Basic Questions

Q: First of all, what is this software used for?

A: This is a network debugging tool to view and modify the network request information of the device, in short, it is an application layer (e.g. HTTP) packet capture software.

Q: How to use?

A：Turn on the packet capture switch in the home page, then open the application you want to debug, or the browser to visit the address you want to debug, and then go back to this application afterwards, there is network request information in the latest task list in the home page, you can view the request Header, response content and all the details about the network request.

Note that because HTTPS request is encrypted, if you want to view HTTPS request details, you need to configure the relevant certificate for the first time, please click [HTTPS Configuration] in [Settings] of the application to view the specific details. The certificate is only used for decrypting traffic, and you can delete it at any time.

Q: When the software is running, the status bar displays the VPN icon. Does the software provide VPN service?

A: No, this software uses the network extension API to capture traffic through VPN, and does not provide any VPN service

Q: Why do I need to install the root certificate?

A: To decrypt HTTPS traffic, you need to use the root certificate to generate a self-signed certificate. When the root certificate is installed in the mobile phone, the certificate generated by the root certificate can be trusted.

Q: Will my data be uploaded?

A: No, all data is stored locally

Q: Why my root certificate configuration is correct, but the traffic of some HTTPS websites still cannot be viewed?

A: Some websites use the public key binding technology (HPKP) and only trust the specified certificate, so the traffic cannot be decrypted. Some websites are already ignored in the default configuration, and you can ignore other such websites by adding rules.

Q: Why can’t some software log in when capturing packets?

A: As mentioned above, a small number of software uses public key binding or two-way authentication, refuses to communicate with the middleman, and actively closes the connection, causing network requests to fail.

Q: Why did the purchase fail?

A: Please check the network conditions and turn off the packet capture function

Q: Unable to restore purchase failure?

A: Please check the network conditions and confirm that the AppleID registered in the current app store is the same as the AppleID at the time of purchase

Usage issues

Q: What is the Pass Strategy?

A: Before the mobile phone sends a network request, it can decide whether to allow the request, decrypt SSL traffic and other behaviors according to the Pass Strategy. The default strategy is the strategy adopted when no strategy is matched.

Q: What is Domain Map?

A: Domain Map is used to map the requested domain name to a specified address, which can be another domain name or IP address.

Q: How to use rewrite rules?

Rewrite rules are divided into Rewrite Request and Rewrite Response rules.

Rewrite rules can modify almost all request and response information, including:

Request URI

There are three ways to modify the request URI. For example, if the original URI is /query?key=name, use three methods to modify it:

• Direct input: Use what you type as the new URI

• Find and replace: find and replace the input string, if the input search string is key and the target string is newKey, then the final URI is /query?newKey=name

• Query parameter: only modify the Query parameter, if it does not exist, create a new one, such as input:

  key=type&age=10, the final URI is /query?key=type&age=10.

Request method

The request method can be modified to methods such as GET/POST/DELETE/HEAD.

Request|Response Header

Add Header and replace it if it exists. You can turn on the [Clear Old Header] switch, which will clear all the old Header, leaving only the Header you filled in.

Request|Response Body

There are also three ways to modify the Body. Let's take the content of the Body below as an example, and see how to use the three methods by modifying ResponseBody:

<!doctype html>
<html dir="ltr" lang="en">
   <head>
     <meta charset="utf-8">
     <title>Google translate</title>
   </head>
   <body>
     <h1>Google translate</h1>
     <script type="module" src="new_tab_page.js"></script>
     <link rel="stylesheet" href="chrome://resources/css/text_defaults_md.css">
   </body>
</html>

• Direct Input

  Use your input content as request/response content, such as typing:

  <h1>I'm new content</h1>

  Then the request browser displays:

  I'm new content

• Find & Replace

  Find a string and replace it. For example, if the input search string is Google and the target string is Bing, it will search for all Google and replace it with Bing, and the final result is:

  <!doctype html>
  <html dir="ltr" lang="en">
   <head>
     <meta charset="utf-8">
     <title>Bing translate</title>
   </head>
   <body>
     <h1>Bing Translate</h1>
     <script type="module" src="new_tab_page.js"></script>
     <link rel="stylesheet" href="chrome://resources/css/text_defaults_md.css">
   </body>
  </html>

• JS Script

  Provide the JS variable bodyStr to represent the content of the Body. The variable type is a string, and you can perform operations on it (such as search and replace) to return a new value.

  The following script replaces the Body:

  var nBody = bodyStr. replace('Google', 'Bing');
  nBody;

  The final result is the same as the previous step to find and replace.

  Note that JS scripts are executed in an independent basic environment, not all JS functions can be used, such as atob belongs to the window object, but there is no window object in the environment, so this function cannot be used; you can add a custom function and use it.