shroudedcode/apk-mitm
Apk Mitm
apk-mitm est un utilitaire en ligne de commande conçu pour modifier les fichiers APK Android afin de permettre l'inspection du trafic HTTPS via un proxy. Il fonctionne comme un outil de patch de sécurité réseau et de contournement du certificate pinning, automatisant le processus de modification des paquets d'applications pour autoriser l'analyse de trafic de type man-in-the-middle.
L'outil modifie les paquets Android compilés en les décompressant, en altérant les fichiers internes et en réencodant le binaire. Il se concentre spécifiquement sur la désactivation du certificate pinning et l'injection de configurations de sécurité réseau dans le manifeste de l'application, ce qui permet l'utilisation de certificats de proxy sur les appareils rootés comme non rootés.
Le logiciel couvre les tests de sécurité d'API mobiles et l'ingénierie inverse par le biais de patchs au niveau du bytecode. Il inclut un mécanisme pour suspendre le processus de patch, permettant une modification manuelle des fichiers dans un répertoire temporaire avant que le paquet final ne soit reconstruit et signé.
Features
- Certificate Pinning Bypasses - Alters application bytecode to disable strict certificate validation, enabling traffic inspection via external proxies.
- Proxy Certificate Patchers - Embeds proxy certificates into the network security configuration of Android apps for non-rooted devices.
- Android APK Repackaging Tools - Provides a command-line utility for decompiling, modifying, and rebuilding Android APKs to enable traffic inspection.
- Android App Traffic Captures - Modifies applications to route HTTPS traffic through a proxy for security testing and analysis.
- Non-Root App Patchers - Patches APKs to embed network configurations that enable traffic inspection without requiring root access.
- Android Application Reverse Engineering - Analyzes and modifies APK files to change application behavior and inspect internal configurations.
- Android HTTPS Inspection Utilities - Automates the unpacking and patching of APKs to facilitate interception by a man-in-the-middle proxy.
- Proxy Certificate Injectors - Inserts custom proxy certificates into the network security configuration to enable traffic decryption on non-rooted devices.
- APK Re-signing - Rebuilds modified application files and applies a new cryptographic signature to allow installation on Android devices.
- Binary Patching Utilities - Provides utilities to unpack and modify compiled Android binary files for security analysis.
- Network Security Configurations - Injects network security configurations into the app manifest to permit the use of user-added proxy certificates.
- API Security Testing - Facilitates the interception of encrypted requests to analyze mobile API endpoints and data formats.
- Manual Intervention Gates - Pauses the automated patching pipeline to allow for manual file edits before the final APK is rebuilt.
- Bypass and Hardening Tools - CLI tool for preparing APKs for HTTPS inspection.
- Reverse Engineering Tools - Prepares APKs for HTTPS inspection by patching them.
