ApiCatcher - Capture HTTPS

ApiCatcher is a user-friendly mobile HTTP/HTTPS/WebSocket/WSS packet capture and debugging tool.

ApiCatcher also offers macOS and Windows versions (ApiCatcher Desktop), and the ApiCatcher can sync captured traffic to ApiCatcher Desktop in real time.

[Key Features]

• Traffic Capture: Capture HTTP, HTTPS, WS, and WSS traffic (WS: WebSocket; WSS: WebSocket over TLS).

• Data Manipulation: Copy, export, encrypt, and decrypt Query Params, Headers, and Bodies.

• Host Filtering: Configure blacklists and whitelists to filter captured hosts.

• Request Replay: Modify and resend requests.

• Combo Replay: Schedule and execute multiple requests sequentially based on dependencies, with support for dynamic parameter injection.

• Scheduled Replay: Automate and trigger request replays at set intervals.

• Auto-Generated API Docs: Automatically generate API documentation and export directly to Postman or Apifox.

• Rewrite Rules: Mock responses, redirect requests, modify requests/responses, or drop requests/responses.

• Scripting Engine: Extend capabilities with script plugins to flexibly modify requests and responses on the fly.

• History Export: Batch export captured traffic as HAR files.

• API Scanner: Run rule-based vulnerability/error detection and statistics on captured traffic, with support for custom scanning rules.

• Media Export: Batch export images and videos, with automatic merging for segmented download requests.

• Real-Time Sync: Stream captured HTTP/HTTPS traffic instantly to ApiCatcher Desktop for advanced analysis and debugging. It also supports syncing to Burp Suite, which requires installing the plugin provided by ApiCatcher on Burp Suite.

• DNS mapping/spoofing: Bypass DNS resolution by sending requests for specified domain names to a designated IP address, achieving an effect similar to editing the hosts file on a computer.

• Support decoding request/response bodies encoded with the Protobuf protocol, such as gRPC requests. If a .desc descriptor file is provided, field names can also be decoded.

[Personalization Settings]

• Configurable code highlighting styles with multiple built-in themes, supporting JSON/XML/HTML/JS.

• AI assistant mode available: directly capture and analyze packets through AI dialogue.

[How It Works]

ApiCatcher establishes a local VPN connection on your device to route all network traffic through a local Man-in-the-Middle (MITM) service. As long as the VPN is active, ApiCatcher can capture any HTTP/HTTPS/WS/WSS traffic passing through Wi-Fi or cellular data.

[Data Privacy & Security]

ApiCatcher's root certificate is a self-signed certificate generated entirely on your own device. All captured HTTP/HTTPS/WS/WSS data is stored locally on your device and is never uploaded to any remote servers.