
HTTP Toolkit
Proxyman.io
Charles Proxy
mitmproxy
Surge for Mac
Fiddler
Weer
James
SpotBugs
Dependency-Check
Appknox
Coverity Scan
Checkmarx
HCL AppScan
Veracode
AttackFlow
HTTP ToolkitBased on our record, HTTP Toolkit should be more popular than SpotBugs. It has been mentiond 30 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
I can add certificates on my unrooted android. That how HTTPToolkit [0] works, it only requires adb, which (thankfully) doesn't trip banking apps. Banking apps can (and do iirc) pin certificates, so a rooted phone adds no risk whatsoever. Also in my experience a rooted phone experience is by far more secure than the OEM androids. Security is supposed to assess risk objectively, yet "running on a Xiaomi phone with... - Source: Hacker News / 7 months ago
For my rather simple needs I've been using https://httptoolkit.com free edition, I like that it launches a independent Firefox window on its own for the intercepting so I don't have to touch my working browser or deal with configuring a proxy anywhere. - Source: Hacker News / 9 months ago
This one is truly a gem: https://httptoolkit.com It even bypasses SSL pinning on Android using 1 click. - Source: Hacker News / 9 months ago
Https://httptoolkit.com also worth a look if you're interested in this space: has some neat automated setup for Android MITM that can be much simpler _and_ more effective than the manual config route (with automated Frida setup on rooted devices, so it handles unpinning too!). More UI & less CLI focused, so depends which way your preferences go there. - Source: Hacker News / about 1 year ago
Just setup httptoolkit [0], it just works. [0] - https://httptoolkit.com/. - Source: Hacker News / almost 2 years ago
SpotBugs is an open source static anlysis tool. "SpotBugs uses static analysis to inspect Java bytecode for occurrences of bug patterns." This means that SpotBugs runs against the compiled source source code, rather than raw Java files. Because it analyses bytecode, it can catch some types of bugs that source code analysis would not catch. - Source: dev.to / over 2 years ago
SpotBugs is a great tool for static code analysis. Recently I got two similar warnings in one of the codebases I work on And I had to fix it. - Source: dev.to / over 2 years ago
While at it you could also point them to static code analyzers such as error_prone, spotbugs and pmd (use all 3 at once - they complement each other in detecting different issues). Source: over 4 years ago
If you don’t have checkmarx/Vera code money, have you looked at https://find-sec-bugs.github.io/? It can be used with a few things such as https://spotbugs.github.io/ and sonarQ. Source: about 5 years ago
Proxyman.io - Proxyman is a high-performance macOS app, which enables developers to view HTTP/HTTPS requests from apps and domains.
Dependency-Check - Dependency-Check is a utility that identifies project dependencies and checks if there are any...
Charles Proxy - HTTP proxy / HTTP monitor / Reverse Proxy
Appknox - Appknox is a cloud-based mobile app security solution to detect threats and vulnerabilities in the app.
mitmproxy - mitmproxy is an SSL-capable man-in-the-middle proxy for HTTP.
Coverity Scan - Find and fix defects in your Java, C/C++ or C# open source project for free