HELP!!!!

<strong>Hi there, I hope you are all doing well.I am conducting a black-box penetration test of an Android application that my company owns, which allows users to search for the name associated with a phone number. I have already bypassed SSL pinning, rooted the test device, reversed the application's AES/CBC encryption, and built a Frida RPC interface that encrypts requests and decrypts responses exactly as the application does. I also hooked the application before encryption to capture the original JSON requests, identified the available request types, and can modify and replay encrypted requests while inspecting the plaintext responses. At this point, I feel like I have reached a dead end and I'm not sure what the next step should be. My ultimate goal is to understand how the backend communicates with its database and how the requested information is retrieved.I really want a help or an advice that can lead me to another way to reach my goal. thanks</strong> by HowToHack on Reddit.com<a target="_blank" title="Hi there, I hope you are all doing well.I am conducting a black-box penetration test of an Android application that my company owns, which allows users to search for the name associated with a phone number. I have already bypassed SSL pinning, rooted the test device, reversed the application's AES/CBC encryption, and built a Frida RPC interface that encrypts requests and decrypts responses exactly as the application does. I also hooked the application before encryption to capture the original JSON requests, identified the available request types, and can modify and replay encrypted requests while inspecting the plaintext responses. At this point, I feel like I have reached a dead end and I'm not sure what the next step should be. My ultimate goal is to understand how the backend communicates with its database and how the requested information is retrieved.I really want a help or an advice that can lead me to another way to reach my goal. thanks" href="https://www.reddit.com/r/HowToHack/comments/1v1t4qg/help/?utm_source=ifttt"> HELP!!!!</a> - Hi there, I hope you are all doing well.I am conducting a black-box penetration test of an Android application that my company owns, which allows users to search for the name associated with a phone number. I have already bypassed SSL pinning, rooted the test device, reversed the application's AES/CBC encryption, and built a Frida RPC interface that encrypts requests and decrypts responses exactly as the application does. I also hooked the application before encryption to capture the original JSON requests, identified the available request types, and can modify and replay encrypted requests while inspecting the plaintext responses. At this point, I feel like I have reached a dead end and I'm not sure what the next step should be. My ultimate goal is to understand how the backend communicates with its database and how the requested information is retrieved.I really want a help or an advice that can lead me to another way to reach my goal. thanks <hr> buy funny gadgets: <a target="_blank" title="Hi there, I hope you are all doing well.I am conducting a black-box penetration test of an Android application that my company owns, which allows users to search for the name associated with a phone number. I have already bypassed SSL pinning, rooted the test device, reversed the application's AES/CBC encryption, and built a Frida RPC interface that encrypts requests and decrypts responses exactly as the application does. I also hooked the application before encryption to capture the original JSON requests, identified the available request types, and can modify and replay encrypted requests while inspecting the plaintext responses. At this point, I feel like I have reached a dead end and I'm not sure what the next step should be. My ultimate goal is to understand how the backend communicates with its database and how the requested information is retrieved.I really want a help or an advice that can lead me to another way to reach my goal. thanks" href="https://ebay.us/5MCoAl">https://ebay.us/5MCoAl</a><img alt=" title="Hi there, I hope you are all doing well.I am conducting a black-box penetration test of an Android application that my company owns, which allows users to search for the name associated with a phone number. I have already bypassed SSL pinning, rooted the test device, reversed the application's AES/CBC encryption, and built a Frida RPC interface that encrypts requests and decrypts responses exactly as the application does. I also hooked the application before encryption to capture the original JSON requests, identified the available request types, and can modify and replay encrypted requests while inspecting the plaintext responses. At this point, I feel like I have reached a dead end and I'm not sure what the next step should be. My ultimate goal is to understand how the backend communicates with its database and how the requested information is retrieved.I really want a help or an advice that can lead me to another way to reach my goal. thanks"" style="text-decoration:none;border:0;padding:0;margin:0;" src="https://www.ebayadservices.com/marketingtracking/v1/impression?mpt=16788564&mkcid=1&mkrid=711-53200-19255-0&mkevt=2&siteid=0&campid=5338010294&ad_type=0&toolid=20012">