
Beautiful open-source tools to debug, test & develop with HTTP. 👨🔧 Built by @pimterry 🦣 https://xitter.cf/t.co/8DW87wpAYw 🦋 https://xitter.cf/t.co/E4x3L3UoNM
Barcelona, Spain
Joined April 2018
- Tweets755
- Following347
- Followers2.6K
- Likes291
HTTP Toolkit retweeted
𝗛𝗧𝗧𝗣 𝗧𝗼𝗼𝗹𝗸𝗶𝘁 – API debugging on steroids
• Inspect real HTTP traffic
• Debug auth, headers, TLS
• Better than Postman for deep issues
🔗 httptoolkit.com
HTTP Toolkit retweeted
The second feature I use the most in @HttpToolkit is exporting a filtered list of requests to a .har file.
This way I can use an Android app while intercepting requests, generate the .har and then feed it to an LLM to generate code from its contents.
The only thing I bought this Black Friday was an @HttpToolkit subscription at half price.
I don't buy many software subscriptions, but this one is really good. I know mitmproxy can do the work, but it was a good deal for the price, and the UI is much better.
The first PRO feature I'm using is the upstream proxy, really handy for apps with location constraints.
Happy scraping!
HTTP Toolkit retweeted
Useful tip for Expo and Android developers 🤯 #MITM
I just discovered it today and I felt like I needed to share this technique.
I'm helping a client of mine to migrate 2 native apps, both developed for iOS and Android, so a total of 4 apps (2 iOS and 2 Android) to a new single app made with @expo . We're still experimenting with what can be done and reused. Mostly for the REST api and authentication.
I'm using RTK Query for the communication with the server, because it works even better than tanstack react query in my opinion for an existing REST api.
Anyway, I spent way too much time trying to send a POST request, exactly like it seems to be done in kotlin using Retrofit.
But for a reason I can't understand, it doesn't work like in the existing android app I have running on my device.
I start to feel frustrated and wonder if I could get the data sent by the existing production app on android, to see what is different from what I'm sending.
That's how I discovered that, to see https requests content from a production app I needed to root my AVD emulator and then do some MITM. Something I never did before.
I found this nice blog post explaining how to root an AVD emulator and install Magisk:
8ksec.io/rooting-an-android-…
After I rooted my emulator, I installed the HTTP Toolkit mobile app @HttpToolkit and on my MacBook, and then I targeted my client existing production mobile app using Frida.
And that way I could compare super easily the requests content from the one I was sending in my expo, and the UI is super easy to read.
For a reason I couldn't understand yet, something that was supposed to be named "recipe" was named "importRecipe" in the body request. It wasn't obvious reading the kotlin code, even @cursor_ai couldn't see it.
But finally, problem solved ✅
I think I'm gonna use this tool regularly from now on.
HTTP Toolkit retweeted
¡Enhorabuena a @httptoolkit por obtener el Sello Ayuda Efectiva como empresa de alto impacto!
La empresa ha donado al menos un 0,7% de sus ingresos a los programas benéficos más efectivos.
🏅 Página de certificación e impacto:
ayudaefectiva.org/empresa/ht…
HTTP Toolkit retweeted
I had to figure out what http requests a cli was making and remembered buff.ly/4474s4w exists.
You run it and in a terminal runs: eval "$(curl -sS localhost:8001/setup)"
Now all network gets proxied through http toolkit for easy introspection.
*REALLY* useful!
HTTP Toolkit retweeted
Today, Sentry and member companies launch @ThePledge, for the good of open source sustainability. Every company benefits from open source, but there exists an imbalance between what we get from OSS and what we give back.#PayTheMaintainers
HTTP Toolkit retweeted
over a long enough time window, *all* HTTP status codes are retryable. perhaps some future version of the server will support that unsupported operation, or be able to properly parse your malformed JSON!
HTTP Toolkit retweeted
HTTP Toolkit is an open-source tool developed for debugging, testing, and building with HTTP(S) on multiple platforms including Windows, Linux & Mac.
⇨ The features range from:
• Intercepting browsers
• Backend & scripting languages
• Android devices
• Electron apps
⇨ It allows inspecting complete headers & body for every request & response.
⇨ Moreover, it allows:
• Rewriting of live HTTP requests or responses
• Flexible rule configurations to handle requests automatically
Find more about @HttpToolkit on Dev Hunt:
→ devhunt.org/tool/http-toolki…
HTTP Toolkit retweeted
A new @httptoolkit testimonial that I'm very pleased with indeed!
Kind words notably coming from none other than en.wikipedia.org/wiki/Brian_… (justus.anglican.org/reid.htm…)

ALT An email from Brian Reid: HTTP Toolkit is a strikingly high-quality system that is crucial to my ability to debug and repair complex website problems. As time passes, there are more old sites, undocumented sites, sites twisted beyond comprehension, and wordpress sites:-). I cannot imagine tackling any future http-related problem without it.
HTTP Toolkit retweeted
Shoutout to @pimterry and @HttpToolkit. Incredible convenient to quickly configure a proxy for various programs - including browsers, shells and Android.
Also great writeup about the technical details of the android interception changes in Android 14 🙇♀️
httptoolkit.com/blog/android…
HTTP Toolkit retweeted
Using #Frida on iOS?
Want to precisely intercept all HTTPS traffic from a single target app, with one command, with almost all cert pinning disabled automatically?
The scripts in github.com/httptoolkit/frida… now include iOS support 🍏🚀
HTTP Toolkit retweeted
HTTP Toolkit is your one-click solution for intercepting Android traffic. Simplify your security testing with this powerful tool
httptoolkit.com/
#BugBounty #CyberSecurity #AndroidSecurity #EthicalHacking
HTTP Toolkit retweeted
If you work with APIs and haven’t dug into OpenAPI yet, here’s a full blown introduction to get you started from absolutely zero context. Written by me, for the excellent folks at @HttpToolkit.
#API #APIDesign #APIDevelopment @OpenApiSpec
httptoolkit.com/blog/introdu… – at North West, England
HTTP Toolkit retweeted
taskFailedSuccessfully reddit.com/r/programmerhumor…
HTTP Toolkit retweeted
Replying to @akshitarora0907
@HttpToolkit is first thing I install before even starting to work on any project
HTTP Toolkit retweeted
I've been building some *extremely* exciting new tools with @fridadotre recently.
If you like intercepting mobile apps, take a look at github.com/httptoolkit/frida… - HTTPS MitM interception & certificate unpinning for any Android app, with no system configuration or setup whatsoever.
HTTP Toolkit retweeted
Android 14 is going to create some big problems for devs, testers, reverse engineers, researchers, and anybody else who likes being able to debug their HTTP: httptoolkit.com/blog/android…
HTTP Toolkit retweeted
Pro tip: If you want to debug @trpcio remote procedure calls in @reactjs server components, @HttpToolkit is your best friend
HTTP Toolkit retweeted
4️⃣ HTTP Toolkit: @HttpToolkit is a must-have for developers and security enthusiasts! 🌐🔒 With its user-friendly interface, it lets you intercept, inspect, and manipulate HTTP(S) traffic effortlessly.
HTTP Toolkit retweeted
New revision 12 of Cookies: HTTP State Management Mechanism published. datatracker.ietf.org/doc/dra…























