I'm trying to intercept Android application traffic from my Android phone....Basically what worked before was that i had simply installed fiddler proxy on my PC, exported the root certificate (and added it to my android devices CA storage), then i installed cydia's mobile substrate and Android-SSL-TrustKiller because apparently the apk in question uses certificate pinning that needs to be bypassed in order to properly MitM the app. I set my android wifi proxy settings to the same ip:port as the machine that fiddler is listening on.
Unfortunately this does not work anymore for the application in question and im left unable to properly read the traffic..
I tried proxydroid (which uses iptables i believe), and fiddler showed attempts at connecting to one of the ip's, but it never goes through (i believe this is an issue with the IP not resolving to the host-name correctly, which causes certificate name mismatch errors)
With standard wifi proxy tuned to fiddler, i dont see ANY requests. With proxydroid, i see this http://gyazo.com/6792f884e1f88453a8cacb1632d0b3d5 (tones of CONNECTS and cert mismatches, despite having imported fiddlerroot into CA storage.
I have tried to use Charles web proxy with the same results seen here : http://gyazo.com/164feead28263f1db84e300127de1594
I'm at my wits end here. The thing is other apps seem to be displaying their traffic just fine (Facebook,instagram,dropbox, even banking apps)
I'm convinced that its some kind of certificate validation error but i don't know how to proceed... The only solution i can think of is just reformatting my phone and re-trying from square 1 entirely...