{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/niklashigi/apk-mitm/blob/5a96363fc9112b97d60fc2bd3799d6bbfd8e4e00/LICENSE",
    "https://github.com/niklashigi/apk-mitm/blob/5a96363fc9112b97d60fc2bd3799d6bbfd8e4e00/package.json",
    "https://github.com/niklashigi/apk-mitm/releases/tag/v1.3.0"
  ],
  "category": "android",
  "description_en": "Command-line tool that prepares an Android APK you own or are authorized to test for HTTPS traffic inspection. It decodes the package with Apktool, adjusts the network security configuration to trust user-added certificates, disables certificate pinning, then re-encodes and signs the patched APK, so a proxy can read the app's traffic without a rooted device. App bundles supplied as .xapk or .apks are also supported.",
  "description_zh": "命令行工具，为使用者拥有或有权测试的 Android APK 准备 HTTPS 流量检查。它用 Apktool 解码安装包、调整网络安全配置以信任用户添加的证书、关闭证书固定，再重新编码并签名修补后的 APK，使代理无需 root 设备即可读取应用流量。也支持以 .xapk 或 .apks 形式提供的应用捆绑包。",
  "entry_url": "https://awesomerea.org/resources/apk-mitm/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/apk-mitm/",
  "evidence_url": "https://github.com/niklashigi/apk-mitm/blob/5a96363fc9112b97d60fc2bd3799d6bbfd8e4e00/README.md",
  "group": "tools",
  "id": "apk-mitm",
  "json_url": "https://awesomerea.org/resources/apk-mitm/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/apk-mitm/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/apk-mitm/index.md",
  "name": "apk-mitm",
  "name_zh": "apk-mitm",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Installed from npm as a global CLI and requires Node.js 14+ and Java 8+ per the README; patching app bundles on Linux also needs zip and unzip available.",
    "Operates on an APK or app bundle the analyst supplies and is intended only for apps you own or are authorized to test; rooting the device is not required because the changes are applied statically before install.",
    "The README notes the static Apktool-based approach can fail on large or complex apps and cannot address certificate pinning enforced inside native binaries such as Flutter. MIT licensed; the repository ships the tool only, no application packages.",
    "As checked on 2026-10-20, the latest release, v1.3.0 (2024-04-21, also the latest npm version), is the reviewed commit and still the main head; GitHub’s last recorded push was 2024-07-24, the repository is not archived and the README does not mark it as maintained, superseded or archived."
  ],
  "requirements_zh": [
    "通过 npm 以全局命令行工具安装，README 要求 Node.js 14+ 与 Java 8+；在 Linux 上修补应用捆绑包还需具备 zip 与 unzip。",
    "对使用者提供的 APK 或应用捆绑包进行操作，仅适用于使用者拥有或有权测试的应用；因修改在安装前静态完成，无需 root 设备。",
    "README 指出基于 Apktool 的静态方式在大型或复杂应用上可能失败，且无法处理在原生二进制（如 Flutter）中强制执行的证书固定。采用 MIT 许可证；仓库仅包含工具本身，不含任何应用安装包。",
    "据 2026-10-20 核查，最新发布版本 v1.3.0（2024-04-21，也是 npm 上的最新版本）即所审阅的提交，仍是 main 分支最新提交；GitHub 记录的最后一次推送为 2024-07-24，仓库未归档，README 未标注其仍在维护、已被取代或已归档。"
  ],
  "targets": [
    "app",
    "protocol"
  ],
  "url": "https://github.com/niklashigi/apk-mitm",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}