Intermedian attack is used to intercept encrypted information transmitted over https.

Intermedian attack is used to intercept encrypted information transmitted over https.

Use Charles to intercept mobile terminal logon passwords

1. Make the PC and Android mobile phone in the same Wifi

2. Install Charles's SSL certificate on the PC side

2. Set the proxy address of Wifi in the Android phone to the current address of the PC, and the port number is 8888.

3. Import the certificate provided by Charles to the Android mobile phone. Set it on Xiaomi mobile phone as an example.> Security and Privacy> install from storage device> select Certificate

4. Open the app on your mobile phone and log on to the app.

5. capture data packets during application login on the PC end

6. add the corresponding URL to Charles Proxy> Proxy Setting> SSL> Check on Enable SSL proxying add location

7. Simulate user logon again. At this time, Charles can intercept plaintext Information encrypted over HTTPS.

This method is provided to testers to verify the security of websites and applications.