<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Darrell</title>
    <description>The latest articles on DEV Community by Darrell (@dtterastar).</description>
    <link>https://dev.to/dtterastar</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F745831%2F54e43c17-6de5-4c81-9f1c-2fe79e21a334.png</url>
      <title>DEV Community: Darrell</title>
      <link>https://dev.to/dtterastar</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/dtterastar"/>
    <language>en</language>
    <item>
      <title>I pointed Claude at mitmproxy and it reverse-engineered my gym app's API</title>
      <dc:creator>Darrell</dc:creator>
      <pubDate>Wed, 08 Apr 2026 01:43:36 +0000</pubDate>
      <link>https://dev.to/dtterastar/i-pointed-claude-at-mitmproxy-and-it-reverse-engineered-my-gym-apps-api-1a4h</link>
      <guid>https://dev.to/dtterastar/i-pointed-claude-at-mitmproxy-and-it-reverse-engineered-my-gym-apps-api-1a4h</guid>
      <description>&lt;p&gt;I track my workouts in Liftoff, a gym tracking app. The app is great for logging sets and reps, but I wanted Claude to help me analyze my training — suggest programming changes, spot plateaus, flag imbalances. The problem: there's no export button. My data was locked inside the app.&lt;/p&gt;

&lt;p&gt;So I asked Claude to figure it out.&lt;/p&gt;

&lt;h2&gt;
  
  
  Claude runs mitmproxy
&lt;/h2&gt;

&lt;p&gt;I told Claude I wanted to intercept my Liftoff app's traffic. It walked me through every step — installing mitmproxy, configuring my iPhone's proxy settings, installing the CA certificate for HTTPS decryption. All I did was follow instructions and tap through screens on my phone.&lt;/p&gt;

&lt;p&gt;Then Claude ran mitmdump, told me to open Liftoff and scroll through my workouts, and read the captured traffic itself.&lt;/p&gt;

&lt;h2&gt;
  
  
  Claude reverse-engineers the API
&lt;/h2&gt;

&lt;p&gt;From the mitmdump output, Claude figured out that Liftoff uses tRPC — a TypeScript RPC framework that batches requests into a specific envelope format. The API lives at a versioned subdomain (&lt;code&gt;v2-12-2.api.getgymbros.com&lt;/code&gt;) and expects an iOS user-agent string.&lt;/p&gt;

&lt;p&gt;Claude mapped out the entire API:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Authentication flow&lt;/strong&gt; — a &lt;code&gt;user.signIn&lt;/code&gt; endpoint that returns access and refresh tokens, with a &lt;code&gt;user.refreshToken&lt;/code&gt; endpoint for renewal&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;The workout endpoint&lt;/strong&gt; — &lt;code&gt;post.getMyPosts&lt;/code&gt; returns every workout you've ever logged&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Exercise type codes&lt;/strong&gt; — &lt;code&gt;WR&lt;/code&gt; for weight/reps, &lt;code&gt;AB&lt;/code&gt; for assisted bodyweight, &lt;code&gt;BR&lt;/code&gt; for bodyweight plus resistance, &lt;code&gt;DD&lt;/code&gt; for distance/duration&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Set data structure&lt;/strong&gt; — each set has a type (warmup vs working), and two inputs whose meaning changes based on exercise type&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;I didn't read a single packet. Claude did all of it.&lt;/p&gt;

&lt;h2&gt;
  
  
  Claude builds the CLI
&lt;/h2&gt;

&lt;p&gt;Once Claude understood the API, it wrote a Go CLI using Cobra. It handled auth token storage, automatic token refresh, and the tRPC request format.&lt;/p&gt;

&lt;p&gt;The tool grew from there:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;code&gt;workouts list&lt;/code&gt; — export workouts in fitdown or JSON, filter by date or exercise&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;workouts stats&lt;/code&gt; — per-exercise volume summaries with monthly ASCII bar charts&lt;/li&gt;
&lt;li&gt;
&lt;code&gt;bodyweights stats&lt;/code&gt; — trend analysis with plateau detection&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;I set up goreleaser for multi-platform builds and a Homebrew tap for easy installation:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;brew tap DTTerastar/tap
brew &lt;span class="nb"&gt;install &lt;/span&gt;liftoff-export
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  The full circle
&lt;/h2&gt;

&lt;p&gt;Here's the part I like most: the whole reason I built this was to pipe my workout data back to Claude.&lt;/p&gt;

&lt;p&gt;Now I can run &lt;code&gt;liftoff-export workouts list --since 6m --json&lt;/code&gt; and hand Claude six months of structured training data. It can see my actual sets, reps, and weights across every exercise. From there it helps me with programming — what to change, where I'm stalling, what's working.&lt;/p&gt;

&lt;p&gt;Claude reverse-engineered the API, built the tool to extract my data, and now uses that data to coach my training. The AI closed its own loop.&lt;/p&gt;

&lt;h2&gt;
  
  
  Links
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;GitHub: &lt;a href="https://github.com/DTTerastar/liftoff-export-cli" rel="noopener noreferrer"&gt;DTTerastar/liftoff-export-cli&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Liftoff app: &lt;a href="https://getgymbros.com" rel="noopener noreferrer"&gt;getgymbros.com&lt;/a&gt;
&lt;/li&gt;
&lt;/ul&gt;

</description>
      <category>ai</category>
      <category>go</category>
      <category>fitness</category>
      <category>programming</category>
    </item>
  </channel>
</rss>
