

This includes requests, responses and the HTTP headers (which contain the cookies and caching information). Charles - Charles is an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all the HTTP and SSL / HTTPS traffic between their machine and the Internet.I decided to use Charles, due to some previous experience within the team: NOTE: When installing, make sure you go through the custom installation flow and choose Android Virtual Device. For my solution, I used a Pixel 3 with Android 9.0 (Pie). You can select many devices and distributions. Android Studio - Very powerful emulator tool.Bluestacks - Out of the box android emulator, you can log in into the play store using your credentials and install any application.There are multiple options available over the internet, but I focused over just two: For this, I installed APKRepatcher that let me review the JAVA source code. To gather more insights on how the application worked, I looked for a tool that allowed me to view the source code plain.

When looking into the different requests being sent, I realized that I was lacking some extra information. Once our modified APK was installed on the emulator with Charles properly configured, I was able to successfully capture the traffic coming from the application.

