title: Intercept HTTP Traffic of an android app?
body: <p>I was trying to test and intercept traffic from an app developed on <strong>Rhodes</strong> open source framework, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can intercept other apps on my device but I am unable to see the traffic of the app in <a href="https://play.google.com/store/apps/details?id=com.path_solutions.premierbank&amp;hl=en_US" rel="nofollow noreferrer">question - its link</a> on burp suite instead the app works fine and connects to the remote server without even appearing any error related to certificate error on the <strong>event Log</strong> of the burp suite just as like an app using <strong>certificate Pinning</strong> would complain. in reversing the <a href="https://play.google.com/store/apps/details?id=com.path_solutions.premierbank&amp;hl=en_US" rel="nofollow noreferrer">app</a> I concluded that it is using https protocol to connect to the server. additionally, I have installed the app in <strong>Genymotion</strong> emulator and the app behaves differently. when I installed the certificate in the emulator and set up burp proxy, all the traffic from other apps appears normally in the proxy except this <a href="https://play.google.com/store/apps/details?id=com.path_solutions.premierbank&amp;hl=en_US" rel="nofollow noreferrer">app</a>. all the app traffic follows to the address <code>127.0.0.1</code> which is strange to me. forexample I take an intercepted one below:</p>
  <pre><code>http://127.0.0.1:44895
  
  POST /app/Settings/do_pathlogin HTTP/1.1
  Host: 127.0.0.1:44895
  Content-Length: 65
  Accept: */*
  Origin: http://127.0.0.1:44895
  X-Requested-With: XMLHttpRequest
  User-Agent: Mozilla/5.0 (Linux; Android 8.0.0; Samsung Galaxy S6 Build/OPR6.170623.017; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/58.0.3029.125 Mobile Safari/537.36
  Transition-Enabled: true
  Content-Type: application/x-www-form-urlencoded; charset=UTF-8
  Referer: http://127.0.0.1:44895/app/Settings/index_callback
  Accept-Encoding: gzip, deflate
  Accept-Language: en-US
  Connection: close
  
  fromPage=login&amp;operation_key=HOME_REP&amp;username=user&amp;password=pass
  
  </code></pre>
  <p>I don't have any idea why this behaviour the <a href="https://play.google.com/store/apps/details?id=com.path_solutions.premierbank&amp;hl=en_US" rel="nofollow noreferrer">app</a> is showing, in the real device this won't show up, i.e, traffic to the address <code>127.0.0.1</code>.
  As other researchers would recommend, tried to sniff network traffic of the <a href="https://play.google.com/store/apps/details?id=com.path_solutions.premierbank&amp;hl=en_US" rel="nofollow noreferrer">app</a> with wireshark  and activated the capture traffic of the wireshark, I was expecting to sniff or even decide whether app is using UDP protocols, but did not appear any traffic from the app!.</p>
  <p><strong>I wanted some help how can I capture the traffic of this <a href="https://play.google.com/store/apps/details?id=com.path_solutions.premierbank&amp;hl=en_US" rel="nofollow noreferrer">app</a>?</strong></p>
  <p><strong>what am I missing?</strong></p>
  <p><strong>what other steps do I need?</strong></p>
  <p>I would really appreciate any help about this.</p>
  <p><strong>note: I don't have any bad intentions about the app.</strong></p>