Google introduced on Android 7.0 new network security enhancements. Those new enhancements prevents 3rd party to listen to network requests coming out of the app. More info:
- https://developer.android.com/training/articles/security-config.html
- http://android-developers.blogspot.com/2016/07/changes-to-trusted-certificate.html
This script injects into the APK network security exceptions that allow 3rd party softwares, like Charles Proxy / Fidler to listen to the network requests and resposes of the app.
Download the sciprt and the xml file and place them in the same directory.
You will need apktool and android sdk installed
I recommend using brew on Mac to install apktool
brew install apktool
The script take 2 arguments:
- Apk file path.
- keystore file path (optional - Default is: ~/.android/debug.keystore )
./addSecurityExceptions.sh myApp.apk
or
./addSecurityExceptions.sh myApp.apk ~/.android/debug.keystore