43 questions
1 vote
0 answers
45 views
Frida on Android: how to locate native TLS verify/pinning path likely Cronet when classic BoringSSL hooks don't fire?
I'm on a rooted emulator Magisk target package is com.catdaddy.cat22. System http tools CA is installed. Java side HTTPS works bypassed TrustManagerImpl.verifyChain but calls to bobcatwweproduction....
1 vote
1 answer
86 views
HTTP Toolkit misses HTTPS request and Frida shows it as pinned
I'm intercepting traffic from an Android app on a rooted BlueStacks emulator (Windows). With HTTP Toolkit in Android Device via ADB mode, most traffic appears, but a specific HTTPS request to ...
1 vote
1 answer
241 views
Run HTTP Toolkit proxy and rewrite requests locally on rooted Android
I'm trying to run HTTP Toolkit's proxy directly on a rooted Android phone to automatically rewrite HTTP responses, without using a second device or external computer. There’s no clear documentation on ...
0 votes
1 answer
42 views
Where are requests in the send tab/mocks stored and in which files?
Note I already know its probably in the AppData folder but what folder/files store it? I haven't looked specifically in any files yet
0 votes
0 answers
33 views
Is it possible to send the same request, multiple times at once?
Like the title says, my question is if it is possible to send an intercepted request multiple times at once with HTTP Toolkit, instead of the one time it was originally going to be sent.
0 votes
0 answers
75 views
Intercepting .NET Application Requests with mitmproxy on Arch Linux - TLS Connection Errors
I'm trying to intercept HTTP/HTTPS requests made by a .NET application on Arch Linux using mitmproxy. While I can intercept some requests, I frequently encounter errors like TLS handshake failed or ...
3 votes
1 answer
326 views
Modifying User-Agent in Electron blocks Requests to a specific Domain
I am building a custom Electron-based browser and modifying the User-Agent dynamically for certain domains. However, after removing Electron/\* from the User-Agent for a specific demo gaming website, ...
1 vote
1 answer
885 views
http-toolkit : Connection aborted even though I'm using the security config
Edit: It seems it's a bug in Flutter. Last answer by @Tim Perry has more details. I ended up using android studio network profiling for my needs. I installed the http toolkit on my machine, and ...
0 votes
1 answer
48 views
docker volume ls shows httptoolkit-injected-data-1.15.0 volume
I was just checking if the volumes for a new Docker Compose file were creating the volumes I needed. While running docker volume ls, I found that I have that volume. I've been looking everywhere to ...
0 votes
2 answers
124 views
How can an Android app receive UI updates without HTTP requests?
I am trying to reverse engineer an API of an app. I have already done everything there is to decrypt traffic using Charles and HTTP Toolkit certificates on a rooted Android emulator. However, both ...
0 votes
1 answer
269 views
How to fully remove http-toolkit on windows
As the question states. I did full uninstalls (including with Revo), deleted everything I could find in %appdata% directory, etc. After re-install, all my rules were still there. I manually deleted ...
1 vote
1 answer
2k views
Http Toolkit - The upstream server has an untrusted HTTPS certificate
I'm using http toolkit on Linux , When I'm trying to intercept the traffic i get the following message: The upstream server has an untrusted HTTPS certificate, so HTTP Toolkit did not forward the ...
0 votes
1 answer
152 views
local docker interception, HTTP, doesn't intercept or CORS
I have a docker API server running locally on port 9000, and a node client fetching this API using POST. When HTTP-Toolkit is set to intercept, it successfully creates another container and restart ...
1 vote
0 answers
388 views
Capture https traffic of android application with certificate pinning
I need to capture https traffic of Instagram Lite app (com.instagram.lite). So I tried to use http-toolkit. I have rooted android device and used adb method, http-toolkit app on my phone tells ...
0 votes
0 answers
2k views
HTTP Toolkit interception with Android emulator interfering: app not working when enabled
This issue is like this one from more than one year ago. I am intercepting HTTP traffic from an Android app using HTTP Toolkit via the Android Emulator. Everything was working a few weeks ago, but now,...