
For my solution, I used a Pixel 3 with Android 9.0 (Pie). You can select many devices and distributions. Android Studio - Very powerful emulator tool.Bluestacks - Out of the box android emulator, you can log in into the play store using your credentials and install any application.There are multiple options available over the internet, but I focused over just two: For this, I installed APKRepatcher that let me review the JAVA source code. To gather more insights on how the application worked, I looked for a tool that allowed me to view the source code plain. When looking into the different requests being sent, I realized that I was lacking some extra information. Once our modified APK was installed on the emulator with Charles properly configured, I was able to successfully capture the traffic coming from the application. Sign new apk with jarsigner so it can be installed on the emulator.Modify the Android Manifest and add some extra configurations.Download the application from the Android Play Store.Configure proxy at the emulator configuration levelīeing able to capture the SSL traffic coming from the application required for more work.Configuring the emulator to capture traffic was somewhat easy, I had to: This allowed me to use the proxying software: Charles. Then I moved to a more flexible emulator, those provided by Android Studio.


When trying to capture traffic, I discovered that today this application does not support adding custom certificates which render it useless for our purposes. The first step was to be able to use the application on my computer, for this I used Bluestacks.
