https://cybertoolchain.io/tools/pcapdroid New releases and features in PCAPdroid, tracked by The Cyber Toolchain. en Wed, 19 Aug 2026 16:42:29 GMT https://github.com/emanuele-f/PCAPdroid/compare/v1.9.1...v2.0.0 https://github.com/emanuele-f/PCAPdroid/compare/v1.9.1...v2.0.0 Wed, 19 Aug 2026 16:42:29 GMT PCAPdroid v2.0.0 adds Capture List, app isolation, settings export/import, port mapping exemptions, and configurable connection log size. • Adds Capture List screen showing past captures and their size on disk. • Implements per-app allowlist (app isolation) to restrict which apps' traffic is captured. • Adds settings export and import for backing up and restoring PCAPdroid configuration. • Adds port mapping exemptions to exclude specific ports from VPN port remapping. • Makes the connections log size configurable. • Bumps mitm addon to v2.3 (mitmproxy 12.2.3) with full 16 KB page-size device support. • Bumps ushark decryption module to Wireshark v4.7.1. • Implicitly enables PCAPdroid extensions when using the pcapng capture format. • Persists packet direction in root mode via pcapng EPB flags option. • Adds Android 17 (Target SDK 37) support. • Adds new UI translations: Bengali (BN), French (FR), Hindi (HI), Japanese (JA), Korean (KO), Malay (MS), Urdu (UR), Vietnamese (VI). Breaking changes: • PCAPdroid now requires Android 23+ (minSdk raised to 23); devices running Android 22 or below are no longer supported. • The mitm addon now requires Android 24+ and drops support for the x86 and armeabi-v7a ABIs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.9.0 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.9.0 Thu, 12 Feb 2026 09:21:58 GMT PCAPdroid v1.9.0 adds HAR export, zstd support, and background extraction • `Export HTTP data in the HAR format` allows sharing captured traffic with browser dev tools or other HAR-compatible analyzers. • `Support the zstd compression` enables decompression of PCAP files compressed with the Zstandard algorithm. • `Add toggle to show system apps` lets you filter out user-installed apps from the analysis view to focus on specific targets. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.8.8 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.8.8 Wed, 03 Sep 2025 07:29:42 GMT Adds configurable PCAP/CSV prefix and new API options for payload access and decryption. • `prefix` setting allows making the PCAP/CSV file name prefix configurable • New `full_payload`, `keylog_filename`, and `decryption_rules` API options Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.8.3 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.8.3 Sat, 08 Mar 2025 18:53:13 GMT PCAPdroid v1.8.3 adds support for building ushark from source on F-Droid • Support building ushark from the source (F-Droid) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.8.0 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.8.0 Tue, 04 Mar 2025 19:05:34 GMT PCAPdroid v1.8.0 adds TLS decryption via Wireshark, country/CIDR firewall rules, and expanded Pcapng support • Enables TLS traffic decryption in captured PCAP/Pcapng files through Wireshark integration • Adds `New UI filter` to show connections bigger than a given bytes threshold • Supports PCAPdroid extensions in Pcapng files Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.7.3 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.7.3 Sat, 07 Sep 2024 09:15:59 GMT Adds system language support for Android 13+, always-on VPN detection after capture start, and Mitm addon v1.2 capabilities • Allows setting the app language from the system (for Android 13+) • Detects if always-on VPN is enabled after a capture starts • Mitm addon v1.2: allows public files write • Permits using a compatible mitm addon with the same major version Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.7.0 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.7.0 Sat, 10 Feb 2024 14:12:56 GMT PCAPdroid v1.7.0 adds multiple target selection, connection payload export, QUIC blocking on decryption only, and Tor/DNSCrypt integrations • `Select multiple target apps` allows filtering traffic capture for several applications simultaneously. • `Copy/export the connections payload` enables extracting raw data from network connections within the GUI. • `Ability to block QUIC only on decryption` provides granular control over QUIC protocol blocking during decryption workflows. • `Integrations to run with Tor and DNSCrypt` allows using external privacy infrastructure directly from PCAPdroid. • Use your own mitmproxy addons (experimental) lets users load custom `mitmproxy` addon scripts for extended traffic manipulation. • Updated `mitmproxy` version to 10.1.6. • CSV exports now use ISO 8601 date format for standard timestamp compatibility. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.7 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.7 Thu, 31 Aug 2023 10:33:09 GMT Adds Ukrainian translation and prevents SOCKS5 host resolution when disabled in PCAPdroid v1.6.7 • Adds Ukrainian translation (credits: odkate) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.6 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.6 Mon, 28 Aug 2023 17:48:55 GMT PCAPdroid v1.6.6 adds PCAP/PCAPNG file opening and SOCKS5 host name support • `Open PCAP/PCAPNG files` option now available to load existing capture files directly. • SOCKS5 proxy mode now accepts `host names` instead of only IP addresses, and supports IPv6 destinations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.5 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.5 Thu, 15 Jun 2023 12:30:39 GMT PCAPdroid v1.6.5 adds JS injection to mitm, rule-based TLS decryption, and SSLKEYLOG export on anomalous stops • Adds the ability to inject JavaScript into web pages via PCAPdroid-mitm • Makes TLS decryption rule-based so it only applies to specified connections Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.3 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.3 Sun, 23 Apr 2023 20:11:41 GMT Adds QR code activation for paid features in non-Play builds • Adds `paid features activation via QR code` for non-Play builds Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.0 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.6.0 Mon, 16 Jan 2023 08:28:08 GMT PCAPdroid v1.6.0 adds pcapng output, TLS/ firewall whitelists, configurable DNS/mitmproxy, and API parameters for custom naming and format control • Add `pcap_name` parameter to specify a custom PCAP file name via the API • Add `pcapng_format` parameter to enable pcapng dump format via the API • Add `mitmproxy_opts` parameter to pass custom options to mitmproxy via the API • DNS servers are now configurable in the UI • Add firewall whitelist mode: block everything, unless whitelisted • Support TLS decryption whitelist • Apps stats can now be reset • The application and the mitmproxy logs can now be viewed in-app Breaking changes: • The `pcap_uri` parameter is now only an identifier, check out [Dumping PCAP to file](https://github.com/emanuele-f/PCAPdroid/blob/master/docs/app_api.md#dumping-pcap-to-file) for instructions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.6 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.6 Sat, 24 Sep 2022 12:10:52 GMT PCAPdroid v1.5.6 adds STUN compatibility extension and ability to skip TLS certificate installation. • Extends STUN protocol compatibility Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.5 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.5 Thu, 25 Aug 2022 19:17:54 GMT PCAPdroid v1.5.5 enables access to paid features via unlock tokens in non-Play builds. • Adds `unlock_tokens` for accessing paid features in non-Play builds Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.3 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.3 Wed, 13 Jul 2022 08:42:24 GMT PCAPdroid v1.5.3 adds VPN app exemptions, IPv6-only mode, firewall blocking, and cleartext filtering • `vpn_exempt_apps` config key allows specifying apps to exclude from the VPN tunnel • Supports `ipv6_only` mode for the VPN interface • New `show_cleartext_only` filter option to display only unencrypted connections • Firewall feature adds ability to block newly installed applications automatically • Firewall capability includes temporary unblock functionality for specific apps Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.2 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.2 Thu, 23 Jun 2022 13:29:17 GMT Adds firewall connection filtering and low-memory payload disabling • Add ability to only show the connections allowed by the firewall • Monitor memory usage and disable full payload on low memory Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.0 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.5.0 Thu, 02 Jun 2022 08:02:36 GMT PCAPdroid v1.5 adds no-root firewall, TLS decryption with SSLKEYLOGFILE export, and rule import/export. • Ability to decrypt TLS traffic and display the decrypted data • Export the `SSLKEYLOGFILE` for use with external decoders (e.g., Wireshark) • Inspect HTTP requests and replies using built-in decoders (brotli, deflate, gzip) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.8 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.8 Fri, 22 Apr 2022 20:19:18 GMT PCAPdroid v1.4.8 adds Ready button capture start, post-capture inspection, UDP STUN in non-root mode • Adds a "Ready" button that must be tapped to start the capture, giving explicit control over when recording begins • Supports UDP STUN traffic inspection in non-root mode Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.6 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.6 Sun, 06 Feb 2022 11:50:43 GMT PCAPdroid v1.4.6 adds full Always-on VPN support, Norwegian/French translations, and root mode crash fixes • `Always-on VPN` is now fully supported • Add Norwegian translation (credits: Allan Nordhøy) • Add French translation (credits: J. Lavoie and Maxime Leroy) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.5 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.5 Thu, 06 Jan 2022 11:53:47 GMT PCAPdroid v1.4.5 adds interface filtering in root mode and malware connection blocking • Add ability to filter connections by capture interface in root mode • Malware detection now blocks malicious connections in non-root mode (paid feature) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.4 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.4 Tue, 23 Nov 2021 21:57:31 GMT PCAPdroid v1.4.4 adds malware detection overview, destination country/ASN details, boot-time capture, and persistent permissions • New malware detection overview: show blacklists and detection status • Show destination country and ASN in the connection details • Add ability to start the capture at boot • Add ability to grant persistent capture control permissions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.3 https://github.com/emanuele-f/PCAPdroid/releases/tag/v1.4.3 Sat, 30 Oct 2021 09:54:16 GMT PCAPdroid v1.4.3 adds blacklist malware detection, connection filtering options, and 'Hidden Connections' rename • Adds `blacklist-based` malware detection with alerts • Adds connection filters for plaintext, open state, not hidden, or malicious connections • Adds whois IP lookup button Full history on Cyber Toolchain: https://cybertoolchain.io/tools/pcapdroid