Technology Blog

Partners

WhichIsBest

Ads

ads
WhichIsBest

Thursday, April 10, 2014

How to see, edit and tamper all http, https requests, responses made from an android mobile or tablet device?

In previous posts we saw an introduction to web proxy debugging and decrypting secure SSL requests.

Yet still, have you ever wondered how your mobile/tablet communicates with websites? , How information is being sent & received in my Facebook, Gmail app that you installed in your smartphone?

Well, I did, and here is what I found. We can view, capture and play with data sent from any smartphone over the network.


Install & open Charles. Go to Help Local IP address. Note down your IP address.

Now let’s move on to try capturing what all that is being sent from your android/windows/ IPhone device.
(Make sure both your device and PC are connected in the same network)
Go to android settings WiFi → long press your connected network → modify Network 


At the bottom, Check “show advanced options” → set proxy as “manual”. Proxy hostname is your IP address that you noted as seen when we started. (192.168.1.6 for me) Proxy port is Charles’s port “8888” by default. (Proxy menu → Proxy Settings →Port).
Let’s get to test if that is correct.


Now we have set all your android traffic to go through your PC and Charles read it clean and nice for you.
I am opening browser from my mobile and doing a Google search.

Then I am going to Charles and …
BINGO! Yes, I can view what I searched in my mobile, right here in my PC. Ok, can we edit and interpret the information being transferred?
Let’s do a similar thing to what we did in our previous post,

Go to any website, say “m.dictionary.com” & here is how it looks,
Note how the response is the HTML page of “m.dictionary.com”. Now enable breakpoints for this website in Charles, and reload the website in your device.

The request gets paused before being sent to the web-server. Let’s just let the request go, by clicking “Execute”.
Now Charles brings up the response sent by the server, which is to be sent to your smartphone.
But before that I am going to edit the Response with my own HTML content and then click execute.


Check out what gets displayed in my phone, for the website “m.dictionary.com”.
That’s the direction of things you can do with proxy debugging.
Android developers can use this method to see all your data traffic, whether requests are going good and responses are received OK.
If you encounter secured HTTPS/SSL data, please refer this post to decrypt them in Charles.


Yet, sometimes, new android versions may feel a bit insecure and just don’t believe this proxy drama.
If you’re not able to see encrypted data, go to this URL http://charlesproxy.com/charles.crt from your device browser and install the certificate.
Be sure to remove the certificate after using (settings → security → ! sign -> select Charles certificate & remove)

Try out to see what all information your phone sends and receives.
If you are using other’s device, inform them & respect their privacy. (All personal data including passwords & auth codes are viewable)
Please be noted this tutorial is for only educational purpose and be responsible. Have a great day :)

30 comments:


  1. Share or Sell your documents, designs, graphic, 3d models, artworks, photographs, etc., earn money, and get hired worldwide. Register via e-mail or your social media account here:http://www.ehuub.com/login/ by choosing category "GRAPHICS, DESIGN, AND MULTIMEDIA", thank you!

    ReplyDelete

  2. The strategy you have posted on this technology helped me to get into the next level and had lot of information in it... Java Training in Chennai | Python Training in Chennai

    ReplyDelete
  3. Great post! This is very useful for me and gain more information, Thanks for sharing with us.

    Guest posting sites
    Education

    ReplyDelete
  4. Awwsome informative blog ,Very good information thanks for sharing such wonderful blog with us ,after long time came across such knowlegeble blog. keep sharing such informative blog with us.
    Airport Ground Staff Training Courses in Chennai | Airport Ground Staff Training in Chennai | Ground Staff Training in Chennai

    ReplyDelete
  5. This is an awesome post.Really very informative and creative contents. These concept is a good way to enhance the knowledge.I like it and help me to development very well.Thank you for this brief explanation and very nice information.Well, got a good knowledge.
    RPA Training
    RPA Training Institute in Chennai
    Robotic Process Automation Courses
    learn Robotic Process Automation
    RPA Training Course

    ReplyDelete
  6. Thank you for such an amazing post. Keep sharing this kind of useful information.

    ReplyDelete
  7. Thanks for splitting your comprehension with us. It’s really useful to me & I hope it helps the people who in need of this vital information.
    German Language Course in Chennai
    German Courses in Chennai
    Best german classes in chennai
    German language training in chennai
    German Training in Chennai
    German classes chennai

    ReplyDelete
  8. Thanks for the good words! Really appreciated. Great post. I’ve been commenting a lot on a few blogs recently, but I hadn’t thought about my approach until you brought it up. 
    python training in tambaram | python training in annanagar | python training in jayanagar

    ReplyDelete
  9. Thanks for taking the time to discuss this, I feel strongly about it and love learning more on this topic.

    advanced excel training in bangalore

    ReplyDelete
  10. This information is impressive; I am inspired by your post writing style & how continuously you describe this topic.... Java Training in Chennai | Pega Training in Chennai

    ReplyDelete
  11. Wow it is really wonderful and awesome thus it is very much useful for me to understand many concepts and helped me a lot. it is really explainable very well and i got more information from your blog.

    rpa training in velachery| rpa training in tambaram |rpa training in sholinganallur | rpa training in annanagar| rpa training in kalyannagar

    ReplyDelete
  12. Thanks for splitting your comprehension with us. It’s really useful to me & I hope it helps the people who in need of this vital information. 

    java training in chennai | java training in USA

    ReplyDelete
  13. Thanks for splitting your comprehension with us. It’s really useful to me & I hope it helps the people who in need of this vital information.
    Java Training in Chennai
    PHP Training in Chennai
    Core Java Training in Chennai
    Java Training center in Chennai
    PHP Course in Chennai
    PHP Training Institute in Chennai

    ReplyDelete
  14. I am obliged to you for sharing this piece of information here and updating us with your resourceful guidance. Hope this might benefit many learners. Keep sharing this gainful articles and continue updating us.
    Selenium Training in Chennai
    Best Selenium Training Institute in Chennai
    ios developer training in chennai
    Digital Marketing Training in Chennai
    .Net coaching centre in chennai
    Loadrunner classes in Chennai
    performance testing training in chennai

    ReplyDelete

WhichIsBest
WhichIsBest