Skip to content
Casazium
Casazium

Privacy and security ​

Wirescry is a local tool. What it captures stays on your computer, and the free app sends nothing about you or your traffic anywhere.

Captured traffic ​

  • Summaries, headers and timing are kept in memory only.
  • Bodies up to 64 KB are kept in memory. Larger ones are written to the bodies folder in Wirescry's data folder, readable only by you, so a large download is never held in memory whole.
  • WebSocket messages are kept in memory only.

The bodies folder is emptied when Wirescry quits and every time it starts. Clear deletes the bodies of the requests it cleared once its Undo is gone. Nothing you capture survives a restart of the app, unless you export it or save a body yourself.

Traffic goes where the program sent it. Wirescry decrypts and records it on the way; it doesn't copy it anywhere else.

On disk ​

In the data folder:

File or folderWhat it is
ca.key, ca.pemYour certificate authority. The key is readable only by you, and never leaves your computer.
ca-bundle.pem, terminal-config/Certificate bundles and settings for terminals.
settings.jsonYour proxy port, if you fixed one.
firefox-profile/Wirescry's own Firefox profile, including anything you sign in to there. Deleted by Reset certificate.
bodies/Large bodies of captured traffic, while Wirescry runs.
plugins/pro/Pro's rules (rules.json), and its license, encrypted with your system's keychain where there is one.

The log file (Help → Show Log File) holds errors and warnings, including the host names of requests that failed. It's readable only by you, and starts over past 5 MB, keeping one previous file.

Network requests Wirescry makes itself ​

  • Update checks, to Wirescry's public release page on GitHub: 30 seconds after launch and every six hours. They carry no identifier for your install. How to turn them off.
  • Wirescry Pro, if you use it: license checks to Casazium's license server, when Pro starts and about once a day while it runs. A check sends your license key and an anonymous code for this computer and user account, made by hashing their IDs, so the server can count your computers. See the license.
  • Browsers Wirescry opens start at https://example.com/.

There is no telemetry, analytics or crash reporting.

How Wirescry is protected ​

  • Your own certificate. Each install creates its own CA on first launch; none ships with the app. Anything that trusts it accepts traffic Wirescry intercepts, so remove it from your system when you're done.
  • Local only. The proxy accepts connections only from this computer. A fixed port is checked first, so another program already listening there can't quietly receive your traffic.
  • A locked-down window. The app's interface reaches its proxy through a local connection that needs a secret created at each launch, and it can't navigate to other sites or open new windows.

The free app is open source, under the AGPL-3.0, at github.com/casazium/wirescry.