redirect all traffic...and maybe steal credentials

welcome back to war! So, we want to redirect all traffic...and maybe steal credentials ..."I want to convert the json data to java object automatically.."
class Foo {
private String str;
private Bar bar;
getter/setter
}

class Bar {
private String ss;
getter/setter
}
...which makes change on server side, just create a constructor for Bar, like
public Bar(String ss) {
this.ss = ss
}