Closed drinkwater99 closed 3 years ago
Pretty much. Specifically I have used HttpCanary on a rooted phone. There was some extra work required to get the details needed for authentication. I didn't need to modify the app at all though, just install a certificate into the Android system so I can decrypt the traffic.
Thx for the info, I didn't know about HttpCanary, I will give it a try. I thought a modified apk would be needed - I did that with the Mysa smart baseboard heater thermostat android app (which also uses AWS Cognito for auth).
I am guessing you have a patched version the Emporia Energy android app which bypasses certificate issues to be able to inspect the traffic done by the app via a proxy ?