Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Expand SSL cert support | Aldo Cortesi | 2012-04-02 | 1 | -1/+4 |
| | | | | | | - Capture the remote SSL certificate - Expose the remote cert as an attribute on Response - Expand the certutils.SSLCert interface to expose more cert info | ||||
* | Refactor proxy.Server to fix a crash when replaying with -n | Aldo Cortesi | 2012-04-02 | 1 | -0/+17 |
| | |||||
* | Merge remote-tracking branch 'meeee/master' | Aldo Cortesi | 2012-03-10 | 1 | -2/+6 |
|\ | |||||
| * | Fix SSL requests with Transfer-Encoding: chunked | Michael Frister | 2012-03-08 | 1 | -1/+5 |
| | | | | | | | | Add size parameter to FileLike.readline, used by read_chunked. | ||||
| * | Handle Transfer-Encoding header values case insensitive | Michael Frister | 2012-03-08 | 1 | -1/+1 |
| | | | | | | | | According to HTTP/1.1 RFC 2616 Section 3.6. | ||||
* | | Create an SSL certificate class. | Aldo Cortesi | 2012-03-05 | 1 | -1/+3 |
| | | |||||
* | | Factor out cert operations in to certutils.py. | Aldo Cortesi | 2012-02-29 | 1 | -4/+4 |
| | | |||||
* | | Rationalise upstream cert flag and variable names. | Aldo Cortesi | 2012-02-28 | 1 | -4/+4 |
| | | |||||
* | | Add upstream certificate lookup. | Aldo Cortesi | 2012-02-27 | 1 | -4/+9 |
|/ | | | | | | This initiates a connection to the server to obtain certificate information to generate interception certificates. At the moment, the information used is the Common Name, and the list of Subject Alternative Names. | ||||
* | License notifications, minor docs. | Aldo Cortesi | 2012-02-23 | 1 | -0/+15 |
| | |||||
* | Minor docs and example script fixes. | Aldo Cortesi | 2012-02-21 | 1 | -1/+0 |
| | |||||
* | Create ODictCaseless for headers, use vanilla ODict for everything else. | Aldo Cortesi | 2012-02-20 | 1 | -1/+1 |
| | |||||
* | Rename Headers class to ODict | Aldo Cortesi | 2012-02-20 | 1 | -4/+27 |
| | | | | | ODict is an ordered dictionary class that will be useful in many other parts of our API. | ||||
* | Consolidate palettes somewhat. | Aldo Cortesi | 2012-02-18 | 1 | -2/+0 |
| | |||||
* | Refactor reverse proxying | Aldo Cortesi | 2012-02-18 | 1 | -34/+36 |
| | | | | | | | - Retain the specification from the Host header as a Request's description. - Expand upstream proxy specifications to include the scheme. We now say https://hostname:port - Move the "R" revert keybinding to "v" to make room for a reverse proxy binding that matches the command-line flag. | ||||
* | reverse proxy mode: small comment clarification | Heikki Hannikainen | 2012-02-16 | 1 | -2/+5 |
| | |||||
* | Implemented reverse proxy mode: -R upstreamhost:port makes the | Heikki Hannikainen | 2012-02-16 | 1 | -2/+10 |
| | | | | | | proxy accept a 'GET / HTTP/1.0' request and fill up the destination host and port from the ones given with -R (for example, "-R localhost:80"). | ||||
* | Add filter for detecting flows with errors. | Aldo Cortesi | 2012-02-10 | 1 | -1/+1 |
| | | | | Also, remove dependency on weird _is_response method. | ||||
* | Fix an issue caused by some editors when editing a request/response body. | Aldo Cortesi | 2012-01-21 | 1 | -1/+1 |
| | | | | | | Many editors make it hard save a file without a terminating newline on the last line. When editing message bodies, this can cause problems. For now, I just strip the newlines off the end of the body when we return from an editor. | ||||
* | Handle missing message/reason phrase in HTTP response status line gracefully ↵ | meeee | 2011-09-26 | 1 | -0/+2 |
| | | | | by adding an empty one. | ||||
* | Fix a rare crash when a new cert is generated during cerdir removal. | Aldo Cortesi | 2011-09-11 | 1 | -1/+4 |
| | |||||
* | Add HTTP body size limit specification to command-line tools. | Aldo Cortesi | 2011-09-09 | 1 | -10/+16 |
| | |||||
* | Basic infrastructure for request and response body size limits. | Aldo Cortesi | 2011-09-09 | 1 | -15/+34 |
| | |||||
* | Improve robustness against invalid data. | Aldo Cortesi | 2011-09-05 | 1 | -2/+4 |
| | |||||
* | Removed unused imports | András Veres-Szentkirályi | 2011-08-18 | 1 | -1/+1 |
| | |||||
* | Add a basic Flow processor example. | Aldo Cortesi | 2011-08-13 | 1 | -1/+1 |
| | |||||
* | Code cleanliness - appease pychecker. | Aldo Cortesi | 2011-08-04 | 1 | -2/+2 |
| | |||||
* | Request class now has a clean pydoc profile. | Aldo Cortesi | 2011-08-04 | 1 | -1/+1 |
| | |||||
* | Further interface cleaning. | Aldo Cortesi | 2011-08-03 | 1 | -10/+10 |
| | |||||
* | Move all HTTP objects to flow.py | Aldo Cortesi | 2011-08-03 | 1 | -444/+26 |
| | | | | That's Request, Response, ClientConnect, ClientDisconnect, Error, and Headers. | ||||
* | Tweak encoding behaviour | Aldo Cortesi | 2011-08-02 | 1 | -2/+5 |
| | | | | | | | | | - Don't fail to identity encoding when an unknown encoding is specified. - Don't constrain encodings. I want to try to modify traffic as little as possible by default. - When decoding, delete content-encoding header rather than set it to "identity" - Refuse to decode/encode when there is an existing but unknown content-encoding header. | ||||
* | Unit test++ | Aldo Cortesi | 2011-08-02 | 1 | -9/+14 |
| | |||||
* | General cleanup. | Aldo Cortesi | 2011-08-02 | 1 | -1/+0 |
| | | | | | Cut out unused variables and code, generally shut up pychecker as much as is reasonable. | ||||
* | Fix a rare undefined variable crash in proxy.py. | Aldo Cortesi | 2011-08-02 | 1 | -1/+3 |
| | |||||
* | Add decoding/encoding for requests. | Aldo Cortesi | 2011-08-01 | 1 | -23/+25 |
| | |||||
* | Merge remote-tracking branch 'alts/encoding' | Aldo Cortesi | 2011-07-28 | 1 | -0/+21 |
|\ | |||||
| * | Adds encode and decode methods to Response objects | Stephen Altamirano | 2011-07-26 | 1 | -3/+24 |
| | | |||||
* | | Changes replace logic to function in both Python 2.6.x and 2.7.x | Stephen Altamirano | 2011-07-26 | 1 | -12/+12 |
|/ | | | | Tests now only assume Python 2.6.x rather than requiring 2.7.x. This does not preclude the use of flags as a kwarg in replace | ||||
* | Fix a crash in mitmdump event display. | Aldo Cortesi | 2011-07-23 | 1 | -1/+1 |
| | |||||
* | Extend eventlog information. | Aldo Cortesi | 2011-07-23 | 1 | -7/+19 |
| | | | | Also, squash an SSL-related bug revealed by the extended logging. | ||||
* | Also replace strings path for requests. | Aldo Cortesi | 2011-07-22 | 1 | -0/+2 |
| | |||||
* | Add utility functions to search and replace strings in flows | Aldo Cortesi | 2011-07-22 | 1 | -0/+29 |
| | | | | | | | | | | This is a common task in pentesting scenarios. This commit adds the following functions: utils.Headers.replace proxy.Request.replace proxy.Response.replace flow.Flow.replace | ||||
* | Removes last_encoding attribute from Response. Prompts for encoding on ↵ | Stephen Altamirano | 2011-07-21 | 1 | -1/+0 |
| | | | | identity responses | ||||
* | Removes should_autodecode attribute from Response. Adds commandline option ↵ | Stephen Altamirano | 2011-07-21 | 1 | -1/+0 |
| | | | | 'd' to toggle autodecode, adds togglable option 'd' to do the same | ||||
* | Adds ability to toggle between encodings in the response view | Stephen Altamirano | 2011-07-18 | 1 | -0/+2 |
| | |||||
* | Adds support for content encoding, namely gip and deflate | alts | 2011-07-16 | 1 | -6/+15 |
| | |||||
* | Introduce an anti-compression command-line argument. | Aldo Cortesi | 2011-07-15 | 1 | -1/+7 |
| | | | | | This is on by default, which means we avoid compressed content unless the -z flag is specified. | ||||
* | Rewrite Headers object to preserve order and case. | Aldo Cortesi | 2011-07-14 | 1 | -9/+8 |
| | |||||
* | Cast some data read from dump files to str, to prevent unicode promotion. | Aldo Cortesi | 2011-07-01 | 1 | -5/+5 |
| | | | | | This fixes a bug that caused a traceback when de-serialized requests were replayed. Also adds unit tests for the problem. | ||||
* | Make the certificate wait time configurable. | Aldo Cortesi | 2011-06-27 | 1 | -2/+5 |
| | | | | | | | | | Since OpenSSL doesn't let us set certificate start times in the past, the client and proxy machine time must be synchronized, or the client might reject the certificate. We can bodgy over small discrepancies by waiting a few seconds after a new certificate is generated (i.e. the first time an SSL domain is contacted). Make this a configurable option, and turn it off by default. |