NetPeekDocs
EN中文
Contents

NetPeek for iOS

HTTPS inspection

Install the on-device CA profile, enable full trust, and add MITM hosts so HTTPS plaintext is visible.

HTTPS inspection requires a root CA generated on this iPhone. The private key does not leave the device. iOS does not let an app trust that CA silently — you install a configuration profile and enable full trust in Settings. Capture must be running so the local CA download page is reachable.

Install and trust

  1. Start capture, then open http://127.0.0.1:8080 in Safari on the phone and download the profile.
  2. Install it under Settings → General → VPN & Device Management.
  3. Enable full trust under Settings → General → About → Certificate Trust Settings.
  4. Add the hosts you intend to decrypt to the MITM list, then send a new request.

MITM host list

Only listed hosts are decrypted; other TLS traffic is forwarded without inspection. Syntax:

  • +host or a bare host decrypts that name. * decrypts every host.
  • -*host* is an explicit exclude and wins over wildcards.
  • Swipe a capture row → Add MITM or Add MITM blacklist.

Upstream certificate verification is fail-open by default so misconfigured origin certificates do not break connectivity while you debug. The CA is never uploaded.

Certificate pinning. Apps that pin the origin certificate refuse the NetPeek leaf, so those hosts stay encrypted. Rewrite, scripts, and replay cannot act on plaintext bodies for pinned flows.