haopengzhan
f52b3fe9e4
- Migrate historical posts, localized assets, and 103 comments - Colocate media into posts/<slug>/images/ and remove wp-content - Add native bilingual support for ai-can-change post (English default, /zh variant) - Support clean taxonomy routing (/category/:category and /tag/:tag) - Dynamically populate categories and tags in sitemap.xml - Fix header scroll padding/margin offsets for anchor and reference links - Constrain image and media widths to prevent content overflow - Redesign homepage recent posts to 4 compact editorial cards - Restore valid binary favicon.ico and high-res icon assets - Remove placeholder content and sample test comments
37 lines
1.8 KiB
Markdown
37 lines
1.8 KiB
Markdown
---
|
|
title: "Using charles proxy to monitor mobile SSL traffics"
|
|
date: 2016-10-27
|
|
author: "Pengzhan Hao"
|
|
category: "Tech"
|
|
tags: ["Charles proxy","Network"]
|
|
cover: "/posts-assets/using-charles-proxy-to-monitor-mobile-ssl-traffics/images/cover.webp"
|
|
excerpt: "In this blog, I will generally talk about how to use proper tools to monitor SSL traffics of a mobile devices. Currently, I only can dealing with those SSL traffics which use an ob..."
|
|
---
|
|
In this blog, I will generally talk about how to use proper tools to monitor SSL traffics of a mobile devices. Currently, I only can dealing with those SSL traffics which use an obviously certification. Some applications may not using system root cert or they doesn't provide us a method to modify their own certs. For these situation, I still didn't find a good solutions for it. But I'll keep updating this if I get one.
|
|
|
|
My current solution is using AP to forward all SSL traffic to a proxy, [charles proxy](https://www.charlesproxy.com/) is my first choice (Prof asked). It's a non-free software which still update new versions now. So mainly, I'll talk about how to charles SSL proxy.
|
|
|
|
### Preparations
|
|
|
|
- Monitor device situation: Linux Machine with wireless adapter
|
|
|
|
- Download the newest version(4.0.1) of charles
|
|
|
|
- Target android devices with root privilege
|
|
|
|
### Install Charles and Configuration
|
|
|
|
- You have to install charles first. After downloading the charles proxy, you have to unzip it and configure some basic settings.
|
|
|
|
```bash
|
|
# open charles first
|
|
./bin/charles
|
|
```
|
|
|
|
- Save charles' private key and public key
|
|
|
|
In Help -> SSL Proxying -> Export Charles Root Certificate and Private Key, enter a password and save the public and private key in *.p12 format.
|
|
You also need to save charles Root Certificate, it also contains in the same menu. For convience, save it as *.pem format.
|
|
|
|
- Set Proxy and SSL Proxy
|