31–40 of 87 posts
I'm interested in this for its potential reverse engineering apps on Android. I've had some success with `mitmproxy` but I'm wondering what other HN-ers use for this purpose.
I've been using the Browser extension for years and it is incredibly helpful. We use it to debug scripts on customer websites by making them resolve to our local instance so that we can test fixes quickly. I would recommend some sort of graphic on the homepage to explain what Requestly does though, as you mention it can be confused with Postman when it's entirely different. Maybe an animated flowchart type graphic sh…
So glad to hear this. This is really good feedback. Noted this down. We will soon make this live. We already have an animated gif at https://requestly.io/feature/redirect-url/ Do you mean to say we should have an animated flowchart for the hero image on the page?
Earlier quoted context omitted.
So glad to hear this. This is really good feedback. Noted this down. We will soon make this live. We already have an animated gif at https://requestly.io/feature/redirect-url/ Do you mean to say we should have an animated flowchart for the hero image on the page?
On iOS, the header doesn’t stick at the top of the page.
Earlier quoted context omitted.
@jwong_ We are about to do a public release of Android SDK. Here are a couple of things which we did for internal purpose only (& WIP) but still sharing to give you an idea https://youtu.be/gs02m2pZJlQ (Demo Video) https://requestly.io/android-interceptor/ (WIP - Landing Page) I'd be really happy to discuss further on this approach. I believe this is going to make things really easy for developers.
Thanks for the links! Curious on the body -- you showed some JSON requests, but do image resources or other larger responses also get proxied and viewable from browser? For example, sometimes I like to view large minified JS blobs or images. Would that be viewable in the browser? Also, what do the production vs debugging logs look like? Do you just run a special debugging build or is that a flag triggered within pref…
We provide the capability that you can disable the SDK in production builds and enable only in the debug builds. And yes we are going to provide the capability using which you can download or share the APIs and events sessions with your support staff.
I'm interested in this for its potential reverse engineering apps on Android. I've had some success with `mitmproxy` but I'm wondering what other HN-ers use for this purpose.
I recently used Fiddler along with Frida[1] to deal with cert pinning in the app I was looking into. [1] https://github.com/httptoolkit/frida-android-unpinning
I was looking for something like this. Tried mitmproxy but it was useless against cert pinning. So I went with decompiling the app to extract the auth keys and urls for the internal API it was using.
How does it compare with https://httptoolkit.tech/