MITM Proxy

Man-In-The-Middle Proxy aim at expose NSS Key Log Format (Pre)-Master-Secret for Wireshark analysis.

[TOC]

Implement

+----------+         Self Signed Root Certificate
|  Client  | <-----------------------------------------------+        
+----------+       Certificate Signed by Self Root CA        |
     ^                                                       v
     |                                                  +----------+
     X No more Direct Communicate                       |   MITM   |
     |                                                  +----------+ 
     v                                                       ^
+----------+                                                 |
|  Server  | <-----------------------------------------------+
+----------+    Trusted Communicate as normal Client-Server 

Install

0. You should guarantee your machine has installed Golang

1. Clone Repository from GitHub

   git clone [email protected]:ffutop/mitmproxy.git

2. Build and Install

   cd ${YOUR-PATH-TO-MITMPROXY-DIRECTORY}; go build; go install;

3. Check Installation Result

   mitmproxy --help

Usage

1. prepare your Root Certificate OR run mitmproxy to create a new Root Certificate

   newly created Root Certificate will be find at $HOME/.mitm/

2. make sure your OS trust Root Certificate which prepare at "STEP 1"

3. find config.yaml.example file, rename to config.yaml and edit

4. run mitmproxy

   mitmproxy -config ${YOUR-PATH-TO-config-yaml}/config.yaml

5. follow Wireshark: Using the (Pre)-Master-Secret and config your Wireshark configuration.

Sample ScreenShot

TODO

• serve both http/https proxy on same port
• support auto modify MacOS global proxy config