1. 程式人生 > 程式設計 >Python3自定義http/https請求攔截mitmproxy指令碼例項

Python3自定義http/https請求攔截mitmproxy指令碼例項

指令碼內容

程式碼如下:

from mitmproxy import http,ctx
from multiprocessing import Lock


class Filter:
  def __init__(self,filter_info):
    self.log_info = ""
    self.mutex = Lock()
    self.filter_info = filter_info
    self.response_file = None
    self.switch_on = False
    self.log_file = "log.txt"

  def log(self,info) -> None:
    self.log_info += f"{info}\n\n"

  def write_log(self,mode="w+") -> None:
    self.mutex.acquire()
    with open(self.log_file,mode) as f:
      f.write(self.log_info)
    self.mutex.release()

  def is_target_flow(self,flow: http.HTTPFlow) -> bool:
    for info in self.filter_info:
      if info["str_in_url"] in flow.request.url:
        self.log_file = info["log_file"]
        self.switch_on = info["switch_on"]
        if info["response_file"] != None:
          self.response_file = info["response_file"]
        return True
    else:
      return False

  def modify_response(self,flow: http.HTTPFlow) -> http.HTTPFlow:
    if self.switch_on and self.response_file:
      with open(self.response_file,"r") as f:
        flow.response.content = f.read().encode()
    return flow

  def request(self,flow: http.HTTPFlow) -> None:
    if self.is_target_flow(flow):
      self.log_info = ""
      self.log(f"——METHOD——\n{flow.request.method}")
      self.log(f"——HOST——\n{flow.request.pretty_host}")
      self.log(f"——URL——\n{flow.request.pretty_url}")
      query = [i + ":" + flow.request.query[i] + "\n" for i in flow.request.query]
      self.log(f"——QUERY STRING——\n{''.join(query)}")
      if flow.request.urlencoded_form:
        form = [i + ":" + flow.request.urlencoded_form[i] + "\n" for i in flow.request.urlencoded_form]
        self.log(f"——FORM——\n{''.join(form)}")
      self.write_log()

  def response(self,flow: http.HTTPFlow) -> None:
    if self.is_target_flow(flow):
      self.log_info = ""
      self.log(f"——RESPONSE before modified——\n{flow.response.content.decode()}")
      flow = self.modify_response(flow)
      self.log(f"——RESPONSE after modified——\n{flow.response.content.decode()}")
      self.write_log(mode="a")


filter_info = [
  {
    "str_in_url": "getSimpleNews","log_file": "getSimpleNews_log.txt","switch_on": True,"response_file": "getSimpleNews_response.txt",},{
    "str_in_url": "getQQNewsComment","log_file": "getQQNewsComment_log.txt","response_file": None,}
]
addons = [
  Filter(filter_info)
]

使用方法

執行mitmproxy指定使用該指令碼和埠號即可:

mitmproxy -p 6666 -s xxx.py

在mitmproxy執行時:

1. 會攔截url中包含str_in_url字串的請求

2. 會把response.content修改為當前mitm執行所在目錄下的response_file檔案中的內容

3. 列印資訊在當前mitm執行所在目錄下的log_file檔案中

4. 如果無需修改response設定switch_on為False即為開關關閉

5. 如果不修改response的話response_file需要寫None

補充知識:mitmproxy 監聽指定埠

安裝

使用python3的安裝方式

https://mitmproxy.org/

監聽指定埠

例子:Presto SQL請求的監聽

Presto地址:http://datacenter4:18080

mitmproxy命令(埠8484)
mitmproxy \
--mode reverse:http://datacenter4:18080 \
--listen-host datacenter4 \
--listen-port 8484 \
--replacements :~s:\/\/datacenter4/:\/\/datacenter4:18080/

然後JDBC訪問Presto使用:jdbc:presto://datacenter4:8484

效果

Python3自定義http/https請求攔截mitmproxy指令碼例項

以上這篇Python3自定義http/https請求攔截mitmproxy指令碼例項就是小編分享給大家的全部內容了,希望能給大家一個參考,也希望大家多多支援我們。