mitmdump 命令

常用示例

说明

mitmdump is the command-line companion to mitmproxy, a powerful HTTPS proxy for debugging, testing, and security analysis. It captures and manipulates HTTP/HTTPS traffic. The tool acts as a man-in-the-middle proxy. For HTTPS, it generates certificates on-the-fly, enabling inspection of encrypted traffic. Clients must trust mitmproxy's CA certificate. Traffic can be saved (-w) and replayed (-r) for analysis or testing. Saved flows include complete request/response data with timing information. Python scripts (-s) enable programmatic traffic manipulation. Scripts define hooks like request(), response(), and clientconnect() to modify or analyze traffic in real-time. Filter expressions select specific flows: ~u for URL, ~m for method, ~b for body content, ~h for headers. Filters can combine with & (and), | (or), and ! (not). Modes include: regular (explicit proxy), transparent (network-level interception), reverse (forward to specific server), and upstream (chain to another proxy).

参数

-p _PORT_, --listen-port _PORT_

Proxy listen port (default: 8080).

-w _FILE_

Write flows to file.

-r _FILE_

Read flows from file.

-s _SCRIPT_

Run Python script.

--mode _MODE_

Proxy mode: regular, transparent, socks5, reverse, upstream.

--listen-host _HOST_

Listen host.

--ssl-insecure

Don't verify server SSL certificates.

--ignore-hosts _PATTERN_

Ignore hosts matching regex.

--intercept _FILTER_

Intercept flows matching filter.

--modify-body _SPEC_

Modify response body.

--modify-headers _SPEC_

Modify headers.

--set _KEY=VALUE_

Set option value.

--flow-detail _LEVEL_

Output detail level (0-3).

-q, --quiet

Suppress output.

-k, --insecure

Don't verify upstream SSL.