mitmproxy is a fantastic tool and free. This is just marketing spam. https://mitmproxy.org
Why do you think this is spam, vs all the other discussions of commercial products on HN?
Charles – Web Debugging Proxy Application
31–40 of 67 posts
Re: Charles – Web Debugging Proxy Application
#32We use Charles extensively at work, it's a great tool. The only thing that really annoys me is that, this being a Java app, the interface works slightly different than the standard OS X interface I'm using to. I regularly use cmd + backspace, for example, to delete all text until between the beginning of the line and the cursor. In Charles this is a hot key that removes all recorded requests. There are more of such t…
[deleted]
Re: Charles – Web Debugging Proxy Application
#33mitmproxy is a fantastic tool and free. This is just marketing spam. https://mitmproxy.org
It doesn't seem to do https right? I like fiddler a lot on windowns as well and fiddler is also free with a better ui and more feature than Charles or mitmproxy.
Definitely does HTTPS just fine.
Re: Charles – Web Debugging Proxy Application
#34I actually use a local instance of nginx/openresty as my web debugging proxy. I should write a blog on it or something, since it seems like few people do.
It's free. It's a breeze to set up, all you need to do is point it at the upstream server you are testing, and it has lua support so you can write code and modify requests on the fly, strip headers, inject things with code.
All the work is already done to manipulate HTTP requests and responses in nginx so it is actually really smooth, there is no learning curve of a new tool, and everything just works.
Re: Charles – Web Debugging Proxy Application
#35Re: Charles – Web Debugging Proxy Application
#36Is anybody aware of alternatives? I'd like to compare before deciding which one to embrace.
I am most familiar with Telerik's free product Fiddler. Looks like a similar feature set to Charles. http://www.telerik.com/fiddler
On Windows at least, Fiddler has always been the tool of choice for this amongst everyone I know too.
Re: Charles – Web Debugging Proxy Application
#37Earlier quoted context omitted.
Same. It's really great for reverse engineering the endpoints mobile applications use.
any idea how to decode the HTTPS traffic ? Note the server and client is run by us.
You can install a self signed certificate by Charles on your device and trust it. Then you can decrypt the traffic from your device using Charles as a proxy.
Really easy,really nice.
Re: Charles – Web Debugging Proxy Application
#38I actually use a local instance of nginx/openresty as my web debugging proxy. I should write a blog on it or something, since it seems like few people do. It's free. It's a breeze to set up, all you need to do is point it at the upstream server you are testing, and it has lua support so you can write code and modify requests on the fly, strip headers, inject things with code. All the work is already done to manipulat…
I would greedily read a write-up about this.
Re: Charles – Web Debugging Proxy Application
#39I actually use a local instance of nginx/openresty as my web debugging proxy. I should write a blog on it or something, since it seems like few people do. It's free. It's a breeze to set up, all you need to do is point it at the upstream server you are testing, and it has lua support so you can write code and modify requests on the fly, strip headers, inject things with code. All the work is already done to manipulat…
I would greedily read a write-up about this.
Cool! I'll write it this week and get back to you.
Re: Charles – Web Debugging Proxy Application
#40I've had a license for Charles Proxy for the last 9 years and it's been a seriously useful tool, not just for introspecting http/https traffic (and recording those sessions to attach to tickets), but for dynamically modifying requests and responses.
couple of examples that come to mind:
* Want to test your production/deployed app against a dev/local api server? Have it redirect traffic to a different host and rewrite any headers required (production vs dev api keys for example) - That includes DNS spoofing and re-mapping host names as required.
* Found a bug on a web site and want to test a fix to the javascript without setting up a whole environment? Copy the javascript file in question to your hdd, modify it as desired and have Charles serve that file up when the browser/app requests the original
I don't have any connection to the author; just been well worth its price for me.