
HTTP proxy: ‑fiddler This software generates a obvious fake cert that you are able to accept if the app will allow.Ĭertificate Pinning: ‑is‑certificate‑pinning 方法 2: Some of these apps using certificate pinning to prevent exactly this type of attack. You can try a Man‑in‑the‑middle attack using a proxy software that can generate a fake SSL cert, but it won't always work. I dont want to read anybody's chats, my intention is really se the protocols messages through the network. To understand, make a reverse engineering and elaborate a simple JAVA api to personal job purposes.

So how could I discover which certificate is being used or whether exists another way to decrypt those messages? But I need to know if is there any way to decrypt this ssl traffic once I dont know what is the private key that whatsapp is using for encrypting. I've been reading a lot of things about sniffing whatsapp traffic and I already know is over ssl. Whatsapp用wireshark嗅探ssl流量 (whatsapp sniffing ssl traffic with wireshark)
