P
P
Pavel Trushin2021-07-13 14:09:34
Traffic analysis
Pavel Trushin, 2021-07-13 14:09:34

Traffic analysis, sniffers on android WITHOUT ROOT?

I need to analyze traffic in vk mobile app. I tried different programs, the VPN turns on, but the traffic does not pass (= the page does not load, errors appear). I would appreciate guides, apps or someone who can do the work for me :)
Small pay for labor is possible -.-

Answer the question

In order to leave comments, you need to log in

2 answer(s)
S
SuperNickname, 2021-09-24
@SuperNickname

1) in order to listen to ssl traffic (https), you need to install your trusted ssl certificate in the OS (for chromium) or in the browser (for firefox) (from the program from which we will listen)
2) in AndroidOS there is a division into user ones (can be installed without root -access) and system certificates (cannot be installed without root access), "good" google since Android 7 made it so that user certificates are not accepted by applications (without a special flag in the manifest of each application).
3) i.e. you have 3 solutions: A) put root, make the certificate system (with the MoveCerts program or transfer it manually) B) edit the APK of a specific application to trust user certificates C) use VirtualXposed - it automatically modifies the installed APK files so that SSL verification completely disabled (I could be wrong, but SSL-pinning definitely disables)
4) The new SSL-pinning technology, which is commonly used by banking applications, is when the certificate is sewn directly into the APK. Solution: A) replace the certificate with your own inside APK B) VirtualXposed C) Sometimes Xposed modules work to disable SSL-pinning: JustTrustMe, TrustMeAlready, SSL-Unpinning (modules have not been updated for a long time and very likely no longer work). Moreover, especially nasty applications have their own SSL-pinning verification (for example, Avito or various gaming ones), which cannot be bypassed by universal methods.
5) Sometimes inside the SSL connection, the traffic is additionally encrypted (like telegram), i.e. apart from encrypted garbage, there is little to see there

N
NSA-bot, 2021-07-13
@NSA-bot

Try this app: https://play.google.com/store/apps/details?id=app....

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question