Sign in to follow this  
Followers 0
evo85

Undetected traffic when sniffing?

2 posts in this topic

So I noticed a few things. I was attempting to sniff traffic from an android/ios application and it wasn't showing up in Fiddler2/Burp. It possibly showed up in Wireshark but it's encrypted and I can't read it. Long story short, I disabled SSL Pinning and have both Fiddler/Burp setup properly. It shows HTTPS/SSL traffic BUT it doesn't show all of the websockets. I believe it's a similar issue to WhatsApp/Facebook Messenger. When I try to sniff traffic from those chat applications it does not show any incoming/outgoing traffic. Any ideas what next steps I should take? I KNOW there is traffic going and leaving, but it's not being intercepted.

Share this post


Link to post
Share on other sites

Fiddler sets the System Proxy to 127.0.0.1:8888, but maybe those applications dont use that. You can "force" that with Proxifier or similar tools.    // for Windows

 

EDIT: Oops... i didn't read correctly :wacko: Maybe its the same way on mobile.

Edited by lucifeey
im stupid

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0