Possible to intercept AndroidTV app login headers ?

[optimalberry]

Hi everyone,

I'll try to make it short!
I am currently using Chrome's post command login headers that I got from Inspect and those work... fine.

The issue is, based on those Chrome values, the service is generating a token that omits higher resolutions and bitrates from the MPD manifest files.

Hence why I thought I would try and figure out which headers/values the AndroidTV app is sending out when logging in and use those instead.

I believe I might have tried something like this on my own in the past with Fiddler, but had issues with HTTPs traffic and couldn't really decrypt anything.

If someone can point me in the right directions / tools to try, I'd really appreciate it.
Thanks!

[white_snake]

Check out HTTPToolkit or Reqable. Setting it up is pretty easy, but your Android device needs to be rooted first.

[larley]

From the HTTPToolkit documentation:
"If you are targeting an Android API level below 23 (below Android 7), your application will trust the automatically installed certificate automatically, and no changes are required."

[optimalberry]

Thank you both for the prompt answers ! I guess my issue last time was that, indeed, I did not try it on a rooted device and I don't think I want to root my one and only Nvidia Shield for it

I'll try my luck with Android Studio later tonight and see if that gets me somewhere ...

[Karoolus]

Android Studio emulated TV is not rooted either iirc

I have downloaded Android TV APK files and installed them on a rooted tablet. This allowed me to intercept traffic using HTTPToolkit.