httptoolkit added (by @appknox) (#2901)

* httptoolkit added * fixing links * fixing markdown * added a reference * Update techniques/android/MASTG-TECH-0109.md --------- Co-authored-by: Carlos Holguera <[email protected]>
OWASP · Oct 2, 2024 · 95f4033 · 95f4033
1 parent 39803e9
commit 95f4033
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 1 deletion.
diff --git a/techniques/android/MASTG-TECH-0109.md b/techniques/android/MASTG-TECH-0109.md
@@ -87,7 +87,7 @@ There are generally two approaches to this: **@MASTG-TOOL-0100** and **@MASTG-TO
 
 ## Intercepting Traffic using HTTP Toolkit
 
-If the above methods don't work, you can try using HTTP Toolkit, which provides another way to intercept Flutter HTTPS traffic.
+If the above methods don't work, you can try using @MASTG-TOOL-0112, which provides another way to intercept Flutter HTTPS traffic.
 
 1. **Install HTTP Toolkit**
     - You can download it from [here](https://httptoolkit.com/).

diff --git a/tools/network/MASTG-TOOL-0112.md b/tools/network/MASTG-TOOL-0112.md
@@ -0,0 +1,9 @@
+---
+title: HTTP Toolkit
+platform: network
+source: https://httptoolkit.com
+---
+
+[HTTP Toolkit](https://httptoolkit.com/) is an open-source tool designed to intercept, analyze, and debug HTTPS traffic. The tool captures HTTP traffic from Android, iOS, web or desktop applications. It provides functionalities such as complete decryption of HTTPS traffic, real-time monitoring of requests and responses, the ability to simulate HTTP requests, and automated interception of HTTP requests with minimal configuration required.
+
+It is designed to work across various platforms and integrates smoothly with browsers and devices, by automatically setting up its CA certificate and disabling SSL pinning via Frida, to optimize traffic analysis.