certificate-operations reference.

Android <14 · 2026-03-07

Certificate Injection — Android 14+ (APEX)

Android 14 moved the CA store under an APEX module with per-process mount namespaces. Injecting a cert now means tmpfs overlay plus nsenter into every Zygote and app namespace.

Android 14+ · 2026-03-07

Traffic Interception — Proxy, iptables & Invisible Proxying

Three ways to force an app's traffic through BurpSuite: a global HTTP proxy, kernel-level iptables DNAT, and DNS-level invisible proxying — with the ip_forward step everyone forgets.

Android · 2026-03-07