2 years ago

#71122

test-img

HS Dev

How to sniff network traffic from a mobile app that uses it's own HTTP Client? Is Charles enough?

Over the past few days, i've encountered several problems upon trying to sniff some network from an android application.

What i've done so far:

~Rooted my device
~Installed a frida-server
~Succesfully performed my frida-script
~Installed Charles CA on my phone
~Proxied my Wi-fi to Charles in order to capture all network requests

Describing the problem:
The app works perfect with and without the pinning bypass (still connected to charles), all my mobile requests go through, can navigate quite easy within the app. But Charles isn't detecting any network traffic which is really weird.

After doing some googling, I found that it happens due to the fact that the app uses it's own HTTP Client implementation, which therefore Charles doesn't recognize by default.

I tried:

~Activating Transparent HTTP proxying
~Using SOCKs proxying
~Using different ports for Charles.

None of the above seemed to work.

I'm looking for a way to sniff every single request that goes out of my phone, so therefore, i can sniff these requests too. Does Charles fit for that? Do i have to use another tool?

android

httpclient

charles-proxy

frida

rooted-device

0 Answers

Your Answer

Accepted video resources