Support Man in the Middle with Proxy Chaining

[oxtoacart]

The current implementation of MITM per #79 is mutually exclusive with proxy chaining. It would be useful to be able to do proxy chaining and MITM at the same time.

This may be doable by just having the very last proxy in the chain do the MITM stuff.

[cyberflohr]

This would be a very useful feature! Any work in progress?

[oxtoacart]

@cyberflohr No, there's currently no work in progress on this. If you're interested in taking a look, the best place to start is probably in ProxyToServerConnection.initializeConnectionFlow()

[cyberflohr]

Thx i'll take a look, but first I've to fix some other littleproxy problems i.e. Proxy shutdown will throw an exception - I'll open a ticket for this.

[cyberflohr]

proxy shutdown will work now (why ever) -> l'll open no ticket

[ersinciftci]

any news on this?

[michail-nikolaev]

+1 vote

[mathanv]

Please support this feature!!

[ganskef]

It's working with ganskef/LittleProxy-mitm, but you need some little modifications to the LittleProxy SNAPSHOT version.

I've contributed it to mockserver too and it's been integrated there.

Am 5. Mai 2015 08:58:56 MESZ, schrieb mathanv notifications@github.com:

Please support this feature!!

---

Reply to this email directly or view it on GitHub:
#87 (comment)

[mathanv]

Thanks! I had a look at your modifications but I did not find any changes in DefaultHttpProxyServer and ProxyToServerConnection classes where lies the main switching points between MITM and ChainedProxy. Just wondering how can I enable both, and get them working with your fix.

Please suggest.

[ganskef]

Sorry, I misunderstand you. This implements MITM with a Certificate Authority and dynamic generated keys, but I've never tryed to use it in conjunction with a chained proxy.

Am 6. Mai 2015 15:27:33 MESZ, schrieb mathanv notifications@github.com:

Thanks! I had a look at your modifications but I did not find any
changes in DefaultHttpProxyServer and ProxyToServerConnection classes
where lies the main switching points between MITM and ChainedProxy.
Just wondering how can I enable both, and get them working with your
fix.

Please suggest.

---

Reply to this email directly or view it on GitHub:
#87 (comment)

[mathanv]

No problem. I am in dire need of using both MITM and ChainedProxy together for recording the request/responses of HTTPS traffic relayed to another web proxy. The worst case which is happening now is that once ChainedProxy mode is enabled all the HTTPS requests get tunneled, and even the GET requests cannot be sniffed by the filters :-(. All one can see is the CONNECT requests here.

[MediumOne]

Raised a PR for this - #251

[jekh]

This is fixed by @MediumOne's fix, so I'll close this issue.