I've spent the past 4 months trying to bypass certificate pinning in the Facebook android application so I can understand how it works, but I'm having trouble doing so.
I have tried using android SSL trust Killer and cydia substrate, but there seems to be some other verification mecanism. I have tried altering the smali code as explained here:
http://blog.dewhurstsecurity.com/2015/11/10/mobile-security-certificate-pining.html
I was able to view two requests (one of which is shown in the last screenshot of the provided link), however the app seems to apply some other protection mecanism because when trying to login to an account, it gives an error message saying: "ssl3_get_server_certificate certificate verify failed"
I have tried every public tutorial I could find online to no avail, I would appreciate any input on how to do this.
I'd also be happy to provide the decompiled source code, apk, and the modified apk if needed.