in FOSS, Linux, Security, Tech, Tools, Tutorials

How to Centos Mitmproxy Installation and Configuration

by Netslovers updated November 8, 2022, 8:04 am 2k Views

Introduction

Mitmproxy is an interactive man-in-the-middle proxy for HTTP and HTTPS with a console interface.

Features

Intercept HTTP & HTTPS requests and responses and modify them on the fly
Save complete HTTP conversations for later replay and analysis
Replay the client-side of an HTTP conversations
Replay HTTP responses of a previously recorded server
Reverse proxy mode to forward traffic to a specified server
Transparent proxy mode on OSX and Linux
Make scripted changes to HTTP traffic using Python
SSL/TLS certificates for interception are generated on the fly
And much, much more…

The mitmproxy 3 Main tools and commands are:

mitmdump is the command-line version of mitmproxy. Think tcpdump for HTTP.

mitmweb is a web-based interface for mitmproxy.

mitmproxy command line is your swiss-army knife for debugging, testing, privacy measurements, and penetration testing.
It can be used to intercept, inspect, modify and replay web traffic such as HTTP/1, HTTP/2, WebSockets, or any other SSL/TLS-protected protocols.
You can prettify and decode a variety of message types ranging from HTML to Protobuf, intercept specific messages on-the-fly, modify them before they reach their destination, and replay them to a client or server later on.

MitmProxy WorkShop

we need newer Python version > 3.4, That's reuired by mitmproxy, so will install the EPEL and SCL repositoires as following

yum install epel-release
yum install centos-release-scl

For mor information about centos-release-scl see The Software Collections ( SCL ) Repository

Install Python 3.6 version

yum install rh-python36-python rh-python36-python-devel rh-python36-PyYAML

Now we need to add Python 3.6 safely and permanent to PATH Environment Variable

echo 'pathmunge /opt/rh/rh-python36/root/usr/bin' > /etc/profile.d/python36.sh

update pip3.6 and install pyasn package

pip3.6 install --upgrade pip
pip3.6 install pyasn

Install mitmproxy

pip3.6 install mitmproxy

Extacting mitmproxy options for our profile

mitmproxy -p 8888 --options > ~/.mitmproxy/config.yaml

now we get the man in the middle proxy ready to use,
and we can override default options using ~/.mitmproxy/config.yaml configuration file.
for more about available options and information.

Run the mitmproxy

mitmproxy -p port_number

to running but listen to public IP address

you can modify the config files ~/.mitmproxy/config.yaml by allowing “true” for remote access

# Allow remote clients to connect to proxy. If set to false, client will
# not be able to connect to proxy unless it is on the same network or
# the proxyauth option is set Type bool.
#allow_remote: false
allow_remote: true

Installing complete.
Next step ie, injecting codes, debugging, redirection and more..

Useful links

https://github.com/ondrakrat/js-mitm-proxy
https://mitmproxy.org/
https://security.stackexchange.com/questions/72652/javascript-injection-using-man-in-the-middle-attack
http://pankajmalhotra.com/Injecting-Javascript-In-HTML-Content-Using-MITM-Proxy
https://blog.heckel.xyz/2013/07/01/how-to-use-mitmproxy-to-read-and-modify-https-traffic-of-your-phone/
https://blog.miguelgrinberg.com/post/easy-websockets-with-flask-and-gevent