Android API & Login Bypass

I’m preparing a suite of automated tests for an Android app we own, but the current authentication flow blocks every attempt at head-less execution. I need the app’s API traffic fully mapped and a dependable way to bypass or replicate the login so my tests can start in an already-authenticated state.

You will receive the production APK, a staging server URL and test credentials; no source code is available. By decompiling, intercepting and analysing the traffic you’ll uncover the exact endpoints, headers, tokens and signatures the app expects, then build a repeatable method—script, patched APK or Frida hook—that grants a valid session on demand.

Deliverables
• Endpoint documentation with parameters, headers and sample JSON/protobuf responses
• Working proof-of-concept (Python, Kotlin/Java or Node) or a patched APK/Frida script that skips or spoofs login
• Step-by-step setup notes so the solution can run inside my CI pipeline

Acceptance criteria: my Appium job must reach post-login screens with no manual input, consistently across multiple runs.

Feel free to lean on JADX, smali, Frida, Burp Suite, mitmproxy or any equivalent tools—the key is accuracy, clarity and repeatability.