Analysis of Mobile APP Data Packet Capture

Recently, we are carrying out packet capture analysis on the data packets requested by the mobile phone APP, but in some applications, the simple HTTP or HTTPS packet capture configuration cannot capture the data packets we want. At this time, we need to use other tools to grab APP data packets.

1. Tools

Simulator-Thunder

https://www.ldmnq.com/ld_update_log.html

Packet capture app—— Pixixi

Link : https://pan.baidu.com/s/1Pi6k9UU9u44EFEETXiI-tw Extraction code: g3us

Packet capture tool - Charls

Link: https://pan.baidu.com/s/1gW5CD8eGVAxODI1oJlFk9g Extraction code: 24ho

VPN proxy tool- S ocksDroid

Link: https://pan.baidu.com/s/1Y1Gi6ubFGvIlyoia_hoecw Extraction code: z9ih

Xposed Installer && JustTrustMe

Xposed installer link : https://pan.baidu.com/s/1qwhMdUy4IXPWWLSaP9cEZQ extraction code: ulbx

JustTrustMe link : https://pan.baidu.com/s/1ZC3MtdmIntgPuXz3sqUiJg Extraction code: laaw

Two, create the simulator

1. Open the Thunderbolt multi-opener and create a new simulator

2. Start the created simulator

Three, install and log in to Pin Xixi

1. Installation

2. Log in

Fourth, the capture tool Charls

1. Open charls

2. When the charls certificate is not installed on the simulator , no data package can be captured

3. Set up proxy

4. Set the proxy, HTTP proxy port is set to 8888 , socks proxy port is set to 8889

5. The simulator downloads the charls certificate (Method 1 )

Enter chls.pro/ ssl on the browser to download the certificate ( xxx.crt )

6. Download the charls certificate from the simulator (Method 2 )

Change the certificate to. Crt format

Drag the saved charls certificate into the simulator

7. Install the charls certificate on the simulator (Method 1 )

• Click the Install Certificate option

• Click on the certificate to be installed

• Give the certificate a name ( you can start whatever you want )

8. Install the charls certificate on the simulator (Method 2)

• Click the certificate to be installed, and the following operations and methods are the same

Five, start capturing

• At this time, the packet was captured, and it was found that a useful data packet was not captured. At this time, don’t worry, we need to use socksdroid as a VPN proxy for all requests

Six, install socksdroid

1. Download and install SocksDroid in the emulator

2. Set the IP and port of SocksDroid proxy (other settings can be default)

3. Turn on SocksDroid service

Seven, capture the packet again

• Now I find that the relevant data packets can be captured, but all requests are in unknown state, don’t worry, don’t worry, there is still something missing, just install JustTrustMe below