Proxyman VS mitmproxy

I previously used Proxyman [1] on iOS to the http requests send over TLS. It worked rather nicely. Proxyman in this case starts a VPN which handles all the traffic. It uses custom certificate to decrypt the messages.

[1] https://proxyman.io/

Proxyman - Price: Free (optional paid plans available) Modern and intuitive HTTP/HTTPS debugging proxy app for macOS.

I'm using self-developed app MindMac daily to talk with ChatGPT, Proxyman to capture network, TablePlus to access databases and CleanshotX to take screenshots. All of them are currently in an active status.

Links and Show Notes:More Power Users: Ad-free episodes with regular bonus segmentsSubmit Feedbackfolivora.ai - Great Tools for your Mac!iPhone Praktikum 2009GitHub - quicklywilliam/multiclutch: Customization App for Macbooks with MultiTouch supportHopperFSMonitorProxyman · Native, Modern Web Debugging Proxy · Inspect network traffic from Mac, iOS, Android devices with easeCharles Web Debugging Proxy • HTTP Monitor / HTTP Proxy / HTTPS & SSL Proxy / Reverse ProxyBTT and Chat GPT

I've never tried it. Maybe you should give it a try. If it doesn't work, please create a ticket at https://github.com/ProxymanApp/Proxyman/issues

I'm happy to support you.

Basically, Atlantis is a framework from Proxyman to capture their HTTP/HTTPS traffic for debugging purposes. It only needs during development, and should be removed from the production (AppStore) build.

Wonder if this application matches your demand: https://proxyman.io/

This statement gives a false sense of security. You can use a transparent proxy, like mitmproxy, to view HTTPS traffic - https://mitmproxy.org/. https://reedmideke.github.io/networking/2021/01/04/mitmproxy-openwrt.html

You'll need to install mitmproxy and set it up on your computer and iOS. I won't go into too much detail here on how to do this, but there are plenty of guides available. This is a pretty good one: https://nadav.ca/2021/02/26/inspecting-an-iphone-s-https-traffic/

TIL this goes back to 2006, how cool! We nowadays have a much simpler version as a mitmproxy example: https://github.com/mitmproxy/mitmproxy/blob/main/examples/ad.... Although it obviously does not work as well anymore with everything being HTTPS nowadays (unless you trust the cert of course). :)

Perhaps you could have your device use a proxy that can do the HTTPS unwrap for you? https://mitmproxy.org/ maybe?

A great way to test the effectiveness of a pinning implementation is by simulating an MITM attack. Tools like Mitmproxy or Wireshack allow us to create a test environment to monitor, intercept, and proxy network requests for a test host.