IMPORTANT: Niantic introduced certificate pinning in the most recent version of the app. Either downgrade to 0.29.3 or root your phone and use pokemon-go-xposed to make it work again like smooth whipped cream!
Pokemon Go MITM Proxy - Intercepts the traffic between your Pokemon Go App and their servers, decodes the protocol and gives you a handy tool to enrich your own game experience by altering the data on the fly.
Take a look at the examples to get started. Feel happily invited to contribute more!
<img src="https://camo.githubusercontent.com/f53cc9cd861a7b9feb516df352d51bdc0f58c9c6/68747470733a2f2f692e696d6775722e636f6d2f476d61696872502e706e67" height="341"">
-
Get nodejs
-
Get protobuf >= 3
-
Clone the code to experiment with the examples! (otherwise use it as a npm package)
git clone https://github.com/rastapasta/pokemon-go-mitm-node.git && cd pokemon-go-mitm-node
npm install
-
Setup the CoffeeScript interpreter
npm install -g coffee-script
-
Prepare your phone to accept the MITM certificate
-
If you are using Pokemon > version 0.30
-
Android
- on a rooted phone: install the Xposed module pokemon-go-xposed
- otherwise: install a pre-patched version
-
iPhone
-
-
Run and quit
coffee example.logTraffic.coffee
to generate a CA certificate -
Copy the generated
.http-mitm-proxy/certs/ca.pem
to your mobile -
Add it to the "trusted certificates"
-
-
Setup your connection to use your machine as a proxy (default port is 8081)
-
Enjoy :)
PokemonGoMITM = require './lib/pokemon-go-mitm'
server = new PokemonGoMITM port: 8081
# Replace all PokeStops with kittys!
server.addResponseHandler "FortDetails", (data) ->
data.name = "Pokemon GO MitM PoC"
data.description = "meow!"
data.image_urls = ["http://thecatapi.com/api/images/get?format=src&type=png"]
data
Thanks to the awesom work done around POGOProtos, all requests and responses can be intercepted and altered on the fly by now!
- AddFortModifier
- AttackGym
- CatchPokemon
- CheckAwardedBadges
- CheckCodenameAvailable
- ClaimCodename
- CollectDailyBonus
- CollectDailyDefenderBonus
- DiskEncounter
- DownloadItemTemplates
- DownloadRemoteConfigVersion
- DownloadSettings
- Echo
- Encounter
- EncounterTutorialComplete
- EquipBadge
- EvolvePokemon
- FortDeployPokemon
- FortDetails
- FortRecallPokemon
- FortSearch
- GetAssetDigest
- GetDownloadUrls
- GetGymDetails
- GetHatchedEggs
- GetIncensePokemon
- GetInventory
- GetMapObjects
- GetPlayer
- GetPlayerProfile
- GetSuggestedCodenames
- IncenseEncounter
- LevelUpRewards
- NicknamePokemon
- PlayerUpdate
- RecycleInventoryItem
- ReleasePokemon
- SetAvatar
- SetContactSettings
- SetFavoritePokemon
- SetPlayerTeam
- StartGymBattle
- UpgradePokemon
- UseIncense
- UseItemCapture
- UseItemEggIncubator
- UseItemGym
- UseItemPotion
- UseItemRevive
- UseItemXpBoost
Enjoy! And heaps of thanks to everyone who contributed here and on slack!