News for hackers. Stuff that matters.

A comment on All the data can be yours: reverse engineering APIs. Parent comment

Re:All the data can be yours: reverse engineering APIs by sva_ on Tuesday November 12, 2024 @05:43AM (#42114405)
If you want to RE some android apps HTTP or even HTTPS, it's more straight-forward to use httptoolkit and frida. Might be a bit rough the first time you do it, but once its set up its a breeze. You can intercept calls and even modify etc

https://httptoolkit.com/blog/frida-certificate-pinning/

https://github.com/httptoolkit/frida-interception-and-unpinn...

[ Parent | on HN ]
Re:All the data can be yours: reverse engineering APIs by pimterry on Tuesday November 12, 2024 @06:05AM (#42114547)
This is actually now built into HTTP Toolkit, so it's easier than it sounds - if you connect a rooted device, there's an "Android app with Frida" interception option that installs Frida and runs the scripts above for you against any given app on the device automatically. Funded by the EU! https://nlnet.nl/project/AppInterception/
[ Parent | on HN ]