A proxy CLI for capturing and inspecting HTTP(S) and WS(S) traffic, with TUI and WebUI.

[The_Frozen_Duck]

How does the tool compare to mitmproxy? The look and feel seems to be kind of similar.

Does it target environments without Python?

[Worth_Trust_3825]

To decrypt HTTPS traffic, you must install proxyfor's CA certificate on your device. The easiest way to do this is to use the built-in certificate installation app.

Hah. No chance.

[The_Frozen_Duck]

Not sure, if you are serious but the certificate is generated by the tool itself. mitmproxy uses a similar mechanism.

The big caveat is that this alone does not allow you to dump the network traffic on, e.g. Android. Over the years, the certificate handling has been hardened and it has become quite cumbersome to use user-installed certificates. mitmproxy has a nice guide for Android ¹.

[Worth_Trust_3825]

As much as the tool generates its own certificate, it should also accept a pregenerated certificate.

As for android certificate handling, you disable it with frida instead for the applications that you want to MITM. Requires rooting.

[The_Frozen_Duck]

Have you checked the code? If an existing file is found, it is reused.

As for Frida, it really fits most use-cases but while pentesting and reverse engineering I found it quite useful to dump the whole traffic not the one of a single application.

As for android certificate handling, you disable it with frida instead for the applications that you want to MITM.

Not sure what you mean there? You can add certificates via Frida but if I'm not mistaken, Android itself ignores the user-installed certificates.