OpenSSL, Certpinning and Memory patching. Sounds fun right?

This technical blog documents research into bypassing Android certificate pinning by extracting and replacing certificate hashes and experimenting with memory patching of OpenSSL/Conscrypt X509 structures using Frida and an Objection plugin (memunpin). It includes example commands, a Frida script, an Objection plugin workflow, discussion of challenges when replacing full certificates, and lessons learned; it is a research write-up rather than a report of an active security incident.