Android Pen Testing
<p>I have been pen testing a random android app that uses POST method to send data to a remote server using HTTPS.</p>

<p>I have set up a proxy and am able to intercept the traffic, however the POST method appears to be encrypted and "url-encoded" . </p>

<p>What i want to know is .. is there a common encryption standard followed in such a scenario something like the Base64 or would it be so that the application uses a signature encryption mechanism internally which encrypts the data before it is sent through the POST method.</p>

<p>Any guidance would be really appreciated. Thanks in advance !</p>
