Traffic Content

[baloian]

Given, we can observe the application layer content what all information can we derive:

1. Can we capture authentication API call?
2. Are there default passwords being used?
3. Is there location data used ?
4. Can we derive data type - media type - photo / audio / video ?
   4.1. Is the data locally used or cloud access is enabled by default ?

Based upon the traffic security measurements, we can conclude:

1. Traffic is encrypted, can we do a MitM certificate configuration to view application text.
2. Traffic is not encrypted