Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Mitmproxy 1.0 released, now with a web interface

corte.si

Post reply on HN
Print view View original

31–39 of 39 posts

Re: Show HN: Mitmproxy 1.0 released, now with a web interface

#31

Post by feld »

colemickens wrote: post #16
nimrody wrote: post #12

Earlier quoted context omitted.

There's a Fiddler version for Linux (based on mono) which, in my experience, works quite well. Easier than starting up a windows VM. The killer feature of Fiddler, for me, is the timeline display which we use to optimise network heavy apps.

Kind of a non-starter for me, as this is a headless cloud VM with more RAM and CPU than any PC I've ever owned. If I were to actually install X, Xrdp, etc... I'm not in a better situation than simply using Windows in the first place. And I suppose it's been long enough since trying Fiddler for Linux that I should reserve my experiences from last time around. I've gotten pretty used to mitmproxy. Seems to be the defac…

Why wouldn't X window forwarding be ok?

Re: Show HN: Mitmproxy 1.0 released, now with a web interface

#32

Post by Steeeve »

lox wrote: post #29

I'd love to figure out how to use Mitmproxy to intercept traffic from Docker containers for debugging on macOS, I've never been able to make it work.

I've done this a few times - intercepting traffic to applications running within docker, not intercepting docker's internal communications.

I usually use a container specifically for MITMProxy rather than install it alongside whatever I'm troubleshooting.

It was pretty straightforward. I don't recall having to do anything tricky to make it work.

Re: Show HN: Mitmproxy 1.0 released, now with a web interface

#33

Post by mkagenius »

tptacek wrote: post #23
mkagenius wrote: post #21

Earlier quoted context omitted.

> are really close to what the Burp "Intruder" fuzzer does (and I'm not in love with Intruder either). Have you achieved any good results with the intruder? if yes, an example would be awesome. (Personally I have never used Burp)

Burp is the industry standard web pentesting tool, so that's a bit like asking if a writer has ever obtained good results from Microsoft Word.

I was asking about intruder in specific. I am not doubting the capabilities of Burp.

Re: Show HN: Mitmproxy 1.0 released, now with a web interface

#34

Post by colemickens »

feld wrote: post #31
colemickens wrote: post #16

Earlier quoted context omitted.

Kind of a non-starter for me, as this is a headless cloud VM with more RAM and CPU than any PC I've ever owned. If I were to actually install X, Xrdp, etc... I'm not in a better situation than simply using Windows in the first place. And I suppose it's been long enough since trying Fiddler for Linux that I should reserve my experiences from last time around. I've gotten pretty used to mitmproxy. Seems to be the defac…

Why wouldn't X window forwarding be ok?

I've never had X forwarding work well enough to actually be usable, and last time I checked NX was still a massive (/non-free) pain to setup.

Besides, I already have a workflow that works perfectly fine, is headless as I prefer, works with mitmproxy, etc.

Also, I installed Fiddler from AUR again this afternoon and it just looked awful. The settings menus were unreadable, for example.

Re: Show HN: Mitmproxy 1.0 released, now with a web interface

#36

Post by 8ig8 »

rahrahrah wrote: post #35
mhils wrote: post #2

Author(s) here - happy to answer any questions and take feedback! :)

Can you mitm HTTPS? I'm guessing that the client would get some sort of certificate warning?

Yes...

http://docs.mitmproxy.org/en/latest/certinstall.html

Re: Show HN: Mitmproxy 1.0 released, now with a web interface

#37

Post by chrisweekly »

rahrahrah wrote: post #35
mhils wrote: post #2

Author(s) here - happy to answer any questions and take feedback! :)

Can you mitm HTTPS? I'm guessing that the client would get some sort of certificate warning?

Yes. You simply need to install a mitmproxy cert. https://mitmproxy.org/doc/certinstall.html

Re: Show HN: Mitmproxy 1.0 released, now with a web interface

#38

Post by Eridrus »

jaimex2 wrote: post #30
Eridrus wrote: post #24

Earlier quoted context omitted.

I tried to use mitmproxy to fiddle around with ad requests a while back and found it really hard to get good performance from it. All I wanted to do was find all responses that looked like XML (regardless of headers) and do some simple replacements. Even after fiddling with settings to make it not buffer large responses it was still slow enough that it really affected my general web browsing through it. I ended up us…

Its written in Python so performance will never be its strong point. Your regex might have been too greedy or you were throwing an entire network at it?

I was running it on my laptop, MITMing only my own browsing.

I was using something like "I'm not expecting miracles, just reporting what I experienced. Maybe some form of multiprocess architecture would help alleviate these issues, maybe running it via Jython would have been better, I don't really know much about Python performance.

Post reply on HN