Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

I <3 Charles Proxy

Sponsored · Your Podcast. Everywhere. Effortlessly. Share. Educate. Inspire. Entertain. You do you. We'll handle the rest. →
Avatar for Scott Alexander-Bown Scott Alexander-Bown
November 29, 2018
Technology
120
0

I <3 Charles Proxy

Avatar for Scott Alexander-Bown

Scott Alexander-Bown

November 29, 2018

More Decks by Scott Alexander-Bown

See All by Scott Alexander-Bown
What's New In Android 15 Security
Avatar for Scott Alexander-Bown scottyab
0
290
Fundamentals of creating Android mobile apps
Avatar for Scott Alexander-Bown scottyab
0
110
What's 'Q' in Android Security
Avatar for Scott Alexander-Bown scottyab
0
390
Faster mobile debugging using a HTTP Proxy
Avatar for Scott Alexander-Bown scottyab
0
97
What_s_new_from_Google_IO_2018.pdf
Avatar for Scott Alexander-Bown scottyab
0
190
Doppl, an intro!
Avatar for Scott Alexander-Bown scottyab
0
140
OMG What's new in Security
Avatar for Scott Alexander-Bown scottyab
0
99
What's New from Google I/O 2017
Avatar for Scott Alexander-Bown scottyab
0
160
What's Nnnnnew in Security Droidcon IT
Avatar for Scott Alexander-Bown scottyab
1
160

Other Decks in Technology

See All in Technology
絵ではじめるKubernetesセキュリティ
Avatar for Aoi Takahashi aoi1
3
480
Microsoft 365 Copilot chat -tekoälypalvelun tietosuojaongelmat
Avatar for Harto Pönkä hponka
0
900
DEFCON34-Write-up_HYCu-MYCu
Avatar for okzkey daikiokazaki
0
160
技術的負債から考える、AI時代のエンジニアリング投資 — ビズリーチの技術的負債と向き合った経験から、変更し続けられるソフトウェアを考える/ technical-debt-con2026
Avatar for Visional Engineering ＆ Design visional_engineering_and_design
1
1.4k
Gitは怖い？共有ワークスペースから始めるSnowflakeチーム開発
Avatar for あべ coco_se
0
210
フルカイテン株式会社 エンジニア向け採用資料
Avatar for FULL KAITEN fullkaiten
0
12k
2026/09/10 Spring Bootから Jakarta EE/MicroProfileへの移行
Avatar for Satoshi Seto megascus
0
360
越境するなら専門用語を使うな高校校歌 / If you wanna cross border, you shouldn't use jargon
Avatar for VTRyo vtryo
0
130
「守り」で活用するオンデバイスLLM 〜写ってはいけないを総力戦で防ぐ〜 / iOSDC Japan 2026
Avatar for nakamuuu nakamuuu
0
150
AI時代の「技術的負債」の変質ー概念の終焉と再解釈、エージェントと共に向かう先
Avatar for nwiizo nwiizo
0
1.9k
Reactの設計論
Avatar for uhyo uhyo
22
12k
Sigmaで作る業務アプリ
Avatar for kazushiro_honma kazushiro_honma
0
140

Featured

See All Featured
The AI Revolution Will Not Be Monopolized: How open-source beats economies of scale, even for LLMs
Avatar for Ines Montani inesmontani
PRO
3
3.7k
[RailsConf 2023 Opening Keynote] The Magic of Rails
Avatar for Eileen M. Uchitelle eileencodes
31
10k
WCS-LA-2024
Avatar for Leonardo Collado-Torres lcolladotor
0
830
How People are Using Generative and Agentic AI to Supercharge Their Products, Projects, Services and Value Streams Today
Avatar for Helen Beal helenjbeal
1
320
The #1 spot is gone: here's how to win anyway
Avatar for Tamara Novitovic tamaranovitovic
3
1.2k
Collaborative Software Design: How to facilitate domain modelling decisions
Avatar for Kenny Baas-Schwegler baasie
1
320
Intergalactic Javascript Robots from Outer Space
Avatar for Vicent Martí tanoku
273
27k
Why You Should Never Use an ORM
Avatar for John Nunemaker jnunemaker
PRO
61
10k
Making Projects Easy
Avatar for Brett Harned brettharned
120
6.7k
Agile Actions for Facilitating Distributed Teams - ADO2019
Avatar for Mark Kilby mkilby
0
280
Bioeconomy Workshop: Dr. Julius Ecuru, Opportunities for a Bioeconomy in West Africa
Avatar for AKADEMIYA2063 akademiya2063
PRO
1
350
KATA
Avatar for Megan Lloyd mclloyd
PRO
35
15k

Transcript

  1. I ❤ CHARLES By Scott Alexander-Bown

  2. None

  3. Proxy Server

  4. None

  5. Disclaimer: Not tested this

  6. ALTERNATIVES ➤ Chrome Dev tools ➤ Stetho (Android) ➤ Pony

    Debugger (iOS) ➤ Chuck (Android) ➤ MITM proxy ➤ Fiddler ➤ Others…

  7. SCREENSHOT OF ANDROID APP SESSION

  8. BREAKPOINTS ➤ “Does what it says on the tin”

  9. EDIT REQUEST / RESPONSE ➤ Simulating error responses from API

    ➤ Removing values from request/response to confirm things still work or fail where expected

  10. THROTTLING

  11. None

  12. MOBILE DEVICE SETUP

  13. None

  14. What about TLS/SSL?

  15. SSL PROXY ➤ Install the Charles Proxy Root Cert ➤

    Typically the generated Charles Root (different per install) ➤ Provide your own SSL root cert ➤ Enable SSL Proxying on per domain basis http://www.charlesproxy.com/getssl/

  16. HELPER OPTIONS FOR ROOT SSL

  17. SIDE NOTE ANDROID 7+ ➤ Requires Network Security Config to

    trust user installed certs ➤ Help Scout Android only allows user installed certs in debug (i.e not Play store) ➤ Here’s the config

  18. AND THAT’S NOT ALL ➤ DNS spoofing ➤ Web interface

    (useful when running Headless) ➤ macOS proxy ➤ Import/Export Session ➤ Focus on single domain ➤ Get cURL of request (used recently when debugging push token registration) ➤ Create Github Gist ➤ Repeat aka basic load testing (multiple times with optional delays) ➤ Whitelist, Blacklist(block), Ignore urls

  19. PROXY HELP SCOUT

  20. THANKS

  21. HOW DO YOU USE WEB PROXIES?