Virtual-interface capture · Packet Tunnel

NetPeek — on-device HTTP packet capture & HTTPS sniffer for iPhone Traffic that ignores the proxy still gets caught.

On-device HTTP packet capture & HTTPS sniffer for iOS

A virtual interface takes over device traffic · no jailbreak · no Wi-Fi proxy setup

utun · Packet Tunnel

GETapi.myapp.dev/v1/profile200POSTapi.myapp.dev/v1/checkout201GETcdn.myapp.dev/app.bundle.js200POSTevents.analytics-sdk.io/v2/batch202skips system proxy · caughtGETapi.myapp.dev/v1/profile200POSTapi.myapp.dev/v1/checkout201GETcdn.myapp.dev/app.bundle.js200POSTevents.analytics-sdk.io/v2/batch202skips system proxy · caught

WSws.myapp.dev/socket101GETauth.myapp.dev/session401POSTapi.myapp.dev/v1/chat200GETconfig.ads-sdk.net/init200skips system proxy · caughtWSws.myapp.dev/socket101GETauth.myapp.dev/session401POSTapi.myapp.dev/v1/chat200GETconfig.ads-sdk.net/init200skips system proxy · caught

PUTapi.myapp.dev/v1/settings204GETimg.myapp.dev/avatar/8123.webp200POSTcrash.report-sdk.com/upload200skips system proxy · caughtGETmetrics.myapp.dev/v2/collect500PUTapi.myapp.dev/v1/settings204GETimg.myapp.dev/avatar/8123.webp200POSTcrash.report-sdk.com/upload200skips system proxy · caughtGETmetrics.myapp.dev/v2/collect500

NetPeek

Capture HTTP/HTTPS on your iPhone. TLS plaintext needs a CA you trust; traffic stays on the phone by default.

NetPeek is an on-device iPhone HTTP/HTTPS packet capture and network debugger. Capture, rewrite, and replay run on the phone—no jailbreak. TLS plaintext needs you to install and trust a local CA and add hosts to the MITM list. Request data isn’t uploaded by NetPeek by default. Exports, or MCP after you enable it for an AI client you authorize, are how captures leave the phone. Crash reports and anonymous statistics stay off until you enable them under Analytics & Improvements.

Optionally enable MCP so an AI client you authorize on this device or the same LAN can analyze captures. Comparing with a desktop proxy? See vs Charles.

NetPeek request list showing captured HTTPS requests with status, method and size — CAPTURERequest listLive traffic with status, method, size and millisecond timestamps.

NetPeek rewrite rules screen listing header injection and mock response rules — CAPTURERequest listLive traffic with status, method, size and millisecond timestamps.

Live capture

Every request, the moment it happens.

Streaming rows with method, host, status and timing. Tap any row to open the full detail — connection, TLS, request and response headers, and a status timeline.

LIVELive request list

tap a row

MCP · analysis endpoint for AI

Live request list

Capabilities

Everything a proxy does.
None of it leaves the phone.

CAPTURE

On-device capture

Inspect requests and responses in real time

HTTPS

HTTPS inspection

Read TLS plaintext after explicit CA trust

REWRITE

Rewrite & mock

Edit headers and bodies or return a mock

SCRIPT

Script automation

Handle advanced debugging logic in JavaScript

REPLAY

Request replay

Edit and resend captured requests

AI · MCP

MCP AI analysis

Optional MCP for a local or same-LAN AI client you authorize

FILTER

Filter & focus

Narrow traffic by host and path

ON-DEVICE

Local by default

Capture, inspection, and rules run on device

FAQ

Questions people ask before they capture.

Does iPhone packet capture require a jailbreak?+

No. NetPeek records HTTP/HTTPS traffic through the standard iOS on-device tunnel API—no jailbreak required.

Do I need a computer to capture iPhone traffic?+

No. Capture, HTTPS inspection, rewriting, scripts, and replay all run on the iPhone itself.

How does NetPeek decrypt HTTPS traffic?+

Download the locally generated CA profile in the app, install it under Settings → General → VPN & Device Management, manually enable full trust under Certificate Trust Settings, then add the target host to the MITM list and send a new request.

Is capture data uploaded to a server?+

Capture bodies are not uploaded. Capture, storage, and inspection stay on the device. An export, or MCP after you enable it and hand over the token, is how a capture reaches someone else.

Can I capture only one app or one host?+

You can filter the request list by host and path inside the app to focus on the API under debug—this is not an OS-level “capture only one app” mode.

Can I export captured requests?+

Yes. A request can be copied as a cURL command, exported as a HAR file, or turned into a replay you can edit and resend.

Read the full FAQ