Hodor vs ApiCatcher

Capture Flutter traffic. Test APIs. Debug with AI. Hodor brings packet capture, API testing, and developer utilities to your iPhone and iPad. IP-layer capture can inspect traffic that does not follow system HTTP proxy settings, including traffic from Flutter apps. CAPTURE AND DEBUG • Capture and rewrite HTTP(S), WebSocket, TCP, and UDP traffic. • Inspect HTTPS requests and responses after configuring certificate trust. • Replace HTTP request and response data with Mapping, simulate responses with Mock, and replay requests without repeating actions in the original app. • Extend processing with JavaScript, filter by domain, export HAR, and forward HTTP traffic to other tools on your local network. • Preview Protobuf, Form-Data, JSON, HTML, JavaScript, and CSS. Start or stop the capture service with URL Scheme commands. MULTI-PROTOCOL API TESTING • Send HTTP(S), WebSocket, TCP, UDP, gRPC, and MQTT requests. • Organize requests into groups; manage environments, variables, authentication, headers, and bodies. Import and export cURL. • Combine pre- and post-request scripts, value extraction, and assertions for workflows such as signing in, reusing a token, and checking responses. AI TESTING THROUGH MCP Connect a compatible AI client to Hodor's MCP service. Give it a testing goal and let it inspect captured traffic, create and edit requests, send them, analyze responses, and adjust and retest in a multi-step workflow. MCP requires setup and an access token; Hodor does not include an AI model. Data read by the client may be sent to its configured model service. Script execution must be explicitly enabled. EVERYDAY DEVELOPER TOOLS URL, Base64, and Unicode encoding tools; URL parsing; JSON formatting; AES encryption and decryption; MD5 and SHA/HMAC hashing; JWT inspection; timestamp conversion; certificate hashes; regular expressions; and QR code generation—all in the app. Use Hodor only with traffic and systems you are authorized to test. HTTPS decryption depends on certificate configuration and app security policies. iOS background limits may interrupt MCP sessions. SUBSCRIPTIONS Some features require a paid plan. Monthly and yearly subscriptions are available; features, device coverage, and prices are shown on the purchase screen. Payment is charged to your Apple Account at confirmation. Subscriptions renew automatically unless canceled at least 24 hours before the period ends; renewal is charged within the final 24 hours. Manage or cancel in Settings > Apple Account > Subscriptions. Privacy Policy: https://ximlu.github.io/hodor/privacy_en.html Terms of Service: https://ximlu.github.io/hodor/terms_en.html

ApiCatcher is a user-friendly mobile HTTP/HTTPS/WS/WSS packet capture and debugging tool. ApiCatcher also offers macOS and Windows versions (ApiCatcher Desktop), and the ApiCatcher can sync captured traffic to ApiCatcher Desktop in real time. [Key Features] • Traffic Capture: Capture HTTP, HTTPS, WS, and WSS traffic (WS: WebSocket; WSS: WebSocket over TLS). • Data Manipulation: Copy, export, encrypt, and decrypt Query Params, Headers, and Bodies. • Host Filtering: Configure blacklists and whitelists to filter captured hosts. • Request Replay: Modify and resend requests. • Combo Replay: Schedule and execute multiple requests sequentially based on dependencies, with support for dynamic parameter injection. • Scheduled Replay: Automate and trigger request replays at set intervals. • Auto-Generated API Docs: Automatically generate API documentation and export directly to Postman or Apifox. • Rewrite Rules: Mock responses, redirect requests, modify requests/responses, or drop requests/responses. • Scripting Engine: Extend capabilities with script plugins to flexibly modify requests and responses on the fly. • History Export: Batch export captured traffic as HAR files. • API Scanner: Run rule-based vulnerability/error detection and statistics on captured traffic, with support for custom scanning rules. • Media Export: Batch export images and videos, with automatic merging for segmented download requests. • Real-Time Sync: Stream captured HTTP/HTTPS traffic instantly to ApiCatcher Desktop for advanced analysis and debugging. It also supports syncing to Burp Suite, which requires installing the plugin provided by ApiCatcher on Burp Suite. • DNS mapping/spoofing: Bypass DNS resolution by sending requests for specified domain names to a designated IP address, achieving an effect similar to editing the hosts file on a computer. • Support decoding request/response bodies encoded with the Protobuf protocol, such as gRPC requests. If a .desc descriptor file is provided, field names can also be decoded. [Personalization Settings] • Configurable code highlighting styles with multiple built-in themes, supporting JSON/XML/HTML/JS. • AI assistant mode available: directly capture and analyze packets through AI dialogue. [How It Works] ApiCatcher establishes a local VPN connection on your device to route all network traffic through a local Man-in-the-Middle (MITM) service. As long as the VPN is active, ApiCatcher can capture any HTTP/HTTPS/WS/WSS traffic passing through Wi-Fi or cellular data. [Data Privacy & Security] ApiCatcher's root certificate is a self-signed certificate generated entirely on your own device. All captured HTTP/HTTPS/WS/WSS data is stored locally on your device and is never uploaded to any remote servers. [Description of automatic subscription service] 1.Subscription service: a) Pro Monthly (1 month) b) Pro Yearly (12 months) c) Ultimate Monthly (1 month) d) Ultimate Yearly (12 months) 2.Payment: After the user confirms the purchase and makes payment, it will be credited to the iTunes account 3.Automatic renewal: Apple iTunes account will be charged within 24 hours before the expiration date, and the subscription period will be extended by one subscription period after the successful deduction 4.Close the service: You can close the service by going to "Settings" on your iPhone, entering "iTunes Store and App Store", clicking on "Apple ID", selecting "View Apple ID", entering the "Account Settings" page, clicking on "Subscriptions", and managing automatic subscription services. If you need to cancel, you can close it 24 hours before the end of each billing cycle, and no further charges will be deducted within 24 hours before the expiration date 5.Service Agreement: https://apicatcher.net/en/terms-of-service 6.Privacy Agreement: https://apicatcher.net/en/privacy-policy