3 ms·
Must be old fashioned, not seeing the need. My flow was always: 1) Look at the site (nowadays using your browser console) 2) Evaluate whether the "interestin
by ricardo81 6y ago
Must be old fashioned, not seeing the need.
My flow was always:
1) Look at the site (nowadays using your browser console)
2) Evaluate whether the "interesting" data is server-side or client side. Seems nowadays a client side request is more normal, typically resulting in structured data.
3) "copy as curl"
4) Code
Admit I have never used Charles or heard of it. The mobile app debugging looks useful though I have used a MITM proxy in the past for the same advantages.
Generally the process is simply that, figuring out the requests of a site. More effort may be needed to circumvent rate limiting, but to me that's an almost entirely separate issue.
- tenaciousDaniel 6y agoThis was years ago, but I used Charles for inspecting traffic coming from mobile apps. I'd install their certificate onto a jailbroken iphone, then route the traffic through my laptop. Suddenly I had all the unencrypted network requests and responses. Was pretty awesome.