mitmproxy
mitmproxy is an interactive HTTP/HTTPS intercepting proxy for inspecting and modifying traffic between a client and a server.
Legal & ethical use. Intercept only your own devices and traffic; do not intercept other people's communications. Use this tool only on systems, networks and data that you own or have explicit written permission to test. Unauthorised access or scanning can break computer-misuse laws (for example Pakistan's Prevention of Electronic Crimes Act, 2016, and equivalents elsewhere). Practise in your own lab or in authorised environments such as CTFs.
What it is used for
- Inspect what a mobile app or script sends over HTTPS in your own test setup
- Replay and modify requests while learning web protocols
Key features
- Console, web and command-line interfaces
- TLS interception with a locally trusted CA
- Scripting with Python add-ons
Installation
Install with pip or download a standalone release (see docs.mitmproxy.org).
Beginner usage guide
Start the proxy, configure your test device or browser to use it, install the mitmproxy CA certificate on that test device and watch requests appear.
Example commands
Run these only against your own lab or authorised targets. Placeholder addresses such as 192.0.2.x are documentation ranges.
Start the interactive console proxy
mitmproxy --listen-port 8080Listens on port 8080; point your lab client at this proxy.
References
Source verification
Last reviewed: 2026-10-27
Links checked over HTTP: 2026-10-27 07:51 UTC — official: 200, docs: 200, repo: 200
Command flags checked against the real binary mitmproxy (Mitmproxy: 12.2.3) on 2026-10-27.