4 ms·
You could probably still MITM your phone to see their private API calls
by tedmiston 9y ago
You could probably still MITM your phone to see their private API calls
- toomuchtodo 9y agoEven with certificate pinning? Maybe if you can patch the app.
- dsacco 9y agoYou can also just hook the process in the real time to bypass it. Going out on a limb here, they most likely HMAC sign their requests using a secret key embedded in the application, so you'd have to reverse that too.