mitmproxy/mitmproxy

Features

• HTTP Proxies - Mitmproxy configures clients to explicitly use an HTTP proxy to route traffic through the proxy server, which is the most robust setup for supported applications.
• HTTP Traffic Manipulation Tools - Adds, overwrites, or removes HTTP headers on requests and responses using filter expressions to target specific traffic flows.
• Network Proxies - A programmable proxy server that intercepts, inspects, and modifies HTTP, HTTPS, and WebSocket traffic in real-time.
• Proxy Engines - Executes custom logic against live network streams to automate traffic transformation and protocol manipulation.
• Proxy Servers - Redirects network traffic at the layer level to intercept and inspect HTTP requests without requiring client-side configuration.
• Traffic Analysis Tools - Records HTTP conversations to files for later analysis, filtering, and replay of client requests or server responses to simulate network conditions.
• Traffic Interception Tools - Intercepts and modifies HTTP, HTTPS, and WebSocket traffic in real-time via interactive console, web, or command-line interfaces.
• Traffic Interceptors - Redirects and decrypts encrypted network connections to provide visibility into secure traffic without requiring client-side configuration.
• Traffic Manipulation Scripts - Enables programmatic modification and automated handling of HTTP traffic flows during proxy operations using custom scripts.
• WebSocket Interception Tools - Intercepts and inspects WebSocket connections including message compression and frame forwarding.
• Certificate Authorities - Acts as a trusted certificate authority to dynamically generate and sign leaf certificates for intercepted encrypted traffic.
• Certificate Authority Management - Generates and manages a local certificate authority to enable transparent interception and decryption of HTTPS traffic.
• Traffic Interception Tools - Captures network traffic transparently from local processes using low-level operating system APIs for inspection and analysis.
• Transparent Proxies - Mitmproxy redirects network traffic into the proxy at the network layer without modifying client settings, typically by configuring the proxy machine as the client's default gateway.
• Data Processing Utilities - Provides specialized utilities to decode, format, and re-encode data streams like HTTP bodies and WebSocket messages.
• Command Line Extensions - Enables the definition of custom interactive commands with runtime type checking and tab completion support.
• Command Registries - Provides a centralized registry for runtime execution of user-defined functions to facilitate automation and traffic manipulation.
• Hot Reloading Utilities - Monitors source files for changes and automatically reloads them into the active process to enable rapid iterative development.
• Service Proxies - Intercepts and inspects network traffic between internal cluster components to facilitate debugging and performance analysis.
• Connection Management Tools - Provides hooks to monitor upstream traffic and programmatically terminate server connections during the request lifecycle.
• Connection Management Utilities - Intercepts and manages client connection events to monitor traffic or terminate connections programmatically.
• DNS Tools - Intercepts and inspects domain name resolution requests and responses to monitor or modify network traffic.
• Network Flow Analyzers - Abstracts network traffic into structured flow objects that maintain state and metadata across diverse protocols.
• Network Request Interceptors - Blocks specific network requests by matching filter expressions and returning custom responses or terminating connections.
• Network Traffic Analyzers - Captures and inspects HTTP, HTTPS, and WebSocket traffic to facilitate debugging of client-server communication.
• Network Traffic Processors - Enables the processing and manipulation of network traffic flows through typed sequences and command-line selectors.
• Network Traffic Replay Tools - Automates repetitive network interactions by replaying recorded sequences of requests and responses.
• Proxy Configuration Utilities - Parses proxy mode specification strings to configure proxy behavior, including mode types and listening addresses.
• Proxy Configurations - Provides granular control over traffic interception, request filtering, and security settings for proxy operations.
• Proxy Management Systems - Manages proxy connection state and protocol layer stacks through a shared context object for traffic interception.
• Proxy Scripting Extensions - Implements custom event handlers to intercept and manipulate network traffic flows within the proxy environment.
• Proxy Stacks - Organizes connection handling into a stack of protocol layers to manage transitions between raw sockets and application data.
• Reverse Proxies - Mitmproxy acts as a server that forwards client requests to a preconfigured target server, supporting various protocols like HTTP, DNS, TCP, and QUIC for debugging or redirection.
• TCP Proxies - Intercepts and inspects generic TCP traffic streams while performing man-in-the-middle TLS decryption.
• TCP Session Management - Provides a structured representation of TCP sessions as flow objects for analysis and modification of transmitted messages.
• Traffic Filtering Rules - Enables precise control over network traffic interception by defining hostname or IP address patterns to bypass proxy processing.
• Traffic Filters - Provides complex expression-based filtering to isolate specific HTTP transactions for detailed network traffic analysis.
• Traffic Manipulation Tools - Removes caching headers from HTTP requests to ensure servers return full responses during traffic interception and analysis.
• Traffic Proxying - Routes network traffic through a dedicated gateway to intercept and inspect connections for security analysis and debugging.
• Traffic Redirection Tools - Intercepts and routes network traffic transparently at the packet level without requiring explicit client-side proxy configuration.
• Traffic Streaming Utilities - Streams large request and response bodies directly between client and server to prevent memory overflow during high-volume traffic processing.
• Transparent Network Proxies - Intercepts and routes network traffic transparently to monitor or modify connections without requiring client-side configuration changes.
• Transparent Proxying - Enables network traffic interception by configuring IP forwarding and firewall rules to route packets through the proxy instance.
• UDP Proxies - Performs man-in-the-middle inspection of DTLS-encrypted traffic while transparently forwarding generic UDP packets.
• WebSocket Utilities - Provides automated reassembly of fragmented WebSocket frames and structured access to message content for inspection and analysis.
• Certificate Management - Provides utilities to configure and manage SSL and TLS certificates, including expiry durations and validity parameters for traffic inspection.
• Certificate Pinning Bypasses - Provides mechanisms to disable application-level certificate pinning for security research and traffic analysis.
• Mutual TLS Configurations - Enables secure authentication by managing client-side certificates and PEM-formatted keys for encrypted connection handshakes.
• Proxy Authentication - Enforces HTTP Basic Authentication for proxy access and automatically strips credentials before forwarding requests to upstream servers.
• TLS Inspection Tools - Parses raw TLS ClientHello messages into structured objects to enable handshake inspection and connection fingerprinting.
• Traffic Inspection Tools - Intercepts and decrypts TLS-encrypted traffic by acting as a trusted certificate authority to facilitate deep packet inspection.
• Event-Driven Architectures - Implements a lifecycle hook system that allows custom logic to execute in response to traffic processing and connection state changes.
• Interactive Data Editors - Provides interactive views for editing and re-encoding prettified data streams during network traffic inspection.
• Proxy Extensions - Enables the creation of custom data views to transform and display raw network traffic in a readable format.
• Traffic Automation Scripts - Provides a domain-specific language to execute commands and scripts on filtered network traffic flows.
• Traffic Filtering Utilities - Enables precise selection and management of network traffic flows for interactive analysis and bulk processing.
• Network Testing - Records and replays network conversations to simulate server responses and client requests for integration testing.
• Troubleshooting Tools - Tool for intercepting and modifying network traffic.
• Network Analysis - Listed in the “Network Analysis” section of the Awesome Mac awesome list.
• Network Analysis Tools - Interactive proxy for debugging and security penetration testing.
• Python Projects - Listed in the “Python Projects” section of the Awesome For Beginners awesome list.
• Reverse Engineering Tools - Interactive proxy for intercepting and modifying HTTP/HTTPS traffic.
• Troubleshooting Tools - Tool for intercepting and modifying network traffic.
• More to explore - Intercepting proxy for analyzing network traffic.
• Network and Execution Tracing - Interactive proxy for intercepting and modifying HTTP/HTTPS traffic.
• Network Security and Proxies - Interactive HTTPS proxy for traffic analysis.
• Penetration Testing - Intercepts and modifies HTTP/HTTPS traffic for testing.
• Penetration Testing Proxies - Interactive TLS-capable proxy for testing and debugging web traffic.
• Security And Forensics - Interactive TLS-capable proxy for penetration testing.
• Security And Privacy - Interactive TLS-capable intercepting HTTP proxy.
• Traffic Interception - Interactive TLS-capable HTTP proxy for penetration testing.
• Component Testing - Enables verification of addon functionality by importing script modules into test suites and invoking event handlers to assert behavior on traffic flows.
• Multi-Value Dictionaries - Provides specialized dictionary structures that support multiple values per key with built-in canonicalization and reduction logic.
• Keyboard Shortcut Managers - Enables the definition of custom keyboard shortcuts to trigger commands and automate navigation workflows.
• DNS Utilities - Provides structured data objects for DNS query questions with support for JSON serialization and external integration.
• SOCKS Proxies - Mitmproxy acts as a SOCKS5 proxy to establish connections with clients, providing an alternative to the standard HTTP proxy mode for connection establishment.
• TCP Stream Interception - Mitmproxy supports processing raw TCP stream messages by inspecting content and performing data replacements as traffic passes through the proxy.
• UDP Session Management - Tracks and represents UDP sessions by correlating client-server connections with individual datagram message sequences.
• WebSocket Message Interception - Mitmproxy enables processing individual WebSocket messages by inspecting content, modifying payloads, or dropping messages before they reach the destination endpoint.
• Certificate Management Utilities - Provides automated guides and utilities for installing custom security certificates into system trust stores to enable encrypted traffic inspection.
• DNS Spoofing Tools - Intercepts and modifies DNS responses to return custom resource records or error codes for specific domains.

Star history