ApiCatcher is a user-friendly mobile HTTP/HTTPS/WS/WSS packet capture and debugging tool.
[Key Features]
- Traffic Capture: Capture HTTP, HTTPS, WS, and WSS traffic (WS: WebSocket; WSS: WebSocket over TLS).
- Data Manipulation: Copy, export, encrypt, and decrypt Query Params, Headers, and Bodies.
- Host Filtering: Configure blacklists and whitelists to filter captured hosts.
- Request Replay: Modify and resend requests (WS/WSS replay serves as a debugging tool).
- Chain Replay: Schedule and execute multiple requests sequentially based on dependencies, with support for dynamic parameter injection (HTTP/HTTPS only).
- Scheduled Replay: Automate and trigger request replays at set intervals (HTTP/HTTPS only).
- Auto-Generated API Docs: Automatically generate API documentation and export directly to Postman or Apifox (HTTP/HTTPS only).
- Rewrite Rules: Mock responses, redirect requests, modify requests/responses, or drop requests/responses (HTTP/HTTPS only).
- Scripting Engine: Extend capabilities with script plugins to flexibly modify requests and responses on the fly (HTTP/HTTPS only).
- History Export: Batch export captured traffic as HAR files (HTTP/HTTPS only).
- API Scanner: Run rule-based vulnerability/error detection and statistics on captured traffic, with support for custom scanning rules (HTTP/HTTPS only).
- Media Export: Batch export images and videos, with automatic merging for segmented download requests.
- Real-Time Sync: Stream captured HTTP/HTTPS traffic instantly to ApiCatcher Desktop for advanced analysis and debugging.
[How It Works]
ApiCatcher establishes a local VPN connection on your device to route all network traffic through a local Man-in-the-Middle (MITM) service. As long as the VPN is active, ApiCatcher can capture any HTTP/HTTPS/WS/WSS traffic passing through Wi-Fi or cellular data.
[Data Privacy & Security]
ApiCatcher's root certificate is a self-signed certificate generated entirely on your own device. All captured HTTP/HTTPS/WS/WSS data is stored locally on your device and is never uploaded to any remote servers.
[Key Features]
- Traffic Capture: Capture HTTP, HTTPS, WS, and WSS traffic (WS: WebSocket; WSS: WebSocket over TLS).
- Data Manipulation: Copy, export, encrypt, and decrypt Query Params, Headers, and Bodies.
- Host Filtering: Configure blacklists and whitelists to filter captured hosts.
- Request Replay: Modify and resend requests (WS/WSS replay serves as a debugging tool).
- Chain Replay: Schedule and execute multiple requests sequentially based on dependencies, with support for dynamic parameter injection (HTTP/HTTPS only).
- Scheduled Replay: Automate and trigger request replays at set intervals (HTTP/HTTPS only).
- Auto-Generated API Docs: Automatically generate API documentation and export directly to Postman or Apifox (HTTP/HTTPS only).
- Rewrite Rules: Mock responses, redirect requests, modify requests/responses, or drop requests/responses (HTTP/HTTPS only).
- Scripting Engine: Extend capabilities with script plugins to flexibly modify requests and responses on the fly (HTTP/HTTPS only).
- History Export: Batch export captured traffic as HAR files (HTTP/HTTPS only).
- API Scanner: Run rule-based vulnerability/error detection and statistics on captured traffic, with support for custom scanning rules (HTTP/HTTPS only).
- Media Export: Batch export images and videos, with automatic merging for segmented download requests.
- Real-Time Sync: Stream captured HTTP/HTTPS traffic instantly to ApiCatcher Desktop for advanced analysis and debugging.
[How It Works]
ApiCatcher establishes a local VPN connection on your device to route all network traffic through a local Man-in-the-Middle (MITM) service. As long as the VPN is active, ApiCatcher can capture any HTTP/HTTPS/WS/WSS traffic passing through Wi-Fi or cellular data.
[Data Privacy & Security]
ApiCatcher's root certificate is a self-signed certificate generated entirely on your own device. All captured HTTP/HTTPS/WS/WSS data is stored locally on your device and is never uploaded to any remote servers.
Show More
