Android Devices Interception

When working with Android apps, debugging HTTP Requests can be a challenge. Requestly provides an easy-to-use solution for everyone who needs to monitor, modify, or debug HTTP requests and responses during development or QA testing. This section outlines step-by-step instructions, guiding you on how to set up Requestly for your Android device.

By the end of this guide, you will have a fully functional interception setup tailored for your Android development needs.

Step-by-Step Guide

Rooted Setup

If you have a rooted device the setup is straight forward -

Enable USB Debugging

Open Settings > Developer Options on your device and turn on USB Debugging.

Connect the Emulator

Use a USB cable to connect your device to your computer and launch the Requestly Desktop App.

Connect Device

On requestly dashboard click Connect Apps > Mobile Apps and Browser, and Requestly will automatically list out detected devices. Simply click Connect to proceed. 🎉

Verify Connection

Once connected, a success message will appear. You can now visit amiusing.requestly.io to verify your connection.

Non Rooted Setup

If your device is not rooted, you can manually setup requestly by following these steps:

Configure proxy

Select Network

Tap on the Internet and click on the gear icon on the connected network name to open its settings.

Modify Network Settings

At the top right of the screen click the edit icon
Enable "Advanced Options" if needed.
Set the Proxy to "Manual."

Enter Proxy Details

Input the following:

Proxy Hostname: Use the IP shown in the Requestly Desktop App (e.g., 192.168.1.10).
Proxy Port: Use the port displayed in the Requestly Desktop App (e.g., 8080).

Save Changes

Apply the settings and continue with the certificate installation

Install CA Certificate

To intercept HTTPS traffic, you also need to install Requestly's root CA certificate on your device:

Download Certificate

Open Chrome in an incognito tab
Go to http://requestly.io/ssl (⚠️ Use HTTP here, not HTTPS)
This will download RQProxyCA.pem.cert

Install CA Certificate

Go to Settings > Search "CA Certificate" > Install Anyway.
Select the downloaded certificate and install it.

Verify Installation:

After installation, confirm your setup by going to amiusing.requestly.io

SSL Pinning [if-required]

From Android API level 23 (Android 6.0+), many apps enforce SSL pinning for security. To intercept HTTPS traffic, setting up SSL pinning is required.

Make sure to remove these in production builds

Add these configs to your app codebase for it to work

Add res/xml/network_security_config.xml

<network-security-config>
  <debug-overrides>
    <trust-anchors>
      <certificates src="user" />
      <certificates src="system" />
    </trust-anchors>
  </debug-overrides>

  <base-config cleartextTrafficPermitted="true">
    <trust-anchors>
      <certificates src="system" />
      <certificates src="user" />
    </trust-anchors>
  </base-config>
</network-security-config>

Add to AndroidManifest.xml

<?xml version="1.0" encoding="utf-8"?>
<manifest ... >
    <application android:networkSecurityConfig="@xml/network_security_config" ... >
    ...
    </application>
</manifest>