mitmproxy

No entries match these filters. Clear filters

1. v12.3.0 Oct 22, 2026 · issue 116

   mitmproxy 12.3.0 adds eMudhra CA signing options and a dark theme to mitmweb.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v12.3.0 https://github.com/mitmproxy/mitmproxy.git
   # already have the repo? check out this version:
   $ git checkout v12.3.0

   └──▷ TRY IT
   Intercept TLS traffic from a client that still trusts the compromised eMudhra intermediate CA — useful for testing or research against legacy trust stores.
   copy

   $ mitmproxy --emudhra

   • Adds status and method badges to the mitmweb flow table for faster at-a-glance triage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds SVG icons for flow table resource types in mitmweb.
   • Adds status and method badges to the mitmweb flow table for faster at-a-glance triage.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

2. advisory CVE-2026-40606 Apr 12, 2026 · issue 128
   • CVE-2026-40606: LDAP InjectionLDAP InjectionAn attack technique where unsanitized user input is embedded into LDAP queries, manipulating directory lookups to bypass authentication or extract data. Tools use it to test directory services for input-validation flaws. in mitmproxy (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 4.8, affects <=12.2.1)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
3. advisory CVE-2025-57804 Aug 25, 2025 · issue 128
   • CVE-2025-57804: Vulnerable python-hyper/h2 dependency embedded in mitmproxy binaries (affects <= 12.1.1)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
4. advisory CVE-2025-23217 Feb 6, 2025 · issue 128
   • CVE-2025-23217: Mitmweb API Authentication Bypass Using Proxy Server (affects < 11.1.1)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
5. advisory CVE-2022-24766 Mar 19, 2022 · issue 128
   • CVE-2022-24766: Insufficient Protection against HTTP Request Smuggling in mitmproxy (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 9.8, affects <=7.0.4)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
6. v7.0.1 Aug 3, 2021 · release notes

   mitmproxy v7.0.1 adds HTTP stream chunking, local cert fallback, and TLS resumption performance

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v7.0.1 https://github.com/mitmproxy/mitmproxy.git
   # already have the repo? check out this version:
   $ git checkout v7.0.1

   • Make it possible to return multiple chunks for HTTP stream modification

   1 detail in Everything

7. v5.3.0 Nov 1, 2020 · release notes

   mitmproxy v5.3.0 adds --cert-passphrase, MsgPack viewer, HTTP trailer support, and ASGIASGIA Python async web server interface specification that defines how servers and applications exchange HTTP and WebSocket messages; cyber tools use it to serve high-concurrency APIs without blocking on I/O. integration

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v5.3.0 https://github.com/mitmproxy/mitmproxy.git
   # already have the repo? check out this version:
   $ git checkout v5.3.0

   • Add --cert-passphrase command line argument for encrypted certificate files
   • Add console_strip_trailing_newlines config option to control trailing newline stripping in the console
   • Add MsgPack content viewer for inspecting binary payloads
   • Add support for sending HTTP trailers to the HTTP/1.1 protocol
   • Add ASGI support for embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. mitmproxy in asyncio applications

   +2 more show less

   • Display HTTP trailers in the mitmweb UI
   • Update raw exports to preserve headers instead of removing them

   7 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The console no longer strips trailing newlines by default; use console_strip_trailing_newlines: true to restore previous behavior
8. v5.1.0 Apr 13, 2020 · release notes

   mitmproxy v5.1.0 adds initial TLS 1.3 support and renames web_iface to web_host

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v5.1.0 https://github.com/mitmproxy/mitmproxy.git
   # already have the repo? check out this version:
   $ git checkout v5.1.0

   • Adds Initial Support for TLS 1.3 enabling inspection of connections using the latest transport layer standard

   1 detail in Everything

   └──▷ BREAKING ON UPGRADE

   • !The mitmweb option --web_iface is renamed to --web_host; scripts or configs using the old name will fail.
9. v5.0.0 Dec 16, 2019 · release notes

   Introduces a new Table UI for mitmproxy v5.0.0

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v5.0.0 https://github.com/mitmproxy/mitmproxy.git
   # already have the repo? check out this version:
   $ git checkout v5.0.0

   • Introduces a new Table UI

   1 detail in Everything

10. v4.0.3 Jun 16, 2018 · release notes

    mitmproxy v4.0.3 adds IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. transparent mode on Windows and ARMv7 Docker images

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v4.0.3 https://github.com/mitmproxy/mitmproxy.git
    # already have the repo? check out this version:
    $ git checkout v4.0.3

    • Adds IPv6 transparent mode support on Windows for network capture scenarios requiring direct routing.
    • Adds Docker images for ARMv7 architecture, enabling deployment on Raspberry Pi and similar devices.

    2 details in Everything

11. v4.0.0 May 17, 2018 · release notes

    mitmproxy v4.0.0 introduces asyncio core performance gains, httpie export, and keys.yaml configuration

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v4.0.0 https://github.com/mitmproxy/mitmproxy.git
    # already have the repo? check out this version:
    $ git checkout v4.0.0

    └──▷ USE IT
    Map custom keys for common actions by adding entries to your keys.yaml configuration file.
    yaml copy

    # ~/.mitmproxy/keys.yaml
    keymap:
      c: quit  # Pressing 'c' quits the proxy

    • Core moves to asyncio for significant performance improvements across all operations.
    • Adds the ability to Export request as httpie command via the console or addon API.
    • Supports configuring console keybindings through a new keys.yaml file.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The --conf flag is replaced by --confdir, which now specifies the configuration directory instead of a single yaml file.
    • !The cadir option is renamed to confdir in the configuration file.
12. v3.0.0 Feb 22, 2018 · release notes

    mitmproxy v3.0.0 introduces a typed addon actions system, new typed settings store, and rewritten UI for mitmweb.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v3.0.0 https://github.com/mitmproxy/mitmproxy.git
    # already have the repo? check out this version:
    $ git checkout v3.0.0

    • Adds the commands subsystem allowing addons to expose user-facing actions via a consistent API
    • Implements multi-pane layouts and integrated key bindings in the rewritten mitmproxy console

    2 details in Everything

13. v2.0.0 Feb 21, 2017 · release notes

    mitmproxy v2.0.0 adds HTTP/2 default, OpenBSD transparent proxy, CA expiration check and Kaitai Struct image parsing

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v2.0.0 https://github.com/mitmproxy/mitmproxy.git
    # already have the repo? check out this version:
    $ git checkout v2.0.0

    └──▷ USE IT
    Enable the new transparent proxy mode specifically on OpenBSD systems.
    shell copy

    mitmproxy --mode tproxy:openbsd

    • Enables http2 by default for all proxies.
    • Adds OpenBSD as a supported platform for transparent proxying mode (--mode).
    • Adds automatic CA certificate expiration checking with user warning on startup.
    • Switches Image Content Views to use Kaitai Struct (kaitai_struct) backend instead of Pillow, enabling pure Python installation.

    4 details in Everything

14. v1.0 Dec 26, 2016 · release notes

    First stable release introduces mitmweb UI, Python 3 support, and YAML configuration.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.0 https://github.com/mitmproxy/mitmproxy.git
    # already have the repo? check out this version:
    $ git checkout v1.0

    └──▷ TRY IT
    Launch the new web interface to inspect and filter HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. traffic visually.
    copy

    $ mitmweb --listen-port 8080

    • Adds mitmweb, a new web-based user interface for interacting with mitmproxy
    • Drops Python 2 support; requires Python 3.5 or higher to run
    • Replaces previous config format with a single YAML file for configuration

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Python 2 is no longer supported; the tool will not run on Python versions below 3.5
    • !Configuration must now use the single YAML file format instead of the previous structure
15. v0.18.1 Oct 16, 2016 · release notes

    mitmproxy v0.18.1 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. support, flow marking filters, and enhanced HTTP message accessors.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.18.1 https://github.com/mitmproxy/mitmproxy.git
    # already have the repo? check out this version:
    $ git checkout v0.18.1

    • Adds Initial Support for WebSockets to the proxy engine
    • Introduces New filters for TCP, HTTP and marked flows in the CLI console
    • Enables viewing only marked flows via Add ability to view only marked flows in mitmproxy
    • Provides new HTTP Message getters/setters for cookies and form contents
    • Adds .raw_content, .content, and .text attributes to HTTP message objects

    5 details in Everything

16. v0.17 Apr 10, 2016 · release notes

    mitmproxy v0.17 adds HTTP/2 default, query param viewer, locust.io export, server cert chain option

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.17 https://github.com/mitmproxy/mitmproxy.git
    # already have the repo? check out this version:
    $ git checkout v0.17

    └──▷ TRY IT
    Intercept HTTP/2 traffic, now enabled by default without additional flags.
    copy

    $ mitmproxy

    In the mitmproxy TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., press Enter on a flow and select the Query Parameters content view to inspect request query strings.
    📍Press Enter -> Select Content View -> Choose Query Parameters
    • Enable HTTP/2 by default for intercepted connections.
    • Add content view for query parameters in the flow detail pane.
    • Export traffic data to locust.io load testing format.
    • New option to add server certificates to the client chain for certificate verification scenarios.

    4 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Python package name is renamed from libmproxy to mitmproxy. Import statements like import libmproxy will fail.
17. v0.16 Feb 15, 2016 · release notes

    mitmproxy v0.16 adds flow export to curl/Python, TLS SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. exempt, mitmweb basic auth, and TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. inline hooks

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.16 https://github.com/mitmproxy/mitmproxy.git
    # already have the repo? check out this version:
    $ git checkout v0.16

    • Add export command (or --export flag) to save flows as cURL commands, Python code, or raw HTTP.
    • Add tls.sni_exclude configuration key to exempt connections from interception based on TLS SNI.
    • Add Basic Authentication support for the mitmweb interface via new CLI flags or config options.
    • Enable InlineScriptHooks in TCP mode for custom script processing of non-HTTP traffic.

    4 details in Everything