Show HN: A proxy service for debugging HTTP/S traffic

So, when I use your proxy you can see and store my http and https traffic (assuming I install the certificate in my device). Furthermore, all the traffic from the my pc to your proxy is also transmitted unencrypted so everyone who sits between my device and your proxy can see my traffic as well.

While this interface looks really cool and it is probably feature rich, I will pass using it because of those privacy concerns. If anyone is interested in a local http(s) proxy, check out mitmproxy[0] which is open source, runs locally and is easy to install (I’m not affiliated with them, i use use mitmproxy occasionally when Reverse Engineering am API).

[0]: https://mitmproxy.org

Re: Show HN: A proxy service for debugging HTTP/S traffic

#5

Post by tarnacious_ » Sat, Dec 09, 2017, 2:53 PM UTC

Hi HN,

This is side project I have been working on with a friend. It's a pretty niche service, so it isn't easy finding people to try it. I'm really interested to hear what you think, for better or worse :) I'm also happy to answer any questions.

Re: Show HN: A proxy service for debugging HTTP/S traffic

#6

Post by madeofpalk » Sat, Dec 09, 2017, 2:55 PM UTC

Matt3o12_ wrote: post #4

> debugProxy is a HTTP/S hosted proxy server that lets you interact with the traffic passing through it, using a web based dashboard. So, when I use your proxy you can see and store my http and https traffic (assuming I install the certificate in my device). Furthermore, all the traffic from the my pc to your proxy is also transmitted unencrypted so everyone who sits between my device and your proxy can see my traffi…

Also consider Charles, which is pretty nifty https://www.charlesproxy.com

Re: Show HN: A proxy service for debugging HTTP/S traffic

#7

Post by tarnacious_ » Sat, Dec 09, 2017, 2:57 PM UTC

Matt3o12_ wrote: post #4

> debugProxy is a HTTP/S hosted proxy server that lets you interact with the traffic passing through it, using a web based dashboard. So, when I use your proxy you can see and store my http and https traffic (assuming I install the certificate in my device). Furthermore, all the traffic from the my pc to your proxy is also transmitted unencrypted so everyone who sits between my device and your proxy can see my traffi…

> So, when I use your proxy you can see and store my http and https traffic (assuming I install the certificate in my device).

Yes. Requests more than 20 minutes old are permanently deleted.

> Furthermore, all the traffic from the my pc to your proxy is also transmitted unencrypted so everyone who sits between my device and your proxy can see my traffic as well.

No, if you make HTTPS requests they are tunneled over TLS.

> While this interface looks really cool and it is probably feature rich,

Thanks. It isn't feature rich though, it's quite minimal.

> If anyone is interested in a local http(a) proxy, check out mitmproxy[0] which is open source, runs locally and is easy to install (I’m not affiliated with them, i use use mitmproxy occasionally when Reverse Engineering am API).

mitmproxy is indeed great, in fact, this service is build on mitmproxy instances :)

Re: Show HN: A proxy service for debugging HTTP/S traffic

#8

Post by fiatjaf » Sat, Dec 09, 2017, 2:57 PM UTC

I thought this would be something that would run in my own machine.

Re: Show HN: A proxy service for debugging HTTP/S traffic

#9

Post by gressquel » Sat, Dec 09, 2017, 2:59 PM UTC

Moderns app use SSL pinning, same with big websites using HSTS. So this won't really decrypt HTTPS traffic

Re: Show HN: A proxy service for debugging HTTP/S traffic

#10

Post by tarnacious_ » Sat, Dec 09, 2017, 3:03 PM UTC

bencevans wrote: post #2

Interface looks cool but what benefits are there over using mitmproxy?

> Interface looks cool

Thanks, glad you think so :)

> what benefits are there over using mitmproxy?

With mitmproxy you can do almost everything you can do with debugProxy and a lot more.

The main benefit is you don't need to install anything. Also you can proxy requests from clients outside your local network (if you are behind a NAT router, for example).