Search Results for "mobile security"

HTTP Toolkit Desktop is an open-source application that packages HTTP Toolkit into a standalone debugging environment for Windows, macOS, and Linux. It uses Electron to combine the application's graphical interface with its underlying Node.js server. The software enables developers to intercept, inspect, and modify HTTP and HTTPS traffic from browsers, applications, and development environments. Users can analyze requests and responses, examine headers, and inspect structured message bodies....

Inspecting a mobile app's HTTPS traffic using a proxy is probably the easiest way to figure out how it works. However, with the Network Security Configuration introduced in Android 7 and app developers trying to prevent MITM attacks using certificate pinning, getting an app to work with an HTTPS proxy has become quite tedious.

If you are a developer, you can use Tamper Dev to debug your websites, or if you are a pentester, you can use it to search for security vulnerabilities by inspecting the HTTP traffic from your browser. Unlike most other extensions, Tamper Dev allows you to intercept, inspect and modify the requests before they are sent to the server. This extension provides functionality similar to Burp Proxy, MITM Proxy, OWASP ZAP, Tamper Data, and Postman Proxy, but without the need of additional software,...