HTTP Toolkit

Beautiful open-source tools to debug, test & develop with HTTP.

👨‍🔧 Built by @pimterry

🦣

[HTTP Toolkit @HttpToolkit]

If you're using custom system CAs on Android for TLS - whether that's for HTTPS debugging, ad blocking or local testing - there's trouble brewing.

Let's talk about the latest Android 17 changes and how to keep things working:
https://t.co/rHJNfKuctc

[HTTP Toolkit @HttpToolkit]

Wow - @daoud_youssef has just put out 5 (five!) separate intro videos for all sorts of different HTTP Toolkit use cases on YouTube.

If you want some help getting started, take a look: https://t.co/07zMkrY3Tm
https://t.co/lbFyJKaBne

[HTTP Toolkit @HttpToolkit]

200ms in the life of an HTTP request: https://t.co/J4qscvbHQu
https://t.co/J4qscvbHQu

[HTTP Toolkit @HttpToolkit]

Automatic support for this coming soon to an HTTP Toolkit near you...

[HTTP Toolkit @HttpToolkit]

Nearly 5 years of hard work later, the TLS fingerprinting Node.js issue is finally fixed: https://t.co/i13DezeN0G.

It's now possible to match most common TLS fingerprints directly in Node.js!

There's a new library to do all the hard work here: https://t.co/isUdl4Uc4T

[HTTP Toolkit @HttpToolkit]

All free & open source. Visit the root page at https://t.co/cmag0pgKUV to see the full docs, or check out https://t.co/w9TxjoDU7M for the source and self-hosting instructions.
https://t.co/cmag0pgKUV

[HTTP Toolkit @HttpToolkit]

Have you seen https://t.co/mOpL5lNTyD?

As part of building HTTP Toolkit I often need a remote servers for testing edge cases, so I've built one! Now fairly mature & stable. It's https://t.co/OP3amHBLkd plus https://t.co/jKzmzlUyef plus lots of extras.
https://t.co/mOpL5lNTyD

[HTTP Toolkit @HttpToolkit]

(For extra fun, refresh the HTTP/2 page to see HTTP header compression in action: on my machine, the HEADERS frame drops from 499 bytes to 27 by magic)

[HTTP Toolkit @HttpToolkit]

HTTP Toolkit can now automatically detect, parse & expose the EXIF metadata within intercepted images.

Quickly inspect the secret metadata in images to understand when, where, and how they were captured, and plenty more; EXIF can hide a surprising amount! https://t.co/TKkReKwIio

[HTTP Toolkit @HttpToolkit]

Need a second opinion understanding your HTTP, or a quick first pass to find the good bits?

HTTP Toolkit now has MCP support!

Copy-paste setup for Claude Code and plenty more, so it just takes seconds to get your LLMs intercepting & inspecting HTTP all by themselves ✨

[HTTP Toolkit @HttpToolkit]

What's perfect mirroring? Before, WebSockets were negotiated separately up & down stream. The data was the same but some handshake params could differ. We now take full low-level control of negotiation and link the two directly instead, to perfectly clone the full socket 👯

[HTTP Toolkit @HttpToolkit]

The proxy inside HTTP Toolkit (https://t.co/GrZ15h5XHN) was just updated: 30%+ more throughput, lower latency, and perfect mirroring for WebSockets too.

Live now in Mockttp for custom proxies, coming to an HTTP Toolkit near you later this week!

[HTTP Toolkit @HttpToolkit]

Wouldn't it be nice if HTTP compression suddenly got 90% better for a whole bunch of common web scenarios?

Dictionary Compression is here to save the day: https://t.co/dC0Psfu02M
https://t.co/dC0Psfu02M

[HTTP Toolkit @HttpToolkit]

Vitor Daniel reverse engineered & probed his university's mobile app API with HTTP Toolkit, found a vulnerable endpoint leaking private data, and successfully worked with them to patch the issue. Great write-up!

https://t.co/v8NLHbwyOm
https://t.co/v8NLHbwyOm