Patch your android app with self-signed certificate to sniff https traffic. Should work both release and debug builds.
python apk_rebuild.py -i input.apk -o output.apk
Run python script and follow the instructions. After you've done drag output file into your emulator. Use Charles
, BurpSuite
or any other tooling for request sniffing.
- macOS or Windows
- apktools (in your PATH)
- Android Studio (with Build Tools installed)
- Python 3.6 and above
This repo was created for educational purposes only. Use it on your own risk.
Have fun π