I'm developing a search aggregator service so I'd like to get the endpoint of some of the stores that, currently, doesn't expose their API. So I'd like to now if there's a way to do this with my cellphone.

  • Use a rooted device with Magisk for sniffing and a PC with a proxy like mitmproxy, Fiddler, Charles... On the device you can install the proxy as system certificate or alternatively use https unpinned und trusting solutions like frida/objection or simply the edXposed module + trustMeAlready module.
    – Robert
    Dec 10, 2020 at 19:09
  • This might be weird, but sometimes submitting the APK to Virus Total may reveal some URLs as "Interesting Strings" (e.g. the analysis of a random APK).
    – Andrew T.
    Dec 11, 2020 at 6:59
  • Sure solution can be an out-of-android one: install a https eavesdropping proxy. It requires a root certificate, that you should install into your android, somehow. Well, some apps, if they really want to, will be able to detect that you eavesdrop them and stop communicating on this reason, but it won't happen too often.
    – peterh
    Jan 8, 2021 at 3:15

1 Answer 1


Yes, you can do it on your phone alone. I use HttpCanary App with root access. It works without root as well but only a few apps that don't use certificate pinning.

  • App is not available (anymore) and doesn't seem to be maintained since 2019 on GitHub.
    – dtrunk
    Jul 27, 2022 at 18:36

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .