HTTP Pass vs HTTPS Capture Traffic Decrypt

HTTP Passは、開発者が管理するPreview、Staging、Development環境をiPhone/iPadのSafariで確認するときに使うSafari Web Extensionです。 HTTPSホストごとにBasic Authのユーザー名とパスワードを保存し、SafariからHTTP Passを開いて同期すると、登録済みのホストとパスにだけAuthorizationヘッダーを付与します。 主な機能: - HTTPSホスト単位のプロファイル管理 - パスプレフィックスによる送信範囲の限定 - 認証情報のKeychain保存 - Face IDまたはデバイスパスコード後のパスワード表示 - プロファイルの有効化/無効化 - Safari Declarative Net Requestによるセッションルール同期 HTTP Passは汎用ヘッダー編集ツール、セキュリティ診断ツール、パスワードマネージャーではありません。所有、管理、または検証権限のある開発環境での利用を目的としています。分析SDK、トラッキング、開発者サーバーへの認証情報保存は行いません。

HTTPS Capture is a professional iOS packet-sniffer built for developers and network enthusiasts. No computer, no jailbreak — a single iPhone captures and decrypts all HTTP/HTTPS traffic on the device, down to every request header, response body, timing detail, and WebSocket frame. Whether it's API debugging, protocol reverse engineering, performance analysis, or everyday Mock and rewriting, HTTPS Capture packs a complete debugging toolkit once reserved for the desktop right into your pocket. All traffic is parsed and stored locally on-device. Nothing is ever uploaded to any server — your network data belongs to you alone. One-Tap Capture, Total Visibility • VPN tunnel + local MITM proxy — flip the switch and capture device-wide traffic instantly. No proxy configuration needed. • Real-time dashboard: request count, domain count, upload/download traffic at a glance. • Capture sessions are auto-archived — review, compare, and reuse history anytime. • LAN capture: turn it on, and any computer or tablet on the same Wi-Fi can point its proxy at your iPhone. Copy the proxy address in one tap. HTTPS Decryption, Plain to Read • Built-in CA certificate generation with a one-tap trust flow — decrypt encrypted traffic into plaintext effortlessly. • Optional capture of Apple system domains, enabled on demand. 7 Live Traffic Rules, Instant Effect Rules bind to the active Profile and apply to subsequent traffic immediately — no restart required: • URL Rewrite: freely rewrite request/response Header and Body, with intercept and redirect support. • Script Injection: rewrite matched traffic with JavaScript to handle complex scenarios with ease. • URL Filter: whitelist/blacklist to capture only what matters — say goodbye to noise. • Hosts Mapping: point domains at custom addresses, bypassing DNS for effortless environment switching. • Request Mapping (Mock): return local responses for specific URLs — the frontend never waits on the backend again. • Breakpoint Debugging: pause on match, then allow, drop, or tamper before forwarding. • AES Decryption: auto-decrypt encrypted request/response Body — plaintext appears instantly. Request Details, Pro-Grade Presentation • Five views: Request / Response / WebSocket Frames / Overview / Timing. • Smart Body preview: JSON highlighting, Hex Dump, image zoom, QuickLook — format auto-detected. • Inspect WebSocket frames one by one, with Protobuf message decoding. • Export standard HAR files in one tap — seamless handoff to Charles, Postman, and more. • Request headers, response headers, Cookie, TCP connections, and timing waterfalls, all at a glance. API Workbench, Send Requests Anywhere • Built-in request library — save common APIs and call them up anytime. • One-tap cURL import to reconstruct requests in seconds. • Sort and search by recent, name, or method for efficient management. 21 Dev Tools, Ready Out of the Box • Encoding & Hash: Base64, URL encode/decode, HTML entities, Unicode escape, MD5 / SHA-1 / SHA-256 / SHA-512. • Data Formatting: JSON prettify & minify, XML formatter, SQL formatter, JSON → Swift Codable models, Property List conversion. • Time & Numbers: timestamp conversion, timezone conversion, date diff, base conversion, UUID generator. • Text & Web: JWT decoder, URL parser, Query String parser & builder, HTTP status code lookup, regex tester, QR code generator. Deeply Integrated with iOS • Dynamic Island + Lock Screen Live Activity: capture timer, request count, and traffic scrolling in real time. • Control Center toggle (iOS 18+): start and stop capture in one tap without opening the app. • Multiple Profiles: freely switch between dev, test, and production rule sets. Privacy First • No request data is ever uploaded to a server. No personal information is collected. Privacy Policy: https://www.joyk.com/en/doc/https-capture-privacy.html Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/