0

So i wanted to see the endpoints of this android/ios app calles "Bigo Live".

Like always, i've set up charles and started trackig.

Funnily, it only shows part of the traffic. for example: If i use the apps search, i DO NOT see the search request, however, i see the users avatars being downloaded.

This seems not like some usual SSL-Pinning. There pops simply NO request up in charles (Not even a failed one!).

I'd appreciate it if anybody has any idea what kind of background magic is going on there.

1

The app might not transfer all the data over HTTP(S), but could use TCP or UDP as well. Check this answer to capture the traffic with Charles or use Wireshark.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.