awesome-repositories.com
© 2026 Bringes Technology SRL·VAT RO45896025·hello@bringes.io
MCPSitemapPrivacyTerms
Mitmproxy | Awesome Repository
← All repositories

mitmproxy/mitmproxy

0
View on GitHub↗
42,335 stars·4,455 forks·Python·mit·0 viewsmitmproxy.org↗

Mitmproxy

Features

  • HTTP Proxies - Mitmproxy configures clients to explicitly use an HTTP proxy to route traffic through the proxy server, which is the most robust setup for supported applications.
  • HTTP Traffic Manipulation Tools - Adds, overwrites, or removes HTTP headers on requests and responses using filter expressions to target specific traffic flows.
  • Network Proxies - A programmable proxy server that intercepts, inspects, and modifies HTTP, HTTPS, and WebSocket traffic in real-time.
  • Proxy Engines - Executes custom logic against live network streams to automate traffic transformation and protocol manipulation.
  • Proxy Servers - Redirects network traffic at the layer level to intercept and inspect HTTP requests without requiring client-side configuration.
  • Traffic Analysis Tools - Records HTTP conversations to files for later analysis, filtering, and replay of client requests or server responses to simulate network conditions.
  • Traffic Interception Tools - Intercepts and modifies HTTP, HTTPS, and WebSocket traffic in real-time via interactive console, web, or command-line interfaces.
  • Traffic Interceptors - Redirects and decrypts encrypted network connections to provide visibility into secure traffic without requiring client-side configuration.
  • Traffic Manipulation Scripts - Enables programmatic modification and automated handling of HTTP traffic flows during proxy operations using custom scripts.
  • WebSocket Interception Tools - Intercepts and inspects WebSocket connections including message compression and frame forwarding.
  • Certificate Authorities - Acts as a trusted certificate authority to dynamically generate and sign leaf certificates for intercepted encrypted traffic.
  • Certificate Authority Management - Generates and manages a local certificate authority to enable transparent interception and decryption of HTTPS traffic.
  • Traffic Interception Tools - Intercepts and decrypts encrypted HTTPS traffic by acting as a trusted certificate authority for inspection and modification.
  • Traffic Interception Tools - Captures network traffic transparently from local processes using low-level operating system APIs for inspection and analysis.
  • Transparent Proxies - Mitmproxy redirects network traffic into the proxy at the network layer without modifying client settings, typically by configuring the proxy machine as the client's default gateway.
  • Data Processing Utilities - Provides specialized utilities to decode, format, and re-encode data streams like HTTP bodies and WebSocket messages.
  • Command Line Extensions - Enables the definition of custom interactive commands with runtime type checking and tab completion support.
  • Command Registries - Provides a centralized registry for runtime execution of user-defined functions to facilitate automation and traffic manipulation.
  • Hot Reloading Utilities - Monitors source files for changes and automatically reloads them into the active process to enable rapid iterative development.
  • Service Proxies - Intercepts and inspects network traffic between internal cluster components to facilitate debugging and performance analysis.
  • Connection Management Tools - Provides hooks to monitor upstream traffic and programmatically terminate server connections during the request lifecycle.
  • Connection Management Utilities - Intercepts and manages client connection events to monitor traffic or terminate connections programmatically.
  • DNS Tools - Intercepts and inspects domain name resolution requests and responses to monitor or modify network traffic.
  • Network Flow Analyzers - Abstracts network traffic into structured flow objects that maintain state and metadata across diverse protocols.
  • Network Request Interceptors - Blocks specific network requests by matching filter expressions and returning custom responses or terminating connections.
  • Network Traffic Analyzers - Captures and inspects HTTP, HTTPS, and WebSocket traffic to facilitate debugging of client-server communication.
  • Network Traffic Processors - Enables the processing and manipulation of network traffic flows through typed sequences and command-line selectors.
  • Network Traffic Replay Tools - Automates repetitive network interactions by replaying recorded sequences of requests and responses.
  • Proxy Configuration Utilities - Parses proxy mode specification strings to configure proxy behavior, including mode types and listening addresses.
  • Proxy Configurations - Provides granular control over traffic interception, request filtering, and security settings for proxy operations.
  • Proxy Management Systems - Manages proxy connection state and protocol layer stacks through a shared context object for traffic interception.
  • Proxy Scripting Extensions - Implements custom event handlers to intercept and manipulate network traffic flows within the proxy environment.
  • Proxy Stacks - Organizes connection handling into a stack of protocol layers to manage transitions between raw sockets and application data.
  • Reverse Proxies - Mitmproxy acts as a server that forwards client requests to a preconfigured target server, supporting various protocols like HTTP, DNS, TCP, and QUIC for debugging or redirection.
  • TCP Proxies - Intercepts and inspects generic TCP traffic streams while performing man-in-the-middle TLS decryption.
  • TCP Session Management - Provides a structured representation of TCP sessions as flow objects for analysis and modification of transmitted messages.
  • Traffic Filtering Rules - Enables precise control over network traffic interception by defining hostname or IP address patterns to bypass proxy processing.
  • Traffic Filters - Provides complex expression-based filtering to isolate specific HTTP transactions for detailed network traffic analysis.
  • Traffic Manipulation Tools - Removes caching headers from HTTP requests to ensure servers return full responses during traffic interception and analysis.
  • Traffic Proxying - Routes network traffic through a dedicated gateway to intercept and inspect connections for security analysis and debugging.
  • Traffic Redirection Tools - Intercepts and routes network traffic transparently at the packet level without requiring explicit client-side proxy configuration.
  • Traffic Streaming Utilities - Streams large request and response bodies directly between client and server to prevent memory overflow during high-volume traffic processing.
  • Transparent Network Proxies - Intercepts and routes network traffic transparently to monitor or modify connections without requiring client-side configuration changes.
  • Transparent Proxying - Enables network traffic interception by configuring IP forwarding and firewall rules to route packets through the proxy instance.
  • UDP Proxies - Performs man-in-the-middle inspection of DTLS-encrypted traffic while transparently forwarding generic UDP packets.
  • WebSocket Utilities - Provides automated reassembly of fragmented WebSocket frames and structured access to message content for inspection and analysis.
  • Certificate Management - Provides utilities to configure and manage SSL and TLS certificates, including expiry durations and validity parameters for traffic inspection.
  • Certificate Pinning Bypasses - Provides mechanisms to disable application-level certificate pinning for security research and traffic analysis.
  • Mutual TLS Configurations - Enables secure authentication by managing client-side certificates and PEM-formatted keys for encrypted connection handshakes.
  • Proxy Authentication - Enforces HTTP Basic Authentication for proxy access and automatically strips credentials before forwarding requests to upstream servers.
  • TLS Inspection Tools - Parses raw TLS ClientHello messages into structured objects to enable handshake inspection and connection fingerprinting.
  • Traffic Inspection Tools - Intercepts and decrypts TLS-encrypted traffic by acting as a trusted certificate authority to facilitate deep packet inspection.
  • Event-Driven Architectures - Implements a lifecycle hook system that allows custom logic to execute in response to traffic processing and connection state changes.
  • Interactive Data Editors - Provides interactive views for editing and re-encoding prettified data streams during network traffic inspection.
  • Proxy Extensions - Enables the creation of custom data views to transform and display raw network traffic in a readable format.
  • Traffic Automation Scripts - Provides a domain-specific language to execute commands and scripts on filtered network traffic flows.
  • Traffic Filtering Utilities - Enables precise selection and management of network traffic flows for interactive analysis and bulk processing.
  • Network Protocol Simulators - Records and replays network conversations to simulate server responses and client requests for integration testing.
  • Addon Testing Frameworks - Enables verification of addon functionality by importing script modules into test suites and invoking event handlers to assert behavior on traffic flows.
  • Multi-Value Dictionaries - Provides specialized dictionary structures that support multiple values per key with built-in canonicalization and reduction logic.
  • Keyboard Shortcut Managers - Enables the definition of custom keyboard shortcuts to trigger commands and automate navigation workflows.
  • DNS Utilities - Provides structured data objects for DNS query questions with support for JSON serialization and external integration.
  • SOCKS Proxies - Mitmproxy acts as a SOCKS5 proxy to establish connections with clients, providing an alternative to the standard HTTP proxy mode for connection establishment.
  • TCP Stream Interception - Mitmproxy supports processing raw TCP stream messages by inspecting content and performing data replacements as traffic passes through the proxy.
  • UDP Session Management - Tracks and represents UDP sessions by correlating client-server connections with individual datagram message sequences.
  • WebSocket Message Interception - Mitmproxy enables processing individual WebSocket messages by inspecting content, modifying payloads, or dropping messages before they reach the destination endpoint.
  • Certificate Management Utilities - Provides automated guides and utilities for installing custom security certificates into system trust stores to enable encrypted traffic inspection.
  • DNS Spoofing Tools - Intercepts and modifies DNS responses to return custom resource records or error codes for specific domains.

    • Mitmproxy is an interactive, programmable network proxy engine designed for traffic analysis and protocol manipulation. It functions as a gateway that intercepts, inspects, and modifies network traffic in real-time, supporting HTTP, HTTPS, WebSocket, DNS, and generic TCP or UDP streams. By acting as a trusted certificate authority, the proxy can dynamically generate and sign certificates to decrypt and analyze secure TLS-encrypted connections.

    The project distinguishes itself through a highly extensible, event-driven architecture that allows users to automate traffic transformation using custom scripts. It provides a unified command-based interface for manual interaction, enabling users to define custom key bindings, content views, and command-line tools. The engine supports multiple operational modes, including explicit, transparent, reverse, and SOCKS proxying, as well as a userspace WireGuard VPN mode for capturing traffic without requiring client-side configuration changes.

    Beyond basic interception, the platform includes comprehensive tools for recording and replaying network conversations to simulate complex interactions or automate repetitive tasks. It offers advanced capabilities such as request blocking, header and body modification, and local resource mapping. The system also provides robust support for debugging and performance analysis, including integration with external tools through secret logging and structured data representation.

    The software is designed for rapid iteration, featuring live script reloading that updates custom logic without restarting the proxy process. It includes extensive documentation for managing certificates, configuring proxy modes, and implementing custom addons through a well-defined programmatic interface.