Proxyman

Bugs

• Fixed: Search Request/Response Body by 'Prettified' JSON, Not Just Raw
• Fixed: Freeze when closing the app
• Fixed: Launch app is slow if there are a lot of Saved Request
• Fixed: License security issue
• Fixed: Proxyman Pro doesn't display if there is no main Windows
• Fixed: Some internal crashes when starting the Proxyamn app.

Screenshots

Feature

• [Body Previewer] Add option to Sort JSON Keys in Body Previewer
• [Breakpoint] Setting to auto close the Windows if there are no breakpoints
• [Breakpoint] Show Breakpoint Number Badge if there are active breakpoints

Bugs

• Fixed: [Breakpoint] Abort a breakpoint will abort all breakpoints
• Fixed: Diff View can't show a large number

Screenshots

Improvement

• Proxyman now can preview Server-Sent Event(SSE) in realtime
• Add: GraphQL Filter in the main filter
• Optimize Memory Usage when exporting a large data to ProxymanLogv2
• Add: Leading text truncation option for the main table view. Easier to see long text.
• Able to export HAR and CSV from multiple folders
• [License Manager] Able to add comments/notes to the device

Bugs

• Fixed: [Map Remote] Map Remote breaks for query parameters at the root path
• Fixed: Use No-Caching on Repeated Request in Setting does not save
• Fixed: proxyman-cli import does not activate the 'allow system environment' Scripting
• Fixed: HAR Export on 12h Time Produces Incorrect Timestamps
• Fixed: Proxyman Causes Massive Request Load when Using ESET AntiVirus Tool
• Fixed: Proxyman consumes a lot of RAM Usage when exporting to ProxymanLog file
• Fixed: Is there a way to see response data for streaming API calls (eg. endpoints meant for receiving Server sent events)
• Fixed: 'Copy to cURL' has incorrect escape single quote in the body
• Fixed: Can't export HAR, CSV from the Saved Folder
• Fixed: Can not decode Base64 String which is encoded by Java algorithm

Screenshot

Features

• Introduce the Proxy Advanced Setting
• Support Wildcard domain on the Left Panel that allows developers to match different URLs
• Auto break of URL and fill for fields on Map Remote (like we had in Charles Proxy)

Improvement

• Able to edit SSL Proxying Entry
• Make a clickable URL on the Comment Tab
• Support M3U8 HLS Syntax highlighting
• Improve New Menu Context from the Source List
• Move some unnecessary settings from Settings -> General Tab to a different screen

Bugs

• Fixed: Custom pinned wildcard domains have blank labels and don't show results
• Fixed: [codegen] support dart/flutter
• Fixed: URL path in the blocked list is ignored, if the domain is listed in the allowed wildcard
• Fixed: Listening on localhost is not synchronized with UI
• Fixed: Links are not clickable on the Body Tab
• Fixed: SSL Proxy List can't be edited
• Fixed: [BUG] Proxyman Script doesn't update the shared state if using abort()
• Fixed: iOS app - misspelling in menu Tools > No Caching
• Fixed: [BUG] Server Certificate shows incorrect data
• Fixed: [Scripting] Scripting removes the = in the form body if the value is empty
• Fixed: Delete single or multiple flows behavior doesn't match with macOS UX.
• Fixed: proxyman-cli import does not enable SSL proxying rules

Screenshots

Proxy Advanced Setting

Wildcard on Left Panel

Auto break URL for Map Remote

https://github.com/ProxymanApp/Proxyman/assets/5878421/3610c636-ca12-4065-94bc-bc64353e26ca

Features:

• Introduce the Manual Install the certificate to the iOS Simulator by Drag and Drop.
• [WebSocket] Support Filter WebSocket Message for the Web Socket

Improve

• Upgrade to the latest v0.45.0 Monaco Editor for the Body previewer. Better performance and show color for each pair of { and }
• Update new Icon for Proxyman File Icon
• Hide the alert if the custom certificate does not satisfy Apple Requirements
• [Scripting] Update the latest Lodash libs
• [Compose Tool]: Option to follow the redirects or not
• Support Miliseconds when Convert Timestamp to human-readable time
• [Scripting] Support Binary Data via Uint8Array
• Previewing images breaks while previewing other file types

Bugs

• Fixed: [Scripting] Error when using built-in Promise
• Fixed: [BUG] Drag & Drop a file to the Body View will break the UI
• Fixed: Support "Show Invisibles" in the Body Tab
• Fixed: This document contains many ambiguous Unicode characters (Disable Ambiguous Highlight) leads to an error
• Fixed: Invalid Promise object in Script runner breaks require of full lodash suite
• Fixed: jwt string in the request body gets converted to JSON payload when scripting is enabled
• Fixed: Response window scrolling bugs

Screenshots

• Filter By Websocket Message

https://github.com/ProxymanApp/Proxyman/assets/5878421/97178b0d-2edb-414e-bd47-aa3ddeca8a4c

• Manual Install the certificate to iOS Simulator

https://github.com/ProxymanApp/Proxyman/assets/5878421/8bf45380-5351-4ef9-b571-8f2f6705e422

Improve

• Improve UX: Do not auto-select the Saved Folder after saving a request.
• Improve UI of the iOS Simulator Setup Guide.
• Use Monospaced font for UI.
• [Scripting] Programmatically load the system environment from JS Code.
• [SSL Proxying List] New UI: Merge the Wildcard and Domain into a single input. Easier to use.
• Re-wording the alert if the Root Certificate is expired.

Bugs

• Fixed: Proxy Helper Tool installation did not succeed on Macbook SIP is disabled.
• Fixed: Proxyman shows HTTP Version incorrectly when importing a HAR log.
• Fixed: Links are not clickable on Body Previewer.

Screenshots

Bugs

• Fixed: ✅ Crash when cleaning unused memory if the RAM usage is over 2Gb
• Fixed: [Protobuf] Fix search in combo box when selecting Protobuf Message Type
• Fixed: Processing a large multipart body might cause the app to hang
• Fixed: Export Multipart with the incorrect file extension
• Fixed: Proxyman always processes the Multipart data multiple times for the same body -> Waste CPU
• Fixed: The multipart tab shows old data even though we select a new request

Improve

• ✅ Helper Tool v1.5.0: Fix Security Vulnerability that Proxyman v1.5.0 or older (2019) can connect to the Helper Tool (v1.4.0) and override the system proxy without user consent. This fix will add some constraints to verify the incoming Connection. (The caller must be notarized by Apple, signed by Proxyman LLC Certificate, enabled Library Validation, and enabled Force Hard flag). 📣 Credit to Scott Leitch from NCC Group.
• [Scripting] Support native URL and URLSearchParams for Scripting.
• [Compose] Able to set the Request Timeout (default is 30 seconds) in the Setting -> Tool Tab
• Improve Proxyman Pro UI: Hide the FREE version if it's a PRO version
• Add Proxyman CA Certificate into a certificate chain. It's useful if the client needs to verify the certificate.
• Able to change the Proxy port in the Proxy Info Popover
• [Compose Tool] Able to paste the cURL and display it on the Compose View
• Support Timestamp convert to human-readable date time

Bugs

• Fixed: Crash on macOS 10.15 and macOS 11 due to an internal crash from AppCenter framework
• Fixed: Clear Session might not close all alive connections properly due to race condition issues
• Fixed: Request/Response panel does not update correctly after deleting a request
• Fixed: Websocket with Multiple JSON does not beautify properly
• Fixed: 'Add App / Domain...' in the SSL Proxying List might not work properly
• Fixed: Cannot get the Root Certificate from Android client X509TrustManager
• Fixed: Missing Query in some HAR files
• Fixed: Diff tool in the Free version. It can add up to 2 requests/responses

Screenshots

Feature

• Ready for macOS Sonoma 14. Build and Optimized with the latest macOS 14 and Xcode 15.
• New design for Proxyman Pro Feature -> Show the difference between the FREE and PRO plan.

Improvement

• [Scripting] Multiple Scripts can be executed.
• [Gist] Add option to scrub credentials when exporting to gist
• Proxyman Root Certificate is now generated by Boring SSL
• Toggle Map Local, Breakpoint, and Scripting Tools by command line
• Add some Apple hosts to the default list of Bypass Proxy List -> Prevent capturing too much unnecessary Apple Traffic.

Bugs

• Fixed: Typo on some UI
• Fixed: Reset all Proxyman Certificate features still reset even though the user cancels the Authentication
• Fixed: Cannot install certificates due to invalid OpenSSL version on the macOS
• Fixed: Response pane has excessive minimum width, prevents resizing of the left sidebar, and forces the window to be wider than screen bug
• Fixed: Some internal crashes

Screenshots

Feature

• Introduce the Custom Filter -> Allow to create your own filter and add it to the filter toolbar for quick access.

Improvement

• Improve Memory Usage: From 2-3Gb to 100-200Mb if using the app for a long period of time (12-24 hours or days).
• Disable an SSL certificate verification when using WebView Previewer.
• Add a Helper button to remove the Domain from SSL Proxying List -> It's useful if this domains are protected by SSL Pinning
• [ProxymanCLI] Clear Session by using proxyma-cli

Bug

• Fixed: Memory Leaking due to initializing a lot of unused Locks.
• Fixed: Clear Session does not remove all unused Tree View.

Screenshots

Improvement

• Improve Android Network Setup guide: No need to add domains to the network_security_config.xml
• Remove Domain Manage in the Android Setup Guide. It's not needed anymore.
• Update the latest SwiftNIO v2.58.0 with performance improvement and patched security.
• [Scripting] Support `console.log()`` with multiple arguments
• [Scripting] Add an option to hide all Proxyman Logs in the Console Log. Only display user logs.
• [Breakpoint] Allow to use custom Status Code on Breakpoint Response, e.g. Status Code 430

Bug

• Fixed: Proxyman does not show IPv6 address properly
• Fixed: Proxyman could not make a connection with the IPv6 address
• Fixed: Excessive memory consumption when reloading React Native
• Fixed: HTTPS Connection hangs forever when using Android Emulator with Proxy Setting
• Fixed: Crashed when accumulating Request/Response Body. Reported by AppCenter.

Screenshots

Improve

• Improve performance when rendering a huge dataset
• Update to v1.0.9 Brotli Google Lib
• Update to the latest version of SwiftNIO Core

Bugs

• Fixed: Certificate Status does not update properly after installing a new one
• Fixed: Could not use Custom Status Code in Breakpoint Response
• Fixed: Could not decode some brotli body
• Fixed: Rare Crashes due to race condition issue

Features

• Introduce the SOCKS5 Proxy.

Improvement

• Use httpbin.proxyman.app instead of httpbin.org in the Compose Template View for better performance and response time
• Automatically remove the leading/trailing whitespaces and newlines in the Tool URL to avoid unexpected bugs.
• Repeat a CONNECT request will use the GET method

Bugs

• Fixed: Proxyman gets stuck while importing multiple Charles sessions
• Fixed: Allow List does not work
• Fixed: [Block List] High Memory usage when using the Block List
• Fixed: Fix the Saved folder hint UI
• Fixed: High Memory consumption issue when using the app for a long time
• Fixed: Attempt fixing the crash when using the Atlantis framework

Screenshots

Features

• Introduce DNS spoofing which allows you to define a custom DNS.

Improvements

• Improve performance for the ALL Filter when searching through a large number of Request/Response Body
• Remove some unused options in the Preference: (Select Previous Tab, chls export folder, rename some menu items) in the Setting -> Advanced
• UI Improvement
• Remove Sort by Alphabet in the Setting
• Remove some unused menu items in the Right Menu Context -> Tools (Code Generator, Protobuf)
• Able to export multiple apps/domains to ProxymanLog, HAR, CSV, ...
• Improve color highlighting for the boolean in the Body Previewer
• Add Open With to open the large body with External Editors

Bugs

• Fixed: Worse Performance or app crash when filtering the Request/Response Body or ALL filter
• Fixed: 1 request is evaluated via debugging tools TWICE

Screenshots

Improvements

• [Map Local] Map Local can work with non-text Response Body, e.g. Image, or Binary.
• Toggle HTTP Proxy Overriden programmatically via proxyman-cli
• Use Alternative Background Color in the Appearance Tab
• Always show the Query Tab in the Request Panel
• Grouping of different Chrome channels (Production, dev, beta, ...)

Bugs

• Fixed: Map Local does not work with Image or Binary Body
• Fixed: When the script uses on request, it will increase at the end of the body
• Fixed: Copy as cURL omits the accept-encoding header
• Fixed: Loop bug when visiting http://127.0.0.1:9090

Screenshots

Feature

• Introduce the Bypass Proxy List for the SSL Proxying List.
• Introduce the "Test your Rule" feature that helps you to easily test your Wildcard/Regex Rule with a list of URLs

Improvement

• Add TLS information to the Summary Tab, including the ALPN, TLS Version, Supported Cipher suites, Negotiated Cipher Suites
• [Map Remote] Add 2 advanced options: Preserve the Host Header and Preserve the URL
• [Scripting] Support both request.comment and response.comment
• [Body] Support Tab Width (2 or 4)
• [cURL] Add option disable Content-Length in copy curl
• [proxyman-cli] Able to turn on / off the Proxy-State via proxyman-cli

Bugs

• Fixed: Undo/Redo does not work with the URL Textfield in the Compose View
• Fixed: [Repeat Tool] Could not repeat a request with an invalid server certificate

Screenshot

Improvement

• Sort the Payload and Header of JWT
• [Automatic Setup] Capture HTTP(S) traffic from Electron App

Bugs

• Fixed: Cannot delete custom columns
• Fixed: Automatic Setup does not work with Axios (NodeJS)

Screenshots

• Automatic Setup
  

• Terminal
  

Features

• Introduce the Automatic Setup: Capture HTTP(s) from your NodeJS, Ruby, and Python Backend from the Terminal app with 1 click. Support various network libraries: cURL, NodeJS (axios, got, fetch, node-fetch), Ruby (http, net/http, net/htps, faraday, and httparty, fastlane), Python (http, https, aiohttp, requests).

Improvement

• [Breakpoint] Add option for the Abort Breakpoint: Return 503 Status Code or stop the connection immediately.
• [Map Remote] Add an option to choose to use a Real URL after matching with Map Remote or keep the original URL.

Bug

• Fixed: [Scripting] Scripting changes + to %2B in the form body of the Request.
• Fixed: Export to HAR doesn't include request binary body.

Screenshots

• Automatic Setup
  

• Manual Work:
  

Improve

• Improve Monaco Editor Server: Retry or Load the static page. It guarantees the Body Preview always displays properly.
• Show Rule Title on the Map Local Editor or Script Editor Windows

Bugs

• Fixed: Body Tab does not show the Preview View
• Fixed: Map Local editor does not display

Improve

• [Map Remote] If map remote works, the request record should be replaced with a real URL
• Add "Client Name" and "IP Server" to the main filter criteria

Bugs

• Fixed: Multiple alerts if pin multiple requests in the Free Version.
• Fixed: Pin domains to favorites work without premium.
• Fixed: "Copy cURL" does not escape the @ annotation.
• Fixed: Memory Leak when fetching the certificate from the remote server.

Screenshots