mitmproxy - Interactive HTTPS Proxy for macOS

Overview

mitmproxy is a free and open-source interactive HTTPS proxy tool designed for developers, security researchers, and network administrators. It enables you to intercept, inspect, modify, and replay network traffic, with full support for HTTP/1, HTTP/2, HTTP/3, WebSockets, and other SSL/TLS-protected protocols.

Installation:

brew install mitmproxy

Core Features

🛠️ Command Line Tool

• Traffic Interception & Inspection: Real-time view of all HTTP(S) requests and responses
• Protocol Support: Full support for HTTP/1, HTTP/2, HTTP/3, and WebSockets
• Data Decoding: Pretty-printing and decoding of various message formats, from HTML to Protobuf
• Dynamic Modification: Intercept and modify specific messages before they reach their destination
• Traffic Replaying: Resend captured traffic to clients or servers
• SSL/TLS Decryption: Transparent decryption of HTTPS traffic for analysis

🌐 Web Interface (mitmweb)

• Graphical Interface: Intuitive operation of mitmproxy’s core features via a web browser
• DevTools-like Experience: Offers a Chrome DevTools-style UI, compatible with any application or device
• Advanced Features: Includes advanced capabilities like request interception and replay
• Cross-platform Access: Access proxy data from any device via the web interface

🐍 Python API

• Fully Programmable: Complete control over mitmproxy via Python scripts
• Extensible System: Write custom plugins and scripts
• Flexible Customization: Automate message modifications, redirect traffic, visualize data, or implement custom commands
• Rich Examples: Extensive official examples and community-contributed plugins available

Technical Highlights

Powerful Ecosystem

mitmproxy features an active plugin ecosystem, including:

• mitmproxy/examples/contrib: Collection of community-contributed plugins
• mitmproxy2swagger: Converts mitmproxy captures into OpenAPI 3.0 specifications
• kubetap: A kubectl plugin for interacting with Kubernetes services

Use Cases

• Debugging & Testing: Troubleshoot network requests and test API endpoints
• Privacy Measurement: Analyze app network behavior and privacy protection
• Penetration Testing: Security assessments by researchers
• Protocol Analysis: Study and understand how various network protocols work
• Mobile Development: Debug network requests and responses in mobile apps

Usage Example

# addon.py - Simple redirection example
from mitmproxy import http

def request(flow: http.HTTPFlow):
    # Redirect to a different host
    if flow.request.pretty_host == "example.com":
        flow.request.host = "mitmproxy.org"
    
    # Proxy direct response
    elif flow.request.path.endswith("/brew"):
        flow.response = http.Response.make(
            418,  # HTTP status code
            b"I'm a teapot",  # Response body
        )

Key Advantages

🌟 Professional Strengths

1. Fully Open Source & Free: MIT license, no cost involved
2. Cross-Platform: Fully supports macOS, Linux, and Windows
3. Active Community: Robust community support and continuous updates
4. Seamless Integration: Easily integrates into existing development workflows

🎯 Efficiency Enhancements

• Real-time Monitoring: View network traffic without restarting applications
• Batch Operations: Automate complex traffic modification tasks
• Repeatability: Easily save and replay test scenarios
• Educational Tool: Excellent for learning and teaching network protocols

🔒 Security & Reliability

• Local Proxy: All data processed locally; no risk of data leakage
• Transparent Certificates: Provides self-signed certificates; full control over encryption
• High Control: Complete control over which traffic is intercepted and modified

System Requirements

• Operating System: macOS 10.14 or higher
• Python Support: Python 3.7+ (for scripting)
• Memory: 4GB RAM recommended
• Storage: Approx. 100MB free space

Support & Resources

• Developer Community: Active developer forums and chat rooms
• Documentation: Comprehensive technical documentation and user guides
• Sponsorship: Supported by multiple companies and individual sponsors

Conclusion

mitmproxy is one of the most powerful network debugging tools available on macOS. Whether you're developing complex web applications, testing APIs, conducting security research, or simply exploring how applications communicate over the network, mitmproxy offers unparalleled flexibility and control. Combined with its open-source nature and active community support, mitmproxy has become an indispensable tool for developers and security professionals alike.