mitmproxy.

An open-source interactive TLS-capable proxy used by security and QA engineers to intercept, inspect, modify, and replay HTTP and HTTPS traffic. It belongs to the Defense & Operations category of cybersecurity.

An open-source interactive TLS-capable proxy used by security and QA engineers to intercept, inspect, modify, and replay HTTP and HTTPS traffic.

mitmproxy is a Python-based tool that ships as a terminal UI (mitmproxy), a web UI (mitmweb), and a scriptable command-line proxy (mitmdump). It transparently terminates TLS using a generated CA that must be trusted by the client, lets the user pause, edit, and replay requests, and supports add-ons written in Python to automate analysis. Security testers use mitmproxy to audit mobile apps, fuzz REST and GraphQL APIs, capture undocumented protocols, and validate certificate pinning. Note that mitmproxy is a legitimate defensive and testing tool, not an attack tool: it requires control of the device or network and a trusted CA, so it is unsuitable for adversary-in-the-middle attacks against untrusting clients.

Defences for mitmproxy typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: mitmweb, mitmdump.