看清你的 iPhone 发出的每一个请求。
直接在手机上进行全系统 HTTPS 捕获——只解密你选择的域名，在仪表盘中实时查看，并通过空中推送修改规则。
观看设置演练。
从安装到实时抓包只需约
按照下方步骤设置，或观看本页顶部的演示。
Sign in
01Create a free Busymate account with Apple or email — it pairs the app to your device.
Add your domains
02List the domains you want to decrypt. Everything else stays end-to-end encrypted.
Install & trust the CA
03Install the local certificate generated just for you — the 1-minute walkthrough above shows exactly how.
Capture & inspect
04Flip capture on, accept the disclosure, and requests stream in live — tap any one for full headers and body.
实时看到每一个请求
Every request streams in live — method, URL, status, headers, and body. No Mac, no Wi-Fi proxy.
深入查看请求头与请求体
Open any request for headers, query, status, timing, and full bodies — formatted and readable.
只解密域名
Decrypt only the domains you add. Everything else stays end-to-end encrypted.
同步到
Optionally sync to dash.busymate.dev — search, tag, and export HAR on a bigger screen.
一切由
Built for traffic from apps and sites you own or are authorized to debug. Capture is always opt-in.
Capture is opt-in
Nothing is captured until you explicitly turn it on and accept the on-screen disclosure.
HTTPS only for chosen domains
Decryption is limited to domains you add — and you can add or remove them at any time.
A local CA, on your device
Decryption uses a CA certificate generated just for you, with guided step-by-step setup inside the app.
Stop and remove anytime
Stop capturing and remove the VPN profile from iOS Settings whenever you like. Synced captures are deletable.
隐私优先
捕获在你的设备上运行。同步的捕获数据保存在你的账户中，可能包含敏感信息。仅检查你有权调试的流量。 隐私政策
随时随地
- iOS / iPadOS 17 or later
- A free Busymate account (sign in with Apple or email)
- No in-app purchases
The debugger is
HTTPS 就在 iPhone 上——无需 Mac，无需数据线。选好要解密的域名，打开捕获，实时观看。
看得见一切，只解密你允许的
NetworkExtension VPN 在系统层面抓取流量——你的应用、第三方应用，全部。TLS 只对你明确加入 SSL 列表的域名解密，手机其余部分保持私密。
无需 Mac。无需代理。无需折腾。
无需连线，笔记本上也无需配置。手机自己抓取、解密并流式上传——在你桌边、测试台，或地球另一端。
一键开启 SSL 代理
在仪表盘里看到一条加密记录？点一下。设备通过 Realtime 接收变更，几秒内就开始解密该域名——无需回到手机操作。
远程管理，实时空中下发
规则、脚本、模拟和 VPN 开关从仪表盘实时推送到设备——无需重新构建，无需 App Store 审核。打开捕获或向 SSL 列表添加主机，手机几秒内就会通过 Realtime 接收。
Inside
A packet tunnel, an SNI matcher and an on-device certificate authority — the whole MITM pipeline runs on the phone.
- 01
The phone becomes the tunnel
A NetworkExtension packet tunnel claims the default route, so every app's DNS and TCP passes through the debugger — on the device itself. No Mac, no cable, no proxy settings.
- 02
The handshake decides what's decrypted
Each TLS connection's server name is read from the handshake and matched against your SSL-proxying list — wildcards included. Listed hosts are intercepted; everything else passes through encrypted.
- 03
Certificates are minted on the phone
CA 在首次启动时于设备本地生成——你的密钥永远不会离开手机。每个主机的叶证书按需签发并缓存，因此进入你信息流的正是应用实际发送和收到的请求与响应。
- 04
Rows stream straight to your feed
Every captured pair is written directly to the shared entries table over the device's own long-lived pairing token — no files to pull, no sync step. The dashboard sees it the moment it lands.
The pipeline,
What actually runs when you flip capture on — and what never leaves the phone.
- Capture
- System-wide DNS + TCP via a NetworkExtension packet tunnel
- Decryption
- Selective, per-host SSL list with wildcard patterns — opt-in, never everything
- MITM engine
- per-host leaf certificates · RSA-2048
- Pairing
- 365-day device token claimed at pairing — capture keeps streaming without re-login
- Live control
- Realtime push for settings, SSL lists, VPN on/off, breakpoints and resends — applied in seconds, over the air
- Alternate mode
- PAC proxy mode routes the phone through the shared MITM proxy instead of the on-device tunnel
- Requirements
- An iPhone. No Mac, no jailbreak, no computer in the loop
iOS questions,
Do I need a Mac or any computer?
No. Capture, decryption and streaming all run on the iPhone itself — the phone is the debugger. You watch and control it from the web dashboard on any screen.
Does it decrypt everything on my phone?
No. TLS is opened only for hosts you explicitly add to the SSL-proxying list; every other connection passes through encrypted and untouched. The list is yours, editable live from the dashboard.
How do changes reach the phone without an app update?
The app is server-driven by design: rules, scripts, mocks, SSL lists and even the VPN toggle push to the device over a live Realtime connection. Behaviour changes in seconds — no rebuild, no App Store review cycle.
What about HTTP/3 (QUIC) traffic?
QUIC is not intercepted: the tunnel declines UDP/443 (and counts it), so apps fall back to HTTPS over TCP — where selective decryption and capture work normally.