Certificate Pinning Bypass

You point your phone at Burp, install the CA, and the app you are testing goes silent — no traffic, just "connection reset". That is certificate pinning: the app trusts one specific cert, not whatever your trust store accepts. This walks the trust evaluation pinning adds, why your proxy CA passes the OS check but fails the pin, and three ways past it on an app you own — a Frida hook, objection in one line, and a network_security_config edit.