aboutsummaryrefslogtreecommitdiffstats
path: root/libmproxy
Commit message (Collapse)AuthorAgeFilesLines
...
* Add utility functions to search and replace strings in flowsAldo Cortesi2011-07-223-0/+56
| | | | | | | | | | This is a common task in pentesting scenarios. This commit adds the following functions: utils.Headers.replace proxy.Request.replace proxy.Response.replace flow.Flow.replace
* Removes last_encoding attribute from Response. Prompts for encoding on ↵Stephen Altamirano2011-07-212-12/+27
| | | | identity responses
* Removes should_autodecode attribute from Response. Adds commandline option ↵Stephen Altamirano2011-07-215-10/+24
| | | | 'd' to toggle autodecode, adds togglable option 'd' to do the same
* Drop cert expiry time to avoid a bug in some OpenSSL versions.Aldo Cortesi2011-07-221-3/+4
|
* Switches hotkeys. En/decode is now bound to 'z', kill connection now 'X'Stephen Altamirano2011-07-201-4/+4
|
* Fixes issue #10 regarding broken json printingStephen Altamirano2011-07-191-1/+1
|
* Switches hotkey to unused 'g', adds help messageStephen Altamirano2011-07-181-1/+2
|
* Adds ability to toggle between encodings in the response viewStephen Altamirano2011-07-182-11/+28
|
* Adds encode counterparts to decode functionsStephen Altamirano2011-07-171-4/+25
|
* Add explicit notice when data has been auto-decoded.Aldo Cortesi2011-07-181-28/+38
|
* Correctly detect urlencoded dataAldo Cortesi2011-07-171-1/+1
| | | | This broke when we introduced case preservation for headers.
* Fix error in anticomp commandline specification.Aldo Cortesi2011-07-171-1/+1
|
* Make help display for options nicer.Aldo Cortesi2011-07-171-21/+59
|
* Expose the anticompression flag as an option through the "o" key in mitmproxy.Aldo Cortesi2011-07-171-0/+6
|
* Refine encoding supportAldo Cortesi2011-07-172-6/+15
| | | | | - Push decoding down into the LRU cache - Cope gracefully with corrupted data and incorrect encoding headers
* Adds support for content encoding, namely gip and deflatealts2011-07-165-25/+90
|
* Add a pretty-printing mode for urlencoded form data.Aldo Cortesi2011-07-152-2/+22
|
* Introduce an anti-compression command-line argument.Aldo Cortesi2011-07-155-1/+21
| | | | | This is on by default, which means we avoid compressed content unless the -z flag is specified.
* Don't sort headers when displaying them in mitmproxy.Aldo Cortesi2011-07-141-1/+1
|
* Refine path completion somewhat.Aldo Cortesi2011-07-141-4/+0
| | | | Make it match the behaviour of vim and mutt more closely
* Rewrite Headers object to preserve order and case.Aldo Cortesi2011-07-145-114/+76
|
* Merge branch 'master' of github.com:cortesi/mitmproxyAldo Cortesi2011-07-111-1/+1
|\
| * Specify certificate creation waiting time argument to fix type error in ↵Felix Wolfsteller2011-07-091-1/+1
| | | | | | | | proxy.py .
* | Bail out if no command was specified after | shortcut.Aldo Cortesi2011-07-081-1/+2
|/
* Cast some data read from dump files to str, to prevent unicode promotion.Aldo Cortesi2011-07-011-5/+5
| | | | | This fixes a bug that caused a traceback when de-serialized requests were replayed. Also adds unit tests for the problem.
* Show view mode in statusbar.Aldo Cortesi2011-06-301-24/+33
| | | | Also make "m" keyboard shortcut available globally.
* Fix edit prompt display, return code editing.Aldo Cortesi2011-06-301-3/+6
|
* JSON pretty-printing.Aldo Cortesi2011-06-302-25/+54
| | | | | Also rename the display modes ("pretty" instead of "indent"), and expand the built-in documentation.
* Prep for 0.5 releaseAldo Cortesi2011-06-271-1/+1
| | | | | | - Update CHANGELOG and CONTRIBUTORS - Bump version - Include Apple Gamecenter highscore setting tutorial in docs
* Make the certificate wait time configurable.Aldo Cortesi2011-06-273-3/+11
| | | | | | | | | Since OpenSSL doesn't let us set certificate start times in the past, the client and proxy machine time must be synchronized, or the client might reject the certificate. We can bodgy over small discrepancies by waiting a few seconds after a new certificate is generated (i.e. the first time an SSL domain is contacted). Make this a configurable option, and turn it off by default.
* Try not to hang when user views large request & response bodiesAldo Cortesi2011-06-272-5/+39
| | | | | | | | | | Two different strategies here: - Use a simple heuristic to detect if we're looking at XML data when indent mode is used. On non-XML data we can hang even on small documents. - Only view partial data for large bodies. At the moment the cutoff is 100k. I might finetune this later.
* Don't redraw the screen more often than necessary.Aldo Cortesi2011-06-273-4/+11
|
* Repair a problem that sometimes caused SSL connections to peg the CPU.Aldo Cortesi2011-06-231-3/+6
|
* Don't backup flows before replay.Aldo Cortesi2011-06-231-1/+0
| | | | This lets us revert to the original request, even after replaying an edit.
* Fix urwid version parsing error when it's something like 0.9.10-preYuangxuan Wang2011-06-201-1/+1
|
* Add a hideous kludge to fix not-yet-valid certificates.Aldo Cortesi2011-06-111-0/+2
| | | | | | | | | | | | - The OpenSSL x509 has no way to explicitly set the notBefore value on certificates. - If two systems have the same configured time, it's possible to return a certificate before the validity start time has arrived. - We "solve" this by waiting for one second when a certificate is first generated before returning the cert. The alternative is to rewrite pretty much all of our certificate generation, a thought too horrible to contemplate.
* Anticache and refresh_server_playback options are applied before flows are ↵Aldo Cortesi2011-05-151-2/+2
| | | | | | | loaded. You can now use mitmdump to preview how these options work, by running mitmdump against a set of saved flows, and viewing the output.
* Add -r option to mitmdump and mitmproxy.Aldo Cortesi2011-05-154-5/+26
| | | | | | This option reads a set of flows from a file. I've also regularized the mitmdump and mitmproxy command-line signatures by removing mitmproxy's old way of specifying flow loads through naked arguments.
* Add a new flow loading mechanism.Aldo Cortesi2011-05-152-7/+23
| | | | | We now simulate the normal connection flow when we load flows. That means that we can run scripts, hooks, sticky cookies, etc.
* Minor code cleanup - no need to recreate the master queue.Aldo Cortesi2011-05-141-2/+1
|
* Add a -n option which tells the tools not to bind a proxy.Aldo Cortesi2011-05-144-15/+31
| | | | This is useful when you just want to inspect or process dumps.
* Refactoring.Aldo Cortesi2011-03-292-10/+8
|
* Add some debugging output to help troubleshoot a performance problem.Aldo Cortesi2011-03-271-0/+10
|
* unit test coverage ++Aldo Cortesi2011-03-201-13/+0
|
* Add a stickyauth option.Aldo Cortesi2011-03-205-4/+73
| | | | | | | This allows us to replay an HTTP Authorization header, in the same way as we replay cookies using stickycookies. This lets us conveniently get at HTTP Basic Auth protected resources through the proxy, but is not enough to do the same for HTTP Digest auth. We'll put that on the todo list.
* Reverse order of flows in mitmproxy.Aldo Cortesi2011-03-202-3/+1
| | | | It matches user expectations much better to have new flows appended to the bottom.
* Revamp key generation.Aldo Cortesi2011-03-183-17/+60
| | | | | | | | | | | We now create three different files in the .mitmproxy directory when a dummy CA is made: mitmproxy-ca.pem - the CA, including private key mitmproxy-ca-cert.p12 - A pkcs12 version of the certificate, for distribution to Windows. mitmproxy-ca-cert.pem - A PEM version of the certificate, for distribution to everyone else.
* Tweak CA and cert setup to be nice to Windows.Aldo Cortesi2011-03-182-8/+0
| | | | | | For some reason Satan's Operating System doesn't join up the certification path if the key identifiers are set to hash. This took a few hours of trial and error to figure out.
* Enable request and response script commandline arguments for mitmproxy.Aldo Cortesi2011-03-181-14/+22
|
* Maintain focus in mitmproxy when flows are loaded from file.Aldo Cortesi2011-03-181-4/+7
|