apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection (by shroudedcode)

Apk-mitm Alternatives

Similar projects and alternatives to apk-mitm

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better apk-mitm alternative or higher similarity.

apk-mitm reviews and mentions

Posts with mentions or reviews of apk-mitm. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-05-11.
  • Cant bypass SSL pinning on Fazolis Rewards
    1 project | /r/AndroidQuestions | 28 Mar 2023
    For some reason fazolis rewards app from apkpure or anywhere has custom SSL Pinning (at least i think) I have tried patching fazolis rewards with https://github.com/shroudedcode/apk-mitm. And then using NoxPlayer for an emulator and mitmproxy to intercept https requests and some go through but others are not trusted by the client. What am I doing wrong? is it impossible for some applications?
  • Why is closed source so bad?
    1 project | /r/privacy | 9 Feb 2023
  • Various experiments in decrypting traffic from an Android phone
    1 project | /r/wireshark | 24 Dec 2022
    If you want to capture and decrypt the traffic from one or a few apps without root, you can use apk-mitm to reverse engineering the apps to install a network config file which allows you to use user CA to decrypt the traffic of that app. apk-mitm will do everything for you, you will just have to reinstall the app(it requires first to uninstall from the phone because the app's signature will be different and it will not allow installing the apks from apk-mitm as an update to the original app). Modern apps use split apks, you can use SAI to install an app from split apks.
  • Android Chrome 99 expands Certificate Transparency, breaking all MitM dev tools
    4 projects | news.ycombinator.com | 11 May 2022
    > For example, Chrome Desktop, Firefox, and IE did not enforce HPKP if they encountered a cert from a user-added CA. Why does Android do the opposite?

    Your examples are all browsers. I understood that Chrome on Android will continue to support using a user-added CA added to the user store. Android and desktops behave exactly the same for web browsers.

    Non-browser apps are where the differences exist. On Android you must opt-in each app to trust the user store. I'd imagine that the next step is automating https://github.com/shroudedcode/apk-mitm to bulk replace all installed apps with modified apks.

  • Secret military aircraft possibly exposed on TikTok
    1 project | news.ycombinator.com | 28 Sep 2021
  • How can I extract API calls from APK files?
    1 project | /r/androiddev | 31 Mar 2021
    You can use (apk-mitm)[https://github.com/shroudedcode/apk-mitm]. Simply load the API and wait for the patched version. Then download HTTP canary or use Fidler (whatever you prefer). I prefer using HTTP canary since I can intercept the API without looking through the random other requests on my PC. You also don't need a rooted phone which is a +
  • A note from our sponsor - InfluxDB
    www.influxdata.com | 19 Apr 2024
    Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Stats

Basic apk-mitm repo stats
7
3,439
0.0
24 days ago
Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com