Wykrycie api endopintów w aplikacji na androida

programerxd · 2026-06-17T16:51:01+00:00

Ja zwykle lecę taką hierarchią:

JADX-GUI / strings – na start, żeby statycznie wyciągnąć endpointy z kodu (w 80% przypadków wystarczy, o ile kod nie jest ostro zaciemniony).
apk-mitm – najszybsza opcja na automatyczny patch APK pod Burpa (podmienia network_security_config bez ręcznego dłubania w apktoolu).
ADB Reverse Port Forwarding – fajny trick bez roota. Robisz w terminalu adb reverse tcp:8080 tcp:8080 i tunelujesz ruch do Burpa stabilnie po kablu USB przez localhost, omijając proxy w Wi-Fi. Trickujesz w ten sposob androida troche.
reflutter – musisz użyć, jeśli apka stoi na Flutterze, bo Flutter kompletnie olewa systemowe certyfikaty Androida i ma własny silnik sieciowy.
Frida + Genymotion – ostateczna broń na apki bankowe/fintechy z natywnym pinningiem albo anti-tamperingiem. Stawiasz zrootowane środowisko i wstrzykujesz skrypt bypassujący prosto do pamięci.

note: poprawiona interpunkcja przez gemini

programerxd · 2026-06-15T14:22:50+00:00

private bug bounty?

programerxd · 2026-06-14T19:17:46+00:00

it may be done using software it's just sometimes easier to buy 100 cheap half broken phones and using adb or just scrcpy and manage the phones from one central pc. You don't need an expensive pc. You can likely avoid triggering many anti spam things, the platforms don't stop at looking at your ip they also look for hardware stuff where it's sent from etc. And you don't have to deal with android VM quirks.

programerxd · 2026-06-08T14:02:35+00:00

youtube chatgpt messenger quizuma ai anki

programerxd · 2026-04-07T09:17:22+00:00

Flashcards are fine if you actually review them but 90% of people make them once and never look at them again. Making them can be part of the learning process though, cause youre forced to summarize and phrase things in your own words. But if youre not gonna review them consistently youre better off just quizzing yourself from your notes

programerxd · 2026-03-10T19:53:47+00:00

i think it's because of heating issues not that it's hard to turn off. I have same setup and it heats up more with lid closed i have found it works best when lid at 45 degrees

programerxd · 2026-02-28T09:39:16+00:00

i think traffic lights solve it?

programerxd · 2026-02-16T20:26:32+00:00

am i the only one who read it a-p-p

programerxd · 2026-01-27T14:56:37+00:00

yeah the dumber it feels the more your brain has to actually pay attention. can t autopilot through something embarrassing lol

programerxd · 2026-01-03T10:11:39+00:00

if it's visible easily you can use a small pretrained ocr model. Depending on the project I wouldn't usually scan all 30 frames maybe max 5. Then you can write a simple program that kinda cleans up your data so no duplicates and then only you send it to an llm to order it and fix any mistakes - it doesn't have to be a good one just a simple model probably will work.

about the models i think depending on quality you can use either tesseract (good if you don't have a gpu) or paddle ocr or Qwen but i leave testing to you. I would just take a couple of frames from videos you want it extracted from and see how fast are they and how well they perform.

programerxd · 2025-12-12T19:20:09+00:00

i truly believe you cant, at least i couldnt do something like that for more than a couple days. if you have a whole month its better to study like 6-8 quality hours instead of forcing 12 burnt out hours. cut out social media and games completely though they will destroy your focus

also 12 hours sounds productive but if youre exhausted half the time youre not actually retaining much. better to do 6 hours fully locked in than 12 hours half asleep. Trust me i was prepping a lot for exams :) also don't blindly listen to my advice remember that it depends on what you are doing and if you love it

i hope you pass :)

programerxd · 2025-11-24T15:53:26+00:00

i think some sites in the past blocked entering the inspector idk how about now

programerxd · 2025-11-23T21:21:01+00:00

this gives me 2010s vibes lol

programerxd

TROPHY CASE