Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Reverse Engineering APIs from iOS and Android Apps

Sponsored · Ship Features Fearlessly Turn features on and off without deploys. Used by thousands of Ruby developers. →
Avatar for Hans Kristian Flaatten Hans Kristian Flaatten
November 12, 2015
Technology
0
64

Reverse Engineering APIs from iOS and Android Apps

Reverse Engineering APIs from iOS and Android Apps using the MITM proxy.

Avatar for Hans Kristian Flaatten

Hans Kristian Flaatten

November 12, 2015
Tweet

More Decks by Hans Kristian Flaatten

See All by Hans Kristian Flaatten
Continuous Deployment with Jenkins Pipelines
Avatar for Hans Kristian Flaatten starefossen
0
55
Continuous Integrations with Jenkins
Avatar for Hans Kristian Flaatten starefossen
0
67
Testing Node.js
Avatar for Hans Kristian Flaatten starefossen
0
30
What is Node.js?
Avatar for Hans Kristian Flaatten starefossen
0
41
LeftPad Not Found
Avatar for Hans Kristian Flaatten starefossen
0
86
Whats New In EcmaScript 2015 / ES6
Avatar for Hans Kristian Flaatten starefossen
0
70
Experience with NoSQL at the Norwegian Trekking Asocciation
Avatar for Hans Kristian Flaatten starefossen
0
41
Introduction to Geospatial Queries in MongoDB
Avatar for Hans Kristian Flaatten starefossen
0
33
Åpen Tur- og Friluftsdata
Avatar for Hans Kristian Flaatten starefossen
0
110

Other Decks in Technology

See All in Technology
GCASアップデート（202601-202603）
Avatar for 高橋広和 techniczna
0
180
頼れる Agentic AI を支える Datadog のオブザーバビリティ / Powering Reliable Agentic AI with Datadog Observability
Avatar for Kento Kimura aoto
PRO
0
160
Keycloak を使った SSO で CockroachDB にログインする / CockroachDB SSO with Keycloak
Avatar for kota2and3kan kota2and3kan
0
120
Scrumは歪む — 組織設計の原理原則
Avatar for Daisuke Ashihara dashi
0
190
猫でもわかるKiro CLI(AI 駆動開発への道編)
Avatar for Hiroo Katoh kentapapa
0
220
VLAモデル構築のための AIロボット向け模倣学習キット
Avatar for Ken Matsui kmatsuiugo
0
180
Claude Code のコード品質がばらつくので AI に品質保証させる仕組みを作った話 / A story about building a mechanism to have AI ensure quality, because the code quality from Claude Code was inconsistent
Avatar for nrs nrslib
13
8.4k
アーキテクチャモダナイゼーションを実現する組織
Avatar for SatohJohn satohjohn
2
970
わたしがセキュアにAWSを使えるわけないじゃん、ムリムリ！(※ムリじゃなかった!?)
Avatar for cm-usuda-keisuke cmusudakeisuke
1
750
マルチプレーンGPUネットワークを実現するシャッフルアーキテクチャの整理と考察
Avatar for Masayuki Kobayashi markunet
2
250
Yahoo!ショッピングのレコメンデーション・システムにおけるML実践の一例 
Avatar for LINEヤフーTech (LY Corporation Tech) lycorptech_jp
PRO
1
210
社内レビューは機能しているのか
Avatar for Jun Matsuba matsuba
0
130

Featured

See All Featured
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
133
19k
Pawsitive SEO: Lessons from My Dog (and Many Mistakes) on Thriving as a Consultant in the Age of AI
Avatar for David Carrasco davidcarrasco
0
87
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
Avatar for Irina Nazarova irinanazarova
9
1.2k
Why Our Code Smells
Avatar for Brandon Keepers bkeepers
PRO
340
58k
Jess Joyce - The Pitfalls of Following Frameworks
Avatar for Tech SEO Connect techseoconnect
PRO
1
110
Odyssey Design
Avatar for Ryan Kendrick rkendrick25
PRO
2
550
エンジニアに許された特別な時間の終わり
Avatar for watany watany
106
240k
The MySQL Ecosystem @ GitHub 2015
Avatar for Sam Lambert samlambert
251
13k
Documentation Writing (for coders)
Avatar for Carmen Chung carmenintech
77
5.3k
Building the Perfect Custom Keyboard
Avatar for Naoto Takai takai
2
710
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
37
7.2k
How To Speak Unicorn (iThemes Webinar)
Avatar for Michelle Schulp Hunt marktimemedia
1
410

Transcript

  1. Reverse engineering APIs in (iOS) apps Open data meetup #2,

    Bergen, 12/11-2015 Hans Kristian Flaatten @Starefosssen

  2. Why? • How is the app made? • What does

    the app do? (privacy) • Security research • It is fun…

  3. mitproxy • http://mitmproxy.org/ • Intercept https(s) requests and respons •

    Modify • Replay • Forward • Mac OS X, Linux, iOS, Android etc. • Scriptable changes using Python
  4. None

  5. https://mitm.it

  6. None
  7. None
  8. None