Intercepting XMPP traffic from an Android app

[xpro]

Intercepting http/s is straight forward as there are many tools out there for it (Fiddler, Charles, Burp, etc)

But I can not figure out a way to intercept XMPP traffic from an Android app. Is there anyway to do this?

 

[tasburrfoot]

Burp suite can do this.

you are trying to intercept on the network I assume?

I'll dig up some reference reading for you.

 

[tasburrfoot]

Or you could just setup wireshark, filter out all devices except the one you're targetting, and then apply a protocol filter specifically for xampp

 

[webwhizz]

stick with fiddler, you can doit i know Diamond Damien , oxon beef, real address using that method. they left too many clues on here.

 

[xpro]

stick with fiddler, you can doit i know Diamond Damien , oxon beef, real address using that method. they left too many clues on here.

Fiddler is for HTTP only, it does not capture XMPP

 

[xpro]

Burp suite can do this.

you are trying to intercept on the network I assume?

I'll dig up some reference reading for you.

Burp is also for HTTP only. It does not capture XMPP

 

[Gary Carlyle]

Following.

Sniffing data is my world, =)

 

[tasburrfoot]

Burp is also for HTTP only. It does not capture XMPP

As I mentioned above, wireshark will get the job done.

Also Burp WILL work - if you're a hacker you WILL figure shit out, it's what you do.
https://github.com/summitt/Burp-Non-HTTP-Extension - havent used it personally, but I can't see why it wouldn't.

Also, you could use SSLSplit.

I mean, just google "MITM XMPP" and you'll find a crap ton of GIT-Repo's such as https://github.com/iamultra/xmppmitm and a shitload of other resources. By the amount of, and availability of, resources out there I'm starting to think you didn't even bother looking yourself before making this thread.

 

[Gakbar]

Burp suite can do this.

you are trying to intercept on the network I assume?

I'll dig up some reference reading for you.

Hi

Need some help on whats app incoming call, need to track the location/identity or source of this incoming call?
Can u advise