domains / families / security / intercepting-mobile-traffic-with-burpsuite

intercepting-mobile-traffic-with-burpsuite

separate

'Intercepts and analyzes HTTP/HTTPS traffic from mobile applications

When to use

• Testing mobile application API endpoints for authentication, authorization, and injection vulnerabilities
• Analyzing data transmitted between mobile apps and backend servers during penetration tests
• Evaluating certificate pinning implementations and their bypass difficulty
• Identifying sensitive data leakage in mobile network traffic

When not to use

• intercepting traffic from unauthorized applications

Skill page

Source