3 ms·

perhaps a n00b question, but would this work, or is there something similar for apps, specifically android apps?

rhaps0dy 2y ago
Depends on the app. If it uses some online functionality probably yes. You could also try decompilation, it’s decent on java apps like android’s.
whilenot-dev 2y ago
A MITM proxy isn't specific to any app, it's a forward proxy for your outgoing network connection. In case of an Android app you'd need to run mitmproxy on a machine in your network and setup the connection as proxy in your Android's network settings. Then you'd need follow http://mitm.it http://mitm.it to install mitmproxys root certificate on the Android device (to trust the connection with TLS) and off you go. EDIT: or rather follow the docs[0] [0]: https://docs.mitmproxy.org/stable/howto-install-system-trusted-ca-android/ https://docs.mitmproxy.org/stable/howto-install-system-trust...
tecleandor 2y ago
I've used this specific tool to help me reverse engineer the private API of an Android App. The thing is, depending on how hardened the app is, you'll have to play with Android to allow this interception, mostly because of certificate pinning. Also I remember something about apps not using the system wide trusted certificates you install (IIRC). I remember using a rooted device with LineageOS, and downloading the APK and modifying it with a tool so the self signed certificate for the mitm proxy works with it. The mitm proxy docs have some links to tools that can do that [0] and you could also use an Android emulator if you don't have an extra phone to mess with it [1] 0: https://docs.mitmproxy.org/stable/concepts-certificates/ 1: https://docs.mitmproxy.org/stable/howto-install-system-trusted-ca-android/
jazz9k 2y ago
I use burp suite combined with Frida (which can remove root check and override ssl pinning).
- nsteel 2y ago
  Yes, this. The Frida tools method to remove cert pinning is the only method that has worked for me. The mitmproxy docs for android (as referred to by another commenter) didn't work for any apps I tried.

Depends on the app. If it uses some online functionality probably yes. You could also try decompilation, it’s decent on java apps like android’s.

whilenot-dev 2y ago

A MITM proxy isn't specific to any app, it's a forward proxy for your outgoing network connection. In case of an Android app you'd need to run mitmproxy on a machine in your network and setup the connection as proxy in your Android's network settings. Then you'd need follow http://mitm.it http://mitm.it to install mitmproxys root certificate on the Android device (to trust the connection with TLS) and off you go. EDIT: or rather follow the docs[0] [0]: https://docs.mitmproxy.org/stable/howto-install-system-trusted-ca-android/ https://docs.mitmproxy.org/stable/howto-install-system-trust...

tecleandor 2y ago

I've used this specific tool to help me reverse engineer the private API of an Android App. The thing is, depending on how hardened the app is, you'll have to play with Android to allow this interception, mostly because of certificate pinning. Also I remember something about apps not using the system wide trusted certificates you install (IIRC). I remember using a rooted device with LineageOS, and downloading the APK and modifying it with a tool so the self signed certificate for the mitm proxy works with it. The mitm proxy docs have some links to tools that can do that [0] and you could also use an Android emulator if you don't have an extra phone to mess with it [1] 0: https://docs.mitmproxy.org/stable/concepts-certificates/ 1: https://docs.mitmproxy.org/stable/howto-install-system-trusted-ca-android/

jazz9k 2y ago

I use burp suite combined with Frida (which can remove root check and override ssl pinning).

nsteel 2y ago
Yes, this. The Frida tools method to remove cert pinning is the only method that has worked for me. The mitmproxy docs for android (as referred to by another commenter) didn't work for any apps I tried.