mitmproxy

Name: mitmproxy
Brand: mitmproxy

Interactive, scriptable man‑in‑the‑middle proxy for HTTP, HTTPS and WebSocket traffic

softwareSecurity Auditingproxyhttphttps

Visit Website

Our Verdict

Best for

Security researchers needing deep, scriptable traffic manipulation

Skip if

Non‑technical users who prefer GUI‑only tools

What is mitmproxy?

mitmproxy is an open‑source, console‑based proxy that lets security researchers and developers intercept, inspect, modify, and replay network traffic. It runs on Windows, macOS, Linux and can be accessed via a web UI for convenient analysis. The tool supports HTTP, HTTPS, and WebSocket protocols, offering powerful scripting capabilities in Python to automate testing and debugging. Being free and self‑hosted, it integrates easily into CI pipelines and local development environments.

SpecificationsAI-estimated

deploymentSelf-hosted

open source✅ Yes

github stars44,430

api available✅ Yes

support optionsEmail, GitHub Issues

key integrationsNone

primary languagePython

Key Features of mitmproxy

Intercept and view raw HTTP/HTTPS requests and responses in real time.

Modify request headers, bodies, or responses on the fly using built‑in or custom Python scripts.

Replay captured traffic to test server behavior or reproduce bugs.

Support for WebSocket traffic inspection and modification.

Automatic generation of client certificates for seamless TLS interception.

Command‑line interface with powerful filtering and search capabilities.

Web-based UI (mitmweb) for visual inspection of flows and easy navigation.

Export captured sessions to HAR, JSON, or plain text for further analysis.

Use Cases for mitmproxy

API Debugging

Inspect and modify API calls during development to troubleshoot unexpected responses.

Security Testing

Perform penetration testing by tampering with traffic to discover vulnerabilities.

Performance Profiling

Measure latency and payload sizes by replaying traffic under different conditions.

Automated Regression Testing

Integrate scripted traffic modifications into CI pipelines to ensure consistent behavior.

Pros & Cons of mitmproxy

Pros

Free and open‑source with active community support
Runs on all major operating systems
Highly extensible via Python scripting
Rich UI options: console and web

Cons

Steep learning curve for complex scripting
Command‑line focus may be intimidating for non‑technical users
Limited built‑in integrations with external tools

Frequently Asked Questions

Can mitmproxy intercept HTTPS traffic?

Yes, it generates on‑the‑fly certificates and can decrypt HTTPS streams after the client trusts its root CA.

Is there a graphical interface?

Yes, the optional mitmweb provides a browser‑based UI for visual traffic inspection.

What languages can I use for scripting?

Scripts are written in Python, allowing full access to the proxy's API.

How is mitmproxy licensed?

It is released under the MIT License, allowing free commercial and private use.

Pricing Overview

View full pricing →

Free

Detailed plans are not listed. Visit the official website for pricing information.

Reviews & Ratings0.0

Write a Review See all reviews →

No reviews yet. Be the first to write one!

Top Alternatives & Similar Tools

View all alternatives & similar tools →

Wireshark

AI-suggested

Wireshark is an open‑source network analysis tool that captures and interactively browses traffic running on a computer network. It runs on Windows, macOS, and Linux, providing a powerful GUI for dissecting hundreds of protocols. Designed for network administrators and security professionals, Wireshark helps troubleshoot connectivity issues, detect security threats, and understand network behavior through detailed packet decoding and filtering.

Compare with mitmproxy

OpenSnitch