Intercepting Traffic for Mobile Applications that Bypass the System Proxy

This blog provides a step-by-step technical guide for intercepting mobile app network traffic: on iOS by using Mac Internet Sharing, creating a bridge interface, adding pf redirection to forward traffic to a Burp listener, and enabling invisible proxying; and on Android by using HTTP Toolkit (Pro) with a rooted device or AVD to establish a VPN-style capture, install a CA certificate, and forward traffic to an upstream proxy. It also calls out common obstacles such as certificate pinning and library-specific verification (e.g., BoringSSL), and recommends additional tooling or methods where HTTP Toolkit or system proxies are insufficient.