mitm-capture

What problem does it solve?

This Skill eliminates the tedious manual work of intercepting and analyzing mobile app network traffic during reverse engineering, where manually capturing requests, identifying encrypted parameters, and mapping API endpoints is extremely time-consuming and error-prone.

Core Features & Use Cases

• Automated Traffic Capture: Uses mitmproxy to intercept Android/iOS app network traffic in real time, with color-coded live logs, automatic JSONL storage, and built-in filtering to exclude noisy domains.
• Encrypted Parameter Detection: Automatically flags suspicious parameters like sign, token, and encrypt, and value patterns like Base64, JWT, and SHA256, and generates Frida hook suggestions to trace cryptographic operations in the app.
• Structured Analysis & Export: Generates Markdown reports with per-domain statistics, API endpoint documentation, and authentication analysis, and exports captured traffic to cURL, HAR, or filtered subsets for reproducibility.
• Use Case: When reverse engineering a food delivery app to find its order-signing algorithm, use this Skill to capture traffic, flag the encrypted sign parameter, get Frida hook suggestions to trace the HMAC key generation, and export requests to reproduce the API call.

Quick Start

Use the mitm-capture skill to capture traffic from your target mobile app, generate a structured analysis report of its API endpoints and encrypted parameters, and export reproducible cURL requests for further testing.