I have tried to dip my toe into android hacking. I followed this helpful article on Medium.
I'm using NoxPlayer emulator and OWASP ZAP as proxy. I have rooted the device, imported certificate from ZAP, changed the file extension to .cer . I have developer mode and have I managed to connect to the device from the host machine with adb and even start frida server on the device, and even got ssl pinning bypass working.
Everything seamed to be working, but it's not. When I go to some website I get a certificate warning. So I am not sure if I am missing something or this is the way it supposed to be (I am using Zap on my normal browser every day without problem).
I also noticed some functionalities of the app I am testing are not working (it says that I am not connected to internet).
I am including some pictures for better illustration. I also found this article that was trying to figure out the same and the answer the (6years ago) was that you cant capture all the traffic, as every application is specific about how it may handle the certificates (did that change by any chance?). How do I fix this?