Fran Quinto fquinto

How to patch Android app to sniff its HTTPS traffic with self-signed certificate

Download apktool from https://ibotpeaches.github.io/Apktool/
Unpack apk file: java -jar /home/expert/work/tools/apktool.jar d net.flixster.android-9.1.3@APK4Fun.com.apk
Modify AndroidManifest.xml by adding android:networkSecurityConfig="@xml/network_security_config" attribute to application element.
Create file /res/xml/network_security_config.xml with following content:

<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <base-config>

	import socket
	import struct
	import binascii
	import time
	import json
	import urllib2

	# Use your own IFTTT key, not this fake one
	ifttt_key = '9cn3847ntc8394tn8-ab'
	# Set these up at https://ifttt.com/maker

	#!/bin/bash

	# Cuando tratas de completar un trámite con Hacienda (AEAT)
	# mediante un certificado digital correctamente instalado en iceweasel
	# salta este error:

	# es.gob.afirma.keystores.main.common.AOKeystoreAlternativeException
	# Error message: Error al inicializar el almacen NSS unificado de
	# Mozilla Firefox

	#!/usr/bin/python

	import urllib2
	import json
	import time
	import calendar
	import subprocess

	url = 'http://api.thingm.com/blink1/events/01234567DEADC0DE'