HTTP Toolkit was very helpful for me to extract hidden APIs from crappy EV charging apps in Turkey, combined with Frida to prevent SSL pinning and root detection.

Then I realized, the reason they try to hide is maybe those APIs are abomination /s