Make APK Accept CA Certificate

Make APK Accept CA Certificate - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+----- Forum: Hacking Tutorials (https://hackforums.net/forumdisplay.php?fid=47)
+----- Thread: Make APK Accept CA Certificate (/showthread.php?tid=6220430)

Make APK Accept CA Certificate - source - Sep 9, 2022

Automatic Method

The tool https://github.com/shroudedcode/apk-mitm will automatically make the necessary changes to the application to start capturing the requests and will also disable certificate pinning (if any).

Manual Method

First we decompile the app: apktool d *file-name*.apk

[Image: ghSPlZv.png]

Then we go into the Manifest.xml file & scroll down to the <\application android> tag & we are going to add the following line if it isn't already there:

Code 
android:networkSecurityConfig="@xml/network_security_config

Before adding:

[Image: CWjcOtz.png]

After adding:

[Image: EGiiM4A.png]

Now go into the res/xml folder & create/modify a file named network_security_config.xml with the following contents:

[Image: gNeh0UE.png]

Then save the file & back out of all the directories & rebuild the apk with the following command:

Code 
apktool b *folder-name/* -o *output-file.apk*

Now, you need to sign the new application.

RE: Make APK Accept CA Certificate - ItachiUchiha - Sep 10, 2022

Nice share, will help many :)