|
|
|
|
|
by bitexploder
3131 days ago
|
|
Don't forget mitmdump. It is a great way to log sessions and chain to other proxies at the same time. Also, mitmdump is one of the best and fastest ways to get ahold of web requests with Python to modify it on the fly. http://docs.mitmproxy.org/en/stable/mitmdump.html I have been using mitmproxy over Burp for day to day web app hacking these days. But we still use Burp scanner for lots of chores. I almost always chain through both to then go back in and use Burp features missing in mitmproxy (exploring site contents, etc.). But those are edge cases mostly needed for professional use and not for tinkering. |
|
Would you mind sharing an example flow?