wares.gg

mitmproxy

An intercepting proxy that decrypts, displays and lets you modify HTTP and HTTPS traffic, with a console, a web interface and a scriptable command-line version.

FreeOpen sourceWindowsmacOSLinuxCommand line
Official websitemitmproxy.orgDownload pagemitmproxy.orgSource codegithub.comDocumentationdocs.mitmproxy.org

These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.

5 more ways to get mitmproxy

Package managers

  • wingetwinget install --id mitmproxy.mitmproxy
  • Chocolateychoco install mitmproxy
  • Homebrewbrew install --cask mitmproxy
  • Flathubflatpak install flathub org.mitmproxy.mitmproxy
  • PyPIpip install mitmproxy

About mitmproxy

mitmproxy sits between an application and the network, decrypts TLS using a certificate authority you install on the client, and shows you every request and response. You can pause a request, edit it and let it through, replay it, or script transformations in Python.

It comes in three forms: `mitmproxy` with an interactive console interface, `mitmweb` with a browser interface, and `mitmdump`, which the project describes as tcpdump for HTTP and which is what you use in scripts and CI. It handles HTTP/1, HTTP/2 and WebSockets.

It is the standard tool for debugging what a mobile app or a desktop program is actually sending, and for security testing of web traffic. Decrypting traffic requires installing a certificate on the device, which you should only do on devices you control.

Strengths

  • Intercepts, displays and lets you modify HTTPS traffic in flight
  • Three interfaces: interactive console, web, and a scriptable dump mode
  • Python scripting for automated transformation and analysis
  • HTTP/1, HTTP/2 and WebSockets supported

Limitations

  • Requires installing its certificate authority on the client device
  • Certificate pinning in many apps blocks interception entirely
  • Only legitimate on devices and traffic you control or are authorised to test
  • High-volume traffic is heavy on memory in the interactive interfaces

Details

Pricing
Free · Free and open source under the MIT licence.
License
MIT
Developer
mitmproxy
Platforms
Windows, macOS, Linux, Command line
How it runs
Downloadable app
Account
Not required
Works offline
Yes
Best suited for
Seeing exactly what an app or website is sending, and changing it to test
Categories
Security tools
Last verified
Added
Provenance
Selected from the TechWalrus downloads catalog (Security); facts checked against the developer's own pages, 2 sources on file.

Report a wrong fact or a dead link on this listing