Lately I’ve become interested in reverse-engineering the APIs used by the Nintendo Switch Online (NSO) services (especially to see if it would be plausible for me to access their Mario Maker 2 API directly due to the lack of a bookmark site) and have been looking for various methods to access the original requests sent.

The first thing I did was fire up Fiddler to try and read the requests. Obviously, they were sent using HTTPS and there is no reasonable way (that I can find) for me to get the Switch to trust my computer without hacking the Switch (ultimately banning me from the very services I’d like to examine, according to most hacking guides).

I was ready to give up when I stumbled upon this post on the GBATemp Forums about someone else attempting to read traffic (except from a 3DS), where one member brought up that there are:

various tools and methods created to force devices to stop using SSL without access to them at all

Do such tools/methods actually exist that would force my Switch to send plaintext requests that I could read from my proxy? Otherwise, is there anything else I’m not seeing here?

New contributor
JBagel is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
  • I'm voting to close this question as off-topic because this question is about network security, not reverse engineering – Avery3R 2 hours ago

Your Answer

JBagel is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.