1

Since Android 11, intercepting HTTPS traffic has become more difficult (still possible but requires many more steps).

Is there a maintained Android distribution that makes it easy?

  • It should by default have a root CA certificate whose secret I can access.
  • Ideally it would come with a UI to select apps, and see/record passing packets as an overlay, similar to HttpCanary.
  • Either GSI or ROM, ideally installable on recent Pixel devices.

Using an old Android distribution would be possible, but it would be insecure.

Improve this question
2
  • So you are searching for an generic System Image (GSI) or do you search for a custom ROM? If it is the latter you need a matching ROM for your device model. I don't know a GSI or ROM dedicated for network analysis. Most people just perform the necessary steps (Magisk + Magisk move certificates module). If you need to bypass certificate pinning then you need Frida + a script matching the app.
    – Robert
    Commented Nov 14, 2023 at 16:44
  • Ideally a ROM for Pixel phones, but either would be fine. :-) It does not need camera/GPS/etc drivers, only working WiFi.
    – Nicolas Raoul ♦
    Commented Apr 4 at 2:47

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.