TunnelSight

TunnelSight is your on-device network microscope, built for iOS and purpose-crafted for developers, network engineers, and security researchers who need real-time, packet-level visibility into every HTTP and HTTPS transaction. Install your unique per-device root CA once, start TunnelSight’s Local VPN tunnel, and instantly see every request, response, header, and body live, decoded, and ready for analysis. With the new on-device scripting engine, you can rewrite headers, mutate bodies, swap URIs, or short-circuit responses in flight, all driven by JavaScript you author and dry-run from your iPhone or iPad.

Key Features
• Live Packet Interception
Local VPN plus MITM proxy architecture captures all HTTP and HTTPS traffic on-device with zero cloud dependency.
• cURL-Exact Replay
For any intercepted request, generate a ready-to-run cURL command to reproduce the exchange in your terminal with headers, method, and body intact.
• JSON Export and Reporting
One-tap export of request and response pairs as structured JSON. Integrate with your CI, SIEM, or custom tooling.
• Smart Caching and Filtering
Cache responses on demand. Define URL, header, or content filters to focus on what matters.
• Searchable Session History
Full-text search across captured traffic so you can find specific API calls quickly.
• Secure Per-Device Root CA
Automatically generates a self-signed root certificate unique to each device. Simple one-time install with no shared keys.
• Remote Device Debugging (Pro Feature)
Optionally inspect traffic from another device you control by manually configuring it to use TunnelSight as a proxy. Requires explicit setup and certificate installation on that device. Designed for testing and debugging across multiple devices.
• On-Device Scripting Engine
Write JavaScript scripts that intercept and mutate live traffic. Rewrite headers, bodies, URIs, and methods, change response status codes, or short-circuit a request with a synthetic response. Chain multiple scripts in order, scope them with URL and method matchers, and validate every change against a real captured packet using the built-in dry-run preview before going live. Start from packet-aware templates generated straight from any captured request.

Why TunnelSight?
• Zero-Trust Testing
Validate your mobile app’s backend calls under real network conditions.
• On-Device Debugging
No desktop proxy required. Debug directly from your iPhone or iPad.
• Multi-Device Testing
Debug requests from additional devices using the optional Pro feature.
• Audit and Compliance
Export logs for penetration testing, audits, or bug bounties.

Disclaimers and Legal Notices

1. Intended Use Only
TunnelSight is designed for lawful testing, debugging, and security research on networks and applications for which you have explicit permission. Unauthorized interception or decryption of traffic may violate local laws and regulations.
2. User Responsibility
By installing the TunnelSight root certificate and using the Local VPN