fly-studio / android-capture

An android HTTP capture & hijacking tool via VPN
Apache License 2.0
13 stars 6 forks source link

How to get full http URL? #2

Open JinhaSong opened 4 years ago

JinhaSong commented 4 years ago

I want to create an application that filters the http url requested by another browser application using your application. But i was only able to get a partial url via DNS log. Ex) org.fly.android.localvpn I/System.out: DNS: -- 223.5.5.5:53:25224 play.google.com-A

How can I get the full URL requested by another browser application?

fly-studio commented 3 years ago

It's ask a domain with DNS, not HTTP request, This capture can sniff all HTTP/1.1 request/response. BUT, no HTTPs No One can sniff the HTTPs URL/Body, google used HTTPs and HTTP/2 Of course, you can use a man-in-the-middle attack:

mrbluecoat commented 3 years ago

Does the https server need to be in Android or can you point to a dedicated proxy server on the network to mitm?