HTTPToolkit
Intercept, inspect, and edit HTTP(S) traffic with HTTP Toolkit for debugging and testing.
About HTTPToolkit
HTTP Toolkit intercepts, inspects and edits HTTP(S) traffic for debugging, testing and building. It runs on Windows, Linux and Mac and can target individual Android or iOS apps, entire devices, Docker containers, browser windows, backend processes such as Node.js, Java, Python or Ruby, terminal sessions, or any client connected manually as an HTTP proxy.
It lets users search and filter traffic, examine URL, status, headers and formatted bodies, pause live traffic with breakpoints for manual edits, and send custom requests. Automated rewrite rules for mocking, redirecting and transforming traffic are marked as a Pro feature.
Key features
- Targeted interception for specific clients or manual proxy connection
- Search and filter traffic by content-type, source and matching rules
- Inspect URL, status, headers and formatted message bodies
- Pause live traffic with breakpoints for manual editing
- Send custom requests and review responses with debugging tools
- Automated rewrite rules to mock, redirect or transform traffic (Pro)
Best for: Developers and testers who debug, test and build with HTTP traffic from mobile, desktop and backend clients.
Good for
- Available for Windows, Linux and Mac with multiple install formats
- Can isolate traffic from a single client instead of the whole computer
- Parses message bodies including JSON, Protobuf, Base64, XML and hex
Watch out for
- Automated rewrite rules are marked as a Pro feature
- Use from mobile requires sending a download link to a computer
HTTPToolkit at a glance
- Website
- httptoolkit.com
- Category
- Privacy & Security › Security Tools
- Type
- Website
- Pricing
- Not confirmed. Check the site
- Platforms
- Android, iOS, Linux, macOS, Web, Windows
- Open source
- Not stated
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Guides for Security Tools
HTTPToolkit alternatives
Tools and sites you could use instead, ranked by how closely they match.
Inspect HTTPS traffic interactively with mitmproxy, an open-source proxy tool.
Open source
24 alternatives
Malware investigation and reverse engineering are the focus of REMnux, a Linux toolkit that bundles analysis tools.
Convert captured proxy traffic into an OpenAPI description by reverse engineering REST APIs.
This cybersecurity agent scans security logs and files for threats and recommends mitigations.
CrowdSec provides open-source intrusion prevention, web application firewall, and bot detection tools.
Open source
24 alternatives
Add a proof-of-work CAPTCHA system to an application using the mCaptcha backend component.
FreeOpen source
24 alternativesPopular in Security Tools
Well-known listings from the same topic.
Online Password Hash Crackonlinehashcrack.comOTP Authapps.apple.com/app/otp-auth/id659877384MD5 reverse lookupmd5.gromweb.comMozilla SSLssl-config.mozilla.orgchallenges.rechallenges.reGoPlus Locker V3gopluslabs.io
HTTPToolkit FAQ
What is HTTP Toolkit?
An open-source tool for debugging, testing and building with HTTP on Windows, Linux and Mac.
What clients can it intercept traffic from?
Individual Android or iOS apps, entire devices, Docker containers, browser windows, backend processes such as Node.js, Java, Python or Ruby, terminal sessions, or any client connected manually as an HTTP proxy.
Can it automatically modify traffic for testing?
Yes, rewrite rules can mock responses, redirect requests, block with resets or errors, and transform headers and bodies; this is listed as a Pro feature.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.