Much of modern life is mediated through phones and apps. To investigate anything they touch, you need to understand where these apps' data comes from, what they're sharing, and with whom. But while network forensics & scraping for the web have received plenty of attention, the same isn't true for mobile, where techniques can be more challenging and clear guides are harder to find.
In this talk, we'll take a hands-on look at how HTTP Toolkit and other tools make it possible to easily capture, inspect & modify network traffic on mobile. We'll explore real-world examples of these techniques in data journalism, and you'll learn how you can use this to extract the datasets that power mobile apps, expose privacy leaks & security issues, and investigate exactly how apps do what they do.
