Hacker News Reader

Assuming it does not use TLS cert pinning, you can use mitmproxy [0].

If it's on WiFi, any old packet sniffer on the network should do the job. If it's on cellular, you'll need to have access to police equipment.

Cellular data? just connect your phone to your own VPN (like a RaspPi) and sniff there

A packet sniffer on the network will not help with tls encrypted endpoints.

The charles proxy with custom ssl certificates may help if the certificate is not pinned in the app.

I'm going to bet a beer it's not encrypted at all. Too much hassle, so plenty of hardware vendors don't bother.

With everyone putting their services behind cliudflare or aws loadbalancer you very seldom see a http endpoint nowadays.

HTTPS MITM + Wireshark If it even uses HTTPS lol

Wireshark is popular for this