¡Enhorabuena a @httptoolkit.com por obtener el Sello Ayuda Efectiva como empresa de alto impacto! La empresa ha donado al menos un 0,7% de sus ingresos a los programas benéficos más efectivos. 🏅 Página de certificación e impacto: ayudaefectiva.org/empresa/http...

Redirecting traffic? HTTP Toolkit transform rules just gained a long list of new options, including arbitrary regex match & replace logic, precisely targeted for every URL component - fully combinable with all the other existing request & response transforms.

I've been doing some ridiculously neat reverse engineering recently. Check this out: github.com/httptoolkit/... That code is modifying functions inside Flutter apps, without debug info, by *fingerprinting known chunks of assembly* for each CPU architecture, and then scanning memory to find them 🤯

Want to script your own MitM proxy? You can use HTTP Toolkit's internals standalone via Mockttp, a JS library to build HTTP, WebSocket & TLS intercepting proxies: github.com/httptoolkit/... v4 just went live: advanced URL regex rewriting, delay mixins, and non-HTTP proxying too 🚀

Having a rooted android device with man-in-the-middle http capture using #httptoolkit is so much fun. It's crazy how much evil shit the apps are up to 🤯 https://httptoolkit.com/ ALWAYS use the website instead of the app if possible. #android #infosec

It's been a long time coming but the http QUERY method spec is nearly done www.ietf.org/archive/id/d...

Some major performance updates have gone live this week 🚀 With a big internal redesign, memory usage just dropped 40%, and processing input got up to 50x (!) faster. A nice drop in CPU while intercepting, but a huge boost when you load a HAR of 100s of thousands of requests.

What's going on with HTTP/3, where are the problems, and what comes next?

Widespread HTTP compression dictionary support is slowly coming to the web...

There's an updated version of the exciting new HTTP QUERY method spec released today: https://www.ietf.org/archive/id/draft-ietf-httpbis-safe-method-w-body-08.html. Great to see progress here. If you're unaware of it, there's more background on the HTTP Toolkit blog:

HTTP Toolkit arm64 builds landing imminently! Linux & Mac for now, Windows once GitHub CI support is fully available. If you want to test it, you can download the latest server distributable from github.com/httptoolkit/... to run this locally today (see github.com/httptoolkit/... for instructions).

You can now sponsor https://frida.re on GitHub to help fund development of Frida, which forms the backbone of plenty of reverse engineering techniques & tools. HTTP Toolkit just signed up as the first sponsor! You can help support them too here:

Very much looking forward to the exciting new "Do-Not-Stab" HTTP header, glad to see somebody finally proposing serious solutions for this important issue:

By popular request, there's a new HTTP Toolkit Black Friday deal! Get 🎉 30% off 🎉 all HTTP Toolkit Pro annual subscriptions with coupon BLACKFRIDAY24 from now until next Tuesday (and that discount is recurring too, so it continues as long as your subscription does).

I wonder what percentage of all internet traffic is taken up by CORS preflight requests

HTTP Toolkit now has built-in support for Android TV interception! 📺