Case study

MiFit-Hack-API: reconstructing Mi Fit account and fitness requests

MiFit-Hack-API documents Mi Fit Android app requests observed through mitmproxy and provides Python access scripts. Its notes map registration and login tokens, a band-data endpoint, and Base64-encoded step and sleep summaries.

Targets: App · Protocol
Category: Independent reconstruction cases
Relationship: Independent reconstruction project
Sources reviewed: 2026-11-06
Evidence class: C2 code & docs, no demo or download

Stars: 1
Last commit: 2024-11-13
Language: Python
License (GitHub): MIT

GitHub data as of 2026-11-10

Copy as Markdown View JSON Cite

Evidence

Observed: Code and documentation observed; no download method or demo found.
Checked: 2026-11-08

How evidence classes are assigned

Requirements & limits

Prerequisites: A spare Android 7.1.1 or newer device with root access, the Mi Fit app and mitmproxy on the same network.
Prerequisites: The documented setup installs the proxy certificate on the device.
License: MIT license.

Cite

BibTeX

@misc{mifit-hack-api-case,
  title = {{MiFit-Hack-API: reconstructing Mi Fit account and fitness requests}},
  howpublished = {\url{https://github.com/bysiber/MiFit-Hack-API}},
  url = {https://github.com/bysiber/MiFit-Hack-API},
  urldate = {2026-11-06},
  note = {Awesome REA entry: \url{https://awesomerea.org/resources/mifit-hack-api-case/}}
}

Plain text

MiFit-Hack-API: reconstructing Mi Fit account and fitness requests. https://github.com/bysiber/MiFit-Hack-API (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/mifit-hack-api-case/

Useful? Star Awesome REA on GitHub2.4k

About this entry

The description was reviewed against primary sources.

Report an outdated entry Suggest a translation fix

Primary sources

README.md GitHub · bysiber/MiFit-Hack-API · Revision dffefe9