Contents
How do you intercept a thick client application?
In order to intercept the traffic between the tested thick client application and the server, we should use a proxy tool. The proxy tool will be in the middle between the thick client and the local/remote server, enabling us to view and modify the transmitted data.
How do you intercept application traffic?
How to Intercept HTTPS traffic?
- Configure proxy in Mobile Device as discussed in “Intercept HTTP Traffic from Android App — AndroGoat”
- Launch AndroGoat → Network Intercepting → Tap on ‘HTTPS’ button.
- You can see HTTPS request captured in proxy.
What is thick client application?
Thick Client applications refer to the applications that run on a user’s machine. In these applications, the client handles most of the business logic, which includes the validations, view components and occasionally, temporary data. The following are a few examples: Google Talk. Yahoo Messenger.
How to intercept thick client application traffic with burp?
Burp then passes the request back to the proxy which strips the http part and forwards the content to the server/client. As suggested by Ian, Burp Suite Invisible Proxy mode would be best for capturing request from Proxy unaware Thick client application.
How can I use burp to redirect traffic?
In Burp you can set the proxy to redirect all traffic to the endpoint using the Request Handling functionality and a different port. The add the endpoint to the SSL Pass Through. Most of these are self explanatory and are mostly only useful for web applications.
Why does a proxy listen to a burp request?
This is to tell the proxy where to redirect the traffic. This is because the proxy (which in most cases is a non-TLS terminating proxy unlike Burp) cannot see inside the TLS encrypted TCP payload in the packet. As a result it does not know where to send this traffic. This CONNECT request solves this problem.
Is it possible to intercept Google Chrome traffic with burp?
The image below shows an attempt to browse to Google while Burp is performing interception. As shown in the screen above, Chrome gives you no option to continue on to the untrusted site. Since Burp is providing its own (untrusted) certificate to the client, the connection is completely untrusted and not allowed to continue.