Asklemmy

43796 readers

721 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy 🔍

If your post meets the following criteria, it's welcome here!

Open-ended question
Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
Not ad nauseam inducing: please make sure it is a question that would be new to most members
An actual topic of discussion

Looking for support?

Looking for a community?

Lemmyverse: community search
sub.rehab: maps old subreddits to fediverse options, marks official as such
!lemmy411@lemmy.ca: a community for finding communities

~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~

founded 5 years ago

MODERATORS

How to reverse engineer api of an Android app? (lemmy.ca)

submitted 10 months ago by kionite231@lemmy.ca to c/asklemmy@lemmy.ml

4 comments fedilink hide all child comments

Hi,

I want to reverse engineer api of an Android app to make a custom client that works on linux. I have good understanding of Linux, Networking and coding.

Where should I start? Is it too hard?

top 4 comments

sorted by: hot top controversial new old

[–] renormalizer@feddit.de 0 points 10 months ago

You can use an APK decompiler to get to the source code of the app. There is probably some logic for building and decoding API messages in there.

[–] luthis@lemmy.nz 0 points 10 months ago (1 children)

Interested to hear answers for this one.. maybe MITM yourself and capture packets to see whats being sent?

[–] CanadaPlus@lemmy.sdf.org 0 points 10 months ago (1 children)

Yeah, that's where I'd start. I have no idea how easy it would be to make heads or tails of it. I guess best case it's all plaintext JSON.

[–] vintageballs@feddit.de 0 points 10 months ago

Hardest part will probably be getting around encryption. At least when I tried something like this in the past, just installing a system wide self-signed root cert was not enough as the acceptable certificate was embedded in the app and it didn't use the system certificate store.