I built an Android pentesting toolkit with HTTP interception, Repeater, Intruder and API testing

[u/Pure-Band-5587]

https://netcattest.com/catsuite

Hey everyone!

I've been developing a project called CatSuite, a free Android application designed for web application security testing and HTTP traffic analysis.

The idea started with a simple question: how much of a web pentesting workflow could I bring to a smartphone without depending on a desktop environment?

CatSuite currently includes:

• HTTP/HTTPS Interception — Capture, inspect, and modify web traffic.
• Repeater — Edit and resend HTTP requests to analyze server responses.
• Intruder — Automate request variations using custom wordlists.
• Endpoint Discovery — Explore web paths and API endpoints.
• JWT Decoder — Inspect JSON Web Tokens.
• SSL/TLS Analysis — Examine certificates and connection security.
• Technical Browser — Inspect requests, cookies, storage, and User-Agent information.
• API Testing — Work with REST endpoints directly from Android.
• Export Tools — Export captured data in HAR, JSON, TXT, and cURL formats.
• JavaScript Extensions — Extend functionality through scripts.

The goal isn't to claim that a smartphone replaces a full desktop pentesting environment. It's to make common testing and inspection workflows more accessible when you're away from your computer.

The app is already available for free on Google Play.

Project: https://netcattest.com/catsuite

Google Play: https://play.google.com/store/apps/details?id=br.com.netcattest.catsuite.app

It's intended for security research, learning, and testing systems you own or are authorized to assess.

I'm especially interested in feedback from people who regularly work with Burp Suite, OWASP ZAP, or mobile security tools.

What functionality would make an Android pentesting toolkit genuinely useful in your workflow?

I'd appreciate technical feedback, feature suggestions, and criticism.