Hello I'd like to monitor all incoming traffic from an android application.

It is using certificate pinning and I managed to bypass it with an xposed module and I monitored HTTP(S) traffic of my app with Charles proxy.

I didin't found what I was looking for so I guess it's in the TCP stream.

I monitored that with wireshark but it's encrypted again with SSL certificate pinning and I don't know how to bypass it in wireshark even tho I succeded in Charles proxy ?

Any idea ?

I followed this https://support.citrix.com/article/CTX116557 but I don't understand which .pem/.crt/ .p12 i should put in there, I tried with the ones charles gave me but it didn't decrypt anything

  • Use any ssl capturing app from Google play. – Biswapriyo Dec 12 '18 at 17:23
  • Thanks will try that ! But i'll only see the same things I saw with charles proxy (HTTP/HTTPS traffic) ? – reverseee Dec 12 '18 at 19:53
  • Yeah but what i'm looking for isn't in the https traffic, probably in the tcp stream ? – reverseee Dec 12 '18 at 20:24

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Browse other questions tagged or ask your own question.