I have an Android application (4.2) that uses https to communicate with a web service. I want to debug / log every https that goes blank. I have a violinist and wirehark to debug them, but everything looks encrypted. can a man-in-the-middle attack be installed with the emulator and violinist / wirehark to decode and display the http-url and its parameters?
You can use a MITM proxy server like Burp . After you install the CA certificate as trusted on the device / emulator, you can decrypt the SSL traffic.
, (.. ), , Wireshark, .
, , - mitmproxy. , :
- .
: https://security.stackexchange.com/questions/8145/does-https-prevent-man-in-the-middle-attacks-by-proxy-server
, (Opera, Nokia) - - . , HTTPS. ( ) , , , .
, -, ( - , ), HTTP . , , ;)
, Fiddler . " HTTP-" Tools -> Options. Fiddler CA SSL. , , Android-. , URL
Tools -> Options
http://machinesIPAddress:8888/FiddlerRoot.cer
machinesIPAddress - , .
→ → →
. , -
Android - Fiddler