Charles Proxy Test

Looking at Figure 4-5 again, we’re trying to proxy the traffic via the computer to see if we can intercept the network traffic and make sure it’s secure. We need to install ProxyDroid and use that to point the traffic at the computer, and then install Charles Proxy on the computer to see the network traffic.

To conduct a simple MITM attack for unencrypted HTTP and encrypted HTTPS traffic, do the following:

1. From Google Play, install ProxyDroid.

2. Install and open Charles Proxy on your proxy machine.

3. Configure the ProxyDroid host to point at your proxy machine’s IP and change the ProxyDroid port to 8888 (the default port on Charles Proxy), as shown in Figure 4-8.

Figure 4-8 ProxyDroid

4. Turn on or enable ProxyDroid. ...

Get Bulletproof Android™: Practical Advice for Building Secure Apps now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.