apk-mitm
mitm-omegle
Our great sponsors
| apk-mitm | mitm-omegle | |
|---|---|---|
| 7 | 3 | |
| 3,451 | 147 | |
| - | - | |
| 5.9 | 0.0 | |
| 6 days ago | about 1 year ago | |
| TypeScript | CoffeeScript | |
| MIT License | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
apk-mitm
-
Cant bypass SSL pinning on Fazolis Rewards
For some reason fazolis rewards app from apkpure or anywhere has custom SSL Pinning (at least i think) I have tried patching fazolis rewards with https://github.com/shroudedcode/apk-mitm. And then using NoxPlayer for an emulator and mitmproxy to intercept https requests and some go through but others are not trusted by the client. What am I doing wrong? is it impossible for some applications?
- Why is closed source so bad?
-
Various experiments in decrypting traffic from an Android phone
If you want to capture and decrypt the traffic from one or a few apps without root, you can use apk-mitm to reverse engineering the apps to install a network config file which allows you to use user CA to decrypt the traffic of that app. apk-mitm will do everything for you, you will just have to reinstall the app(it requires first to uninstall from the phone because the app's signature will be different and it will not allow installing the apks from apk-mitm as an update to the original app). Modern apps use split apks, you can use SAI to install an app from split apks.
-
Android Chrome 99 expands Certificate Transparency, breaking all MitM dev tools
> For example, Chrome Desktop, Firefox, and IE did not enforce HPKP if they encountered a cert from a user-added CA. Why does Android do the opposite?
Your examples are all browsers. I understood that Chrome on Android will continue to support using a user-added CA added to the user store. Android and desktops behave exactly the same for web browsers.
Non-browser apps are where the differences exist. On Android you must opt-in each app to trust the user store. I'd imagine that the next step is automating https://github.com/shroudedcode/apk-mitm to bulk replace all installed apps with modified apks.
- Secret military aircraft possibly exposed on TikTok
-
How can I extract API calls from APK files?
You can use (apk-mitm)[https://github.com/shroudedcode/apk-mitm]. Simply load the API and wait for the patched version. Then download HTTP canary or use Fidler (whatever you prefer). I prefer using HTTP canary since I can intercept the API without looking through the random other requests on my PC. You also don't need a rooted phone which is a +
mitm-omegle
- i’d shit myself
-
Not really
I just made a slight fork of their code so videos can work without using Flash. That’s why I put “hacking” in quotes.
-
How does Hyphonix do his Omegle hacker pranks?
He most likely uses a suped up MITM client such as https://github.com/olegberman/mitm-omegle, along with OBS to add video effects
What are some alternatives?
hackdroid - Security Apps for Android
ssh-mitm - SSH man-in-the-middle tool
XAPKDetector - APK/DEX detector for Windows, Linux and MacOS.
till - DataHen Till is a companion tool to your existing web scraper that instantly makes it scalable, maintainable, and more unblockable, with minimal code changes on your scraper. Integrates with any scraper in 5 minutes.
Apktool - A tool for reverse engineering Android apk files
mitmproxy - An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
game-builder-garage-editor - (WIP) Experimental save editor for Nintendo's Game Builder Garage
proxy.py - ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework
yakyak - Desktop chat client for Google Hangouts
Uber Adb Tools for Android - A tool that enables advanced features through adb installing and uninstalling apps like wildcards and multi device support. Useful if you want to clean your test device from all company apks or install a lot of apks in one go. Written in Java so it should run on your platform.
Uber Apk Signer - A cli tool that helps signing and zip aligning single or multiple Android application packages (APKs) with either debug or provided release certificates. It supports v1, v2 and v3 Android signing scheme has an embedded debug keystore and auto verifies after signing.