The problem with pcap is that whe requests there would be encrypted and basically there is no way to practically decrypt them.
Mitmproxy solves that by being between the client and server and injecting it's own self-signed certificate (which you need to add to the trusted certificates on the phone, which requires root).
Comments
The problem with pcap is that whe requests there would be encrypted and basically there is no way to practically decrypt them.
Mitmproxy solves that by being between the client and server and injecting it's own self-signed certificate (which you need to add to the trusted certificates on the phone, which requires root).
See SSLKEYLOGFILE
explain bit more please? Do you mean root is not needed? Isn't that a curl feature?
Various browsers support it to log ssl keys which allows decrypting packet captures without requiring something like mitmproxy.