Instructions
- Create and Start Your Android Virtual Device: Inside Android Developer Studio, you want to start the AVD Manager from the tools menu to create your emulator. There are no special settings you need to worry about here, you can use any device and Android version. I picked a Pixel 3 with the preview version of Android (named “R”). When done, I was at a screen that looks like below.
2. Get the APK file and Modify it with APK-MITM: Next, we need an apk file to run on our emulator. I just searched for a site where you can do this and came across https://apkgk.com. There I found and downloaded the file I needed. Once downloaded, using apk-mitm is just one line.
npx apk-mitm
3.Set up the Proxy: Of the mitmproxy tools, I prefer to use mitmweb, since I never learned their terminal keyboard shortcuts. To start this on Ubuntu, from the terminal I navigate to where I downloaded the tools, and then type “./mitmweb”. Once it’s started, you should have a screen like below.
4. Set your AVD to use the proxy: In the advanced settings for your AVD, go to settings, then Proxy to set the proxy. You want to set it as shown below. Use 127.0.0.1 as the host name, 8080 as the port number, then hit apply. You may have to reboot your AVD at this point — long press on the power button to do so.
easy as one, two, three
5. Install the mitmproxy CA certificate on the AVD: In your android emulator, open the browser and navigate to http://mitm.it. Then click the android icon to download the certificate. It won’t install automatically, so you have to go to Settings -> Security -> Encryption & credentials -> Install a certificate -> CA certificate to install the certificate you just downloaded. You’ll know you’ve done it right if mitmproxy is in your Trusted Credentials.
Trust is a relative term
6. Install the App and Start Viewing Traffic: Now we get to the good part. Install the app by dragging the file you made in step 2 onto the screen of your device emulator. Open it up and you should start seeing some traffic in the mitmproxy screen. Here’s a json file this one is grabbing from AWS S3. I bet I could get the same file using python if I wanted.
#apkmitm #web-scraping #network-traffic #mitmproxy #android
