3 ms·
Is it possible to do this on wireshark/tcpdump pcap dumps? Like for finding out hostnames, endpoints and request packets of HTTPS requests that an android app i
by ducktective 4y ago
Is it possible to do this on wireshark/tcpdump pcap dumps? Like for finding out hostnames, endpoints and request packets of HTTPS requests that an android app is making?
- alufers 4y agoThe problem with pcap is that whe requests there would be encrypted and basically there is no way to practically decrypt them. Mitmproxy solves that by being between the client and server and injecting it's own self-signed certificate (which you need to add to the trusted certificates on the phone, which requires root).
- resoluteteeth 4y agoSee SSLKEYLOGFILE
- ducktective 4y agoexplain bit more please? Do you mean root is not needed? Isn't that a curl feature?
- resoluteteeth 4y agoVarious browsers support it to log ssl keys which allows decrypting packet captures without requiring something like mitmproxy.