shroudedcode/apk-mitm
Apk Mitm
apk-mitm 是一个命令行实用程序，旨在修改 Android APK 文件以通过代理进行 HTTPS 流量检查。它充当网络安全补丁工具和证书锁定绕过工具，通过自动化修改应用程序包来允许中间人流量分析。
该工具通过解包、修改内部文件并重新编码二进制文件来修改已编译的 Android 包。它专注于禁用证书锁定并将网络安全配置注入应用程序清单，从而允许在已 root 和未 root 的设备上使用代理证书。
该软件涵盖了移动 API 安全测试和通过字节码级补丁进行的逆向工程。它包含一个暂停补丁过程的机制，允许在重建和签名最终包之前在临时目录中进行手动文件修改。
Features
- Certificate Pinning Bypasses - Alters application bytecode to disable strict certificate validation, enabling traffic inspection via external proxies.
- Proxy Certificate Patchers - Embeds proxy certificates into the network security configuration of Android apps for non-rooted devices.
- Android APK Repackaging Tools - Provides a command-line utility for decompiling, modifying, and rebuilding Android APKs to enable traffic inspection.
- Android App Traffic Captures - Modifies applications to route HTTPS traffic through a proxy for security testing and analysis.
- Non-Root App Patchers - Patches APKs to embed network configurations that enable traffic inspection without requiring root access.
- Android Application Reverse Engineering - Analyzes and modifies APK files to change application behavior and inspect internal configurations.
- Android HTTPS Inspection Utilities - Automates the unpacking and patching of APKs to facilitate interception by a man-in-the-middle proxy.
- Proxy Certificate Injectors - Inserts custom proxy certificates into the network security configuration to enable traffic decryption on non-rooted devices.
- APK Re-signing - Rebuilds modified application files and applies a new cryptographic signature to allow installation on Android devices.
- Binary Patching Utilities - Provides utilities to unpack and modify compiled Android binary files for security analysis.
- Network Security Configurations - Injects network security configurations into the app manifest to permit the use of user-added proxy certificates.
- API Security Testing - Facilitates the interception of encrypted requests to analyze mobile API endpoints and data formats.
- Manual Intervention Gates - Pauses the automated patching pipeline to allow for manual file edits before the final APK is rebuilt.
- Bypass and Hardening Tools - CLI tool for preparing APKs for HTTPS inspection.
- Reverse Engineering Tools - Prepares APKs for HTTPS inspection by patching them.
