Sniff HTTPS traffic on Rooted+Xposed Android Device

Tools:

ProxyDroid, JustTrustMe(A xposed widget), Fiddler(Run on your PC)

Grant root access for the ProxyDroid at first. Then select the checkbox of [Global Proxy]:

Fill the textbox with proxy ip address(the pc ip address with Fiddler, port 8888), As my fiddler on laptop is listening on 192.168.1.130:8888. Here is my example:

 

Do not rush into a hurry of turing on the enable button before you install another IMPORTANT widget requires Xposed Framework. JustTrustMe, which bypasses the certificate verification!

After activation, restarting, preparing the fiddler settings on the PC. Press Enable button in ProxyDriod to sniff HTTPS traffic.

Fill the fiddler console shell to force Fiddler to resolve the host name in traffics:

prefs set fiddler.network.https.SetCNFromSNI true

A simple explaination is that Fiddler can not handle the right hostname in the CONNECTS request, but get an IP address instead. As a result, certificate verification fails.(https://groups.google.com/forum/#!msg/httpfiddler/hvsDR14j1Lg/P02zBzIYCE4J)

You can validate this process by watching the traffic list in the fiddler:

 

This result, CONNECTS always followed by HTTPS contents indicates the success of your labor~ Enjoy!