[{"data":1,"prerenderedAt":305},["ShallowReactive",2],{"project-13259000":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":36,"aspects":37,"strip":44,"post_text":47,"what":48,"said":86,"maker_in_thread":169,"shape":178,"grid":181,"attempts":268,"same_week":269,"maker_shows":45,"maker_hidden":297,"reader_version":298,"card":299},"13259000","Mitmproxy 1.0 released","Thanks!","maker","Show HN: Mitmproxy 1.0 released, now with a web interface","https:\u002F\u002Fcorte.si\u002Fposts\u002Fcode\u002Fmitmproxy\u002Fannounce_1_0\u002Findex.html","corte.si","mhils",1482773772,2016,248,37,95,2264,5,"notable","dev_tools","http debugging proxy","cli",[24,25,26,27,28],"http proxy","https interception","web debugging","traffic inspection","penetration testing","mixed",0.202,{"positive":32,"neutral":33,"mixed":34,"critical":35},8,10,4,2,24,{"execution":38,"idea":40,"design":41,"performance":42,"docs":43},{"positive":35,"critical":39},0,{"positive":35,"critical":39},{"positive":35,"critical":39},{"positive":39,"critical":35},{"positive":39,"critical":39},[18,39,39,45,45,18,18,18,39,45,18,45,46,45,46,45,45,45,18,45,39,39,39,39,18,45,45,39,39,39,45,39,39,45,18,45,39],3,1,null,{"problem":49,"audience":60,"pricing":47,"motivation":47,"time_to_build":47,"stack":68,"openness":83,"stage":84,"team_size":85},{"value":50,"source":51,"evidence":52},"Inspecting and modifying HTTP and HTTPS traffic between a client and server","inferred",[53,57],{"id":54,"by":55,"text":56},"13259306","capt8bit","Many thanks to you, cortesi, and the rest of the team. I hope this doesn't mean that the command-line interface is going to become a second-class interface? The CLI is what…",{"id":58,"by":55,"text":59},"13259581","> (I am, for what it's worth, extremely familiar with Burp, but only casually acquainted with mitmproxy). You may be disappointed, since I am the opposite. I use burp in rare…",{"value":61,"source":51,"evidence":62},"Developers and security testers doing web application testing",[63,64,67],{"id":54,"by":55,"text":56},{"id":65,"by":55,"text":66},"13259341","I have used mitmproxy for performing web application pentest for years. If you want something to create\u002Fintercept\u002Fedit\u002Ftamper\u002Freplay requests, this is your tool. If you want to…",{"id":58,"by":55,"text":59},[69,77],{"value":70,"source":71,"evidence":72},"Python","commenter",[73],{"id":74,"by":75,"text":76},"13259360","Goopplesoft","Forgot this was written in python. Scanned the code to see how they do http\u002F2. This lib seems useful for general python use:…",{"value":78,"source":7,"evidence":79},"hyper-h2",[80],{"id":81,"by":11,"text":82},"13259456","Thanks! We actually use https:\u002F\u002Fgithub.com\u002Fpython-hyper\u002Fhyper-h2 to implement mitmproxy's HTTP\u002F2 support and have our own HTTP\u002F2 mini-stack for fuzzing that (which is also…","open_source","launched","team",{"praise":87,"objections":101,"requests":120,"questions":129,"alternatives":144},[88,97],{"value":89,"source":71,"evidence":90},"Useful, scriptable tool for web security testing",[91,92,93],{"id":54,"by":55,"text":56},{"id":58,"by":55,"text":59},{"id":94,"by":95,"text":96},"13259413","mstade","TIL a new word: abstruse. Mitmproxy is a great tool for debugging web applications at a low level, particularly security related issues. Even for a n00b like myself the CLI was…",{"value":98,"source":71,"evidence":99},"Well-written Python codebase",[100],{"id":74,"by":75,"text":76},[102,113],{"value":103,"source":71,"evidence":104},"Slow performance when intercepting large responses",[105,109],{"id":106,"by":107,"text":108},"13259824","Eridrus","I tried to use mitmproxy to fiddle around with ad requests a while back and found it really hard to get good performance from it. All I wanted to do was find all responses that…",{"id":110,"by":111,"text":112},"13261112","jaimex2","Its written in Python so performance will never be its strong point. Your regex might have been too greedy or you were throwing an entire network at it?",{"value":114,"source":71,"evidence":115},"No built-in SAZ format support for Fiddler users",[116],{"id":117,"by":118,"text":119},"13259305","colemickens","Nice but, I'd pay money for built in SAZ support. Maybe just exposing the web interface to colleagues might be sufficient, but generally if they can't open it in Fiddler, it may…",[121,125],{"value":122,"source":71,"evidence":123},"Keep the command-line interface first-class",[124],{"id":54,"by":55,"text":56},{"value":126,"source":71,"evidence":127},"Support for SAZ import and export",[128],{"id":117,"by":118,"text":119},[130,137],{"value":131,"source":71,"evidence":132},"Why the jump to 1.0 and planned 2.0",[133],{"id":134,"by":135,"text":136},"13259285","echelon","Why the sudden bump to a 1.0 version number? And why the planned jump to 2.0 in February? (I'd really like to see that blog post you're alluding to. :) Congrats on the release!",{"value":138,"source":71,"evidence":139},"Can it intercept HTTPS",[140],{"id":141,"by":142,"text":143},"13262795","rahrahrah","Can you mitm HTTPS? I'm guessing that the client would get some sort of certificate warning?",[145,157,165],{"value":146,"source":71,"evidence":147},"Burp Suite",[148,152,156],{"id":149,"by":150,"text":151},"13259309","janvdberg","Looks cool! How does this compare to Burp Suite? I am specifically looking for something more lightweight.",{"id":153,"by":154,"text":155},"13259337","tptacek","It's getting there, and if you hate Burp's Java UI and mostly use Burp solely to capture and manually edit requests, it might be an acceptable substitute. I don't think…",{"id":65,"by":55,"text":66},{"value":158,"source":71,"evidence":159},"Fiddler",[160,161],{"id":106,"by":107,"text":108},{"id":162,"by":163,"text":164},"13259355","nimrody","There's a Fiddler version for Linux (based on mono) which, in my experience, works quite well. Easier than starting up a windows VM. The killer feature of Fiddler, for me, is the…",{"value":166,"source":71,"evidence":167},"ZAP",[168],{"id":54,"by":55,"text":56},{"comments":34,"answered":35,"key":170},[171,172,175],{"id":81,"text":82},{"id":173,"text":174},"13259259","Author(s) here - happy to answer any questions and take feedback! :)",{"id":176,"text":177},"13259336","> I hope this doesn't mean that the command-line interface is going to become a second-class interface? No worries - the command line interface is definitely staying a…",{"commenters":179,"max_depth":18,"maker_replies":34,"first_comment_mins":180,"lifespan_hours":36},21,68,[182,184,186,188,190,194,197,199,202,203,206,208,211,213,215,217,218,222,225,226,228,230,232,235,237,239,240,241,245,247,249,250,253,255,258,261,266],[74,39,18,183,75,39],"project\u002Fpositive\u002Fexecution",[81,39,39,185,11,46],"maker\u002Fneutral\u002Fexecution",[173,46,39,187,11,46],"maker\u002Fneutral\u002Fnone",[134,46,45,189,135,39],"project\u002Fneutral\u002Fidea",[191,46,45,192,193,39],"13259372","maker\u002Fneutral\u002Fidea","cortesi",[195,46,18,196,135,39],"13259983","maker\u002Fpositive\u002Fidea",[54,46,18,198,55,39],"project\u002Fpositive\u002Fdesign",[200,46,18,201,193,39],"13259329","maker\u002Fpositive\u002Fdesign",[176,46,39,201,11,46],[204,46,45,205,154,39],"13259345","project\u002Fneutral\u002Fnone",[58,46,18,207,55,39],"project\u002Fpositive\u002Fnone",[209,46,45,210,154,39],"13260022","project\u002Fmixed\u002Fdesign",[106,46,46,212,107,39],"project\u002Fcritical\u002Fperformance",[110,46,45,214,111,39],"project\u002Fneutral\u002Fperformance",[216,46,46,212,107,39],"13264742",[141,46,45,205,142,39],[219,46,45,220,221,39],"13263424","project\u002Fneutral\u002Fdocs","8ig8",[223,46,45,220,224,39],"13263460","chrisweekly",[94,35,18,207,95,39],[117,45,45,227,118,39],"project\u002Fmixed\u002Fidea",[162,45,39,229,163,39],"other\u002Fneutral\u002Fnone",[231,45,39,229,118,39],"13259373",[233,45,39,229,234,39],"13261161","feld",[236,45,39,229,118,39],"13261956",[238,45,18,196,193,39],"13259388",[149,34,45,189,150,39],[153,34,45,210,154,39],[242,34,39,243,244,39],"13259537","commenter\u002Fneutral\u002Fnone","mkagenius",[246,34,39,243,154,39],"13259652",[248,34,39,243,244,39],"13261643",[65,34,45,210,55,39],[251,34,39,229,252,39],"13259846","SCHiM",[254,34,39,229,154,39],"13260202",[256,18,45,205,257,39],"13260707","lox",[259,18,18,183,260,39],"13261534","Steeeve",[262,263,45,264,265,39],"13259365",6,"project\u002Fneutral\u002Fexecution","SimeVidas",[267,263,39,185,11,46],"13259379",[],[270,275,280,284,288,293],{"id":271,"name":272,"points":273,"category":274},"13245475","Rocket",484,"languages",{"id":276,"name":277,"points":278,"category":279},"13244827","Wick",322,"creative",{"id":281,"name":282,"points":283,"category":279},"13254029","ThreadTone",303,{"id":285,"name":286,"points":287,"category":20},"13254342","8bitworkshop",289,{"id":289,"name":290,"points":291,"category":292},"13259429","Thimble",272,"learning_science",{"id":294,"name":295,"points":296,"category":20},"13245343","Code.hackmit.org",140,false,"v2",{"id":300,"name":5,"line":6,"ai":297,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":301,"top":18,"kw":302,"maker":11,"domain":10,"tier":19,"attempts":39,"strip":303,"url":9,"mix":304,"praise":89,"objection":103,"sub":21},13259000,0.2,[24,25,26,27,28],"5003355503531313335300005330003003530",[32,33,34,35],1793990952330]