Mitmproxy presentation 3:14

1. INTRODUCTIONS

2. MITMPROXY

3. MITMPROXY
POTENTIAL USE CASES
▸ Record and playback flows
▸ URL validation
▸ Modifying network traffic
▸ Headers, Body, etc.
▸ Modifying network traffic tutorial

4. WHAT DID WE DO
WITH MITM PROXY?

5. MITMPROXY
WHAT’S THE DIFFERENCE BETWEEN THESE THREE?
▸ mitmproxy - Interactive man-in-the-middle proxy for HTTP
and HTTPS with a console interface
▸ mitmdump - Command-line version of mitmproxy
▸ mitmweb - Web-based interface for mitmproxy

6. MITMPROXY
INSTALLATION

7. CONFIGURING A
DEVICE FOR TESTING

8. MITMPROXY
CONFIGURING A DEVICE FOR TESTING

9. MITMPROXY
HOW TO CALL MITMPROXY FROM WITHIN OTHER APPLICATIONS

10. MITMPROXY
USING MITMDUMP
▸ mitmdump is the command-line companion to mitmproxy
▸ Using commands in terminal you are able to view, record,
and programmatically transform HTTP traffic
▸ Addons are highly customizable with Python
▸ Addon example

11. MITMPROXY
USING MITM WITH UI TESTING
▸ Run UI tests
▸ Capture traffic in background -> traffic writes out in mitm
format
▸ Convert dump file using mitm api and Python
▸ Parse converted file into Java object
▸ Write assertions on the objects

12. MITMPROXY
WRITING ASSERTIONS

13. MITMPROXY
FURTHER READING
▸ https://mitmproxy.org
▸ https://www.github.com/mitmproxy/mitmproxy
▸ https://mitmproxy.readthedocs.io