Make APK Accept CA Certificate

Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Learn & practice GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Check the subscription plans!

• Join the 💬 Discord group or the telegram group or follow us on Twitter 🐦 @hacktricks_live.

• Share hacking tricks by submitting PRs to the HackTricks and HackTricks Cloud github repos.

Try Hard Security Group

Join the Try Hard Security Discord Server!Discord

---

Baadhi ya programu hazipendi vyeti vilivyopakuliwa na mtumiaji, hivyo ili kukagua trafiki ya wavuti kwa baadhi ya programu tunapaswa kweli ku-decompile programu hiyo & kuongeza mambo machache & kuirekebisha tena.

Automatic

Zana https://github.com/shroudedcode/apk-mitm itafanya kiotomatiki mabadiliko muhimu kwenye programu ili kuanza kukamata maombi na pia itazima pinning ya cheti (ikiwa ipo).

Manual

Kwanza tunadecompile programu: apktool d *file-name*.apk

Kisha tunaenda kwenye faili ya Manifest.xml na kuporomoka hadi kwenye tag ya <\application android> na tutaongeza mstari ufuatao ikiwa haupo tayari:

android:networkSecurityConfig="@xml/network_security_config

Kabla ya kuongeza:

Baada ya kuongeza:

Sasa ingia kwenye folda ya res/xml na tengeneza/badilisha faili inayoitwa network_security_config.xml yenye maudhui yafuatayo:

<network-security-config>
<base-config>
<trust-anchors>
<!-- Trust preinstalled CAs -->
<certificates src="system" />
<!-- Additionally trust user added CAs -->
<certificates src="user" />
</trust-anchors>
</base-config>
</network-security-config>

Kisha hifadhi faili na kutoka kwenye saraka zote na ujenge tena apk kwa amri ifuatayo: apktool b *folder-name/* -o *output-file.apk*

Hatimaye, unahitaji tu kusaini programu mpya. Soma sehemu hii ya ukurasa Smali - Decompiling/[Modifying]/Compiling kujifunza jinsi ya kuisaini.

Jifunze na fanya mazoezi ya AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE) Jifunze na fanya mazoezi ya GCP Hacking: HackTricks Training GCP Red Team Expert (GRTE)

Support HackTricks

• Angalia mpango wa usajili!

• Jiunge na 💬 kikundi cha Discord au kikundi cha telegram au fuata sisi kwenye Twitter 🐦 @hacktricks_live.

• Shiriki mbinu za hacking kwa kuwasilisha PRs kwa HackTricks na HackTricks Cloud github repos.