mitmproxy/mitmproxy

#!/usr/bin/env python

# Copyright (C) 2010  Aldo Cortesi
# 
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
# 
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
# 
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

import sys, os.path
from libmproxy import proxy, controller, console, utils
from libmproxy import VERSION
from optparse import OptionParser, OptionGroup


if __name__ == '__main__':
    parser = OptionParser(
                usage = "%prog [options] [flowdump path]",
                version="%%prog %s"%VERSION,
            )

    parser.add_option(
        "-a", "--addr", action="store",
        type = "str", dest="addr", default='',
        help = "Address to bind proxy to (defaults to all interfaces)"
    )

    parser.add_option(
        "--cert", action="store",
        type = "str", dest="cert", default="~/.mitmproxy/default.pem",
        help = "SSL certificate file."
    )

    parser.add_option(
        "-c", "--cacert", action="store",
        type = "str", dest="cacert", default="~/.mitmproxy/ca.pem",
        help = "SSL CA certificate file."
    )

    parser.add_option(
        "--certpath", action="store",
        type = "str", dest="certpath", default="~/.mitmproxy/",
        help = "SSL certificate store path."
    )

    parser.add_option(
        "--ciphers", action="store",
        type = "str", dest="ciphers", default=None,
        help = "SSL ciphers."
    )

    parser.add_option(
        "-p", "--port", action="store",
        type = "int", dest="port", default=8080,
        help = "Port."
    )

    group = OptionGroup(
                        parser,
                        "Filters",
                        "See help in mitmproxy for filter expression syntax."
                    )
    group.add_option(
        "-B", "--beep", action="store",
        type = "str", dest="beep", default=None,
        help = "Beep filter expression."
    )
    group.add_option(
        "-l", "--limit", action="store",
        type = "str", dest="limit", default=None,
        help = "Limit filter expression."
    )
    group.add_option(
        "-i", "--intercept", action="store",
        type = "str", dest="intercept", default=None,
        help = "Intercept filter expression."
    )
    group.add_option(
        "-s", "--sticky", action="store",
        type = "str", dest="sticky", default=None,
        help = "Sticky cookie filter expression."
    )
    parser.add_option_group(group)

    group = OptionGroup(
                        parser,
                        "Recorder",
                        "Options controlling recorder behavior"
                    )
    group.add_option(
        "-w", "--store", action="store",
        type = "str", dest="cache", default=None,
        help = "Session store location"
    )
    group.add_option(
        "-C", "--cookies", action="append",
        type = "str", dest="cookies", default=[],
        help = "Persistent client cookies already set or generated in client"
    )
    parser.add_option_group(group)

    options, args = parser.parse_args()

    if options.cert is not None:
        options.cert = os.path.expanduser(options.cert)
        if not os.path.exists(options.cert):
            print >> sys.stderr, "Creating bogus certificate at %s"%options.cert
            utils.make_bogus_cert(options.cert)
    if options.cacert is not None:
        options.cacert = os.path.expanduser(options.cacert)
        if not os.path.exists(options.cacert):
            print >> sys.stderr, "Creating bogus CA certificate at %s"%options.cacert
            utils.make_bogus_cert(options.cacert, newca=True, commonName="Dummy CA")
    if options.certpath is not None:
        options.certpath = os.path.expanduser(options.certpath)
    elif options.cacert is not None:
        options.certpath = os.path.dirname(options.cacert)
    if options.cache is not None:
        options.cache = os.path.expanduser(options.cache)

    proxy.config = proxy.Config(
        certfile = options.cert,
        certpath = options.certpath,
        cacert   = options.cacert,
        ciphers = options.ciphers
    )
    if options.cache is not None:
        utils.mkdir_p(options.cache)
        if os.path.exists(options.cache + "/index.txt"):
            print >> sys.stderr, "ERROR: data already recorded in %s"%options.cache
            sys.exit(1)
    server = proxy.ProxyServer(options.port, options.addr)
    m = console.ConsoleMaster(server, options)

    for i in args:
        m.load_flows(i)
    m.run()