logoalt Hacker News

syntaxinglast Monday at 11:37 AM4 repliesview on HN

Fun read, but you probably could have installed mitmproxy with brew, pointed your IntelliJ instance through this proxy (you can either set it in your settings or run it with environment variable HTTP_PORT or HTTPS_PORT). This allows you intercept the request like wireshark and diagnose. You honestly can just intercept the interface request using wireshark but the learning curve is stepper.


Replies

bauruineyesterday at 5:52 PM

In this case it's possible that it would have worked if he had used mitmproxy.

show 2 replies
ofrzetayesterday at 4:33 PM

You have to work around TLS, though. Although it is possible with Wireshark, extracting the shared keys through from the browser, I never could get it to work. With mitmproxy I was more successful and could even get iOS Safari to accept my self-issued certificate and read HTTP traffic from a third-party app that I re-routed through my own proxy.

show 1 reply
tymscarlast Monday at 11:39 AM

Good point! Wireshark was the next step actually if this didnt work!

devmoryesterday at 4:11 PM

Even if you know how to use Wireshark already, a lot of times it’s faster and easier to use mitmproxy for something simple.

I use it for reverse engineering IoT apps on android emulators regularly.