Traffic & Diagnostics
Deep Message Inspector
Analyze HTTP structures, headers, cookies, tokens, and timing metrics in structured views.
Deep Message Inspector
Understanding intricate request structures, header details, and token signatures requires specialized diagnostic tools. The Inspector in Hexbuffer provides deep structural analysis for all web traffic captured by the proxy.
Opening the Inspector
Selecting any request in Live Traffic, Repeater, or Intruder results opens the Inspector Pane, which deconstructs raw network packets into clean, structured views.
Key Inspection Views
- Headers View:
- Organized table of key-value HTTP request and response headers.
- Quick-copy buttons for individual header values.
- Raw header mode for viewing exact protocol byte sequences.
- Body & Payload View:
- Formatted, syntax-highlighted editor supporting JSON, XML, HTML, GraphQL, Form-Data, and Multipart bodies.
- Automatic indentation, tree folding, and search within payloads.
- Raw text and hex view modes for inspecting binary content or corrupted character encodings.
- Cookies & Security Tokens:
- Isolated tab listing session cookies, Bearer tokens, and security flags (
HttpOnly,Secure,SameSite,Max-Age). - Highlights potentially vulnerable cookies lacking critical security flags.
- Isolated tab listing session cookies, Bearer tokens, and security flags (
- Timing & Waterfall Breakdown:
- Sub-millisecond timing visualization covering DNS resolution, TLS handshake, request transfer, server processing latency, and response content download.
Layout Customization
Adapt the inspector to your screen size and workflow:
- Split-View: View the request grid and inspector side-by-side.
- Full-Width Inspector: Expand the inspector horizontally to review wide JSON payloads.
- Maximized Inspector: Dedicate the entire screen to deep message inspection.
Key Benefits
- Rapid Debugging: Instantly pinpoint malformed headers, missing cookies, or unexpected redirects.
- Token Analysis: Examine JWT payloads, session identifiers, and authorization headers without leaving the traffic view.
- Clean Formatting: Minified, unreadable JSON or HTML is automatically beautified and organized.