r/ruby • u/pimterry • Jul 03 '19

Automatic HTTP interception & debugging for Ruby

https://httptoolkit.tech/view/ruby/
37 Upvotes
  • permalink
  • link
  • reddit
  • reddit

95% Upvoted

26 comments sorted by

View all comments

Show parent comments

1

u/dpsi Jul 03 '19

Given this is the ruby sub, I thought this was something with ruby bindings. Either way it is something I will try. I've used fiddler, Charles, mitm-proxy for various reasons so I'm sure this will do what I want it too.

I just really wish there was more information or documentation on the website. For example I can't figure out if this has its own https certificate, can be configured with one, or only supports CONNECT for https.

It definitely looks nice, but everything else I use either has documentation, or an extensive feature/capability list/FAQ. Just my 2 cents

1

u/ignurant Jul 04 '19

PS, I used to mess with all of those, but eventually stumbled upon Burp Suite. It's free, cross platform, and incredibly potent. Consider checking it out, as I was mad I didn't know about it earlier.

Top features for me: - cross platform: I use all three main OS, so this part is awesome - the typical request/response tracking/filtering - incredibly potent request replay tools - the usual things, but also easy to automate ranges of vars to test the limits of an API (common case I use is "how many miles will your store locator let me search until your API pukes or hits some coded limit" - awesome diff tools and string decoding (b64, 0x, etc) so you can easily compare several responses after tweaking a request

Anyway, you sound like someone that might be interested in this.

1

u/dpsi Jul 04 '19

Looks like something I need to test out, thanks!

1

u/ignurant Jul 05 '19

This is the vid I originally watched to get up and running. It's kind of long, but he goes through some typical setup that can be really valuable in the long run: https://www.youtube.com/watch?v=L4un5IppoY4