Beautiful open-source tools to debug, test & develop with HTTP. 👨‍🔧 Built by @pimterry 🦣 https://xitter.cf/t.co/8DW87wpAYw 🦋 https://xitter.cf/t.co/E4x3L3UoNM

Barcelona, Spain
Joined April 2018
𝗛𝗧𝗧𝗣 𝗧𝗼𝗼𝗹𝗸𝗶𝘁 – API debugging on steroids • Inspect real HTTP traffic • Debug auth, headers, TLS • Better than Postman for deep issues 🔗 httptoolkit.com
1
1
3
183
The second feature I use the most in @HttpToolkit is exporting a filtered list of requests to a .har file. This way I can use an Android app while intercepting requests, generate the .har and then feed it to an LLM to generate code from its contents.
The only thing I bought this Black Friday was an @HttpToolkit subscription at half price. I don't buy many software subscriptions, but this one is really good. I know mitmproxy can do the work, but it was a good deal for the price, and the UI is much better. The first PRO feature I'm using is the upstream proxy, really handy for apps with location constraints. Happy scraping!
1
7
624
HTTP Toolkit retweeted
Useful tip for Expo and Android developers 🤯 #MITM I just discovered it today and I felt like I needed to share this technique. I'm helping a client of mine to migrate 2 native apps, both developed for iOS and Android, so a total of 4 apps (2 iOS and 2 Android) to a new single app made with @expo . We're still experimenting with what can be done and reused. Mostly for the REST api and authentication. I'm using RTK Query for the communication with the server, because it works even better than tanstack react query in my opinion for an existing REST api. Anyway, I spent way too much time trying to send a POST request, exactly like it seems to be done in kotlin using Retrofit. But for a reason I can't understand, it doesn't work like in the existing android app I have running on my device. I start to feel frustrated and wonder if I could get the data sent by the existing production app on android, to see what is different from what I'm sending. That's how I discovered that, to see https requests content from a production app I needed to root my AVD emulator and then do some MITM. Something I never did before. I found this nice blog post explaining how to root an AVD emulator and install Magisk: 8ksec.io/rooting-an-android-… After I rooted my emulator, I installed the HTTP Toolkit mobile app @HttpToolkit and on my MacBook, and then I targeted my client existing production mobile app using Frida. And that way I could compare super easily the requests content from the one I was sending in my expo, and the UI is super easy to read. For a reason I couldn't understand yet, something that was supposed to be named "recipe" was named "importRecipe" in the body request. It wasn't obvious reading the kotlin code, even @cursor_ai couldn't see it. But finally, problem solved ✅ I think I'm gonna use this tool regularly from now on.
1
1
2
266
¡Enhorabuena a @httptoolkit por obtener el Sello Ayuda Efectiva como empresa de alto impacto! La empresa ha donado al menos un 0,7% de sus ingresos a los programas benéficos más efectivos. 🏅 Página de certificación e impacto: ayudaefectiva.org/empresa/ht…
1
2
273
I had to figure out what http requests a cli was making and remembered buff.ly/4474s4w exists. You run it and in a terminal runs: eval "$(curl -sS localhost:8001/setup)" Now all network gets proxied through http toolkit for easy introspection. *REALLY* useful!
1
5
12
986
HTTP Toolkit retweeted
Today, Sentry and member companies launch @ThePledge, for the good of open source sustainability. Every company benefits from open source, but there exists an imbalance between what we get from OSS and what we give back.#PayTheMaintainers
1
32
12
99
26,175
over a long enough time window, *all* HTTP status codes are retryable. perhaps some future version of the server will support that unsupported operation, or be able to properly parse your malformed JSON!
8
24
1
221
7,210
HTTP Toolkit retweeted
HTTP Toolkit is an open-source tool developed for debugging, testing, and building with HTTP(S) on multiple platforms including Windows, Linux & Mac. ⇨ The features range from: • Intercepting browsers • Backend & scripting languages • Android devices • Electron apps ⇨ It allows inspecting complete headers & body for every request & response. ⇨ Moreover, it allows: • Rewriting of live HTTP requests or responses • Flexible rule configurations to handle requests automatically Find more about @HttpToolkit on Dev Hunt: → devhunt.org/tool/http-toolki…
1
3
436
A new @httptoolkit testimonial that I'm very pleased with indeed! Kind words notably coming from none other than en.wikipedia.org/wiki/Brian_… (justus.anglican.org/reid.htm…)
1
7
495
Shoutout to @pimterry and @HttpToolkit. Incredible convenient to quickly configure a proxy for various programs - including browsers, shells and Android. Also great writeup about the technical details of the android interception changes in Android 14 🙇‍♀️ httptoolkit.com/blog/android…
1
30
216
18,890
Using #Frida on iOS? Want to precisely intercept all HTTPS traffic from a single target app, with one command, with almost all cert pinning disabled automatically? The scripts in github.com/httptoolkit/frida… now include iOS support 🍏🚀
1
6
10
1,022
HTTP Toolkit retweeted
HTTP Toolkit is your one-click solution for intercepting Android traffic. Simplify your security testing with this powerful tool httptoolkit.com/ #BugBounty #CyberSecurity #AndroidSecurity #EthicalHacking
3
67
239
18,145
If you work with APIs and haven’t dug into OpenAPI yet, here’s a full blown introduction to get you started from absolutely zero context. Written by me, for the excellent folks at @HttpToolkit. #API #APIDesign #APIDevelopment @OpenApiSpec httptoolkit.com/blog/introdu… – at North West, England
1
1
6
1,089
taskFailedSuccessfully reddit.com/r/programmerhumor…
40
460
75
4,835
228,494
Replying to @akshitarora0907
@HttpToolkit is first thing I install before even starting to work on any project
1
1
3
199
I've been building some *extremely* exciting new tools with @fridadotre recently. If you like intercepting mobile apps, take a look at github.com/httptoolkit/frida… - HTTPS MitM interception & certificate unpinning for any Android app, with no system configuration or setup whatsoever.
1
15
53
3,877
HTTP Toolkit retweeted
Pro tip: If you want to debug @trpcio remote procedure calls in @reactjs server components, @HttpToolkit is your best friend
1
16
1,472
HTTP Toolkit retweeted
4️⃣ HTTP Toolkit: @HttpToolkit is a must-have for developers and security enthusiasts! 🌐🔒 With its user-friendly interface, it lets you intercept, inspect, and manipulate HTTP(S) traffic effortlessly.
1
1
3
328