Home▸Computer Science▸Certificate Pinning Defense

Certificate Pinning & MITM Simulator

Interactive certificate-pinning simulator: watch a mobile app's connections to a server succeed or fail as a man-in-the-middle proxy intercepts traffic, with pinning toggled on and off and the MITM certificate's CA trust status controlled in real time.

Computer Science2DEasy60 FPS📱 Mobile-adapted⇄ 3D version

Certificate pinning is the difference between an app that trusts "any certificate the operating system trusts" and one that trusts "only the exact certificate it was built to expect." This simulator plays out that difference packet by packet: a phone repeatedly connects to a server while a man-in-the-middle proxy can be switched on to intercept the traffic. Toggle certificate pinning and watch the same CA-valid MITM certificate go from silently accepted to reliably rejected, and toggle the MITM certificate's trust status to see the layer that catches it even without pinning.

⚙ Under the hood

An app verifies the server's certificate fingerprint to prevent man-in-the-middle attacks.

mobile securitycertificate pinningman-in-the-middle

2D · HTML5 Canvas 2D · 60 FPS target · runs fully client-side, no install