HTTP Toolkit Reviews

Error Prone Reviews

HTTP Toolkit mentions (30)

• GrapheneOS – Break Free from Android and iOS

  I can add certificates on my unrooted android. That how HTTPToolkit [0] works, it only requires adb, which (thankfully) doesn't trip banking apps. Banking apps can (and do iirc) pin certificates, so a rooted phone adds no risk whatsoever. Also in my experience a rooted phone experience is by far more secure than the OEM androids. Security is supposed to assess risk objectively, yet "running on a Xiaomi phone with... - Source: Hacker News / 7 months ago

• Charles Proxy

  For my rather simple needs I've been using https://httptoolkit.com free edition, I like that it launches a independent Firefox window on its own for the intercepting so I don't have to touch my working browser or deal with configuring a proxy anywhere. - Source: Hacker News / 9 months ago

• Charles Proxy

  This one is truly a gem: https://httptoolkit.com It even bypasses SSL pinning on Android using 1 click. - Source: Hacker News / 9 months ago

• APKLab: Android Reverse-Engineering Workbench for VS Code

  Https://httptoolkit.com also worth a look if you're interested in this space: has some neat automated setup for Android MITM that can be much simpler _and_ more effective than the manual config route (with automated Frida setup on rooted devices, so it handles unpinning too!). More UI & less CLI focused, so depends which way your preferences go there. - Source: Hacker News / about 1 year ago

• Launch HN: Integuru (YC W24): Reverse-Engineer Internal APIs Using LLMs

  Just setup httptoolkit [0], it just works. [0] - https://httptoolkit.com/. - Source: Hacker News / almost 2 years ago

Error Prone mentions (4)

• How to use Java Records

  A special kind of validation is enforcing that record fields are not null. (Un)fortunately, records do not have any special behavior regarding nullability. You can use tools like NullAway or Error Prone to prevent null in your code in general, or you can add checks to your records:. - Source: dev.to / almost 4 years ago

• Why is `suspend` a language keyword, but @Composable and @Serializable are annotations

  I am all in favour to more third side libraries adding functionalities, like Lombok, Manifold and error prone. As well as smaller projects like this shameless plug and what appears in this list. Source: almost 4 years ago

• Is there a tool to track CVEs for the software that we use?

  While at it you could also point them to static code analyzers such as error_prone, spotbugs and pmd (use all 3 at once - they complement each other in detecting different issues). Source: over 4 years ago

• Get rid of those boolean function parameters (2015)

  Linters can check for this sort of thing, for example Error Prone[0] has a lint[1] for this. Totally agree this is better to be in the language proper so we don't need this extra tooling. [0]: https://errorprone.info [1]: https://errorprone.info/bugpattern/ParameterName. - Source: Hacker News / almost 5 years ago