mitmproxy is an interactive proxy for inspecting, modifying and replaying network traffic. It is designed for developers, security testers and researchers who need to understand how applications communicate over HTTP, HTTPS and other protocols.
The software provides three interfaces. mitmproxy is an interactive terminal application, mitmweb offers a browser-based interface, and mitmdump provides command-line facilities for capturing and processing traffic. All three share the same underlying proxy engine.
Requests and responses can be inspected, filtered and modified in real time. mitmproxy can capture encrypted HTTPS traffic when its certificate is trusted, allowing testers to examine headers, cookies, request bodies and application responses. Recorded traffic can be saved, replayed or analysed later.
The software supports several proxy configurations, including regular, reverse, transparent and upstream modes. Python scripting provides extensive control over traffic handling, enabling custom testing workflows, response modification and automation.
This is free and open source software.
Key Features
- Intercept HTTP and HTTPS traffic for inspection and modification.
- Provide interactive terminal, web and command-line interfaces.
- Inspect request and response headers, cookies and bodies.
- Support HTTP/1, HTTP/2, HTTP/3 and WebSocket traffic.
- Modify requests and responses before forwarding them.
- Filter captured traffic using search expressions.
- Save HTTP flows and replay recorded requests.
- Decode and display formats including JSON and Protobuf.
- Support regular, reverse, transparent and upstream proxy configurations.
- Capture traffic from local applications and supported external devices.
- Provide Python scripting for custom traffic processing.
- Simulate server responses and modify application behaviour during testing.
- Support TLS interception using locally trusted certificates.
Website: mitmproxy.org
Support:
Developer: Aldo Cortesi
License: MIT License
mitmproxy is written in Python. Learn Python with our recommended free books and free tutorials.
Related Software
| Security Testing | |
|---|---|
| ZAP | Web app scanner |
| mitmproxy | Interactive HTTPS proxy |
| ffuf | Fast web fuzzer for discovering hidden paths, virtual hosts and parameters |
| Wfuzz | Web application fuzzer and Python library for security assessments |
| sqlmap | Penetration testing tool |
| Dalfox | Identify cross-site scripting vulnerabilities in web applications |
| Commix | Python-based penetration testing tool |
| jwt_tool | Toolkit for auditing JSON Web Tokens and testing security weaknesses |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.