# Packet Sniffing & Web Game Hacking

Traffic analysis. Capturing packets and REST calls to find server-side vulnerabilities.

5 tools Open Source Paid Web/WASM Mobile Android

Wireshark #

Open Source

The 'God View' of your network. It shows you every single packet your game sends to the server. It is the standard tool for reverse engineering custom network protocols in online games.

Pro Tip: Use filters like 'udp.port == [game port]' to cut through the noise of your PC's background traffic so you can focus on the game data.

Web/WASM

A 'passive' proxy for web traffic. It is great for seeing exactly what JSON data a game launcher is sending to the server when you log in.

Pro Tip: Unlike Burp Suite, Fiddler is built for 'watching' rather than 'attacking.' Use it to map out an API before you start trying to exploit it.

Web/WASM

mitmproxy #

Open Source

The 'hacker's' alternative to Burp Suite. It runs in your terminal and is built for people who want to script their own packet manipulation using Python.

Pro Tip: Faster and lighter than the big GUI tools if you just need to automate some network changes.

Web/WASM

The only way to mess with web-based games or shop systems. It lets you 'catch' a request (like buying an item), change the price to zero, and send it anyway to see if the server is actually checking.

Web/WASM

A beautiful, open-source HTTP debugger and API interception tool. It automatically intercepts and mocks traffic from browsers, scripts, and mobile apps with zero manual proxy configuration.

Pro Tip: If you are tired of fighting with Burp certificates on Android, HTTP Toolkit can often auto-configure the proxy for you in one click.

Web/WASM Mobile Android