# CatSuite

> Laboratório Android gratuito para segurança web e APIs: interceptador, proxy HTTPS, Repetir, Intruso, Descobridor, extensões em JavaScript e fluxos visuais.
> Free Android lab for web and API security: interceptor, HTTPS proxy, Repeater, Intruder, Discoverer, JavaScript extensions and visual workflows.

CatSuite 1.5.0 · SDK 1.4.0 · NetCatTest. Site, documentação e IDE em português do Brasil e inglês. Cada página da documentação tem uma versão em Markdown: acrescente .md ao endereço. / Website, documentation and IDE in Brazilian Portuguese and English. Every documentation page has a Markdown version: append .md to its URL.

## Páginas / Pages

- [CatSuite (pt-BR)](https://netcattest.com/catsuite): CatSuite — Segurança web, APIs e extensões no Android
- [CatSuite (en)](https://netcattest.com/catsuite/en): CatSuite — Web security, APIs and extensions on Android
- [Documentação](https://netcattest.com/catsuite/docs.md): Documentação oficial e bilíngue do CatSuite: primeiros passos, extensões .catplug, API JavaScript do SDK, fluxos visuais, segurança e CatBridge.
- [Documentation](https://netcattest.com/catsuite/en/docs.md): Official bilingual CatSuite documentation: getting started, .catplug extensions, the SDK JavaScript API, visual workflows, security and CatBridge.
- [IDE de extensões](https://netcattest.com/catsuite/ide): Escreva, valide, simule e exporte extensões .catplug do CatSuite direto no navegador, com validação igual à do app e laboratório fictício integrado.
- [Extension IDE](https://netcattest.com/catsuite/en/ide): Write, validate, simulate and export CatSuite .catplug extensions right in the browser, with the same validation as the app and a built-in fictional lab.
- [Google Play](https://play.google.com/store/apps/details?id=br.com.netcattest.catsuite.app)
- [GitHub](https://github.com/netcattest/catsuite): repositório oficial do CatSuite / official CatSuite repository
- [CatBridge no GitHub / on GitHub](https://github.com/netcattest/catsuite/tree/main/catbridge): código e instruções do conector opcional / optional connector source and instructions
- [CatBridge para Windows / for Windows](https://github.com/netcattest/catsuite/releases/download/tools-1.2.0/catbridge-windows-amd64.zip): pacote portátil / portable package
- [CatBridge para Linux / for Linux](https://github.com/netcattest/catsuite/releases/download/tools-1.2.0/catbridge-linux-amd64.tar.gz): pacote portátil / portable package
- [SDK 1.4.0 no GitHub / on GitHub](https://github.com/netcattest/catsuite/tree/main/sdk): tipos, runtime de referência, esquemas, exemplos e fluxos / types, reference runtime, schemas, examples and workflows
- [SDK 1.4.0 em ZIP / as ZIP](https://github.com/netcattest/catsuite/releases/download/sdk-1.4.0/catsuite-sdk-1.4.0.zip): download do SDK de extensões / extension SDK download
- [CatSuite Studio no GitHub / on GitHub](https://github.com/netcattest/catsuite/tree/main/catsuite-vscode): código da extensão para VS Code com o SDK / VS Code extension source with the SDK
- [CatSuite Studio no Marketplace / on the Marketplace](https://marketplace.visualstudio.com/items?itemName=NetCatTest.catsuite-studio): instalar a extensão no VS Code / install the extension in VS Code

## Módulos / Modules

- Interceptador / Interceptor: Revise cada request e response antes do encaminhamento e mantenha o histórico organizado por domínio. / Review every request and response before it is forwarded and keep history organized by domain.
- Navegador / Browser: Um navegador técnico com as ferramentas de inspeção que você usaria no computador. / A technical browser with the inspection tools you would use on a computer.
- Proxy de Rede / Network Proxy: Leve o tráfego HTTP e HTTPS do aparelho para o laboratório com certificado próprio. / Bring the device’s HTTP and HTTPS traffic into the lab with its own certificate.
- Repetir / Repeater: Edite requests brutas, reenvie quantas vezes quiser e compare respostas lado a lado. / Edit raw requests, resend as often as you need and compare responses side by side.
- Intruso / Intruder: Marque posições, escolha wordlists e conduza testes no seu ritmo, com pausa e retomada. / Mark positions, pick wordlists and run tests at your own pace, with pause and resume.
- Descobridor / Discoverer: Encontre caminhos, parâmetros e endpoints em alvos autorizados, com controle fino de ritmo. / Find paths, parameters and endpoints on authorized targets with fine-grained pacing.
- Decodificar / Decoder: Transforme e interprete os formatos que aparecem no tráfego, com detecção automática. / Transform and interpret the formats that show up in traffic, with automatic detection.
- SSL/TLS / SSL/TLS: Triagem de certificado e conexão segura sem sair do laboratório. / Certificate and secure connection triage without leaving the lab.
- História / History: Linha do tempo da sessão e notas locais para não perder nenhuma evidência. / A session timeline and local notes so no evidence gets lost.
- Extensões / Extensions: Estenda os módulos com JavaScript e transforme rotinas em fluxos reproduzíveis. / Extend the modules with JavaScript and turn routines into reproducible workflows.

## Documentação em português

- [Introdução ao CatSuite](https://netcattest.com/catsuite/docs/introducao.md): O que é o CatSuite, como os módulos do laboratório se conectam e o que mudou na versão 1.5.0 com extensões, fluxos visuais e CatBridge.
- [Primeiros passos no CatSuite](https://netcattest.com/catsuite/docs/primeiros-passos.md): Instale o CatSuite, conheça a navegação principal, capture sua primeira request e exporte evidências em TXT, cURL, JSON ou HAR.
- [Downloads e SDK](https://netcattest.com/catsuite/docs/downloads.md): Onde baixar o CatSuite, o CatBridge para Windows e Linux, o SDK de extensões 1.4.0 e o CatSuite Studio para VS Code, com os links oficiais e as somas SHA-256.
- [Módulos do CatSuite](https://netcattest.com/catsuite/docs/modulos.md): Conheça os módulos do CatSuite: Interceptador, Proxy de Rede, Navegador, Repetir, Intruso e Descobridor, com glossário e como usar e configurar cada um.
- [Interceptador](https://netcattest.com/catsuite/docs/modulos/interceptador.md): Interceptador do CatSuite: como usar e configurar a fila, editar requests e responses, Site Map, histórico com filtros e exportação HAR, JSON, TXT e cURL.
- [Proxy de Rede](https://netcattest.com/catsuite/docs/modulos/proxy.md): Proxy de Rede do CatSuite: como configurar o proxy MITM, o certificado CA, a Captura Total de HTTP e HTTPS, as regras de substituição e a pausa de responses.
- [Navegador](https://netcattest.com/catsuite/docs/modulos/navegador.md): Guia completo do módulo Navegador do CatSuite: monitor de rede, código-fonte, inspecionar elemento, modificador de DOM, JWT/Base64, User-Agent e spoof de IP.
- [CatEyes](https://netcattest.com/catsuite/docs/modulos/cateyes.md): CatEyes do CatSuite: como usar e configurar a detecção de tecnologias da página, o nível de confiança por detecção e os sinais de CVE da base local.
- [Repetir](https://netcattest.com/catsuite/docs/modulos/repetir.md): Guia completo do módulo Repetir do CatSuite: como usar o editor HTTP com realce, autocompletar de headers, reenviar, comparar respostas e configurar o SSL/TLS.
- [Intruso](https://netcattest.com/catsuite/docs/modulos/intruso.md): Intruso do CatSuite: como usar e configurar os marcadores de payload, wordlists, geradores, ritmo do ataque e filtro de resultados por status e tamanho.
- [Descobridor](https://netcattest.com/catsuite/docs/modulos/descobridor.md): Descobridor do CatSuite: como usar e configurar a descoberta de caminhos, parâmetros e endpoints com wordlists, métodos HTTP, ritmo controlado e backoff 429.
- [Decodificar](https://netcattest.com/catsuite/docs/modulos/decodificar.md): Decodificar do CatSuite: como usar e configurar a autodetecção de JWT, Base64, URL, Hex, HTML Entities e Binary, além do inspetor JWT/JWE e hashes MD5 e SHA.
- [SSL/TLS](https://netcattest.com/catsuite/docs/modulos/ssl-tls.md): Analisador SSL/TLS do CatSuite: como usar e configurar a triagem de handshake, versão do TLS, cipher suite, cadeia até a raiz, fingerprints e validade.
- [História e notas](https://netcattest.com/catsuite/docs/modulos/historia.md): Guia de História e notas do CatSuite: como usar e configurar a linha do tempo de requisições, filtros, busca, bloco de notas e exportação de evidências.
- [Wordlists e payloads](https://netcattest.com/catsuite/docs/modulos/wordlists.md): Wordlists e payloads do CatSuite: como importar listas .txt, usar wordlists padrão, configurar o gerador de payload e aplicar no Intruso e no Descobridor.
- [Extensões do CatSuite](https://netcattest.com/catsuite/docs/extensoes.md): Como funcionam as extensões .catplug: motor QuickJS isolado, permissões, ciclo de vida, pontos de integração e limites da API v1.
- [Manifesto do pacote .catplug](https://netcattest.com/catsuite/docs/extensoes/manifesto.md): Estrutura do arquivo .catplug, campos do manifest.json, regras de validação, permissões, destinos, hashes SHA-256 e o formato 2.
- [SDK de extensões 1.4.0](https://netcattest.com/catsuite/docs/extensoes/sdk.md): O SDK de extensões 1.4.0 do CatSuite: onde baixar, o que vem no pacote, o objeto global cat, os exemplos, os modelos de fluxo e as capacidades do CatBridge.
- [Referência da API JavaScript](https://netcattest.com/catsuite/docs/extensoes/api.md): O objeto global cat do SDK 1.4: mensagens HTTP, eventos, hooks de alteração, envios, APIs externas, laboratório, recursos e utilidades.
- [Interface, dados e achados](https://netcattest.com/catsuite/docs/extensoes/interface-e-dados.md): Comandos, menus de mensagem, abas nativas e componentes; armazenamento, configurações, credenciais e achados com evidência.
- [IDE web de extensões](https://netcattest.com/catsuite/docs/extensoes/ide.md): Como usar a IDE do CatSuite no navegador para criar extensões do zero ou a partir de exemplos, validar, simular, inspecionar e exportar pacotes .catplug.
- [CatSuite Studio para VS Code](https://netcattest.com/catsuite/docs/extensoes/vscode.md): CatSuite Studio para VS Code: como instalar e usar a extensão para criar, validar, testar e assinar plugins .catplug com sugestões do SDK do CatSuite.
- [Fluxos visuais com .catflow](https://netcattest.com/catsuite/docs/fluxos.md): Monte análises em grafo com etapas, parsers, condições e reuniões; aprovações por revisão, artefatos rastreáveis, checkpoints e limites.
- [Segurança, cofre e proteção de dados](https://netcattest.com/catsuite/docs/seguranca.md): Isolamento das extensões, níveis PUBLIC, PROTECTED e SECRET, cofre biométrico, assinaturas Ed25519, envelope CATSEAL2, backups e recuperação.
- [CatBridge, o conector opcional](https://netcattest.com/catsuite/docs/catbridge.md): O que é o CatBridge, como baixar para Windows e Linux, como parear com o código numérico, a arquitetura isolada e o Protocol 2 com mensagens assinadas.
- [Instalar e parear o CatBridge](https://netcattest.com/catsuite/docs/catbridge/instalar.md): Como baixar o CatBridge para Windows ou Linux, iniciar o serviço, parear o celular com o código numérico de 24 dígitos e revogar aparelhos com segurança.
- [Catálogo de capacidades e ferramentas](https://netcattest.com/catsuite/docs/catbridge/ferramentas.md): As capacidades tipadas do CatBridge, os executores fixados, os perfis read-only, external-approved e active-approved, os orçamentos, os templates revisados e os dados que cada ferramenta recebe.
- [Códigos de erro do SDK](https://netcattest.com/catsuite/docs/referencia/erros.md): Lista dos códigos E_* estáveis retornados por extensões, pacotes, fluxos e conectores do CatSuite, com o significado de cada um.

## Documentation in English

- [Introduction to CatSuite](https://netcattest.com/catsuite/en/docs/introduction.md): What CatSuite is, how the lab modules connect and what changed in version 1.5.0 with extensions, visual workflows and CatBridge.
- [Getting started with CatSuite](https://netcattest.com/catsuite/en/docs/getting-started.md): Install CatSuite, learn the main navigation, capture your first request and export evidence as TXT, cURL, JSON or HAR.
- [Downloads and SDK](https://netcattest.com/catsuite/en/docs/downloads.md): Where to download CatSuite, CatBridge for Windows and Linux, the 1.4.0 extension SDK and CatSuite Studio for VS Code, with official links and SHA-256.
- [CatSuite modules](https://netcattest.com/catsuite/en/docs/modules.md): Explore the CatSuite modules: Interceptor, Network Proxy, Browser, Repeater, Intruder and Discoverer, with a glossary and how to use and configure each one.
- [Interceptor](https://netcattest.com/catsuite/en/docs/modules/interceptor.md): CatSuite Interceptor: how to use and configure the queue, edit requests and responses, Site Map, history with filters and HAR, JSON, TXT and cURL export.
- [Network Proxy](https://netcattest.com/catsuite/en/docs/modules/proxy.md): CatSuite Network Proxy: how to configure the MITM proxy, the CA certificate, Full Capture of HTTP and HTTPS, the replacement rules and response pausing.
- [Browser](https://netcattest.com/catsuite/en/docs/modules/browser.md): Guide to the CatSuite Browser module: network monitor, page source, inspect element, DOM modifier, JWT/Base64, User-Agent, desktop mode and IP spoofing.
- [CatEyes](https://netcattest.com/catsuite/en/docs/modules/cateyes.md): CatSuite CatEyes: how to use and configure page technology detection, the confidence level per detection and the local-database CVE signals to review.
- [Repeater](https://netcattest.com/catsuite/en/docs/modules/repeater.md): Complete guide to the CatSuite Repeater module: how to use the highlighted HTTP editor, header autocomplete, resend, compare responses and configure SSL/TLS.
- [Intruder](https://netcattest.com/catsuite/en/docs/modules/intruder.md): CatSuite Intruder: how to use and configure payload markers, wordlists, generators, payload processors, attack pacing and result filtering by status and size.
- [Discoverer](https://netcattest.com/catsuite/en/docs/modules/discoverer.md): CatSuite Discoverer: how to use and configure path, parameter and endpoint discovery with wordlists, HTTP methods, controlled pacing and automatic 429 backoff.
- [Decoder](https://netcattest.com/catsuite/en/docs/modules/decoder.md): CatSuite Decoder: how to use and configure auto-detection of JWT, Base64, URL, Hex, HTML Entities and Binary, plus the JWT/JWE inspector and MD5 and SHA hashes.
- [SSL/TLS](https://netcattest.com/catsuite/en/docs/modules/ssl-tls.md): CatSuite SSL/TLS Analyzer: how to use and configure handshake triage, TLS version, cipher suite, chain validation to the root, fingerprints and expiry.
- [History and notes](https://netcattest.com/catsuite/en/docs/modules/history.md): Guide to the CatSuite History and notes module: how to use and configure the request timeline, filters, search, the notepad and evidence export on your device.
- [Wordlists and payloads](https://netcattest.com/catsuite/en/docs/modules/wordlists.md): Wordlists and payloads in CatSuite: how to import .txt lists, use default wordlists, configure the payload generator and apply them in Intruder and Discovery.
- [CatSuite extensions](https://netcattest.com/catsuite/en/docs/extensions.md): How .catplug extensions work: isolated QuickJS engine, permissions, lifecycle, integration points and API v1 limits.
- [The .catplug package manifest](https://netcattest.com/catsuite/en/docs/extensions/manifest.md): Structure of the .catplug file, manifest.json fields, validation rules, permissions, destinations, SHA-256 hashes and format 2.
- [Extension SDK 1.4.0](https://netcattest.com/catsuite/en/docs/extensions/sdk.md): The CatSuite 1.4.0 extension SDK: where to download it, what is in the package, the global cat object, the examples, the workflow templates and CatBridge capabilities.
- [JavaScript API reference](https://netcattest.com/catsuite/en/docs/extensions/api.md): The global cat object of SDK 1.4: HTTP messages, events, mutation hooks, sends, external APIs, laboratory, resources and utilities.
- [Interface, data and findings](https://netcattest.com/catsuite/en/docs/extensions/ui-and-data.md): Commands, message menus, native tabs and components; storage, settings, credentials and findings with evidence.
- [Web extension IDE](https://netcattest.com/catsuite/en/docs/extensions/ide.md): How to use the CatSuite IDE in the browser to create extensions from scratch or from examples, validate, simulate, inspect and export .catplug packages.
- [CatSuite Studio for VS Code](https://netcattest.com/catsuite/en/docs/extensions/vscode.md): CatSuite Studio for VS Code: how to install and use the extension to create, validate, test and sign .catplug plugins with CatSuite SDK suggestions.
- [Visual workflows with .catflow](https://netcattest.com/catsuite/en/docs/workflows.md): Build graph-based analyses with steps, parsers, conditions and joins; revision-based approvals, traceable artifacts, checkpoints and limits.
- [Security, vault and data protection](https://netcattest.com/catsuite/en/docs/security.md): Extension isolation, PUBLIC, PROTECTED and SECRET levels, biometric vault, Ed25519 signatures, the CATSEAL2 envelope, backups and recovery.
- [CatBridge, the optional connector](https://netcattest.com/catsuite/en/docs/catbridge.md): What CatBridge is, how to download it for Windows and Linux, how numeric code pairing works, the isolated architecture and Protocol 2 with signed messages.
- [Install and pair CatBridge](https://netcattest.com/catsuite/en/docs/catbridge/install.md): How to download CatBridge for Windows or Linux, start the service, pair your phone with the 24-digit numeric code, use the flags and revoke devices safely.
- [Capability catalog and tools](https://netcattest.com/catsuite/en/docs/catbridge/tools.md): CatBridge typed capabilities, pinned executors, the read-only, external-approved and active-approved profiles, budgets, reviewed templates and the data each tool receives.
- [SDK error codes](https://netcattest.com/catsuite/en/docs/reference/errors.md): The stable E_* codes returned by CatSuite extensions, packages, workflows and connectors, with the meaning of each one.

## Perguntas frequentes / FAQ

- **O que é o CatSuite?** Um laboratório Android gratuito para segurança web, testes de API e QA. Ele reúne interceptador, proxy de rede, navegador técnico, Repetir, Intruso, Descobridor, decodificador e analisador SSL/TLS em um só fluxo.
- **A Cat IA está disponível?** Ainda não. A Cat IA está em reconstrução e voltará em uma próxima versão. Enquanto isso, todos os outros módulos e as extensões funcionam normalmente.
- **O que são extensões?** Pacotes .catplug com código JavaScript executado pelo QuickJS em um serviço Android isolado. Elas podem observar e alterar tráfego, criar abas e comandos, salvar dados e registrar achados — apenas com as permissões que você aprovar.
- **Uma extensão pode acessar meus arquivos ou executar programas?** Não. O SDK não oferece acesso geral a arquivos, execução de processos, DOM ou fetch. Envios de rede só vão para destinos declarados e aprovados, com TLS validado pelo Android.
- **Preciso do CatBridge?** Não. O CatBridge é opcional e serve para levar ferramentas como httpx, Katana, Schemathesis e Nuclei aos fluxos visuais. Todo o resto funciona apenas com o app.
- **O CatSuite envia meus dados para terceiros?** Não automaticamente. Histórico, notas, sessões e dados de extensões ficam no seu celular. Exportar, compartilhar ou enviar algo depende sempre de uma ação sua.
- **Onde baixar?** O aplicativo está na Google Play, gratuitamente, sem assinatura e sem paywall. O CatBridge (Windows e Linux) e o SDK de extensões 1.4.0 ficam no repositório oficial github.com/netcattest/catsuite, e a extensão CatSuite Studio está no Marketplace do Visual Studio Code.
- **Posso criar extensões no VS Code?** Sim. Instale a extensão CatSuite Studio pelo Marketplace do Visual Studio Code: ela traz sugestões do SDK, validação do projeto, prévia local com fixtures e geração de pacotes .catplug assinados. Se preferir não instalar nada, use a IDE web.
- **What is CatSuite?** A free Android lab for web security, API testing and QA. It brings an interceptor, network proxy, technical browser, Repeater, Intruder, Discoverer, decoder and SSL/TLS analyzer into one workflow.
- **Is Cat AI available?** Not yet. Cat AI is being rebuilt and will return in a future version. Meanwhile, every other module and the extensions work as usual.
- **What are extensions?** .catplug packages with JavaScript code run by QuickJS inside an isolated Android service. They can observe and change traffic, create tabs and commands, store data and record findings — only with the permissions you approve.
- **Can an extension access my files or run programs?** No. The SDK offers no general file access, process execution, DOM or fetch. Network sends only reach declared and approved destinations, with TLS validated by Android.
- **Do I need CatBridge?** No. CatBridge is optional and brings tools such as httpx, Katana, Schemathesis and Nuclei into visual workflows. Everything else works with the app alone.
- **Does CatSuite send my data to third parties?** Not automatically. History, notes, sessions and extension data stay on your phone. Exporting, sharing or sending anything always depends on your action.
- **Where can I get it?** The app is on Google Play, for free, with no subscription and no paywall. CatBridge (Windows and Linux) and the 1.4.0 extension SDK are in the official repository github.com/netcattest/catsuite, and the CatSuite Studio extension is on the Visual Studio Code Marketplace.
- **Can I build extensions in VS Code?** Yes. Install the CatSuite Studio extension from the Visual Studio Code Marketplace: it brings SDK suggestions, project validation, a local preview with fixtures and signed .catplug package builds. If you prefer not to install anything, use the web IDE.

## Optional

- [llms-full.txt](https://netcattest.com/catsuite/llms-full.txt): documentação completa nos dois idiomas em um único arquivo / complete documentation in both languages in a single file
- [Sitemap](https://netcattest.com/sitemap-catsuite.xml)