Mitmproxy 3.0 released
Dev tools
debugging proxy
SHOW HN2018
How HN took it
9 positive, 12 neutral or asking, 0 mixed, 3 critical, out of 24 comments about the project. Thread score +0.23.
Docs: 1 for, 1 againstPrivacy: 1 for, 0 againstIdea: 1 for, 0 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Clearer documentation in version 3.0
From 1 comment
I'm happy to see this. I switched to MITM from Charles a couple months ago. The documentation for 3.0 is, in my opinion, much clearer.
jkereako on HN
Useful as a reverse proxy for local development
From 2 comments
I'm using mitmproxy as super easy to setup SSL reverse proxy for local html5 development as many API nowadays require ssl to work.
finchisko on HNUsing mitmproxy as a reverse proxy from local development to our development servers. A few lines of code and we have authentication headers attached w/o having to manage them…
hartror on HN
Scriptable and works well from the command line
From 2 comments
Yes: scriptability. I haven't used mitm 3 yet, but had a fantastic experience with mitmproxy about a year and a half ago, incorporating mitmdump into a CLI tool for testing…
chrisweekly on HNI'm using mitmproxy as super easy to setup SSL reverse proxy for local html5 development as many API nowadays require ssl to work.
finchisko on HN
No telemetry
From 1 comment
> there's no telemetry in mitmproxy Thank you kindly!
mynewtb on HN
Objections
Getting started is confusing and lacks a quick tutorial
From 1 comment
I used mitmproxy a few days ago, trying to compare my implementation of some API client. It feels lightweight, but getting started can be confusing. I used the command line, and…
wiradikusuma on HN
Cannot proxy whole machine traffic easily without iptables
From 2 comments
I think MITM had the limitation that you could proxy only traffic from the different machine. Was/is it the case, or did I just get something wrong? Because if that's true…
rimliu on HNIt's technically possible, but requires iptables or equivalents. For now, if you want to proxy the whole machine, Charles is your way to go!
mhils on HN
Certificate pinning in apps blocks interception
From 2 comments
Neat! But certificate pinning (or rather, CA pinning) inside app binaries is getting more common, is there any way around that with mitmproxy?
cjbprime on HNIs there a way around that at all without modifying the binaries ?
heinrichf on HN
Requests
A 5-minute beginner tutorial
From 1 comment
I used mitmproxy a few days ago, trying to compare my implementation of some API client. It feels lightweight, but getting started can be confusing. I used the command line, and…
wiradikusuma on HN
Latency setting for chosen responses
From 1 comment
Is there an easy way to set latency for chosen responses? I guess it's possible using mitmdump with custom Python script, but maybe there is such a feature built-in?
KORraN on HN
Support for secure websockets
From 1 comment
Is there a way to use mitmproxy with secure websockets?
turdnagel on HN
Questions
How to use mitmproxy with .NET application traffic that is compressed
From 1 comment
Is there any way to use this on .net applications I tried putting this in between a business logic and web tier but I couldn't get it to work. The things were compressed but I…
brian_herman on HN
How to get around certificate pinning
From 1 comment
Neat! But certificate pinning (or rather, CA pinning) inside app binaries is getting more common, is there any way around that with mitmproxy?
cjbprime on HN
Alternatives named
Charles
From 2 comments
I'm happy to see this. I switched to MITM from Charles a couple months ago. The documentation for 3.0 is, in my opinion, much clearer.
jkereako on HNI think MITM had the limitation that you could proxy only traffic from the different machine. Was/is it the case, or did I just get something wrong? Because if that's true…
rimliu on HN
Fiddler
From 1 comment
If you're on Windows, try Fiddler for something a little more user friendly.
lwansbrough on HN
AnyProxy
From 1 comment
Another one that I worked with and quite liked is Anyproxy (https://github.com/alibaba/anyproxy)
Jonovono on HN
Frida scripts and ssl-kill-switch2 for certificate pinning
From 2 comments
There are some Frida scripts running around for this purpose. However I don't have any personal experience with them, so I have no idea how reliable they work.
Ded7xSEoPKYNsDd on HNFor iOS, there is this tool: https://github.com/nabla-c0d3/ssl-kill-switch2
nnd on HN