Hacker News new | ask | show | jobs
by sva_ 588 days ago
If you want to RE some android apps HTTP or even HTTPS, it's more straight-forward to use httptoolkit and frida. Might be a bit rough the first time you do it, but once its set up its a breeze. You can intercept calls and even modify etc

https://httptoolkit.com/blog/frida-certificate-pinning/

https://github.com/httptoolkit/frida-interception-and-unpinn...

1 comments

This is actually now built into HTTP Toolkit, so it's easier than it sounds - if you connect a rooted device, there's an "Android app with Frida" interception option that installs Frida and runs the scripts above for you against any given app on the device automatically. Funded by the EU! https://nlnet.nl/project/AppInterception/