Live data from Hacker News

Launch HN: Requestly (YC W22) – Network debugging proxy for web and mobile

news.ycombinator.com

81–87 of 87 posts

Re: Launch HN: Requestly (YC W22) – Network debugging proxy for web and mobile

#82
post #50

There's a site I use that checks for membership only on the client side and I use requestly to spoof premium status. Just had to write a simple script like this to modify the response body of the request that gets membership status: function modifyResponse(args) { const {method, url, response, responseType, requestHeaders, requestData} = args; const responseDataParsed = JSON.parse(response); responseDataParsed.result…

This is clever. How was the experience with Modify API Response? Were you able to figure out everything on your own or Was there a learning curve?

I wrote it over a year ago so I don't remember exactly but I think there was a template when you went to make a new script that made it easy. Had to google some things but I don't think it took me more than 15 minutes.

Re: Launch HN: Requestly (YC W22) – Network debugging proxy for web and mobile

#84

Earlier quoted context omitted.

I've been building a list of apps and libraries in this space. In no particular order: https://requestly.io/ https://portswigger.net/burp https://dutzi.github.io/tamper/ https://anyproxy.io/en/ https://wproxy.org/whistle/ https://www.telerik.com/fiddler https://github.com/alibaba/lightproxy https://httptoolkit.tech/ https://mitmproxy.org/ https://wiki.squid-cache.org/Features/SslPeekAndSplice https://www.charlesproxy…

great collection. You can also create a Github awesome repo collection like awesome-requests-proxy-tools

Second that. Would be most useful, especially if maintained. I myself am still on fiddler

UPDATE: did that myself, but wish someone takes over. I only check for new and better stuff once in 3 years. The community deserves someone better.

https://github.com/michaelkariv/awesome-requests-proxy-list

Re: Launch HN: Requestly (YC W22) – Network debugging proxy for web and mobile

#85

I'm interested in this for its potential reverse engineering apps on Android. I've had some success with `mitmproxy` but I'm wondering what other HN-ers use for this purpose.

Here's my setup (for private projects, work stuff is under NDA):

- Android device running Android 10 (generally using older versions is better) - Magisk for root + Trust User Certificates module - mitmproxy (sometimes using mitmweb) - ProxyDroid to connect to mitmproxy - Frida with a one of a handful open source SSL pinning bypass scripts (and a custom one at work)

When network requests aren't enough, I reach for JADX-GUI for decompilation and Frida (REPL and custom scripts) for extracting data at runtime (taking the necessary "cleanroom" precautions for commercial projects).

Re: Launch HN: Requestly (YC W22) – Network debugging proxy for web and mobile

#86
I was quite impressed when I needed to modify some requests on the fly and this was the only browser extension that let me do more than just add/remove headers.

Actually using it, however, I was completely lost. The way groups work was completely unintuitive and it took me way too long to figure out how to even enable a rule. I ended up writing an ad-hoc extension because it was easier than figuring out a whole new tool.

Still, it looks like a really powerful tool and a lot of people on my team swear by it, so congrats!

Post reply on HN