{
  "added_at": "2026-11-08",
  "category": "reconstruction-cases",
  "class": "apps",
  "description_en": "MiFit-Hack-API documents Mi Fit Android app requests observed through mitmproxy and provides Python access scripts. Its notes map registration and login tokens, a band-data endpoint, and Base64-encoded step and sleep summaries.",
  "description_zh": "MiFit-Hack-API 记录通过 mitmproxy 观察到的 Mi Fit Android 应用请求，并提供 Python 访问脚本。文档梳理注册与登录令牌、手环数据端点，以及 Base64 编码的步数和睡眠摘要。",
  "entry_url": "https://awesomerea.org/resources/mifit-hack-api-case/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/mifit-hack-api-case/",
  "evidence_class": 2,
  "evidence_status": "observed",
  "evidence_url": "https://github.com/bysiber/MiFit-Hack-API/blob/dffefe9d978a77c398afb4a359f41fb54cfac4fa/README.md",
  "group": "cases",
  "id": "mifit-hack-api-case",
  "json_url": "https://awesomerea.org/resources/mifit-hack-api-case/record.json",
  "kind": "case-study",
  "markdown_url": "https://awesomerea.org/resources/mifit-hack-api-case/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/mifit-hack-api-case/index.md",
  "name": "MiFit-Hack-API: reconstructing Mi Fit account and fitness requests",
  "name_zh": "MiFit-Hack-API：重现 Mi Fit 账号与健身数据请求",
  "record_type": "resource",
  "relationship": "independent-reconstruction",
  "requirement_facets": [
    "prerequisites",
    "prerequisites",
    "license"
  ],
  "requirements": [
    "A spare Android 7.1.1 or newer device with root access, the Mi Fit app and mitmproxy on the same network.",
    "The documented setup installs the proxy certificate on the device.",
    "MIT license."
  ],
  "requirements_zh": [
    "需要已获取 root 权限的 Android 7.1.1 或更新设备、Mi Fit 应用，以及同一网络中的 mitmproxy。",
    "文档中的设置流程要求在设备上安装代理证书。",
    "MIT 许可证。"
  ],
  "scope": "unknown",
  "targets": [
    "app",
    "protocol"
  ],
  "url": "https://github.com/bysiber/MiFit-Hack-API",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}