-1

I'm analyzing Android games with Fiddler 2 to see how the game collects data. There is a problem, both Fiddler 2 and Charles Proxy doesn't capture any traffic from some online games. All i got are ads traffics.

I have ensure that I have enabled proxy on Android system, have certificate installed, filtered target process and check if https decryption is working. All fine. I have reseted cert and fiddler 2 but it doesn't help

I have heard it uses socket system, i don't know excatly what he meant. This online game requests a lot of data. I checked logcat and i see that the game retrieved some json data but there is not enough infomation.

I'm missing something there?

enter image description here

Improve this question
5
  • Use iptables. Check out blog.dornea.nu/2015/02/19/redirect-androids-traffic-to-burp Commented Aug 29, 2018 at 13:02
  • Proxies are easy to circumvent/not support. If you need better network analysis i suggest you set up a proper man in the middle. Commented Aug 29, 2018 at 17:52
  • Tried iptables but the game failed to connect. Viewing https websites still working fine. I don't know what to do since i'm quite new to MITM. I just want to see game request/response Commented Nov 10, 2018 at 16:11
  • In case your target makes use of ‚websockets‘, then OWASP ZAP can help intercept its traffic. Here‘s a guide owasp.org/index.php/Testing_WebSockets_(OTG-CLIENT-010) Commented May 2, 2019 at 3:31
  • 1
    You can try to launch game using frida and load one of ssl unpin scripts (1, 2, 3, 4, etc.). Commented Jan 27, 2020 at 9:54

3 Answers 3

Reset to default
1

Fiddler and Charles Proxy are web debugging proxies so they only capture http/s traffic. If the game doesn't use the http protocol the trafic wont appear in these tools.

Improve this answer
2
  • Then what tools can capture the traffic? I found other games that doesn't use http/s protocol Commented Dec 7, 2018 at 10:12
  • Here are some suggestions: stackoverflow.com/questions/9555403/… Commented Dec 9, 2018 at 15:14
0

I believe Burp by PortSwinger will do the work.

How to configure Android to work with Burp: https://support.portswigger.net/customer/portal/articles/1841101-configuring-an-android-device-to-work-with-burp

Improve this answer
1
  • Sorry, it doesn't work. It also not showing anything Commented Nov 10, 2018 at 16:06
0

I found another software called HTTP Debugger. It does way better job capture everything that others couldn't. It is a paid software, but it's really worth for me

https://www.httpdebugger.com/

Improve this answer

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.