Http traffic capture vs TunnelSight

HTTP Traffic Capture is a lightweight HTTP & HTTPs packet capture tool for common users who have network analysis capabilities. Features: 1. Support HTTP and HTTPs traffic analysis 2. Support HTML, Javascript, CSS, picture (webp, jpeg, png) preview, and binary data viewing 3. Support for setting packet capture rules 4. Support historical packet capture records 5. Support filtering historical packet content 6. Support exporting the captured packet content Instructions: 1. The software can support HTTP packet capture by default. If you need to capture and parse HTTPs traffic, you need to install a certificate 2. Click the start button, the system will create and connect to the vpn, and start the packet capture process; if you reject the vpn configuration, the packet capture cannot be performed 3. Click the orange task bar to view the current session, and click the session to view the session request and response 4. Click the request line and response line in the session to export the corresponding value 5. You can filter the content of a specific domain name through the filter button 6. You can export the session content through the export button 7. Click the stop button, a history record will be generated for subsequent viewing 8. If you need to clean up all data, you can go to the settings page and click the clear all data button How the software works: After opening the packet capture, the software will start a vpn and direct the vpn data packet to the local HTTP proxy server. Complete the analysis and storage of the data packet in the local proxy server. For HTTTPs data, you need to install and trust the certificate to successfully parse it. Data security: Since packet capture software involves user privacy data, privacy protection is the most important design consideration for software. To this end, we have made the following mechanism for this purpose: 1. The software's CA key and CA certificate are dynamically and randomly generated by the software and stored in the sandbox. No one can know the user's CA private key. 2. The certificate cannot be shared between different users. 3. After reinstalling the application, the history will cause the certificate to become invalid, and the user can manually delete the certificate in the settings. 4. The certificate is valid for one year. After the certificate expires, the user needs to regenerate it before it can be used. 5. The HTTP data captured by the software is only stored locally and will not be uploaded to any other place. 6. The user cannot modify the network request through the software to prevent some improper behavior. System configuration instructions: HTTP proxy server: 127.0.0.1:9080 Certificate description file name: Traffic Capture YYYY-MM-dd HH:mm, where YYYY-MM-dd HH:mm is the time when the certificate is generated VPN description file name: "Traffic Capture"

TunnelSight is your on-device network microscope, built for iOS and purpose-crafted for developers, network engineers, and security researchers who need real-time, packet-level visibility into every HTTP and HTTPS transaction. Install your unique per-device root CA once, start TunnelSight’s Local VPN tunnel, and instantly see every request, response, header, and body live, decoded, and ready for analysis. With the new on-device scripting engine, you can rewrite headers, mutate bodies, swap URIs, or short-circuit responses in flight, all driven by JavaScript you author and dry-run from your iPhone or iPad. Key Features • Live Packet Interception Local VPN plus MITM proxy architecture captures all HTTP and HTTPS traffic on-device with zero cloud dependency. • cURL-Exact Replay For any intercepted request, generate a ready-to-run cURL command to reproduce the exchange in your terminal with headers, method, and body intact. • JSON Export and Reporting One-tap export of request and response pairs as structured JSON. Integrate with your CI, SIEM, or custom tooling. • Smart Caching and Filtering Cache responses on demand. Define URL, header, or content filters to focus on what matters. • Searchable Session History Full-text search across captured traffic so you can find specific API calls quickly. • Secure Per-Device Root CA Automatically generates a self-signed root certificate unique to each device. Simple one-time install with no shared keys. • Remote Device Debugging (Pro Feature) Optionally inspect traffic from another device you control by manually configuring it to use TunnelSight as a proxy. Requires explicit setup and certificate installation on that device. Designed for testing and debugging across multiple devices. • On-Device Scripting Engine Write JavaScript scripts that intercept and mutate live traffic. Rewrite headers, bodies, URIs, and methods, change response status codes, or short-circuit a request with a synthetic response. Chain multiple scripts in order, scope them with URL and method matchers, and validate every change against a real captured packet using the built-in dry-run preview before going live. Start from packet-aware templates generated straight from any captured request. Why TunnelSight? • Zero-Trust Testing Validate your mobile app’s backend calls under real network conditions. • On-Device Debugging No desktop proxy required. Debug directly from your iPhone or iPad. • Multi-Device Testing Debug requests from additional devices using the optional Pro feature. • Audit and Compliance Export logs for penetration testing, audits, or bug bounties. Disclaimers and Legal Notices 1. Intended Use Only TunnelSight is designed for lawful testing, debugging, and security research on networks and applications for which you have explicit permission. Unauthorized interception or decryption of traffic may violate local laws and regulations. 2. User Responsibility By installing the TunnelSight root certificate and using the Local VPN, you acknowledge the security implications of a device-wide MITM proxy. You are solely responsible for safeguarding your device and certificates. 3. Privacy and Data Handling All packet capture and analysis is performed locally on your device. TunnelSight does not transmit captured data to any external server. However, exported files may contain sensitive information and should be handled accordingly. 4. No Warranty and Limitation of Liability TunnelSight is provided as is without warranty of any kind. In no event shall the developers be liable for any direct, indirect, incidental or consequential damages arising from use or inability to use the software. 5. Compliance It is your responsibility to ensure that your use of TunnelSight complies with applicable data protection regulations. Ready to see through the tunnel? Download TunnelSight today and turn your iOS device into a packet-level debugger.