#Https-Interception

How I Hacked an Android App to Get Free Beer

The post shows how the app’s point authorization can be abused by intercepting HTTPS traffic and replacing the PIN flow with beacon data broadcast openly over BLE.