I'm developing a search aggregator service so I'd like to get the endpoint of some of the stores that, currently, doesn't expose their API. So I'd like to now if there's a way to do this with my cellphone.

  • Use a rooted device with Magisk for sniffing and a PC with a proxy like mitmproxy, Fiddler, Charles... On the device you can install the proxy as system certificate or alternatively use https unpinned und trusting solutions like frida/objection or simply the edXposed module + trustMeAlready module. – Robert Dec 10 '20 at 19:09
  • This might be weird, but sometimes submitting the APK to Virus Total may reveal some URLs as "Interesting Strings" (e.g. the analysis of a random APK). – Andrew T. Dec 11 '20 at 6:59
  • Sure solution can be an out-of-android one: install a https eavesdropping proxy. It requires a root certificate, that you should install into your android, somehow. Well, some apps, if they really want to, will be able to detect that you eavesdrop them and stop communicating on this reason, but it won't happen too often. – peterh - Reinstate Monica Jan 8 at 3:15

Yes, you can do it on your phone alone. I use HttpCanary App with root access. It works without root as well but only a few apps that don't use certificate pinning.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.