
Seeking Guidance on Android Pentesting for Traffic Interception
CybersecurityMobileSecurityPenetrationTestingNetworkTrafficAnalysis
The post seeks guidance on setting up Android pentesting for intercepting app traffic, particularly HTTPS traffic using Burp Suite. The user struggles with SSL pinning bypasses, especially in heavily protected apps like games, and asks about the practicality of physical devices vs. emulators and no-root vs. rooted setups. Their current setup includes Kali Linux and a physical Android phone, but they face issues with apps that ignore system proxies or enforce SSL pinning. The request focuses on a practical and complete setup for Android app traffic interception.