whatsapp sniffing ssl traffic with wireshark
I've been reading a lot of things about sniffing whatsapp traffic and I already know is over ssl. But I need to know if is there any way to decrypt this ssl traffic once I dont know what is the private key that whatsapp is using for encrypting.
So how could I discover which certificate is being used or whether exists another way to decrypt those messages?
I dont want to read anybody's chats, my intention is really se the protocols messages through the network. To understand, make a reverse engineering and elaborate a simple JAVA api to personal job purposes.
I'm using wireshark to read the ssl traffic.
You can try a Man-in-the-middle attack using a proxy software that can generate a fake SSL cert, but it won't always work. Some of these apps using certificate pinning to prevent exactly this type of attack.
HTTP proxy:
http://fiddler2.com/get-fiddler
This software generates a obvious fake cert that you are able to accept if the app will allow.
Certificate Pinning:
https://security.stackexchange.com/questions/29988/what-is-certificate-pinning
- How to access the web server which is installed on Google colab through my local computer browser without using SSH or ngrok
- Android check internet connection
- go-ssh: How to gracefully close the connection in a simple server
- Unity game cannot access to internet
- Swift 3.0: Data to JSON [String : Any]
- How do `ip netns` and `unshare` save their persistent network namespaces? Can they use each others?
- How to organize the receive msg and user current input in C network such that it's clean
- Automatic way of enabling the access to port 4900 from the internet
- How do I ssh into a KVM with minimal configuration/infrastructure?
- How to monitor all network traffic from a specific process in linux?
- Networking between VMs on VMware Workstation
- How to Add Http Proxy Authentication Credentials in VPNService on Android?
- "Replay" tcpdump file
- Docker container and host network VPN
- How do i verify that port 5555 is open?
- Why Last-Modified can be strong validator
- Endianness and Socket Programming in C
- How to subdivide CIDR subnet in Terraform with cidrsubnet Function?
- What is the difference between ss and lsof -i
- UDP hole-punch explanation
- AxiosError: Network Error on iOS (GET request ) with Expo, working fine on Android
- How does a server work and different clients?
- Multiple send() method calls and 1 receive method. Is this normal?
- Public Route53 CNAME Record to Private API Gateway
- How to capture packets for single docker container
- Are UDP packets dropped when UDP header checksum is incorrect?
- protobuf vs gRPC
- Who is listening on a given TCP port on Mac OS X?
- Check for internet connectivity in NodeJs
- How to write a string to a file on a remote machine?