Charles Proxy

(charlesproxy.com)

71 points | by handfuloflight 1 hour ago

16 comments

  • h33t-l4x0r 2 minutes ago
    I loved Charles, I used it for many years. It only stopped when an update changed the UI in ways that were confusing, and also the chrome network tab really did everything I need in terms of inspecting requests / responses.
  • cientifico 1 hour ago
    One hidden gem.

    The closest free alternative is https://www.mitmproxy.org/ that is not even close.

    And off course, https://www.wireshark.org/ but that is too generic and with a bigger learning curve.

    Worth the money. And no subscription (or there weren't a subscription back then)

  • hboon 55 minutes ago
    I don't have elaborate needs and have used Charles for many years. A few years ago I switched to https://proxyman.com and found it easier to use.
    • ChrisMarshallNY 14 minutes ago
      Pretty nice.

      Does it work for Xcode simulators?

      I use Charles extensively (I am using it for the development I’m doing right now), and it needs to work on simulators.

      Cost isn’t an issue for me. Fitness to purpose is important. I won’t cripple my development capacity, in order to save $50.

      • jshier 12 minutes ago
        Yes, Proxyman has great sim integration, including the ability to filter by apps within the sim. It's a far better macOS app than Charles, and I've never found it to be lacking a feature I used in Charles.
        • ChrisMarshallNY 11 minutes ago
          Cool. I appreciate the tip. I’ll give it a go.

          Thanks!

    • sgt 17 minutes ago
      Looks much better, thanks for that tip
    • cientifico 43 minutes ago
      That it's an osx ONLY app.
  • logicuce 24 minutes ago
    I feel obliged to mention Fiddler. The tool I loved almost 20 years back and felt like it came from future. IIRC it was/is more powerful than Charles. Fiddler was Windows only but at one time they had builds for other platforms in works. Sadly they got acquired which changed their roadmap, and I had also moved on from Windows.

    https://www.telerik.com/fiddler

  • swaraj 12 minutes ago
    I once used Charles Proxy to change all the game configs for Candy Crush Saga on my phone back in 2013 by intercepting and replacing the API requests - I made all the puzzles have 1-2 colors and infinite powerups. I guess they didn't care much about the security because I ended up spending way more time in the game
  • DrBenCarson 58 minutes ago
    Alltime great software

    I’m on proxyman https://proxyman.com/

    • jibcage 38 minutes ago
      I used Charles for a while and also jumped on the Proxyman bandwagon. It’s a slick tool and even works for remote debugging (i.e., an iPhone attached to your computer with a cable).
  • followben 1 hour ago
    Wow. Charles was indispensable tool for working with HTTP apis back when I got started as an iOS dev in 2011. Great to see it still going strong.
  • infomaniac 1 hour ago
    Fantastic software that I've used for over a decade. Interacted with Karl a few years ago about Adobe's AMF format; very generous with his time. I was surprised to learn that it's over 20 years old! https://en.wikipedia.org/wiki/Charles_Proxy
    • sponno 27 minutes ago
      i just texted Karl to say he’s on the front page of HN. I was the same. Charles was soo good for ol AMF!! Still miss Flash.
  • aua 40 minutes ago
    I found Charles Proxy last year and it's fantastic. They have a mobile app too (if you need the ssl proxying for mobile apps).
  • eddywebs 25 minutes ago
    How come a reverse-proxy, better than the network tab in dev tools ?
    • efortis 22 minutes ago
      You can do more, e.g., changing the status code
  • el_benhameen 44 minutes ago
    Just upgraded my license today, so I guess Charles is my new Baader-Meinhof token. Great tool! The ssl proxying is especially handy.
  • tgma 1 hour ago
    More narrow cmdline http inspection tool https://github.com/signeen/inspect-http-proxy
  • self_awareness 40 minutes ago
    This one is truly a gem:

    https://httptoolkit.com

    It even bypasses SSL pinning on Android using 1 click.

  • imvetri 22 minutes ago
    Never learnt the use of this tool. The certificate configuration tripped my head during my work. This gives brain damage because it doesn't make sense.

    Why to check network payload when you are sure the data was sent.

    -frontend developer

  • wahnfrieden 56 minutes ago
    Even after using it for years I could never recognize all its unlabeled icons without hovering for tooltip

    I emailed the author about it a decade ago but he didn’t seem convinced

  • user3939382 29 minutes ago
    Even better SIP bullshit off kext tap nic mitm intermed. certs. Fuck all the phone home stuff it’s enough.