Extract APIs from Android APK
Budget: €750 – €1,500 EUR
I have the APK of an Android app from play store. That my accounting software must integrate with, yet the vendor offers no public API. I need a complete and accurate map of every call the app makes so we can reproduce three core functions in our own back-end:
• user login with existing credentials,
• fetching the transaction list,
• sending a transaction by scanning a QR code.
You will receive the original APK file and sample test credentials. Your job is to reverse-engineer the application—static analysis with jadx or apktool, and, if necessary, dynamic inspection through mitmproxy/Frida—to identify:
1. HTTP(S) endpoints, request methods, headers, and payload structures.
2. Authentication flow, including token lifetimes and refresh logic.
3. Expected responses and error formats for each call.
4. Any encryption or hashing schemes used on parameters.
Please document the findings clearly enough that our developers can recreate every call from a server-side script without referring back to the mobile app. A concise Postman collection or Swagger file plus a short written summary will be considered the final acceptance criteria.
• user login with existing credentials,
• fetching the transaction list,
• sending a transaction by scanning a QR code.
You will receive the original APK file and sample test credentials. Your job is to reverse-engineer the application—static analysis with jadx or apktool, and, if necessary, dynamic inspection through mitmproxy/Frida—to identify:
1. HTTP(S) endpoints, request methods, headers, and payload structures.
2. Authentication flow, including token lifetimes and refresh logic.
3. Expected responses and error formats for each call.
4. Any encryption or hashing schemes used on parameters.
Please document the findings clearly enough that our developers can recreate every call from a server-side script without referring back to the mobile app. A concise Postman collection or Swagger file plus a short written summary will be considered the final acceptance criteria.