Category: Uncategorized

Requirements

• mac
• micro sdcard
• Raspberry pi (with wifi!)
• Screen from an old monitor
• download imager from https://www.raspberrypi.org/software/
• get micro sdcardadapter and insert in mac
• run imager and chose raspberry pi os 32-bit
• installer magic mirror
• https://docs.magicmirror.builders
• Make sure wifi never turns off: https://raspberrypi.stackexchange.com/questions/47087/raspberry-pi-3-wifi-goes-to-sleep
• Install player: “apt install mplayer”
• Turn off screen blanking
• https://appcodelabs.com/7-easy-steps-to-apple-airplay-on-raspberry-pi

1. Configure a SquidMan proxy on my mac
2. Make iPhone route traffic through proxy using Wifi-configurations
3. Open Fortum app and fetch traffic
4. Got GET operations against
   1. https://cognito-idp.eu-west-1.amazonaws.com
   2. https://cdc-api-gw.tingcore-infra.com
   3. https://cognito-identity.eu-west-1.amazonaws.com
5. Set environment variable SSLKEYLOGFILE to ~/ssl-key.log
6. Launch Google Chrome and visit all of the urls under point 4
7. Verify that ssl-key.log contains data and quit Google Chrome
8. Configure TLS under wireshark with ~/ssl-key.log as prestares key
9. Start a capture in wireshark with this filter: “ip.host contains cloudfront.net || ip.host contains cognito || ip.host contains tingcore and ssl”
10.