How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

I’ve pentested a lot of websites and a few apps too but this app eludes them all.
On the websites, when there’s a websocket upgrade the BURP proxy recognizes it and starts showing it in the websockets tab. Somewhat similar happens on the a… Continue reading How to sniff direct websocket connection in android ( i.e. no HTTP Upgrade connections ) using BURP?

Is there a reason why ARP spoofing would be used for spying instead of sniffing promiscuously?

I am a student trying to demonstrate an ARP spoofing attack. To test whether my attack was working I decided to use wireshark to sniff the packets on the attacking machine. At first I thought I was able to intercept traffic with my ARP spo… Continue reading Is there a reason why ARP spoofing would be used for spying instead of sniffing promiscuously?