11月4日的NetSentry - Capture HTTPS应用程序分析

NetSentry - Capture HTTPS is a powerful, privacy-first web debugging proxy and network sniffer designed for local packet capturing, HTTP/HTTPS debugging, and traffic auditing directly on your Android device. Whether you are a security researcher, software QA engineer, or web developer, NetSentry provides deep, transparent visibility into application network layers and web requests without requiring root access or complex desktop setups. ### Secure Local VPN Interceptor (No Root) Utilizing Android's VpnService, NetSentry captures and inspects all system-wide IP traffic locally. Your sensitive network data remains entirely on your device, ensuring total privacy and offline capability. Capture HTTP, HTTPS, TCP, and UDP streams with zero data leakage. ### Man-in-the-Middle (MitM) HTTPS Decryption Generate a custom, secure local Root CA certificate to intercept, decrypt, and inspect SSL/TLS traffic. Read encrypted payload bodies, API tokens, cookies, and HTTP headers in clear text for secure verification and reverse engineering. ### Traffic Console & Collapsible JSON Tree Viewer Easily inspect complex JSON payloads with our collapsible, virtualized JSON tree viewer. Designed for high performance, NetSentry displays nested API request/response structures smoothly without lag. Use fast filters to query traffic by URL, method, headers, or content type (JSON, HTML, XML, CSS, JS, Images). ### Map Local Mocks & Block Lists Take control of your api responses. Simulate backend states by configuring custom Map Local rules (mock JSON payloads) or verify error handling by blocking specific domains with the built-in Block List interceptor. Dynamically modify headers on the fly to test edge cases. ### Hardware-Backed Security & Encrypted Database Your packet captures are protected. NetSentry stores all network logs inside a local SQLite database encrypted with SQLCipher AES-256 encryption. Access to the app is secured with biometric fingerprint authentication and device passcode lock, preventing unauthorized access to API keys.