Truth Social error

[LouisDeconinck]

I'm looking to intercept mobile Android traffic from the Truth Social app.

I'm using the Android Studio Emulator: Pixel 9 API 35 with Android 15.0 | x86_64

It initially fetches the traffic, but closes the app after about 10 seconds.

[pimterry]

Ooooh, interesting. No idea I'm afraid, but my best guess would be that there's some kind of reverse engineering detection which is detecting Frida somehow and then intentionally quitting the app. You can test by launching the app with Frida and no scripts at all, and see if it still exits.

If so, you'll need to reverse engineer that itself: i.e. find the code that actively shuts down the app, and disable it. The fact that the app still works until it exits means that should be possible, in theory at least. I've written a guide that might be useful (focused on certificate unpinning, but the same concepts all apply) here: https://httptoolkit.com/blog/android-reverse-engineering/.

We do already try to hide various signs of root access & reverse engineering with https://github.com/httptoolkit/frida-interception-and-unpinning/blob/main/android/android-disable-root-detection.js, and HTTP Toolkit's automated Frida setup also changes the default Frida port & binary name too, which are sometimes used as signals. Working out exactly what's triggering this will require more thorough investigation though. If you find anything interesting or any kinds of clues at all, do share them here to help guide others who run into the same issue.