MiniProxy — Web UI

Hide static Highlighted

Captured requests

ID	Method	Status	Size	Host	Path
Waiting for traffic…

Select a request…

Request line & headers

Body

Response headers

Body

Intruder results for the selected request

(none yet — run one from the Intruder tab)

Note

Highlight

Request history

ID	Time	Method	URL	Status
No requests.

1 · Select request

Logged request

No request selected

2 · Edit & send

Method

URL

Headers (one per line: Key: Value)

Body

Follow redirects

1 · Target

Request (use §param§ in fields)

No request selected

Method

URL

Headers

Body

2 · Wordlist

One wordlist, substituted into every §placeholder§.

Upload .txt (one per line, max 1000)

Compare captures

A —

B —

Noise filter

Browser traffic drowns out the target. Enabled rules are dropped at capture time, so they never enter the DB. Static assets (images, fonts, css, js, media) are always eligible — the bundled list covers common telemetry and ad hosts and ships disabled.

Match & replace

Rules are applied to requests as they pass through the proxy, before they reach the server — so the target sees the modified values. For headers, Exact matches the header name and sets its value; Contains and Regex match inside the value.

1 · Proxy address

… checking…

Detected from how you opened the dashboard (SSH tunnel / port-forward friendly). Other devices reach this same proxy at the addresses listed in “Addresses”.

Addresses

2 · Point the browser here

PAC URL — browser/OS “automatic proxy configuration”

Or set an HTTP proxy manually (host:port above) · or one-liners:

…

…

Full per-platform steps, phone setup, and VPS instructions live on the Connect page ↗ and in docs/connect.md.

3 · Trust the CA (HTTPS bodies)

Download CA

…

4 · Verify & pair

Name this device (saved to the device registry)

Saved devices

loading…

Scan from a phone

▶ MiniProxy

Highlight capture