Giovanni Bernini giioohbernini

How to patch Android app to sniff its HTTPS traffic with self-signed certificate

Download apktool from https://ibotpeaches.github.io/Apktool/
Unpack apk file: java -jar /home/expert/work/tools/apktool.jar d [email protected]
Modify AndroidManifest.xml by adding android:networkSecurityConfig="@xml/network_security_config" attribute to application element.
Create file /res/xml/network_security_config.xml with following content:

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <base-config>

	const scaleCanvas = (canvas, scale) => {
	const scaledCanvas = document.createElement('canvas')
	scaledCanvas.width = canvas.width * scale
	scaledCanvas.height = canvas.height * scale

	scaledCanvas
	.getContext('2d')
	.drawImage(canvas, 0, 0, scaledCanvas.width, scaledCanvas.height)

	return scaledCanvas

	import messageEvents from '~/utils/messageEvents'

	//...

	const handleOnMessage = event => {
	const value = event.nativeEvent.data
	const parsedValue = JSON.parse(value)

	messageEvents({ ...parsedValue, setCurrentUrl, setCanGoBack, ...props })
	}

	// ....

	<WebView
	source={{ uri: URI }}
	onMessage={handleOnMessage}
	onNavigationStateChange={handleNavigationChange}
	ref={handleRef}
	onLoadStart={handleSpinner(true)}
	onLoad={handleSpinner(false)}
	/>

	const postMessage = data => {
	/* Esse trecho verifica se o método existe.
	Quando estivermos rodando no browser ele não irá existir. */

	const hasRNPostMessage = window && window.ReactNativeWebView && window.ReactNativeWebView.postMessage

	if (hasRNPostMessage) {
	const dataStringify = JSON.stringify(data)
	window.ReactNativeWebView.postMessage(dataStringify)
	}

	import React, {useEffect} from 'react'
	import {Link, useLocation} from 'react-router-dom'
	import postMessage from './utils/postMessage.js'

	const Root = () => {
	const location = useLocation();

	useEffect(() => {
	const data = {
	eventName: 'routeChange',

	import React from 'react'
	import isApp from 'utils/isApp'

	const welcomeType = isApp
	? 'Your app about page'
	: 'Your web about page'

	const About = () => {
	return (
	<div>

	import React from 'react'
	import {
	BrowserRouter as Router,
	Route,
	} from 'react-router-dom'
	import Root from './Root'
	import Home from './pages/Home'
	import About from './pages/About'

	const AppRouter = () => {