2 votes
Accepted

Need help understanding "garbage" data in https request

The content is encoded with gzip per the Content-encoding header. You can use the decoder in Burp proxy (if that is what you are currently using) to decode the data or by using for intance gunzip in ...
Sherman123's user avatar
2 votes

Android (4.4+) SSL wireless sniffing without certificate changing

(Copy of an answer I gave on Stack Overflow) You could try injecting code into the Android app to sniff and dump SSL traffic. Take a look at https://github.com/5alt/ssl_logger (5alt's fork works with ...
CherryDT's user avatar
  • 141
2 votes

Android (4.4+) SSL wireless sniffing without certificate changing

iSEC Partner's Android SSL TrustKiller utilizes hooks that Cydia substrate can provide in order to defeat certificate pinning.
Coeus's user avatar
  • 21
2 votes

fakenet for apps using SSL

I am using burpsuite for HTTPS inspection. Need to install its root cert on the phone. Most apps does not verify cert, or uses phone cert store. Windows users often use Fiddler. These tools generate ...
povlhp's user avatar
  • 41
2 votes

Mitsubishi MAC-577IF2-E WIFI controller Firmware file

Maybe found a better solution, see https://github.com/SwiCago/HeatPump/ Should work on all Mitsubishi devices with a CN105 connector and needs no Melcloud service.
Helge's user avatar
  • 21
2 votes
Accepted

finding rest api urls after decompiling apk

They might be stored encoded/encrypted and decoded/decrypted in runtime, you can validate this if you can capture any API calls in runtime (Not sure if you tried this, but maybe give it a try, in that ...
Abdullah Mohamed's user avatar
1 vote

Charles TLS Proxy for Android device with root access

I will answer my own question because I figured out what was wrong. The app was not functioning correctly for a number of reasons that frustrated the analysis. For one, there were many advertising ...
hft's user avatar
  • 181
1 vote

fakenet for apps using SSL

It seems that most of the people are better using the mitmproxy tool (see docs) together with SSLsplit for this kind of usage. Just for the sake of completeness, here are a few pages explaining how ...
perror's user avatar
  • 19k
1 vote

WebSocket debugging in Javascript app gives "401 Unauthorized"

Ok, I figured it out. The websocket-client library I use for python writes its own Origin header by default and I was ending up with two Origin headers, which may have been tipping off the server. I ...
FailedShack's user avatar
1 vote

Sniffing https traffic of an android app

If you're a Windows user, as a matter of dynamic analysis, you could try using an emulator like BlueStacks, then inspect your system network traffic with a program like Fiddler or WireShark. ...
dsasmblr's user avatar
  • 2,234
1 vote
Accepted

How to sniff HTTPS traffic of apps that ignore system proxy setting?

If you can install an extra CA, it shouldn't be a problem. Mitmproxy has documentation on how to set up transparent intercepting. http://docs.mitmproxy.org/en/stable/transparent.html
Willem's user avatar
  • 156
1 vote

Lutron Caseta Protocol over HTTPS

This isn't a complete answer but I don't have enough rep to comment yet. First off, giving us binary data with all the non-printable characters presented as ? doesn't help. Try piping it through xxd (...
scruffy's user avatar
  • 36
1 vote

Reverse-engineer digest http authentication

So finally, I used Cycript and attached to the running app process, and consequently intercepted the private key in runtime.
Nikolay Derkach's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible