ProxymanApp/Proxyman

Features

• HTTPS Decryption Proxies - Intercepts and decrypts HTTPS traffic as a man-in-the-middle proxy.
• Traffic Manipulation Tools - Core debugging proxy that intercepts, modifies, and analyzes live network traffic in real time.
• HTTP Debugging Extensions - Captures, inspects, and modifies HTTP, HTTPS, and WebSocket traffic for debugging applications.
• iOS Device Builds - Configures iOS devices to route traffic through a local proxy for inspection and debugging.
• iOS Traffic Inspections - Captures all HTTP/HTTPS traffic from iOS devices via VPN and MITM proxy for inspection.
• iOS Proxy Configuration Workarounds - Provides iOS proxy configuration with workarounds for Apple bugs, essential for mobile debugging.
• Cross-Platform Network Debuggers - Intercepts and inspects network traffic from iOS, Android, Flutter, and React Native apps.
• Remote URL Mappings - Redirects HTTP requests to different remote endpoints for testing and debugging.
• Local Traffic Debugging Tools - Applies debugging actions such as mapping local files, setting breakpoints, blocking requests, and disabling caching.
• Android Device Traffic Captures - Configures Android devices to route HTTP/HTTPS traffic through a local proxy for inspection.
• Cross-Platform Remote Device Captures - Routes HTTP and HTTPS traffic from iOS and Android devices through the proxy for inspection.
• Traffic Interception Tools - Installs a VPN and trusted certificate on Android emulators to intercept HTTPS traffic without code changes.
• Android App Traffic Captures - Routes Android app traffic through a proxy for inspection and debugging.
• Code-Free Traffic Captures - Intercepts HTTPS traffic from Android emulator apps without requiring any code changes.
• Proxy Configuration - Overrides HTTP proxy settings on Android emulators with a single click for traffic routing.
• Apple Ecosystem Traffic Capture - Captures traffic from iOS devices by configuring proxy settings with workarounds for OS bugs.
• Device Trust Configuration - Installs and trusts custom CA certificates in mobile device settings for HTTPS decryption.
• iOS Simulator Traffic Capture - Captures HTTPS traffic from iOS Simulators by installing and trusting debugging certificates.
• Proxy and Certificate Automation - Uses a native iOS framework to automatically configure HTTP proxy and install certificates without manual steps.
• Mobile Application Debugging - Captures and inspects HTTP/HTTPS traffic from iOS and Android simulators and devices for debugging.
• Domain Allow and Block Lists - Restricts captured traffic to specified domains or endpoints to reduce noise.
• DNS Routing Overrides - Maps domains to different IP addresses at the DNS level for traffic redirection.
• Status Code Response Bodies - Edits the headers, status code, and body of a matched response, with automatic Content-Type detection when the body changes.
• Captured Request Replayers - Modifies and replays captured HTTP requests to test server responses.
• HTTP Traffic Inspection - Lists captured HTTP and HTTPS flows with filters and full details including headers and body.
• Local File Mappings - Replaces HTTP responses with local file content, including custom status codes, headers, and body.
• Response Body Previews - Automatically formats and beautifies HTTP body content based on Content-Type.
• Response Interceptors - Intercepts incoming HTTP responses to modify status codes, headers, and body before delivery.
• Response Body Modifiers - Modifies the headers, status code, and body of a response before it reaches the client.
• API Response Simulators - Simulates server responses and maps local files to test APIs without a live backend.
• Traffic Captures - Captures HTTP/HTTPS traffic from Python, Ruby, NodeJS, and Golang scripts automatically.
• Cross-Platform - Captures HTTP, HTTPS, and WebSocket traffic from browsers, iOS, and Android devices for inspection.
• System Proxy Controllers - Activates or deactivates system-wide proxy settings to route all traffic through the debugging tool.
• Multi-Criteria HTTP Filters - Filters HTTP flows with AND/OR combinations across multiple request and response fields.
• HTTP Request Interceptors - Intercepts outgoing HTTP requests to modify URL, headers, body, and method before forwarding.
• Breakpoint-Based Request Interceptions - Pauses HTTP traffic at breakpoints for manual or scripted modification before forwarding.
• Script-Based Request Modifications - Changes any part of an HTTP request by running custom JavaScript before the request is sent.
• Android Emulator HTTPS Decryptions - Overrides proxy settings and installs certificates on Android emulators for HTTPS decryption.
• iOS HTTPS Decryptions - Decrypts HTTPS traffic on iOS devices using a locally generated self-signed root certificate.
• Traffic Manipulation Scripts - Applies custom scripts to automatically modify request or response headers, bodies, or URLs during capture.
• Android Certificate Installations - Downloads and installs proxy CA certificates on Android devices for HTTPS decryption.
• Device CA Certificate Installations - Installs and trusts proxy CA certificates on devices and simulators for HTTPS decryption.
• Client Certificate Imports - Imports client certificates in PEM, DER, or PKCS12 formats for mutual TLS authentication.
• SSL/TLS Certificate Management - Installs and manages root certificates to decrypt HTTPS traffic from apps, devices, and simulators.
• Proxy Root Certificate Imports - Imports user-provided root certificates in PKCS12 format to replace the default proxy root.
• Proxy Server Certificate Imports - Imports server certificates to intercept HTTPS traffic from clients using SSL pinning.
• Traffic Redirection Rules - Redirects traffic via mapping rules and DNS overrides for debugging and testing.
• On-the-Fly - Intercepts HTTP requests and lets users edit the URL, method, headers, and body before forwarding them to the server.
• HTTP Request Editors - Pauses outgoing HTTP requests for manual modification of URL, headers, body, and method before forwarding.
• HTTP Response Editors - Pauses incoming HTTP responses for manual modification of status code, headers, and body before delivery.
• Decryption Target Configurations - Specifies which apps, domains, or wildcard patterns should have their traffic decrypted.
• HTTP Traffic Filters - Provides a modern UI with multiple filters and customizable columns to search and analyze captured traffic.
• Cross-Platform Certificate Installers - Automates root certificate installation across multiple platforms for HTTPS decryption.
• macOS Root Certificate Installations - Installs and trusts proxy CA certificates on macOS devices for HTTPS decryption.
• System Keychain Installers - Installs and trusts the Proxyman CA certificate in the system keychain with root privileges for HTTPS decryption.
• Simulator Certificate Management - Automatically installs root certificates on iOS simulators to enable HTTPS traffic decryption.
• Proxy Certificate Replacements - Replaces default proxy certificates with custom p12 certificates for specific hosts and ports.
• SSL Certificate Validation Overrides - Disables TLS certificate verification to allow proxy decryption of HTTPS traffic using self-signed certificates.
• SSL Proxying Configurations - Provides per-domain control over HTTPS decryption, a core feature of the debugging proxy.
• Self-Signed Certificate Generators - Generates self-signed root certificates compliant with Apple security requirements for HTTPS interception.
• Traffic Filtering - Applies a list of domains or apps whose traffic is either intercepted or ignored for fine-grained control.
• Cross-Platform WebSocket Captures - Captures WebSocket and Secure WebSocket messages from browsers, mobile devices, and local applications.
• Scripting Engines - Runs JavaScript addons and npm packages to modify and automate HTTP traffic.
• Request Pattern Matching - Matches HTTP requests against wildcard or regex patterns to trigger debugging tools.
• Traffic Interception and Modification - Automates request and response modifications using JavaScript scripts for advanced debugging workflows.
• Response Mocking - Replaces the body of matching HTTP responses with content from a local file to simulate server behavior without modifying the backend.
• API Mocking - Simulates server responses and redirects requests for API testing without a live backend.
• Proxy-Based Traffic Captures - Configures Android devices to route traffic through a proxy by installing root certificates and setting Wi-Fi proxy.
• Proxy and Certificate Configurations - Guides through installing root certificates and configuring HTTP proxies on mobile devices for HTTPS capture.
• iOS Response Interceptors - Intercepts and modifies HTTP responses on iOS devices, a core debugging capability.
• Mobile Header Modifications - Adds, updates, or deletes HTTP headers on requests or responses to control how data is sent and received.
• Script-Based Response Transformations - Alters HTTP response status, headers, or body using JavaScript, enabling on-the-fly transformation of server replies.
• iOS Request Interceptors - Intercepts and modifies outgoing HTTP requests from iOS apps before they reach the server.
• Request Body Replacements - Reads, replaces, or transforms the body content of HTTP requests or responses.
• Request Redirections - Alters the scheme, host, port, or path of a request to redirect it to a different server.
• Traffic Recorders - Starts or stops recording all network traffic passing through the proxy.
• Cross-Device iOS Traffic Review - Transfers iOS traffic logs to macOS for centralized review, a key cross-device debugging feature.
• iOS WebSocket Traffic Capture - Captures WebSocket connections from iOS devices alongside HTTP traffic for debugging.
• Library-Based iOS Traffic Capture - Captures iOS traffic via library integration without proxy setup, a distinctive mobile debugging approach.
• Proxy-Free iOS Traffic Capture - Captures iOS traffic without proxy configuration, a distinctive capability for mobile debugging.
• React Native Traffic Capture - Captures traffic from React Native apps on iOS, a key mobile debugging capability.
• Standalone Captures - Captures HTTPS traffic directly from iOS devices without requiring a MacBook.
• GraphQL Traffic Inspectors - Applies debugging tools like Breakpoint, Map Local, and Map Remote to specific GraphQL queries by matching their Query Name.
• Sensitive Data Redaction - Automatically redacts cookie and Authorization headers from captures before uploading to a workspace.
• Predefined Response Mappings - Maps URLs to predefined responses with custom status codes, headers, and body for testing.
• Debugging Session Sharing - Shares and annotates captured traffic logs with role-based access control.
• HTTP Request Blocklists - Toggles a filter that blocks specified network requests during debugging.
• Role-Based Log Sharings - Shares logs with role-based access control: private, team-wide, specific users, or public.
• HTTP Message Editors - Allows modification of the raw text of an HTTP request or response for precise control over the data.
• Network Log Sharing Platforms - Provides a workspace for sharing captured network logs with role-based access control.
• Request CSV Exports - Exports captured requests and sessions as HAR, CSV, or Postman files for sharing.
• Traffic Log Sharing - Shares captured logs or HAR files with team members using role-based access control.
• OpenAPI-to-API-Doc Converters - Converts captured HTTP traffic into OpenAPI YAML or HTML documentation.
• Multidimensional Filter Combinations - Applies multiple filter criteria simultaneously using AND/OR operators to narrow down HTTP traffic.
• Network Request Allowlists - Toggles a filter that permits only specified network requests for debugging.
• Proxy Scripting Addons - Lets users write JavaScript addons that add new proxy functionality and share them with colleagues.
• Network Breakpoint Scriptings - Uses JavaScript to programmatically inspect and modify request or response data at breakpoints.
• Code Snippet Generators - Produces ready-to-use code snippets from captured HTTP requests for various languages.
• Command Palettes - Quickly finds and opens any debugging tool or action by typing its name in a global command palette.
• Proxy Rule Migrators - Loads tool configurations such as SSL proxying and map local/remote rules from Proxyman or Charles Proxy files.
• cURL Command Export - Exports captured HTTP requests as executable cURL commands for terminal reuse.
• cURL Importers - Parses pasted cURL commands into structured HTTP requests for modification.
• Proxy Traffic Captures - Configures Firefox to route all traffic through the proxy with one click, installing and trusting the certificate.
• CLI Tool Traffic Captures - Captures HTTP traffic from CLI tools and backend scripts by opening a pre-configured terminal session.
• Local App Traffic Captures - Configures system proxy settings to route all local HTTP and HTTPS traffic through the debugging proxy.
• HTTP Request Construction - Builds and sends custom HTTP requests with full control over headers and body.
• Traffic Capture Session Management - Clears all captured requests, domains, and clients to start a fresh session without restarting the application.
• Contextual Traffic Filters - Filters captured traffic by selecting specific header, query, or form values from requests or responses.
• WatchOS Traffic Captures - Provides dedicated traffic capture for physical watchOS devices via proxy and certificate setup.
• Traffic Capture Configurations - Installs a VPN app on Android emulators and overrides proxy settings to capture HTTPS traffic from Flutter apps.
• Traffic Interception Tools - Intercepts HTTPS traffic from Flutter applications on Android emulators without requiring any code changes.
• SSL Pinning Bypasses - Temporarily disables SSL pinning in applications to allow proxy interception of encrypted traffic.
• SSL Pinning Detections - Detects SSL pinning in apps and advises disabling it to allow traffic inspection.
• Domain Traffic Filters - Restricts captured traffic to only specified domains, bypassing all other requests to reduce noise.
• Entity Wildcard Matching - Defines URL matching rules using wildcard or regex patterns for request redirection.
• Domain Traffic Blockers - Blocks or hides HTTP requests matching specified domains to reduce noise during debugging.
• Traffic Captures - Captures HTTP/HTTPS traffic from Ruby scripts and servers with automatic proxy configuration.
• Application-Specific - Captures HTTP/HTTPS traffic from any Electron application without modifying source code using one-click setup.
• Language-Specific - Captures HTTP/HTTPS traffic from Golang applications by automatically configuring proxy and certificate trust.
• Proxy-Compatible Clients - Configures an HTTP client to send all requests through a local proxy server for inspection and debugging.
• HTTP Traffic Comparators - Compares two HTTP transactions side-by-side to identify differences.
• Directory Mappings - Serves HTTP requests from local directories with automatic fallback to the remote server.
• GraphQL - Replaces GraphQL response bodies with local JSON files by matching the query name.
• Local or Remote Mappings - Redirects requests to local files or remote servers for testing without modifying client code.
• Request Matching Rule Definitions - Defines interception rules based on URL, method, and subpath criteria for traffic manipulation.
• JSON Body Modifiers - Reads, modifies, and sets JSON bodies in requests and responses to alter payload content.
• Backend Script - Captures HTTP traffic from backend scripts and CLI tools across multiple language runtimes.
• Environment Variable Proxy Configurations - Sets environment variables so scripts send traffic through the proxy without per-library configuration.
• Language Runtime - Captures HTTP traffic from Node.js, Python, Ruby, and Go clients without manual proxy configuration.
• Formatted Payload Inspections - Displays payloads with inline formatting for JSON, Base64, and JWT tokens.
• Payload Decoders - Parses and displays Protobuf, MessagePack, GraphQL, and JWT payloads inline.
• WebSocket - Decodes WebSocket message content in multiple formats including JSON and Protobuf.
• Proxy Bypass Lists - Excludes selected domains from being routed through the proxy server to reduce noise and avoid SSL pinning errors.
• Custom Header Injections - Adds new headers with specified values to HTTP requests or responses during debugging.
• Proxy Managers - Configures and retrieves upstream proxy settings for different protocol kinds.
• SOCKS5 Traffic Routings - Routes network traffic through a SOCKS5 proxy to inspect and debug HTTPS and WebSocket connections.
• Reverse Proxy Configurations - Creates and lists reverse proxy entries for routing localhost or custom local port traffic.
• Request Abort Signals - Closes a request or response connection immediately, similar to a block list tool.
• Dynamic Header-Based Decoding - Dynamically configures Protobuf decoding from Content-Type headers for traffic inspection.
• External Proxy Forwarding - Forwards all captured traffic to a company's central HTTP, HTTPS, SOCKS, or PAC proxy server.
• SOCKS Proxy Debugging Tools - Captures and inspects HTTP, HTTPS, and WebSocket traffic through a SOCKS5 proxy with debugging tools.
• Regex-Based Request Modifications - Matches request URLs with wildcard or regex patterns to define which requests to redirect.
• Breakpoint Execution Controls - Controls paused traffic at breakpoints by resuming with edits, forwarding unchanged, or canceling.
• Breakpoint Rule Definitions - Defines configurable rules for which HTTP traffic to intercept during debugging.
• GraphQL Request Interceptions - Stops GraphQL requests based on their query name for content modification.
• Language-Specific Decryptions - Decrypts HTTPS traffic from Ruby applications by installing and trusting self-signed certificates.
• Rooted Android Decryptions - Installs CA certificates into system trust stores on rooted Android devices for HTTPS decryption.
• Manual Proxy Configurators - Configures third-party network libraries like Axios, cURL, and Alamofire to send traffic through a specified proxy.
• Reverse Proxy Traffic Inspections - Applies breakpoints, local file mapping, and scripting to traffic routed through a reverse proxy for detailed analysis.
• Third-Party Library Proxy Configurations - Manually sets HTTP proxy host and port in network libraries like Axios, cURL, and Alamofire for debugging.
• WebSocket Message Interception - Views real-time WebSocket frames alongside HTTP traffic in a unified debugging interface.
• Runtime Decoding Rules - Configures Protobuf decoding rules per request or response for traffic inspection.
• WebSocket Frame Decoders - Decodes binary WebSocket frames as Protobuf messages with separate client/server rules.
• Certificate Installation Tools - Installs and trusts certificates on iOS simulators to enable HTTPS capture from Flutter apps.
• Data Transformation Libraries - Ships bundled JavaScript libraries for Base64 encoding, hashing, encryption, and text formatting.
• HTTP Request Code Generators - Generates HTTP request source code in multiple languages from captured traffic.
• Scripted Preview Tabs - Uses scripting to decode, transform, or display arbitrary body data in a user-defined preview tab.
• Per-Request Descriptor Rules - Defines per-request Protobuf descriptor rules for parsing binary data.
• Manual Certificate Installations - Generates and manually installs proxy CA certificates into the system keychain for HTTPS interception.
• Cryptographic Operations - Encrypts and decrypts data with symmetric ciphers like DES, AES, and Rabbit via a bundled library.
• SSL Certificate Setup Verifications - Tests HTTPS interception by verifying decrypted responses from a known domain.
• HTTP Traffic Comparators - Performs side-by-side analysis of HTTP requests and responses to identify discrepancies.
• Application-Level Traffic Blocking - Blocks all network traffic from a selected macOS application for isolation.
• Multi-Format Certificate Imports - Accepts private keys and certificates in PEM, DER, or PKCS12 formats with automatic format detection.
• HTTP Session Save and Restore - Saves all captured HTTP flows into a file for later review and restoration.
• Java KeyStore Certificate Installations - Automatically installs proxy CA certificates into Java trust stores for HTTPS interception.
• Language-Specific Certificate Trusts - Installs Proxyman root certificate into Python's certificate store for HTTPS decryption.
• Custom Certificate Overrides - Replaces default certificates with custom root, server, or client certificates for SSL interception.
• SSL Validation Controls - Disables certificate validation in HTTP clients to allow proxy decryption without SSL errors.
• Apple-Compliant Generators - Provides steps to create self-signed root certificates that comply with Apple's security requirements.
• Proxy Remote Device Access Restrictions - Controls which remote devices can connect to the proxy by IP address allow or deny lists.
• WebSocket Traffic Inspections - Captures and displays WebSocket frames alongside HTTP traffic for real-time debugging of bidirectional connections.
• iOS WebSocket Traffic Capture - Captures WebSocket traffic from iOS apps, a key capability for mobile debugging.
• HTTP Request Templates - Starts new HTTP requests from preset templates like GET and POST.
• Custom Preview Scripts - Renders user-defined content in a dedicated tab by running custom JavaScript on request or response bodies.
• CORS Restriction Overrides - Adds permissive Access-Control-Allow-* headers to responses to override cross-origin restrictions.
• Log Importers - Imports captured HTTP traffic from Proxyman, Charles Proxy, HAR, CSV, and Postman formats.
• Traffic Log Exporters - Exports captured HTTP traffic logs in ProxymanSession, RAW, or HAR formats.
• Request History Persistence - Stores and displays previously composed HTTP requests and their responses.
• Traffic Automation Scripts - Activates or deactivates custom script execution to automate or modify network traffic handling.
• Network Latency Simulators - Applies preset bandwidth, latency, and packet-loss profiles to test app behavior.
• Scripted Mock Responses - Configures scripts to return predefined responses, acting as a mock server for development.
• HTTP Message Differs - Shows differences between two requests or responses, including URL, headers, and body, in a side-by-side view.
• Request Modifiers - Modifies headers, body, or query of GraphQL requests or responses through a scripting tool.
• GraphQL Request Scripts - Ships a scripting engine that transforms GraphQL requests and responses by query name using JavaScript.
• GraphQL Query Name Interceptions - Pauses specific GraphQL requests based on their query name for targeted editing.
• GraphQL Query Name Local Mappings - Replaces GraphQL response bodies with local files based on the request's query name using a script.
• GraphQL Query Name Mappings - Redirects GraphQL requests to different endpoints based on the specific query name.
• GraphQL Query Name Mockings - Matches specific GraphQL query names and returns local files as response bodies.
• GraphQL Query Name Redirections - Matches GraphQL requests by their query name and redirects them to a different server endpoint.
• Forced Format Renderers - Displays HTTP response bodies using a selected format regardless of the original Content-Type header.
• Manual Method Switchers - Switches the HTTP method of an intercepted request manually, not automatically based on request size.
• Request Cancellation - Provides options to cancel breakpoints and abort connections during HTTP traffic debugging.
• Request Redirections - Rewrites outgoing HTTP request destinations to redirect traffic without altering client code.
• Status Code Simulators - Sets a custom HTTP status code on a response to simulate different server outcomes.
• Query Parameter Modifications - Adds, updates, or deletes query string parameters on outgoing requests to alter the URL.
• Android Utility Tools - HTTP debugging proxy for macOS, iOS, and Android.

Star history