Show HN: Mitmproxy 1.0 released, now with a web interface

Re:Show HN: Mitmproxy 1.0 released, now with a web interface by tptacek on Monday December 26, 2016 @02:04PM (#13259337)

It's getting there, and if you hate Burp's Java UI and mostly use Burp solely to capture and manually edit requests, it might be an acceptable substitute.

I don't think pathoc/pathos are really close to what the Burp "Intruder" fuzzer does (and I'm not in love with Intruder either). A lot of people also rely on Burp's spider, for which there's no mitmproxy analog. Obviously, there's Burp's scanner, but I think scanners are a bad idea and wouldn't count this against mitmproxy.

[ Parent | on HN ]

Re:Show HN: Mitmproxy 1.0 released, now with a web interface by mkagenius on Monday December 26, 2016 @03:07PM (#13259537)

> are really close to what the Burp "Intruder" fuzzer does (and I'm not in love with Intruder either).

Have you achieved any good results with the intruder? if yes, an example would be awesome. (Personally I have never used Burp)

[ Parent | on HN ]

Re:Show HN: Mitmproxy 1.0 released, now with a web interface by tptacek on Monday December 26, 2016 @03:35PM (#13259652)

Burp is the industry standard web pentesting tool, so that's a bit like asking if a writer has ever obtained good results from Microsoft Word.

[ Parent | on HN ]

Re:Show HN: Mitmproxy 1.0 released, now with a web interface by mkagenius on Tuesday December 27, 2016 @01:34AM (#13261643)

I was asking about intruder in specific. I am not doubting the capabilities of Burp.

[ Parent | on HN ]