Hi everyone I am interested in how a banking app works, especially the way it handles https requests. So I installed one, set my proxy settings, started burp suite and expected it to work. As you may expect it did not.
Burp-suite gave me an error namely: Received close_notify during handshake
At that point i came up with 2 options
1) I did something wrong with the CA installation of burp-suite.To verify this i opened snapchat which also requires burps CA certificate. Burp suite did function as normal so i think this is the not the problem.
2) The app doesn't allow me to use a proxy server. This seems the most logical thing especially because the error is that burp received a close_notify message which suggests that the app quitted the connection. And also a banking app is (at least i hope) very well protected.
However I still want to inspect the internet traffic of the app so how should i do this? I think i might start using cycript to see if i could enable/disable a function that controls proxy handling. If there are easier ways i would be very willing to hear this. Another option which seems like a solution to me is letting the my phone think it isn't connecting to a proxy server by changing ip's or something like that.
Thanks in advance!