i have tried mobile apps like HttpCanary and pc programs like wireshark still got nothing from the site !!
-
Per your first screenshot, even though the certificate is invalid, the traffic will still be encrypted.– oxr463Commented Jul 1, 2019 at 0:16
-
@LucasRamage ... but why it still doesn't work although i have installed the root ssl debugging certificate for the app !! .– mina nagehCommented Jul 1, 2019 at 1:12
-
This might help, redflagsecurity.net/2019/03/10/decrypting-tls-wireshark– oxr463Commented Jul 1, 2019 at 1:16
-
@LucasRamage thanks it worked . add it as an answer pls ... and do you know how can i fix it on android ?– mina nagehCommented Jul 1, 2019 at 22:05
Add a comment
|
1 Answer
Per Decrypting TLS Browser Traffic With Wireshark – The Easy Way!,
As people have started to embrace forward secrecy this broke, as having the private key is no longer enough derive the actual session key used to decrypt the data...Firefox and Chrome both support logging the symmetric session key used to encrypt TLS traffic to a file. You can then point Wireshark at said file and presto! decrypted TLS traffic.