wuchangming/spy-debugger
Spy Debugger
spy-debugger is an HTTP proxy debugging tool designed for intercepting and analyzing network traffic from mobile devices, WebViews, and mobile browsers. It functions as a network packet capture tool and a remote browser inspector, allowing users to monitor HTTP and HTTPS requests wirelessly without the need for USB cables.
The project distinguishes itself by using script injection to enable remote debugging. It injects JavaScript into HTTP response bodies, providing the ability to inspect HTML and CSS elements and perform live page content editing directly on the mobile screen. Additionally, it includes a workflow to bypass SSL pinning by selectively filtering WebView traffic from native application traffic.
The tool covers broader capabilities in traffic management and UI inspection. It can route intercepted network traffic to external proxy tools for deep packet inspection and provides configuration settings to manage HTTP caching and request interception for mobile browser compatibility.
Features
- HTTP Proxies - Acts as an HTTP proxy to intercept and analyze network traffic from mobile devices and WebViews.
- HTTP Traffic Analysis - Intercepts and analyzes HTTP and HTTPS network requests from mobile devices to debug API calls.
- Packet Capture Tools - Captures mobile web traffic and routes it to external tools for detailed packet analysis.
- Remote Debugging - Connects to and inspects mobile browser pages and WebViews via a remote network connection.
- Remote Browser Inspectors - Provides a wireless interface to analyze layout and behavior of websites on mobile devices in real time.
- Remote Debugger Connectivity - Establishes wireless network connections to enable remote debugging without physical USB cables.
- Mobile Web Debugging Suites - Troubleshoots and profiles web applications in mobile browsers by injecting debugging scripts.
- WebView DevTools Access - Enables runtime inspection and styling of HTML pages inside mobile WebViews via network-based devtools.
- Mobile Application Debugging - Provides a remote utility for inspecting UI hierarchies and network traffic in mobile WebViews.
- Packet Capture Utilities - Provides utilities to capture and analyze HTTP and HTTPS network traffic from mobile devices and WebViews.
- Traffic Interception - Intercepts network traffic by acting as a middleman between mobile devices and remote servers.
- Response Interception Injections - Injects JavaScript into HTTP response bodies to enable DOM inspection and editing on remote pages.
- Live Front-End Editing - Enables real-time modification of visual elements by making the page body content editable.
- Live UI Editing - Allows real-time modification of visual elements directly on a mobile screen to test design changes.
- SSL Pinning Bypasses - Isolates WebView traffic from native app traffic to capture HTTPS data without triggering SSL pinning blocks.
- Traffic Proxying - Routes intercepted mobile network traffic to external proxy tools for advanced deep packet inspection.
- HTTP Proxy Forwarders - Forwards intercepted HTTP and HTTPS connections to secondary proxy tools for deep packet inspection.
- Certificate Pinning Bypasses - Implements workflows to disable strict certificate validation, allowing the capture of HTTPS traffic.
- WebView Traffic Isolation - Isolates WebView-originated HTTPS traffic from native app traffic to bypass SSL pinning during packet capture.
- Dynamic DOM Manipulation - Provides tools for modifying DOM elements in real-time to adjust visual layouts on mobile pages.
