Decrypt http tunnels to http://play.googleapis.com
Budget: $250 – $750 USD
Decrypt http tunnels to http://play.googleapis.com:443 etc
Task:
Using an android emulator, for example nox player, capture all traffic from the android emulator using for
example fiddler and decrpyt all https traffic using the certificate provided from fiddler,
I have this already setup and working so this part is not part of the paid task.
There are many howtos you can consult how to decrypt https traffic.
Then, in the android emulator log out from google play, then log in again, then
browse top 600 overall gaming chart and scroll to the last app in the top 600.
Now you should have a bunch of decrypted https traffic in fiddler.
There are also a bunch of unencrypted http tunnels, the task is to decrypt the following http tunnels:
http://android.googleapis.com:443
http://android.clients.google.com:443
http://play.googleapis.com:443
http://play-fe.googleapis.com:443
http://reminders-pa.googleapis.com:443
http://notifications-pa.googleapis.com:443
http://userlocation.googleapis.com:443
http://api-new.bignox.com:443
http://api.facebook.com:443
Delivery:
1. Howto document with screenshots how to complete the task.
2. Screen recording on how to complete the task.
Task:
Using an android emulator, for example nox player, capture all traffic from the android emulator using for
example fiddler and decrpyt all https traffic using the certificate provided from fiddler,
I have this already setup and working so this part is not part of the paid task.
There are many howtos you can consult how to decrypt https traffic.
Then, in the android emulator log out from google play, then log in again, then
browse top 600 overall gaming chart and scroll to the last app in the top 600.
Now you should have a bunch of decrypted https traffic in fiddler.
There are also a bunch of unencrypted http tunnels, the task is to decrypt the following http tunnels:
http://android.googleapis.com:443
http://android.clients.google.com:443
http://play.googleapis.com:443
http://play-fe.googleapis.com:443
http://reminders-pa.googleapis.com:443
http://notifications-pa.googleapis.com:443
http://userlocation.googleapis.com:443
http://api-new.bignox.com:443
http://api.facebook.com:443
Delivery:
1. Howto document with screenshots how to complete the task.
2. Screen recording on how to complete the task.
Related categories:
Web Security
Mobile App Development
Android
Internet Security
Reverse Engineering