Setup a mitm with a rooted android device or something to uncover some endpoints