Python3自定義http/https請求攔截mitmproxy腳本執行個體

腳本内容

代碼如下：

from mitmproxy import http, ctx
from multiprocessing import Lock


class Filter:
  def __init__(self, filter_info):
    self.log_info = ""
    self.mutex = Lock()
    self.filter_info = filter_info
    self.response_file = None
    self.switch_on = False
    self.log_file = "log.txt"

  def log(self, info) -  None:
    self.log_info += f"{info}\n\n"

  def write_log(self, mode="w+") -  None:
    self.mutex.acquire()
    with open(self.log_file, mode) as f:
      f.write(self.log_info)
    self.mutex.release()

  def is_target_flow(self, flow: http.HTTPFlow) -  bool:
    for info in self.filter_info:
      if info["str_in_url"] in flow.request.url:
        self.log_file = info["log_file"]
        self.switch_on = info["switch_on"]
        if info["response_file"] != None:
          self.response_file = info["response_file"]
        return True
    else:
      return False

  def modify_response(self, flow: http.HTTPFlow) -  http.HTTPFlow:
    if self.switch_on and self.response_file:
      with open(self.response_file, "r") as f:
        flow.response.content = f.read().encode()
    return flow

  def request(self, flow: http.HTTPFlow) -  None:
    if self.is_target_flow(flow):
      self.log_info = ""
      self.log(f"——METHOD——\n{flow.request.method}")
      self.log(f"——HOST——\n{flow.request.pretty_host}")
      self.log(f"——URL——\n{flow.request.pretty_url}")
      query = [i + ":" + flow.request.query[i] + "\n" for i in flow.request.query]
      self.log(f"——QUERY STRING——\n{''.join(query)}")
      if flow.request.urlencoded_form:
        form = [i + ":" + flow.request.urlencoded_form[i] + "\n" for i in flow.request.urlencoded_form]
        self.log(f"——FORM——\n{''.join(form)}")
      self.write_log()

  def response(self, flow: http.HTTPFlow) -  None:
    if self.is_target_flow(flow):
      self.log_info = ""
      self.log(f"——RESPONSE before modified——\n{flow.response.content.decode()}")
      flow = self.modify_response(flow)
      self.log(f"——RESPONSE after modified——\n{flow.response.content.decode()}")
      self.write_log(mode="a")


filter_info = [
  {
    "str_in_url": "getSimpleNews",
    "log_file": "getSimpleNews_log.txt",
    "switch_on": True,
    "response_file": "getSimpleNews_response.txt",
  },
  {
    "str_in_url": "getQQNewsComment",
    "log_file": "getQQNewsComment_log.txt",
    "switch_on": True,
    "response_file": None,
  }
]
addons = [
  Filter(filter_info)
]           

複制

使用方法

運作mitmproxy指定使用該腳本和端口号即可：

mitmproxy -p 6666 -s xxx.py

在mitmproxy運作時：

1. 會攔截url中包含str_in_url字元串的請求

2. 會把response.content修改為目前mitm運作所在目錄下的response_file檔案中的内容

3. 列印資訊在目前mitm運作所在目錄下的log_file檔案中

4. 如果無需修改response設定switch_on為False即為開關關閉

5. 如果不修改response的話response_file需要寫None

補充知識：mitmproxy 監聽指定端口

安裝

使用python3的安裝方式

https://mitmproxy.org/

監聽指定端口

例子：Presto SQL請求的監聽

Presto位址：http://datacenter4:18080

mitmproxy指令（端口8484）

mitmproxy \

–mode reverse:http://datacenter4:18080 \

–listen-host datacenter4 \

–listen-port 8484 \

–replacements :~s:\/\/datacenter4/:\/\/datacenter4:18080/

然後JDBC通路Presto使用：jdbc:presto://datacenter4:8484

效果

以上這篇Python3自定義http/https請求攔截mitmproxy腳本執行個體就是小編分享給大家的全部内容了，希望能給大家一個參考。