8 ms·

I'm a developer and always on the lookout for tools that could help my workflow. Genuinely curious, what kind of stuff do people usually use mitmproxy for?

by enlyth 6y ago

MuffinFlavored 6y ago
Reverse engineering / sniffing HTTPS traffic to figure out what API calls an app makes.
superzamp 6y ago
Using it every day at work as a simple reverse proxy with debugging capabilities. Any call my (local) frontend does to the backend goes through mitmproxy so I can quickly figure out what's wrong, edit and replay calls. Production env uses more scalable tools but mitmproxy does a formidable job for development environments with almost zero setup costs :)
- pbowyer 6y ago
  What do you use in production? I don't have anything particularly high traffic, but knowing how the third party API barfed would be very useful, rather than just being alerted something went wrong.
feanaro 6y ago
I use it when pentesting/bug hunting to examine the way the application works and to modify traffic in order to break stuff (either the app or the server-side API it uses). Basically the same things you would use Burp for, except mitmproxy has two important advantages: 1. Supports a SOCKS5 mode and has much better support for intercepting non-HTTP TCP traffic. 2. Easier to extend quickly via Python scripts.
- Shared404 6y ago
  3. Doesn't require an account/EULA. Not really sure if an account/EULA is actually required for Burp, it's been a while since I looked at it. I just remember a window popping up on first run in my Kali VM, me looking at it and deciding to look for alternatives.
kapep 6y ago
Some frameworks make it surprisingly difficult to see raw, unaltered traffic. I have used tools similar to mitmproxy to debug HTTPS traffic for Apache CXF because the framework's built in logging is kind of useless for debugging errors.

8 ms·

I'm a developer and always on the lookout for tools that could help my workflow. Genuinely curious, what kind of stuff do people usually use mitmproxy for?

by enlyth 6y ago

I'm a developer and always on the lookout for tools that could help my workflow. Genuinely curious, what kind of stuff do people usually use mitmproxy for?

MuffinFlavored 6y ago
Reverse engineering / sniffing HTTPS traffic to figure out what API calls an app makes.
superzamp 6y ago
Using it every day at work as a simple reverse proxy with debugging capabilities. Any call my (local) frontend does to the backend goes through mitmproxy so I can quickly figure out what's wrong, edit and replay calls. Production env uses more scalable tools but mitmproxy does a formidable job for development environments with almost zero setup costs :)
- pbowyer 6y ago
  What do you use in production? I don't have anything particularly high traffic, but knowing how the third party API barfed would be very useful, rather than just being alerted something went wrong.
feanaro 6y ago
I use it when pentesting/bug hunting to examine the way the application works and to modify traffic in order to break stuff (either the app or the server-side API it uses). Basically the same things you would use Burp for, except mitmproxy has two important advantages: 1. Supports a SOCKS5 mode and has much better support for intercepting non-HTTP TCP traffic. 2. Easier to extend quickly via Python scripts.
- Shared404 6y ago
  3. Doesn't require an account/EULA. Not really sure if an account/EULA is actually required for Burp, it's been a while since I looked at it. I just remember a window popping up on first run in my Kali VM, me looking at it and deciding to look for alternatives.
kapep 6y ago
Some frameworks make it surprisingly difficult to see raw, unaltered traffic. I have used tools similar to mitmproxy to debug HTTPS traffic for Apache CXF because the framework's built in logging is kind of useless for debugging errors.