mitmproxy作为一款出色中间人攻击工具，它在渗透、爬虫、ajax-hook、抓包等场景中表现的相当稳定和出色。但由于原生项目是python的缘故，使得跨语言使用mitmproxy显的非常吃力。经常借助于中间件或单独开发http服务来于mitmproxy进行通信。为此mitmproxy-java基于mitmproxy-hub实现了java版mitmproxy客户端。你可以像使用原生mitmproxy一样使用它。
原理介绍
mitmproxy-hub定义了其他任何语言可以生成的proto3序列化代码，借助于grpc高效的跨进程通信。使得其他语言可以对mitmproxy内部的流量进行无死角的监控。
为什么不直接使用browsermob-proxy、LittleProxy等java原生语言开发的mitm代理？
browsermob-proxy/LittleProxy对于高并发场景下的表现十分不稳定，而且在大文件传输上经常有内存溢出现象。主要是因为两个项目的作者均已在3年前就已经停止更新。本人猜想也许是看到mitmproxy太过于强大，没有继续发展下去的希望。就像google headless一出来phantomjs作者就停止更新一样。而mitmproxy在开源社区一直是高活跃项目，bug等问题修复及时。借用grpc远程控制mitmproxy是一种站在巨人的肩膀上的方法。
推荐环境
1Mitmproxy: 5.3.0 2Python: 3.6.8 3OpenSSL: OpenSSL 1.1.1h 22 Sep 2020 4Platform: Darwin-20.1.0-x86_64-i386-64bit
启动mitmproxy-hub
1git clone https://github.com/CreditTone/mitmproxy-hub.git 2cd mitmproxy-hub 3python3 server.py //server on port 60051 4
maven集成mitmproxy-java
<dependency> <groupId>com.deep007</groupId> <artifactId>mitmproxy-java</artifactId> <version>1.0</version> </dependency>
启动一个remote mitmproxy
public static void main(String[] args) throws InterruptedException { //在远程机器上的8866端口上启动一个mitmproxy RemoteMitmproxy remoteMitmproxy = new RemoteMitmproxy("127.0.0.1", 60051, "127.0.0.1", 8866); remoteMitmproxy.start(); Thread.sleep(1000 * 60 * 5); remoteMitmproxy.stop(); }
监控网络流量
public static void main(String[] args) throws InterruptedException { RemoteMitmproxy remoteMitmproxy = new RemoteMitmproxy("127.0.0.1", 60051, "127.0.0.1", 8866); remoteMitmproxy.addFlowFilter(new FlowFilter() {
1 @Override 2 public void filterRequest(FlowRequest flowRequest) { 3 System.out.println(flowRequest.getUrl()); 4 } 5 6 @Override 7 public void filterResponse(FlowResponse flowResponse) { 8 FlowRequest flowRequest \= flowResponse.getRequest(); 9 System.out.println(flowRequest.getUrl() + " response length:" +flowResponse.getContent().length); 10 } 11 12 }); 13 remoteMitmproxy.start(); 14 Thread.sleep(1000 \* 60 \* 5); 15 remoteMitmproxy.stop();
}
篡改网络响应
public static void main(String[] args) throws InterruptedException { RemoteMitmproxy remoteMitmproxy = new RemoteMitmproxy("127.0.0.1", 60051, "127.0.0.1", 8866); remoteMitmproxy.addFlowFilter(new FlowFilter() {
1 @Override 2 public void filterRequest(FlowRequest flowRequest) { 3 } 4 5 @Override 6 public void filterResponse(FlowResponse flowResponse) { 7 FlowRequest flowRequest \= flowResponse.getRequest(); 8 if (flowRequest.getUrl().startsWith("https://www.baidu.com")) { 9 flowResponse.setContentAsString("就不让你访问百度，哈哈!"); 10 } 11 } 12 13 }); 14 remoteMitmproxy.start(); 15 Thread.sleep(1000 \* 60 \* 5); 16 remoteMitmproxy.stop();
}
劫持cookie
public static void main(String[] args) throws InterruptedException { RemoteMitmproxy remoteMitmproxy = new RemoteMitmproxy("127.0.0.1", 60051, "127.0.0.1", 8866); CookieCollectFilter cookieCollectFilter = new CookieCollectFilter(); remoteMitmproxy.addFlowFilter(cookieCollectFilter); remoteMitmproxy.start(); Thread.sleep(1000 * 60 * 5); remoteMitmproxy.stop(); for (Cookie cookie : cookieCollectFilter.catchCookies) { System.out.println(cookie.getDomain() + ">>>"+ cookie.getName()+"="+cookie.getValue() +" path:"+cookie.getPath()); } }