ApiCatcher - Capture HTTPS

Nanning Signalling Network Technology Co., Ltd

ApiCatcher is a user-friendly mobile HTTP/HTTPS/WS/WSS packet capture and debugging tool. ApiCatcher also offers macOS and Windows versions (ApiCatcher Desktop), and the ApiCatcher can sync captured traffic to ApiCatcher Desktop in real time. [Key Features] • Traffic Capture: Capture HTTP, HTTPS, WS, and WSS traffic (WS: WebSocket; WSS: WebSocket over TLS). • Data Manipulation: Copy, export, encrypt, and decrypt Query Params, Headers, and Bodies. • Host Filtering: Configure blacklists and whitelists to filter captured hosts. • Request Replay: Modify and resend requests. • Combo Replay: Schedule and execute multiple requests sequentially based on dependencies, with support for dynamic parameter injection. • Scheduled Replay: Automate and trigger request replays at set intervals. • Auto-Generated API Docs: Automatically generate API documentation and export directly to Postman or Apifox. • Rewrite Rules: Mock responses, redirect requests, modify requests/responses, or drop requests/responses. • Scripting Engine: Extend capabilities with script plugins to flexibly modify requests and responses on the fly. • History Export: Batch export captured traffic as HAR files. • API Scanner: Run rule-based vulnerability/error detection and statistics on captured traffic, with support for custom scanning rules. • Media Export: Batch export images and videos, with automatic merging for segmented download requests. • Real-Time Sync: Stream captured HTTP/HTTPS traffic instantly to ApiCatcher Desktop for advanced analysis and debugging. It also supports syncing to Burp Suite, which requires installing the plugin provided by ApiCatcher on Burp Suite. • DNS mapping/spoofing: Bypass DNS resolution by sending requests for specified domain names to a designated IP address, achieving an effect similar to editing the hosts file on a computer. • Support decoding request/response bodies encoded with the Protobuf protocol, such as gRPC requests. If a .desc descriptor file is provided, field names can also be decoded. [Personalization Settings] • Configurable code highlighting styles with multiple built-in themes, supporting JSON/XML/HTML/JS. • AI assistant mode available: directly capture and analyze packets through AI dialogue. [How It Works] ApiCatcher establishes a local VPN connection on your device to route all network traffic through a local Man-in-the-Middle (MITM) service. As long as the VPN is active, ApiCatcher can capture any HTTP/HTTPS/WS/WSS traffic passing through Wi-Fi or cellular data. [Data Privacy & Security] ApiCatcher's root certificate is a self-signed certificate generated entirely on your own device. All captured HTTP/HTTPS/WS/WSS data is stored locally on your device and is never uploaded to any remote servers.