I want to sniff SSL/TLS encrypted traffic of my installed apps using BURP. After installing the burp certificate on my One Plus 5T and moving certificates through the Magisk tweak "Move Certificates" there are still applications like mcdonalds that I can't sniff because tell me there isn't Internet connections. I'm sure that Internet connections there is because another app like deliveroo work perfectly with burp.

I was wondering if there was a solution to this problem.


If you have a rooted device with Magisk it is IMHO much simpler to just disable SSL/TLS certificate checking and pinning for traffic sniffing:

Install Xposed for Magisk and the Xposed module Trust me already

  • Thank you so much, I appreciated your help and I solved with your advice.
    – zenmorro
    Apr 10 '19 at 2:51
  • I appreciate this answer, but is there any work around that how can we protect this? Even when we are using tools like GuardSquare? What are possible solutions.
    – Nah
    Aug 9 '19 at 13:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.