Dimitar Dihanov DDihanov

Android APK HTTPS user certificates how-to

Starting with Android Nougat, Google changed the way apps handle user certificates:

Apps that target API Level 24 and above no longer trust user or admin-added CAs for secure connections, by default.

This means that certificates issued by applications like [Charles][charles] or [mitmproxy][mitmproxy] are no longer accepted, so these proxies won't work for HTTPS traffic.

This tutorial explains what needs to be done to overcome that restriction and be able to sniff any Android app's HTTPS requests.

Full socket.io client and server example

Last updated: 2021-02-21, tested with socket.io v3.1.1

This is the simplest implementation you will find for a client/server WebSockets architecture using socket.io.

To see a full explanation, read my answer on SO here: https://stackoverflow.com/a/24232050/778272.

If you're looking for examples using frameworks, check these links:

First Method

Deleting the .git folder may cause problems in our git repository. If we want to delete all of our commits history, but keep the code in its current state, try this:

# Check out to a temporary branch:
git checkout --orphan TEMP_BRANCH

# Add all the files:
git add -A

	@Composable
	fun TextTransition(textAndColor: Pair<String, Color>) {
	AnimatedContent(
	targetState = textAndColor,
	transitionSpec = {
	fadeIn() togetherWith fadeOut()
	}
	) { (text, color) ->
	Row {
	text.forEachIndexed { index, char ->

	public class DynamicFragmentPagerAdapter extends PagerAdapter {
	private static final String TAG = "DynamicFragmentPagerAdapter";

	private final FragmentManager fragmentManager;

	public static abstract class FragmentIdentifier implements Parcelable { //should be concrete children with @Parcelize if possible, don't forget CREATOR field
	private final String fragmentTag;
	private final Bundle args;

	public FragmentIdentifier(@NonNull String fragmentTag, @Nullable Bundle args) {

	import android.content.Context
	import android.content.Intent
	import android.content.IntentFilter
	import androidx.lifecycle.Lifecycle.Event.ON_DESTROY
	import androidx.lifecycle.Lifecycle.Event.ON_START
	import androidx.lifecycle.LifecycleObserver
	import androidx.lifecycle.LifecycleOwner
	import androidx.lifecycle.OnLifecycleEvent
	import android.content.BroadcastReceiver as StockReceiver

	/**
	* Kotlin Extensions for simpler, easier and funw way
	* of launching of Activities
	*/

	inline fun <reified T : Any> Activity.launchActivity (
	requestCode: Int = -1,
	options: Bundle? = null,
	noinline init: Intent.() -> Unit = {})
	{

	/*
	* Copyright 2018 Google LLC
	*
	* Licensed under the Apache License, Version 2.0 (the "License");
	* you may not use this file except in compliance with the License.
	* You may obtain a copy of the License at
	*
	* http://www.apache.org/licenses/LICENSE-2.0
	*
	* Unless required by applicable law or agreed to in writing, software

	Apache License
	Version 2.0, January 2004
	http://www.apache.org/licenses/

	TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

	1. Definitions.

	"License" shall mean the terms and conditions for use, reproduction,
	and distribution as defined by Sections 1 through 9 of this document.

	public final class Byond
	{
	public static String makeRequest(String url, int port, String topic) throws IOException
	{
	Socket sock = new Socket(url, port);
	//Socket sock = new Socket("localhost", 4567);
	InputStream is = sock.getInputStream();
	OutputStream os = sock.getOutputStream();

	byte[] msg = ("?" + topic).getBytes();