I have a climate monitor/controller that is closed source, has an app for android and ios. all traffic goes through AWS. No open port on device, no local webpage, no local access from app.. Very limited. Only can access via mobile-app using a login/password method. So no IP settings, none of the normal stuff.
Ive looked over the android app source code and to my best of knowledge everything is handled via JSON request.
To my understanding, the normal approach would be to take the device, plug it into the ethernet on my laptop, and use wireshark to capture whatever I can.
However every time ive done this in the past, it was just to view traffic of software on my computer.
So my main questions are.. am i taking the right approach? because of the AWS use, will I find anything useful?
There are endless tutorials that are never updated out there, so if anyone can suggest or recommend anything to me that would aid, I would appreciate it. I can post more detailed device information if required. I will update as I make progress. Thank you.