[source]

Automatic Method

The tool https://github.com/shroudedcode/apk-mitm will automatically make the necessary changes to the application to start capturing the requests and will also disable certificate pinning (if any).

---

Manual Method

First we decompile the app: apktool d *file-name*.apk



Then we go into the Manifest.xml file & scroll down to the <\application android> tag & we are going to add the following line if it isn't already there:

Code

android:networkSecurityConfig="@xml/network_security_config

Before adding:



After adding:



Now go into the res/xml folder & create/modify a file named network_security_config.xml with the following contents:



Then save the file & back out of all the directories & rebuild the apk with the following command:

Code

apktool b *folder-name/* -o *output-file.apk*

Now, you need to sign the new application.

[ItachiUchiha]

Nice share, will help many :)