Jump to content
Tuts 4 You

Undetected traffic when sniffing?


Recommended Posts

So I noticed a few things. I was attempting to sniff traffic from an android/ios application and it wasn't showing up in Fiddler2/Burp. It possibly showed up in Wireshark but it's encrypted and I can't read it. Long story short, I disabled SSL Pinning and have both Fiddler/Burp setup properly. It shows HTTPS/SSL traffic BUT it doesn't show all of the websockets. I believe it's a similar issue to WhatsApp/Facebook Messenger. When I try to sniff traffic from those chat applications it does not show any incoming/outgoing traffic. Any ideas what next steps I should take? I KNOW there is traffic going and leaving, but it's not being intercepted.

Link to comment
Share on other sites

  • 7 months later...

Fiddler sets the System Proxy to, but maybe those applications dont use that. You can "force" that with Proxifier or similar tools.    // for Windows


EDIT: Oops... i didn't read correctly :wacko: Maybe its the same way on mobile.

Edited by lucifeey
im stupid
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...