Paytm, which stands for “Pay Through Mobile,” is an Indian digital payment and financial services platform. It was founded in 2010 by Vijay Shekhar Sharma and is headquartered in Noida, India. Paytm initially started as a mobile recharge and bill payment platform but has since expanded its services to become a comprehensive digital financial ecosystem.
In this blog I will show you how you can intercept Paytm’s network traffic and access HTTPS requests in plain text,
- Burp Suite
- Memu Android Emulator
- Frida Server
First Download Emulator MEmu — The Best Android Emulator for PC — Free Download (memuplay.com) and Burp from Download Burp Suite Community Edition — PortSwigger, then download Frida server from Releases · frida/frida (github.com), you also need frida-tools and some packages installed in your PC, run the following
python -m pip install Frida
python -m pip install objection
python -m pip install frida-tools
Once everything is installed, Let’s configure the Burp proxy in Emulator.
Open CMD / terminal and run
Check the IPv4 Address, Copy it, and open WiFi settings in Emulator
Set the port to 8080, or you can add whatever you want. Now start the burp suite open proxy settings and select the same IPv4 and port
Click on OK and save it, Now need to Download the burp CA Certificate inside the emulator and install it on the Android device.
Open Google Chrome in emulator, and type
Click on the CA Certificate and download it. Now Goto /Downloads directory and change the extension from der to cer,
Goto Settings and search Certificate, you will find the option “Install Certificates — Wi-Fi Preferences” Click on it and install the certificate file, so it won't show any HTTPS error in the browser.
Now Let’s Setup Frida Server in the Emulator
Push Frida server into /data/local/tmp
adb push SERVER_FILE /data/local/tmp
Push CA Certificate
adb push CERTIFICATE_FILE /data/local/tmp/cert-der.crt
We also need an SSL Bypass script, which is required to bypass Paytm’s SSL Pinning, Download that .js file from here Frida CodeShare
Now run the Frida server
adb shell root
Once it is running, Start the interceptor in the burp suite.
Keep the server running in one terminal and open another terminal, run the following command to get the list of all packages and apps installed on Android emulator
Copy the package name
and run the following command to invoke Paytm application and bypass SSL Pinning,
frida -U -f net.one97.paytm -l frida-multiple-unpinning.js --pause
Once the application starts, enter %resume, and Boom!!!,
You will be able to see network traffic in the burp suite.
Why Memu? and not other emulators?
Because the Paytm app is checking for x64 Arm Architecture, I have also tried Nox, where the app is crashing, but Memu can run x64 Arm apps, also make sure Root Mode is set to Off in Emulator Settings.
If you have any questions, feel free to comment below or connect with me on
Github : https://github.com/viralvaghela/