I was trying to do vulnerability testing to an android mobile banking app so to get the endpoints of the API I installed the app into android emulator and captured the requests with transparent proxy called PolarProxy (it's very affective with other mobile apps and forward request without issue) but when using it with this app the destination server is replaying an error with
It works find when the proxy is not on so I though maybe the server is using a Client Certificate Authentication so I looked into the TLS handshakes captured with Wireshark but I couldn't find a Certificate request from server.
you can see in the first Wireshark image that there is no Certificate request from server so the server is not asking for a Client Certificate as I guess or I'm wrong ?
also I found little difference between the two TLS handshakes the one with proxy and the one with out it, the
ClientHello message sent when the proxy is
OFF has 1 more extension which called
statues_request, I know it's for requesting a Certificates statues,
so I tried adding that extension using postman but the postman is adding more extensions to
ClientHello message and the server still replayed with same error
so my other question is can missing or added extensions to
ClientHello message cause
sorry for this long explanation but I just want be clear.