mirror of
https://github.com/Grasscutters/mitmproxy.git
synced 2024-11-22 07:08:10 +00:00
a863f529ab
* added example on how to manipulate (outbound and inbound) cookies for http flows * added entry to the CHANGELOG
92 lines
3.0 KiB
Python
92 lines
3.0 KiB
Python
"""
|
|
This script is an example of how to manipulate cookies both outgoing (requests)
|
|
and ingoing (responses). In particular, this script inserts a cookie (specified
|
|
in a json file) into every request (overwriting any existing cookie of the same
|
|
name), and removes cookies from every response that have a certain set of names
|
|
specified in the variable (set) FILTER_COOKIES.
|
|
|
|
Usage:
|
|
|
|
mitmproxy -s examples/contrib/http_manipulate_cookies.py
|
|
|
|
Note:
|
|
this was created as a response to SO post:
|
|
https://stackoverflow.com/questions/55358072/cookie-manipulation-in-mitmproxy-requests-and-responses
|
|
|
|
"""
|
|
from typing import List, Dict
|
|
import json
|
|
from mitmproxy import http
|
|
|
|
|
|
PATH_TO_COOKIES = "./cookies.json" # insert your path to the cookie file here
|
|
FILTER_COOKIES = {
|
|
"mycookie",
|
|
"_ga",
|
|
} # update this to the specific cookie names you want to remove
|
|
# NOTE: use a set for lookup efficiency
|
|
|
|
|
|
# -- Helper functions --
|
|
def load_json_cookies() -> List[Dict[str, str]]:
|
|
"""
|
|
Load a particular json file containing a list of cookies.
|
|
"""
|
|
with open(PATH_TO_COOKIES, "r") as f:
|
|
return json.load(f)
|
|
|
|
|
|
# NOTE: or just hardcode the cookies as [{"name": "", "value": ""}]
|
|
|
|
|
|
def stringify_cookies(cookies: List[Dict]) -> str:
|
|
"""
|
|
Creates a cookie string from a list of cookie dicts.
|
|
"""
|
|
return ";".join([f"{c['name']}={c['value']}" for c in cookies])
|
|
|
|
|
|
def parse_cookies(cookie_string: str) -> List[Dict[str, str]]:
|
|
"""
|
|
Parses a cookie string into a list of cookie dicts.
|
|
"""
|
|
cookies = []
|
|
for c in cookie_string.split(";"):
|
|
c = c.strip()
|
|
if c:
|
|
k, v = c.split("=", 1)
|
|
cookies.append({"name": k, "value": v})
|
|
return cookies
|
|
|
|
|
|
# -- Main interception functionality --
|
|
def request(flow: http.HTTPFlow) -> None:
|
|
"""Add a specific set of cookies to every request."""
|
|
# obtain any cookies from the request
|
|
_req_cookies_str = flow.request.headers.get("cookie", "")
|
|
req_cookies = parse_cookies(_req_cookies_str)
|
|
|
|
# add our cookies to the original cookies from the request
|
|
all_cookies = req_cookies + load_json_cookies()
|
|
# NOTE: by adding it to the end we should overwrite any existing cookies
|
|
# of the same name but if you want to be more careful you can iterate over
|
|
# the req_cookies and remove the ones you want to overwrite first.
|
|
|
|
# modify the request with the combined cookies
|
|
flow.request.headers["cookie"] = stringify_cookies(all_cookies)
|
|
|
|
|
|
def response(flow: http.HTTPFlow) -> None:
|
|
"""Remove a specific cookie from every response."""
|
|
set_cookies_str = flow.response.headers.get("set-cookie", "")
|
|
# NOTE: use safe attribute access (.get), in some cases there might not be a set-cookie header
|
|
|
|
if set_cookies_str:
|
|
resp_cookies = parse_cookies(set_cookies_str)
|
|
|
|
# remove the cookie we want to remove
|
|
resp_cookies = [c for c in resp_cookies if c["name"] not in FILTER_COOKIES]
|
|
|
|
# modify the request with the combined cookies
|
|
flow.response.headers["set-cookie"] = stringify_cookies(resp_cookies)
|