Intercepting XMPP traffic from an Android app

xpro

Regular Member

Jan 21, 2009

442

24

• Oct 29, 2016

• #1

Intercepting http/s is straight forward as there are many tools out there for it (Fiddler, Charles, Burp, etc)

But I can not figure out a way to intercept XMPP traffic from an Android app. Is there anyway to do this?

 

T

tasburrfoot

Regular Member

Dec 16, 2008

338

163

• Oct 30, 2016

• #2

Burp suite can do this.

you are trying to intercept on the network I assume?

I'll dig up some reference reading for you.

 

T

tasburrfoot

Regular Member

Dec 16, 2008

338

163

• Oct 30, 2016

• #3

Or you could just setup wireshark, filter out all devices except the one you're targetting, and then apply a protocol filter specifically for xampp

 

webwhizz

BANNED

Apr 3, 2011

725

659

• Oct 30, 2016

• #4

stick with fiddler, you can doit i know Diamond Damien , oxon beef, real address using that method. they left too many clues on here.

 

Last edited: Oct 30, 2016

xpro

Regular Member

Jan 21, 2009

442

24

• Oct 31, 2016
• Thread Starter Thread Starter

• #5

webwhizz said:

stick with fiddler, you can doit i know Diamond Damien , oxon beef, real address using that method. they left too many clues on here.

Click to expand...

Fiddler is for HTTP only, it does not capture XMPP

 

xpro

Regular Member

Jan 21, 2009

442

24

• Oct 31, 2016
• Thread Starter Thread Starter

• #6

tasburrfoot said:

Burp suite can do this.

you are trying to intercept on the network I assume?

I'll dig up some reference reading for you.

Click to expand...

Burp is also for HTTP only. It does not capture XMPP

 

Gary Carlyle

Regular Member

Aug 27, 2010

307

66

• Oct 31, 2016

• #7

Following.

Sniffing data is my world, =)

 

T

tasburrfoot

Regular Member

Dec 16, 2008

338

163

• Oct 31, 2016

• #8

xpro said:

Burp is also for HTTP only. It does not capture XMPP

Click to expand...

As I mentioned above, wireshark will get the job done.

Also Burp WILL work - if you're a hacker you WILL figure shit out, it's what you do.
https://github.com/summitt/Burp-Non-HTTP-Extension - havent used it personally, but I can't see why it wouldn't.

Also, you could use SSLSplit.

I mean, just google "MITM XMPP" and you'll find a crap ton of GIT-Repo's such as https://github.com/iamultra/xmppmitm and a shitload of other resources. By the amount of, and availability of, resources out there I'm starting to think you didn't even bother looking yourself before making this thread.

 

G

Gakbar

Newbie

Sep 12, 2017

1

0

• Sep 12, 2017

• #9

tasburrfoot said:

Burp suite can do this.

you are trying to intercept on the network I assume?

I'll dig up some reference reading for you.

Click to expand...

Hi

Need some help on whats app incoming call, need to track the location/identity or source of this incoming call?
Can u advise