How did you reverse engineer steam?

[Ben]

Hi, i am interested in your work and i am wondering how you reverse engineered the mobile login for steam. Did you used a network interception tool like burp or just looked at the source code? I am trying to reverse engineer another mobile app and I dont know if I set up my proxy interceptor right because i dont see any requests. And the source code isnt helper either. Are there some tricks you could share with me?

[Dr. McKay]

A little bit of both. Mostly I used Charles Proxy to snoop on the traffic, but these days that requires a rooted phone if you're using Android since apps won't trust user-installed root certificates by default.

[Ben]

Thanks, good that i rooted my phone 2 year ago ;D