# Mitmproxy

Mitmproxy is a self-hosted development app. Mitymproxy is a containerized, interactive intercepting proxy for inspecting and modifying web traffic using HTTP/1, HTTP/2, and WebSockets, where HTTP stands for HyperText Transfer Protocol. It is open source and self-hosted, installable on Docker Hub, TrueNAS and Unraid.

Canonical page: https://ourlocalhost.com/app/75/mitmproxy

## Description

Mitymproxy is a containerized, interactive intercepting proxy for inspecting and modifying web traffic using HTTP/1, HTTP/2, and WebSockets, where HTTP stands for HyperText Transfer Protocol. It supports Secure Sockets Layer / Transport Layer Security (SSL/TLS) decryption, request and response modification, and a browser-based control panel. Developers and security testers use it to debug applications, verify application programming interfaces, and analyze client network traffic. Running it as a self-hosted container makes network testing repeatable and isolated.

## Platform availability

Available on 3 of 9 platforms: Unraid, TrueNAS, Helm.

## Health score

84/100 (Excellent), based on 4 of 5 factors.
- Maintained: 100 (last commit 25 days ago)
- Popular: 93 (45,199 GitHub stars)
- Easy to install: 55 (3 install platforms, install notes, Docker image)
- Security check: 68 (no serious findings, 11 minor, CI, tests, OpenSSF Scorecard 6.4/10)

## Links

- GitHub: https://github.com/mitmproxy/mitmproxy
- Docker Hub: https://hub.docker.com/r/mitmproxy/mitmproxy/
- TrueNAS: https://apps.truenas.com/catalog/mitmproxy/
- Unraid: https://ca.unraid.net/apps/mitmproxy-1qofavr0umfdw3?q=mitmproxy
- Official website: https://mitmproxy.org/
- Documentation: https://mitmproxy.org/downloads

## Common questions

### Can mitmproxy be deployed as a container?

Yes, mitmproxy can be installed via Docker, as well as brew, pip, or WSL.

### Which ports does mitmweb use, and what breaks if they are blocked?

It usually uses port 8081 for the web page and port 8080 for proxy traffic. If a firewall blocks those ports, other devices won’t be able to connect.

### How do I make Ubuntu or Debian trust mitmproxy’s TLS certificate?

Put the mitmproxy-ca-cert.pem file in /usr/local/share/ca-certificates/ as mitmproxy.crt, then run sudo update-ca-certificates. Without this, HTTPS connections can fail with security warnings.

### Which protocols can mitmproxy inspect and modify?

It can intercept, inspect, modify, and replay HTTP/1, HTTP/2, HTTP/3, WebSockets, or other SSL/TLS-protected protocols.

### Can I automate traffic behavior with Python addons?

Yes, the Python API lets you write addons with mitmdump to automatically modify messages, redirect traffic, visualize messages, or implement custom commands.

## Alternatives

- Burp Suite: Burp Suite is an integrated platform for performing security testing of web applications.
- Charles: Charles is an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP and SSL / HTTPS traffic between th…
- Fiddler: Fiddler is a Web Debugging Proxy which logs all HTTP(S) traffic between your computer and the Internet.
- HTTP Debugger: HTTP Debugger captures and decrypts HTTP/HTTPS from any Windows app without proxy setup — HTTP/2, WebSocket, SSE, gRPC and localhost includ…
- HTTP Toolkit: HTTP Toolkit is a beautiful, cross-platform & open-source HTTP(S) debugging proxy, analyzer & client, with built-in support for mod…
- Proxy_debug: A command-line proxy that exposes an iPhone's Safari Web Inspector over the Chrome DevTools protocol, so desktop DevTools can attach to iOS…
- Proxyman: Intercept and debug HTTP/HTTPS and WebSocket traffic on macOS, iOS, Windows, and Linux with advanced tools, filtering, scripting, and autom…
- Zed Attack Proxy (ZAP): The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.

---
Source: Our Local Host (https://ourlocalhost.com/app/75/mitmproxy), the self-hosted and open-source app directory.