Top 18 mitmproxy Open-Source Projects

• mitmproxy

  152 34,408 9.4 Python

  An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

  

Project mention: Ask HN: Fiddler Alternatives | news.ycombinator.com | 2024-03-14

• mitmproxy2swagger

  12 4,848 8.4 HTML

  Automagically reverse-engineer REST APIs via capturing traffic

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• goflyway

  1 4,308 0.0 Go

  An encrypted HTTP server

• proxy.py

  5 2,861 6.8 Python

  ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework

• proxify

  1 2,555 9.2 Go

  A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

  

• ssh-mitm

  42 1,225 8.9 Python

  SSH-MITM - ssh audits made simple (by ssh-mitm)

  

Project mention: Terrapin Attack for prefix injection in SSH | news.ycombinator.com | 2023-12-19

There is now an issue ticket in ssh-mitm to discuss the similarities between ssh-mitm and terrapin attack: https://github.com/ssh-mitm/ssh-mitm/issues/165

• BDFProxy

  2 981 0.0 Python

  Patch Binaries via MITM: BackdoorFactory + mitmProxy.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• secret-agent

  1 633 0.0 TypeScript

  The web scraper that's nearly impossible to block - now called @ulixee/hero

  

• Instagram-SSL-Pinning-Bypass

  1 361 3.1 Python

  Bypass Instagram SSL pinning on Android devices.

Project mention: Norway Fining Meta $98,500 per Day for User Privacy Breach | news.ycombinator.com | 2023-09-15

No, they're usually not published. I encourage you to do it yourself.

Looks like Instagram at least does do TLS cert pinning, but it looks like there are patched binaries that disable it.

https://github.com/Eltion/Instagram-SSL-Pinning-Bypass

• proxelar

  19 348 6.8 Rust

  A MITM Proxy 🧑‍💻! Toolkit for HTTP/1, HTTP/2, and WebSockets with SSL/TLS Capabilities. Learning Project.

Project mention: What are you rewriting in rust? | /r/rust | 2023-07-10

I wrote a man in the middle proxy for HTTP/1 - HTTP/2 and Web Socket wit SSL/TLS

• Hassio-Addons

  2 290 8.5 Dockerfile

  The repository for my Home Assistant Supervisor Add-ons. (by Poeschl)

• gomitmproxy

  1 261 3.2 Go

  Simple golang mitm proxy implementation

  

• xepor

  3 203 6.2 Python

  Xepor, a web routing framework for reverse engineers and security researchers, brings the best of mitmproxy & Flask

  

• forwarder

  3 181 9.8 Go

  Forwarder is a production-ready, fast MITM proxy with PAC support. It's suitable for debugging, intercepting and manipulating HTTP traffic. It's used as a core component of Sauce Labs Sauce Connect Proxy.

  

Project mention: Go read /etc/hosts with Net.lookupStaticHost() | news.ycombinator.com | 2024-02-23

• petep

  3 157 7.2 Java

  PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡

Project mention: bettercap VS petep - a user suggested alternative | libhunt.com/r/bettercap | 2023-10-03

• fluxzy.core

  1 84 9.6 C#

  Fast and fully streamed Man-On-The-Middle engine and a CLI app to intercept, record and alter HTTP/1.1, H2, websocket traffic over plain or secure channels.

Project mention: Gathering HAR and deciphered PCAP from you webdriver tests | dev.to | 2024-01-15

To gather network data without relying solely on the browser, we need an intermediary that can monitor the traffic between the browser and the remote server. For the following example, we will be using Fluxzy, an open-source Man-In-The-Middle (MITM) intermediary that can be used as a .NET library. We will use it along with Selenium to extract HTTP Archive (HAR) Files and PCAPNG from any browser or remote devices.

• msattack

  2 16 0.8 Python

  [WIP] - Metal Slug Attack Server Reimplementation

• super-auto-pets

  2 11 0.0 Python

  A tool to allow for viewing of arbitrary Super Auto Pets replays

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

mitmproxy related posts

• Go read /etc/hosts with Net.lookupStaticHost()

  1 project | news.ycombinator.com | 23 Feb 2024

• Gathering HAR and deciphered PCAP from you webdriver tests

  1 project | dev.to | 15 Jan 2024

• Terrapin-Attack Style Vulnerability Likely Exploited for 2 Years

  1 project | news.ycombinator.com | 21 Dec 2023

• Show HN: Forwarder – FOSS MITM proxy written in Go

  2 projects | news.ycombinator.com | 20 Dec 2023

• mitmproxy VS petep - a user suggested alternative

  2 projects | 3 Oct 2023

• Check if a publickey is known by GitHub or Gitlab without iterating all users

  1 project | news.ycombinator.com | 24 Feb 2023

• MITM Proxy: v0.1.3 Released

  1 project | /r/opensource | 22 Feb 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 3 May 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com