Can someone please enumerate the advantages compared to, let's say Chrome dev tools? Tried to google to no avail. Thanks in advance.
Charles – Web Debugging Proxy Application
41–50 of 67 posts
Re: Charles – Web Debugging Proxy Application
#42Charles saved my life last year. I had just been promoted to systems administrator, but given no access to any systems. Like, no access to the IIS server, and no access to the SQL Server instance!
That didn't stop them from expecting me to diagnose what was wrong with their custom app. When I noticed that I also could submit test data to a test store in the app on my iPhone (it was an exclusively mobile only app) I ran the app through Charles and discovered that the app was spitting back a SQL Server error - that the disk was full.
48 hours later and the so called database gurus in South Africa had fixed the issue. I would be prevented Dom gaining access to these critical systems throughout my time at that company.
Re: Charles – Web Debugging Proxy Application
#43Re: Charles – Web Debugging Proxy Application
#44OWASP Zed Attack Proxy is a proxy for pentesting - https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Proje...
Re: Charles – Web Debugging Proxy Application
#45I actually use a local instance of nginx/openresty as my web debugging proxy. I should write a blog on it or something, since it seems like few people do. It's free. It's a breeze to set up, all you need to do is point it at the upstream server you are testing, and it has lua support so you can write code and modify requests on the fly, strip headers, inject things with code. All the work is already done to manipulat…
I would greedily read a write-up about this.
Me too! Please post the link on HN when you have it available!
Re: Charles – Web Debugging Proxy Application
#46Can someone please enumerate the advantages compared to, let's say Chrome dev tools? Tried to google to no avail. Thanks in advance.
Applications other than web browsers send and receive network traffic.
Re: Charles – Web Debugging Proxy Application
#47mitmproxy is a fantastic tool and free. This is just marketing spam. https://mitmproxy.org
>marketing spam Why does team must-do-everything-in-the-terminal always come off as so religiously provocative and desperate? Not everyone is obsessed with their keyboard and feel like going through a huge learning curve to use basic tools, most of us prefer utilizing the mouse and GUIs.
For what it's worth, we are currently working on an actual UI as an alternative to the console interface. :-)
Re: Charles – Web Debugging Proxy Application
#48I actually use a local instance of nginx/openresty as my web debugging proxy. I should write a blog on it or something, since it seems like few people do. It's free. It's a breeze to set up, all you need to do is point it at the upstream server you are testing, and it has lua support so you can write code and modify requests on the fly, strip headers, inject things with code. All the work is already done to manipulat…
Shameless plug: If you want scripting and you are not an nginx expert, mitmproxy has a really powerful Python scripting interface as well:
http://docs.mitmproxy.org/en/latest/scripting/inlinescripts.... https://github.com/mitmproxy/mitmproxy/tree/master/examples
Re: Charles – Web Debugging Proxy Application
#49Looks like a nice tool, too expensive for me though.
After the trial period is done, it doesn't stop working, it just becomes nagware. All the functionality is there, but it will close itself after 30 minutes, and every once in a while will pause for five seconds to ask you to buy a license.
I've used the nagware version at work while waiting for purchasing approval. It's perfectly functional for the work I do, and only very slightly annoying. YMMV depending on your needs (I never need it for more than ten minutes at a time).
Re: Charles – Web Debugging Proxy Application
#50Earlier quoted context omitted.
I would greedily read a write-up about this.
Cool! I'll write it this week and get back to you.
Same, never thought of doing that even though I run Privoxy locally and on my home internet gateway (Ubiquiti ERLite which runs ARM Debian; could probably run nginx on it as well).
Do you set up anything to terminate SSL?