VK.com · Report #64731
Able to intercept app Traffic after choosing up the Secured Connection using SSL (HTTPS)
Validstatus
$100bounty
4upvotes
3 Mar 2017disclosed
How it was found
Install the app Login with Valid credentials Settings - Choose Secured connection (HTTPS) Close the app Set the proxy and Open the app verify that Connection isn't Secured and able to intercept (PFA POC)
Expected Result : Secured layer & SSL PINING should be applied successfully.