Windows · macOS · Linux
Read every request
your machine makes.
PacketSniffer decrypts HTTPS on the way past, so you see real headers, real bodies and real WebSocket frames instead of a wall of ciphertext.
v0.4.0/—/Free and open source
Live capture
One table, every request, as it happens.
The desktop window, running here in the page. Requests appear the moment they are sent and fill in when they land — pick one to read its headers and body.
PacketSniffer- :method
- POST
- :path
- /v1/payment_intents
- authorization
- Bearer sk_live_51H•••••••••••••
- idempotency-key
- 8f2c1a04-71bd-4e33-9a2f
- content-type
- application/x-www-form-urlencoded
{
"id": "pi_3PxK2mB9wQ",
"amount": 4900,
"currency": "usd",
"status": "requires_confirmation"
}The toolkit
Everything you need to take an app apart.
Written in Rust and shipped as one binary per platform. No runtime to install, no account to create.
HTTPS, decrypted
A root CA installed in your trust store lets PacketSniffer issue a certificate per host on the fly. HTTP/1.1 and HTTP/2 both come through in the clear.
WebSocket frames
Every frame in both directions, with opcode, length and payload. Text and binary, as they arrive.
Breakpoints
Pause a request before it leaves or a response before it lands, edit it by hand, then let it continue.
Map local and remote
Answer a request from a file on disk or redirect it to another host. Test a staging API without touching the client.
Block lists
Drop requests to a host outright and watch how the app handles it. Useful for finding out what actually breaks offline.
Network simulation
Throttle bandwidth and add latency to reproduce the bug that only happens on a train.
Body viewer and editor
JSON, HTML, XML and JavaScript with syntax highlighting, powered by CodeMirror. Edit a body in place and resend.
Export anywhere
Send a captured request to Postman, or copy it as cURL and paste it into a terminal.
Updates itself
New releases are signed and applied in place. No package manager, no reinstall.
Android
Apps that pin certificates, opened anyway.
Since Android 7 an app only trusts the certificates it was built to trust, which is why a proxy alone shows you nothing. PacketSniffer repacks the APK so it trusts yours.
Needs java, apktool, zipalign, apksigner and adb on your PATH. Patch apps you own or are authorised to test.
- 01
Plug the phone in
PacketSniffer finds it over adb and adds it to the sidebar next to your computer.
- 02
Point it at the APK
apktool unpacks it, a network security config that trusts the proxy CA is injected, then zipalign and apksigner put it back together.
- 03
Install and capture
The patched build goes straight back to the device. Its traffic shows up in the same table as everything else.
Download
Pick a build. It is the same app.
Version 0.4.0, released under the MIT licence. Builds come straight from GitHub Releases.
- MSI8.5 MB
Windows
Windows 10 and 11, 64-bit
- DMG9.9 MB
macOS — Apple silicon
M1 and later, macOS 13+
- DMG10 MB
macOS — Intel
Intel Macs, macOS 13+
- APPIMAGE81 MB
Linux — AppImage
Runs anywhere, no install
- DEB7.7 MB
Linux — Debian, Ubuntu
apt-based distributions, 64-bit
Looking for an older version or the release notes? All releases on GitHub