Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add filter for detecting flows with errors. | Aldo Cortesi | 2012-02-10 | 1 | -1/+9 | |
| | | | | Also, remove dependency on weird _is_response method. | |||||
* | Expand test coverage. | Aldo Cortesi | 2012-02-10 | 5 | -3/+65 | |
| | ||||||
* | Methods for getting and setting form urlencoded data on Request. | Aldo Cortesi | 2012-02-10 | 1 | -0/+12 | |
| | ||||||
* | Add get_query and set_query methods to Request. | Aldo Cortesi | 2012-02-09 | 1 | -5/+28 | |
| | ||||||
* | Refactor console. | Aldo Cortesi | 2012-02-07 | 1 | -11/+12 | |
| | | | | Split the console implementation out into logical components. | |||||
* | Fix unit tests broken during previous commit. | Aldo Cortesi | 2012-01-21 | 1 | -4/+4 | |
| | ||||||
* | Fix an issue caused by some editors when editing a request/response body. | Aldo Cortesi | 2012-01-21 | 3 | -5/+3 | |
| | | | | | | Many editors make it hard save a file without a terminating newline on the last line. When editing message bodies, this can cause problems. For now, I just strip the newlines off the end of the body when we return from an editor. | |||||
* | Add support for filtering by HTTP method (get, post, etc.) using ~m operator. | Mark E. Haase | 2011-12-28 | 1 | -0/+8 | |
| | ||||||
* | Add HTTP body size limit specification to command-line tools. | Aldo Cortesi | 2011-09-09 | 1 | -1/+13 | |
| | ||||||
* | Basic infrastructure for request and response body size limits. | Aldo Cortesi | 2011-09-09 | 2 | -6/+37 | |
| | ||||||
* | Improve robustness against invalid data. | Aldo Cortesi | 2011-09-05 | 1 | -0/+3 | |
| | ||||||
* | Add attribution and license for tnetstring.py | Aldo Cortesi | 2011-08-19 | 1 | -0/+1 | |
| | ||||||
* | Move to typed netstrings for serialization. | Aldo Cortesi | 2011-08-19 | 1 | -65/+0 | |
| | | | | This change is backwards incompatible with the old serialization format! | |||||
* | Code cleanliness - appease pychecker. | Aldo Cortesi | 2011-08-04 | 8 | -18/+11 | |
| | ||||||
* | Move script.Context to flow.ScriptContext | Aldo Cortesi | 2011-08-04 | 1 | -5/+8 | |
| | ||||||
* | Request class now has a clean pydoc profile. | Aldo Cortesi | 2011-08-04 | 3 | -5/+5 | |
| | ||||||
* | Further interface cleaning. | Aldo Cortesi | 2011-08-03 | 2 | -6/+6 | |
| | ||||||
* | Clean up interfaces by making some methods pseudo-private. | Aldo Cortesi | 2011-08-03 | 1 | -23/+23 | |
| | ||||||
* | Move all HTTP objects to flow.py | Aldo Cortesi | 2011-08-03 | 7 | -375/+375 | |
| | | | | That's Request, Response, ClientConnect, ClientDisconnect, Error, and Headers. | |||||
* | Enable "|" command to run a oneshot script on a single flow. | Aldo Cortesi | 2011-08-03 | 1 | -8/+0 | |
| | ||||||
* | Add script hooks, enable new engine for mitmdump. | Aldo Cortesi | 2011-08-03 | 5 | -31/+68 | |
| | ||||||
* | Rip out old script interface, start replacing with new stubs. | Aldo Cortesi | 2011-08-03 | 10 | -53/+55 | |
| | | | | Scripts are broken for now. | |||||
* | Start stubbing out a much more powerful script architecture. | Aldo Cortesi | 2011-08-03 | 3 | -0/+47 | |
| | ||||||
* | Refresh current connection when toggling autodecode. | Aldo Cortesi | 2011-08-02 | 2 | -6/+5 | |
| | | | | Also fix the unit tests I forgot to commit... | |||||
* | Unit test++ | Aldo Cortesi | 2011-08-02 | 3 | -21/+69 | |
| | ||||||
* | General cleanup. | Aldo Cortesi | 2011-08-02 | 3 | -25/+3 | |
| | | | | | Cut out unused variables and code, generally shut up pychecker as much as is reasonable. | |||||
* | We no longer need to track clientconnections. | Aldo Cortesi | 2011-08-02 | 1 | -7/+0 | |
| | ||||||
* | Improve performance of loading flows from a file hugely. | Aldo Cortesi | 2011-08-01 | 1 | -4/+4 | |
| | | | | Fell into the "expensive __eq__ method" trap. Oh, Python, you little scamp. | |||||
* | Refactor the way we calculate views of the flow list. | Aldo Cortesi | 2011-08-01 | 2 | -8/+8 | |
| | | | | | The naive approach we used before recalculated the view on every access, and consequently had serious performance problems. | |||||
* | Add decoding/encoding for requests. | Aldo Cortesi | 2011-08-01 | 1 | -0/+25 | |
| | ||||||
* | Merge remote-tracking branch 'alts/encoding' | Aldo Cortesi | 2011-07-28 | 1 | -0/+25 | |
|\ | ||||||
| * | Adds test method for Response encoding and decoding | Stephen Altamirano | 2011-07-26 | 1 | -0/+25 | |
| | | ||||||
* | | Changes replace logic to function in both Python 2.6.x and 2.7.x | Stephen Altamirano | 2011-07-26 | 1 | -2/+2 | |
|/ | | | | Tests now only assume Python 2.6.x rather than requiring 2.7.x. This does not preclude the use of flags as a kwarg in replace | |||||
* | Add an eventlog option to mitmdump | Aldo Cortesi | 2011-07-23 | 1 | -2/+3 | |
| | | | | | This shows client connections, disconnections and requests (before a complete flow is assembled). We need to add an analogous display to mitmproxy. | |||||
* | Also replace strings path for requests. | Aldo Cortesi | 2011-07-22 | 1 | -1/+3 | |
| | ||||||
* | Add utility functions to search and replace strings in flows | Aldo Cortesi | 2011-07-22 | 3 | -1/+46 | |
| | | | | | | | | | | This is a common task in pentesting scenarios. This commit adds the following functions: utils.Headers.replace proxy.Request.replace proxy.Response.replace flow.Flow.replace | |||||
* | Adds encode counterparts to decode functions | Stephen Altamirano | 2011-07-17 | 1 | -16/+14 | |
| | ||||||
* | Refine encoding support | Aldo Cortesi | 2011-07-17 | 1 | -0/+2 | |
| | | | | | - Push decoding down into the LRU cache - Cope gracefully with corrupted data and incorrect encoding headers | |||||
* | Adds support for content encoding, namely gip and deflate | alts | 2011-07-16 | 2 | -1/+32 | |
| | ||||||
* | Add a pretty-printing mode for urlencoded form data. | Aldo Cortesi | 2011-07-15 | 1 | -0/+7 | |
| | ||||||
* | Introduce an anti-compression command-line argument. | Aldo Cortesi | 2011-07-15 | 1 | -0/+1 | |
| | | | | | This is on by default, which means we avoid compressed content unless the -z flag is specified. | |||||
* | Refine path completion somewhat. | Aldo Cortesi | 2011-07-14 | 1 | -1/+2 | |
| | | | | Make it match the behaviour of vim and mutt more closely | |||||
* | Rewrite Headers object to preserve order and case. | Aldo Cortesi | 2011-07-14 | 2 | -94/+24 | |
| | ||||||
* | Cast some data read from dump files to str, to prevent unicode promotion. | Aldo Cortesi | 2011-07-01 | 1 | -1/+5 | |
| | | | | | This fixes a bug that caused a traceback when de-serialized requests were replayed. Also adds unit tests for the problem. | |||||
* | JSON pretty-printing. | Aldo Cortesi | 2011-06-30 | 1 | -1/+9 | |
| | | | | | Also rename the display modes ("pretty" instead of "indent"), and expand the built-in documentation. | |||||
* | Try not to hang when user views large request & response bodies | Aldo Cortesi | 2011-06-27 | 1 | -0/+8 | |
| | | | | | | | | | | Two different strategies here: - Use a simple heuristic to detect if we're looking at XML data when indent mode is used. On non-XML data we can hang even on small documents. - Only view partial data for large bodies. At the moment the cutoff is 100k. I might finetune this later. | |||||
* | Add a hideous kludge to fix not-yet-valid certificates. | Aldo Cortesi | 2011-06-11 | 1 | -0/+2 | |
| | | | | | | | | | | | | - The OpenSSL x509 has no way to explicitly set the notBefore value on certificates. - If two systems have the same configured time, it's possible to return a certificate before the validity start time has arrived. - We "solve" this by waiting for one second when a certificate is first generated before returning the cert. The alternative is to rewrite pretty much all of our certificate generation, a thought too horrible to contemplate. | |||||
* | Add a new flow loading mechanism. | Aldo Cortesi | 2011-05-15 | 2 | -0/+28 | |
| | | | | | We now simulate the normal connection flow when we load flows. That means that we can run scripts, hooks, sticky cookies, etc. | |||||
* | unit test coverage ++ | Aldo Cortesi | 2011-03-20 | 4 | -0/+27 | |
| | ||||||
* | Add a stickyauth option. | Aldo Cortesi | 2011-03-20 | 1 | -0/+40 | |
| | | | | | | | This allows us to replay an HTTP Authorization header, in the same way as we replay cookies using stickycookies. This lets us conveniently get at HTTP Basic Auth protected resources through the proxy, but is not enough to do the same for HTTP Digest auth. We'll put that on the todo list. |