ApiCatcher - Capture HTTPS

Nanning Signalling Network Technology Co., Ltd

In-app purchases

About this app

ApiCatcher is a user-friendly mobile HTTP/HTTPS/WebSocket/WSS packet capture and debugging tool.
ApiCatcher also offers macOS and Windows versions (ApiCatcher Desktop), and the ApiCatcher can sync captured traffic to ApiCatcher Desktop in real time.

[Key Features]
• Traffic Capture: Capture HTTP, HTTPS, WS, and WSS traffic (WS: WebSocket; WSS: WebSocket over TLS).
• Data Manipulation: Copy, export, encrypt, and decrypt Query Params, Headers, and Bodies.
• Host Filtering: Configure blacklists and whitelists to filter captured hosts.
• Request Replay: Modify and resend requests.
• Combo Replay: Schedule and execute multiple requests sequentially based on dependencies, with support for dynamic parameter injection.
• Scheduled Replay: Automate and trigger request replays at set intervals.
• Auto-Generated API Docs: Automatically generate API documentation and export directly to Postman or Apifox.
• Rewrite Rules: Mock responses, redirect requests, modify requests/responses, or drop requests/responses.
• Scripting Engine: Extend capabilities with script plugins to flexibly modify requests and responses on the fly.
• History Export: Batch export captured traffic as HAR files.
• API Scanner: Run rule-based vulnerability/error detection and statistics on captured traffic, with support for custom scanning rules.
• Media Export: Batch export images and videos, with automatic merging for segmented download requests.
• Real-Time Sync: Stream captured HTTP/HTTPS traffic instantly to ApiCatcher Desktop for advanced analysis and debugging. It also supports syncing to Burp Suite, which requires installing the plugin provided by ApiCatcher on Burp Suite.
• DNS mapping/spoofing: Bypass DNS resolution by sending requests for specified domain names to a designated IP address, achieving an effect similar to editing the hosts file on a computer.
• Support decoding request/response bodies encoded with the Protobuf protocol, such as gRPC requests. If a .desc descriptor file is provided, field names can also be decoded.

[Personalization Settings]
• Configurable code highlighting styles with multiple built-in themes, supporting JSON/XML/HTML/JS.
• AI assistant mode available: directly capture and analyze packets through AI dialogue.

[How It Works]
ApiCatcher establishes a local VPN connection on your device to route all network traffic through a local Man-in-the-Middle (MITM) service. As long as the VPN is active, ApiCatcher can capture any HTTP/HTTPS/WS/WSS traffic passing through Wi-Fi or cellular data.

[Data Privacy & Security]
ApiCatcher's root certificate is a self-signed certificate generated entirely on your own device. All captured HTTP/HTTPS/WS/WSS data is stored locally on your device and is never uploaded to any remote servers.

What’s new

Upgrade Subscription Status Synchronization API