-1

I'm analyzing Android games with Fiddler 2 to see how the game collects data. There is a problem, both Fiddler 2 and Charles Proxy doesn't capture any traffic from some online games. All i got are ads traffics.

I have ensure that I have enabled proxy on Android system, have certificate installed, filtered target process and check if https decryption is working. All fine. I have reseted cert and fiddler 2 but it doesn't help

I have heard it uses socket system, i don't know excatly what he meant. This online game requests a lot of data. I checked logcat and i see that the game retrieved some json data but there is not enough infomation.

I'm missing something there?

enter image description here

Improve this question
5
  • Use iptables. Check out blog.dornea.nu/2015/02/19/redirect-androids-traffic-to-burp – 0xec Aug 29 '18 at 13:02
  • Proxies are easy to circumvent/not support. If you need better network analysis i suggest you set up a proper man in the middle. – NirIzr Aug 29 '18 at 17:52
  • Tried iptables but the game failed to connect. Viewing https websites still working fine. I don't know what to do since i'm quite new to MITM. I just want to see game request/response – 0xabc Nov 10 '18 at 16:11
  • In case your target makes use of ‚websockets‘, then OWASP ZAP can help intercept its traffic. Here‘s a guide owasp.org/index.php/Testing_WebSockets_(OTG-CLIENT-010) – Random Person May 2 '19 at 3:31
  • 1
    You can try to launch game using frida and load one of ssl unpin scripts (1, 2, 3, 4, etc.). – Olvin Roght Jan 27 '20 at 9:54
1

Fiddler and Charles Proxy are web debugging proxies so they only capture http/s traffic. If the game doesn't use the http protocol the trafic wont appear in these tools.

Improve this answer
2
0

I believe Burp by PortSwinger will do the work.

How to configure Android to work with Burp: https://support.portswigger.net/customer/portal/articles/1841101-configuring-an-android-device-to-work-with-burp

Improve this answer
1
  • Sorry, it doesn't work. It also not showing anything – 0xabc Nov 10 '18 at 16:06
0

I found another software called HTTP Debugger. It does way better job capture everything that others couldn't. It is a paid software, but it's really worth for me

https://www.httpdebugger.com/

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.