3 ms·

This tool has really helped me on several occasions with a wide variety of issues up and down the stack. Even with debugging web apps because while the chrome D

This tool has really helped me on several occasions with a wide variety of issues up and down the stack. Even with debugging web apps because while the chrome Dev tools are awesome they (at least at the time as far as I know) didn't expose the initial headers/network exchange for certain types of auth like NTLM.

emj 9y ago
Mitmproxy is nice, but I think dev tools have become alot better, I discovered that because my standard work horse Chrome+Wireshark is very fincky with SSL: SSLKEYLOGFILE=$HOME/ssl_crt_dbg google-chrome --user-data-dir=TEMPUSER Then you configure wireshark SSL decoding with with pre master key file as "ssl_crt_dbg", it fails too often for me. Now days I use remote-debugging and Python a lot: $ google-chrome --remote-debugging-port=9222 import PyChromeDevTools chrome = PyChromeDevTools.ChromeInterface(host="localhost", port=9222) chrome.Network.enable() while True: print chrome.wait_message(timeout=0.1) But the simplicity of a Mitmproxy is almost as great as wireshark.
- pimlottc 9y ago
  Can you explain more what you're doing with the python code?
phsource 9y ago
Oh my gosh... don't get me started on NTLM. Chrome Network Tools doesn't expose it at all, so the proxy was a lifesaver in our case. We've shifted to using https://github.com/joeferner/node-http-mitm-proxy https://github.com/joeferner/node-http-mitm-proxy as a part of WrapAPI Proxy (https://wrapapi.com/proxy https://wrapapi.com/proxy), which is a zero-install proxy in the style of mitmproxy and Charles. The node proxy is really great in that it's fully extensible, allows you to generate certificates, and filter/save the kinds of traffic you get to simple JSON structures. We've found it to be a huge boon in development, but it's clearly inspired by mitmproxy (which predates node), so credit where it's due.

emj 9y ago

Mitmproxy is nice, but I think dev tools have become alot better, I discovered that because my standard work horse Chrome+Wireshark is very fincky with SSL: SSLKEYLOGFILE=$HOME/ssl_crt_dbg google-chrome --user-data-dir=TEMPUSER Then you configure wireshark SSL decoding with with pre master key file as "ssl_crt_dbg", it fails too often for me. Now days I use remote-debugging and Python a lot: $ google-chrome --remote-debugging-port=9222 import PyChromeDevTools chrome = PyChromeDevTools.ChromeInterface(host="localhost", port=9222) chrome.Network.enable() while True: print chrome.wait_message(timeout=0.1) But the simplicity of a Mitmproxy is almost as great as wireshark.

pimlottc 9y ago
Can you explain more what you're doing with the python code?

phsource 9y ago

Oh my gosh... don't get me started on NTLM. Chrome Network Tools doesn't expose it at all, so the proxy was a lifesaver in our case. We've shifted to using https://github.com/joeferner/node-http-mitm-proxy https://github.com/joeferner/node-http-mitm-proxy as a part of WrapAPI Proxy (https://wrapapi.com/proxy https://wrapapi.com/proxy), which is a zero-install proxy in the style of mitmproxy and Charles. The node proxy is really great in that it's fully extensible, allows you to generate certificates, and filter/save the kinds of traffic you get to simple JSON structures. We've found it to be a huge boon in development, but it's clearly inspired by mitmproxy (which predates node), so credit where it's due.