Wireshark MQTT Connection

[HansHabraken]

Hi Community

I use Wireshark to get a better understanding of the connection between an IoT device and AWS IoT Core. You can see clearly the client hello, server hello and TLS handshake, but after that all communication is encrypted.

Question: did someone achieve to decrypt the traffic with wireshark or another tool?

Thanks in advance

Kind Regards
Hans Habraken

[bretambrose]

I have not done it myself, but in theory you should be able to setup a MITM proxy (other people on our team have used https://portswigger.net/burp for this) and as long as you tunnel through it properly, your proxy console should see the unencrypted traffic.

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.