http://open-source-security-software.net/project/mitmproxy/releases.atom 2024-05-06T02:35:26.244974+00:00 python-feedgen mitmproxy v0.9.2 2013-08-24T22:40:36+00:00 2013-08-24T22:40:36+00:00 mitmproxy v0.11.1 2014-12-17T16:00:05+00:00 2014-12-17T16:00:05+00:00 mitmproxy v0.11.2 2014-12-29T13:51:01+00:00 2014-12-29T13:51:01+00:00 mitmproxy v0.11.3 2015-01-08T09:47:48+00:00 2015-01-08T09:47:48+00:00 mitmproxy v0.13 2015-08-16T04:40:14+00:00 2015-08-16T04:40:14+00:00 mitmproxy v0.14 2015-11-07T01:36:58+00:00 http://corte.si/posts/code/mitmproxy/announce_0_14/index.html 2015-11-07T01:36:58+00:00 mitmproxy v0.15 2015-12-03T17:15:44+00:00 2015-12-03T17:15:44+00:00 mitmproxy v0.16 2016-02-15T21:26:33+00:00 - Completely revised HTTP2 implementation based on hyper-h2 (Thomas Kriechbaumer) - Export flows as cURL command, Python code or raw HTTP (Shadab Zafar) - Fixed compatibility with the Android Emulator (Will Coster) - Script Reloader: Inline scripts are reloaded automatically if modified (Matthew Shao) - Inline script hooks for TCP mode (Michael J. Bazzinotti) - Add default ciphers to support iOS9 App Transport Security (Jorge Villacorta) - Basic Authentication for mitmweb (Guillem Anguera) - Exempt connections from interception based on TLS Server Name Indication (David Weinstein) - Provide Python Wheels for faster installation - Numerous bugfixes and minor improvements 2016-02-15T21:26:33+00:00 mitmproxy v0.17 2016-04-10T01:35:01+00:00 - Simplify repository and release structure. mitmproxy now comes as a single package, including netlib and pathod. - Rename the Python package from libmproxy to mitmproxy. - New option to add server certs to client chain (CVE-2016-2402, John Kozyrakis) - Enable HTTP/2 by default (Thomas Kriechbaumer) - Improved HAR extractor (Shadab Zafar) - Add icon for OSX and Windows binaries - Add content view for query parameters (Will Coster) - Initial work on Python 3 compatibility - locust.io export (Zohar Lorberbaum) - Fix XSS vulnerability in HTTP errors (Will Coster) - Numerous bugfixes and minor improvements 2016-04-10T01:35:01+00:00 mitmproxy v0.17.1 2016-04-22T06:48:10+00:00 This is a quick **bugfix release for the precompiled binary distributions only**, which previously failed when a filter was specified. 2016-04-22T06:48:10+00:00 mitmproxy v0.18.1 2016-10-16T11:23:51+00:00 - Python 3 Compatibility for mitmproxy and pathod (Shadab Zafar, GSoC 2016) - Major improvements to mitmweb (Clemens Brunner & Jason Hao, GSoC 2016) - Internal Core Refactor: Separation of most features into isolated Addons - Initial Support for WebSockets - Improved HTTP/2 Support - Reverse Proxy Mode now automatically adjusts host headers and TLS Server Name Indication - Improved HAR export - Improved export functionality for curl, python code, raw http etc. - Flow URLs are now truncated in the console for better visibility - New filters for TCP, HTTP and marked flows. - Mitmproxy now handles comma-separated Cookie headers - Merge mitmproxy and pathod documentation - Mitmdump now sanitizes its console output to not include control characters - Improved message body handling for HTTP messages: - .raw_content provides the message body as seen on the wire - .content provides the decompressed body (e.g. un-gzipped) - .text provides the body decompressed and decoded body - New HTTP Message getters/setters for cookies and form contents. - Add ability to view only marked flows in mitmproxy - Improved Script Reloader (Always use polling, watch for whole directory) - Use tox for testing - Unicode support for tnetstrings - Add dumpfile converters for mitmproxy versions 0.11 and 0.12 - Numerous bugfixes 2016-10-16T11:23:51+00:00 mitmproxy v0.18.2 2016-10-26T06:55:28+00:00 This is a bugfix-only release. All users are advised to update. :smiley: - Fix crash on shutdown (#1620) - Fix client replay (#1666) - Constrain h2 version (#1671) 0.18 will be the last release that supports both Python 2 and 3.5+. The next release will support Python 3.5+ only. 2016-10-26T06:55:28+00:00 mitmproxy v1.0 2016-12-26T01:12:22+00:00 - All mitmproxy tools are now Python 3 only! We plan to support Python 3.5 and higher. - Web-Based User Interface: Mitmproxy now offically has a web-based user interface called mitmweb. We consider it stable for all features currently exposed in the UI, but it still misses a lot of mitmproxy’s options. - Windows Compatibility: With mitmweb, mitmproxy is now useable on Windows. We are also introducing an installer (kindly sponsored by BitRock) that simplifies setup. - Configuration: The config file format is now a single YAML file. In most cases, converting to the new format should be trivial - please see the docs for more information. - Console: Significant UI improvements - including sorting of flows by size, type and url, status bar improvements, much faster indentation for HTTP views, and more. - HTTP/2: Significant improvements, but is temporarily disabled by default due to wide-spread protocol implementation errors on some large website - WebSocket: The protocol implementation is now mature, and is enabled by default. Complete UI support is coming in the next release. Hooks for message interception and manipulation are available. - A myriad of other small improvements throughout the project. 2016-12-26T01:12:22+00:00 mitmproxy v1.0.1 2016-12-27T18:34:55+00:00 - Fix compatibility with Python 3.6 2016-12-27T18:34:55+00:00 mitmproxy v1.0.2 2016-12-28T15:30:08+00:00 - Fix compatibility with Python 3.5.**0** 2016-12-28T15:30:08+00:00 mitmproxy v2.0.0 2017-02-21T18:08:22+00:00 - HTTP/2 is now enabled by default. - Add transparent proxy support for OpenBSD. - Check the mitmproxy CA for expiration and warn the user to regenerate it if necessary. - Image Content Views: Images are now parsed with Kaitai Struct (kaitai.io) instead of Pillow. This simplifies installation, reduces binary size, and allows parsing in pure Python. - Testing: Tremendous improvements, enforced 100% individual coverage for large parts of the codebase, increased overall coverage. - A myriad of other small improvements and bugfixes throughout the project. 2017-02-21T18:08:22+00:00 mitmproxy v2.0.1 2017-03-15T19:01:33+00:00 * bump cryptography dependency * bump pyparsing dependency * HTTP/2: use header normalization from hyper-h2 2017-03-15T19:01:33+00:00 mitmproxy v2.0.2 2017-04-28T12:39:07+00:00 - Fix mitmweb's Content-Security-Policy to work with Chrome 58+ (#2284) 2017-04-28T12:39:07+00:00 mitmproxy v3.0.0rc1 2017-12-31T17:01:00+00:00 (see more recent RC/release for a changelog) 2017-12-31T17:01:00+00:00 mitmproxy v3.0.0rc2 2018-01-07T21:55:12+00:00 Second release candidate for mitmproxy 3.0. We consider this release to be stable, but documentation still needs a major overhaul. Be prepared to run into yet undocumented stuff! Feedback on https://discourse.mitmproxy.org/ is welcome. Major changes: - Mitmproxy now has a concept of _commands_, which can be invoked by users. Most existing features are now available as commands, and the scripting interface can be used to implement custom commands. For example, to save all currently marked requests to disk, one can now invoke `save.file @marked ./foo/flows.mitm`. - Significant improvements to mitmweb by @MatthewShao, one of our GSoC students this year. Mitmweb now has a full options editor! - Major improvement to mitmproxy's contentviews by @ujjwal96, our other GSoC student this year. Contentviews are now more robust, require less dependencies, and render much faster! - Tons of bugfixes, usability improvements, etc. More than 1100 commits, so there's a lot! Full Changelog: [https://docs.google.com/document/d/1cjS...](https://docs.google.com/document/d/1cjSb7iNcm-wkBoyovgCWqySRfTJyI6yaepvSzcdTjLs/) 2018-01-07T21:55:12+00:00 mitmproxy v3.0.0 2018-02-22T13:03:40+00:00 *Documentation and release announcement will happen within the next day.* Major changes: * Commands: A consistent, typed mechanism that allows addons to expose actions to users. * Options: A typed settings store for use by mitmproxy and addons. * Shift most of mitmproxy's own functionality into addons. * Major improvements to mitmproxy console, including an almost complete rewrite of the user interface, integration of commands, key bindings, and multi-pane layouts. * Major Improvements to mitmproxy’s web interface, mitmweb. (Matthew Shao, Google Summer of Code 2017) * Major Improvements to mitmproxy’s content views and protocol layers (Ujjwal Verma, Google Summer of Code 2017) Full Changelog: https://github.com/mitmproxy/mitmproxy/blob/master/CHANGELOG 2018-02-22T13:03:40+00:00 mitmproxy v3.0.1 2018-02-23T02:06:36+00:00 A quick point release to fix a bug that broke quoted arguments in the console command editor. Mitmproxy doesn’t have telemetry and collects as little data as possible on its users. We rely on your manual feedback to let us know what to build. Please take a moment to fill in the [2018 mitmproxy user survey](https://goo.gl/forms/Or2mwRtcG5h8yr813) - this feeds directly into our dev priorities for the next year. 2018-02-23T02:06:36+00:00 mitmproxy v3.0.2 2018-02-23T21:37:52+00:00 Fix an issue that caused mitmproxy to lose keyboard control after spawning an external editor. 2018-02-23T21:37:52+00:00 mitmproxy v3.0.3 2018-02-25T09:26:11+00:00 A minor release that actually includes the fix meant for 3.0.2. 2018-02-25T09:26:11+00:00 mitmproxy v3.0.4 2018-04-05T15:48:46+00:00 * Fix an issue that caused mitmproxy to not retry HTTP requests on timeout. * Various other fixes (@kira0204, @fenilgandhi, @tran-tien-dat, @smonami, @luzpaz, @fristonio, @kajojify, @Oliver-Fish, @hcbarry, @jplochocki, @MikeShi42, @ghillu, @emilstahl) 2018-04-05T15:48:46+00:00 mitmproxy v4.0.0 2018-05-17T00:07:30+00:00 # Features * mitmproxy now requires Python 3.6! * Moved the core to asyncio - which gives us a very significant performance boost! * Reduce memory consumption by using `SO_KEEPALIVE` (#3076) * Export request as httpie command (#3031) * Configure mitmproxy console keybindings with the keys.yaml file. See docs for more. # Breaking Changes * The --conf command-line flag is now --confdir, and specifies the mitmproxy configuration directory, instead of the options yaml file (which is at `config.yaml` under the configuration directory). * `allow_remote` got replaced by `block_global` and `block_private` (#3100) * No more custom events (#3093) * The `cadir` option has been renamed to `confdir` * We no longer magically capture print statements in addons and translate them to logs. Please use `ctx.log.info` explicitly. # Bugfixes * Correctly block connections from remote clients with IPv4-mapped IPv6 client addresses (#3099) * Expand `~` in paths during the `cut` command (#3078) * Remove socket listen backlog constraint * Improve handling of user script exceptions (#3050, #2837) * Ignore signal errors on windows * Fix traceback for commands with un-terminated escape characters (#2810) * Fix request replay when proxy is bound to local interface (#2647) * Fix traceback when running scripts on a flow twice (#2838) * Fix traceback when killing intercepted flow (#2879) * And lots of typos, docs improvements, revamped examples, and general fixes! 2018-05-17T00:07:30+00:00 mitmproxy v4.0.1 2018-05-17T07:55:34+00:00 The previous release had a packaging issue, so we bumped it to v4.0.1 and re-released it. This contains no actual bugfixes or new features. Please see the [v4.0.0 release notes](https://github.com/mitmproxy/mitmproxy/releases/tag/v4.0.0)! 2018-05-17T07:55:34+00:00 mitmproxy v4.0.3 2018-06-16T04:57:31+00:00 * Add support for IPv6 transparent mode on Windows (#3174) * Add Docker images for ARMv7 - Raspberry Pi (#3190) * Major overhaul of our release workflow - you probably won't notice it, but for us it's a big thing! * Fix the Python version detection on Python 3.5, we now show a more intuitive error message (#3188) * Fix application shutdown on Windows (#3172) * Fix IPv6 scope suffixes in block addon (#3164) * Fix options update when added (#3157) * Fix "Edit Flow" button in mitmweb (#3136) You can find the latest release packages on our [snapshot server](https://snapshots.mitmproxy.org/4.0.3/). 2018-06-16T04:57:31+00:00 mitmproxy v4.0.4 2018-07-31T12:06:20+00:00 - Security: Protect mitmweb against DNS rebinding. (CVE-2018-14505, @atx) - Reduce certificate lifetime to two years to be conformant with the current CA/Browser Forum Baseline Requirements. (@muffl0n) (https://cabforum.org/2017/03/17/ballot-193-825-day-certificate-lifetimes/) - Update cryptography to version 2.3. You can find the latest release packages on https://mitmproxy.org/downloads/. 2018-07-31T12:06:20+00:00 mitmproxy v5.0.0 2019-12-16T01:56:03+00:00 - New Table UI (@BkPHcgQL3V, @Jessonsotoventura) - Add EKU extension to certificates. This fixes support for macOS Catalina (@vin01) - Security: Fixed command injection vulnerabilities when exporting flows as curl/httpie commands (@cript0nauta) - Security: Do not echo unsanitized user input in HTTP error responses (@fimad) - Many more bugfixes (see CHANGELOG). You can find the latest release packages on https://mitmproxy.org/downloads/. 2019-12-16T01:56:03+00:00 mitmproxy v5.0.1 2019-12-27T17:19:00+00:00 * Fixed precompiled Linux binaries to not crash in table mode. You can find the latest release packages on https://mitmproxy.org/downloads/. 2019-12-27T17:19:00+00:00 mitmproxy v5.1.0 2020-04-13T07:50:47+00:00 *Major Changes* * Initial Support for TLS 1.3 *Full Changelog* * Reduce leaf certificate validity to one year due to upcoming browser changes (@mhils) * Rename mitmweb's web_iface option to web_host for consistency (@oxr463) * Sending a SIGTERM now exits mitmproxy without prompt, SIGINT still asks (@ThinkChaos) * Don't force host header on outgoing requests (@mhils) * Additional documentation and examples for WebSockets (@Kriechi) * Gracefully handle hyphens in domain names (@matosconsulting) * Fix header replacement count (@naivekun) * Emit serverconnect event only after a connection has been established (@Prinzhorn) * Fix ValueError in table mode of server replay flow (@ylmrx) * HTTP/2: send all stream reset types to other connection (@rohfle) * HTTP/2: fix WINDOW_UPDATE swallowed on closed streams (@Kriechi) * Fix wrong behavior of --allow-hosts options (@BlownSnail) * Additional and updated documentation for examples, WebSockets, Getting Started (@Kriechi) You can find the latest release packages at https://mitmproxy.org/downloads/. 2020-04-13T07:50:47+00:00 mitmproxy v5.1.1 2020-04-13T11:39:48+00:00 * Fixed Docker images not starting due to missing shell 2020-04-13T11:39:48+00:00 mitmproxy v5.2 2020-07-18T22:34:57+00:00 You can find the latest release packages at https://mitmproxy.org/downloads/. 2020-07-18T22:34:57+00:00 mitmproxy v5.3.0 2020-11-01T14:55:59+00:00 Check out our [release announcement blog post](https://mitmproxy.org/posts/releases/mitmproxy53/)! 🎉 🔗 * Support for Python 3.9 (@mhils) * Add MsgPack content viewer (@tasn) * Use `@charset` to decode CSS files if available (@prinzhorn) * Fix links to anticache docs in mitmweb and use HTTPS for links to documentation (@rugk) * Updated typing for WebsocketMessage.content (@prinzhorn) * Add option `console_strip_trailing_newlines`, and no longer strip trailing newlines by default (@capt8bit) * Prevent transparent mode from connecting to itself in the basic cases (@prinzhorn) * Display HTTP trailers in mitmweb (@sanlengjingvv) * Revamp onboarding app (@mhils) * Add ASGI support for embedded apps (@mhils) * Updated raw exports to not remove headers (@wchasekelley) * Fix file unlinking before external viewer finishes loading (@wchasekelley) * Add --cert-passphrase command line argument (@mirosyn) * Add interactive tutorials to the documentation (@mplattner) * Support `deflateRaw` for `Content-Encoding`'s (@kjoconnor) * Fix broken requests without body on HTTP/2 (@Kriechi) * Add support for sending (but not parsing) HTTP Trailers to the HTTP/1.1 protocol (@bburky) * Add support to echo http trailers in dumper addon (@shiv6146) * Fix OpenSSL requiring different CN for root and leaf certificates (@mhils) * ... and various other fixes, documentation improvements, dependency version bumps, etc. You can find the latest release packages at https://mitmproxy.org/downloads/. 2020-11-01T14:55:59+00:00 mitmproxy v6.0.0 2020-12-13T00:27:12+00:00 Check out our [release announcement blog post](https://mitmproxy.org/posts/releases/mitmproxy6/)! 🎉 🔗 You can find the latest release packages at https://mitmproxy.org/downloads/. 2020-12-13T00:27:12+00:00 mitmproxy v6.0.1 2020-12-13T19:08:38+00:00 This release fixes a bug in mitmweb's serialization process. All other tools are unaffected. You can find the latest release packages at https://mitmproxy.org/downloads/. 2020-12-13T19:08:38+00:00 mitmproxy v6.0.2 2021-01-21T09:59:25+00:00 This release fixes another bug in mitmweb's serialization process. All other tools are unaffected. You can find the latest release packages at https://mitmproxy.org/downloads/. 2021-01-21T09:59:25+00:00 mitmproxy v7.0.0 2021-07-16T08:26:56+00:00 Check out our [release announcement blog post](https://mitmproxy.org/posts/releases/mitmproxy7/)! 🎉 You can find the latest release packages at https://mitmproxy.org/downloads/. 2021-07-16T08:26:56+00:00 mitmproxy v7.0.1 2021-08-03T15:29:24+00:00 * Performance: Re-use OpenSSL contexts to enable TLS session resumption (@mhils) * Disable HTTP/2 CONNECT for Secure Web Proxies to fix compatibility with Firefox (@mhils) * Use local IP address as certificate subject if no other info is available (@mhils) * Make it possible to return multiple chunks for HTTP stream modification (@mhils) * Don't send WebSocket CONTINUATION frames when the peer does not send any (@Pilphe) * Fix HTTP stream modify example. (@mhils) * Fix a crash caused by no-op assignments to `Server.address` (@SaladDais) * Fix a crash when encountering invalid certificates (@mhils) * Fix a crash when pressing the Home/End keys in some screens (@rbdixon) * Fix a crash when reading corrupted flow dumps (@mhils) * Fix multiple crashes on flow export (@mhils) * Fix a bug where ASGI apps did not see the request body (@mhils) * Minor documentation improvements (@mhils) You can find the latest release packages at https://mitmproxy.org/downloads/. 2021-08-03T15:29:24+00:00 mitmproxy v7.0.2 2021-08-14T16:33:08+00:00 - Fix a WebSocket crash introduced in 7.0.1 (@mhils) You can find the latest release packages at https://mitmproxy.org/downloads/. 2021-08-14T16:33:08+00:00 mitmproxy v7.0.3 2021-09-16T10:08:47+00:00 * [CVE-2021-39214](https://github.com/mitmproxy/mitmproxy/security/advisories/GHSA-22gh-3r9q-xf38): Fix request smuggling vulnerabilities reported by @chinchila * Expose TLS 1.0 as possible minimum version on older pyOpenSSL releases * Fix compatibility with Python 3.10 You can find the latest release packages at https://mitmproxy.org/downloads/. 2021-09-16T10:08:47+00:00 mitmproxy v7.0.4 2021-10-02T14:42:58+00:00 * Do not add a Content-Length header for chunked HTTP/1 messages (@matthewhughes934) You can find the latest release packages at https://mitmproxy.org/downloads/. 2021-10-02T14:42:58+00:00 mitmproxy v8.0.0 2022-03-19T16:28:50+00:00 Check out our [release announcement blog post](https://mitmproxy.org/posts/releases/mitmproxy8/)! 🎉 You can find the latest release packages at https://mitmproxy.org/downloads/. 2022-03-19T16:28:50+00:00 mitmproxy v8.1.0 2022-05-15T14:39:01+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2022-05-15T14:39:01+00:00 mitmproxy v8.1.1 2022-06-28T14:13:38+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2022-06-28T14:13:38+00:00 mitmproxy 9.0.0 2022-10-28T12:47:22+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2022-10-28T12:47:22+00:00 mitmproxy 9.0.1 2022-11-02T11:14:01+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2022-11-02T11:14:01+00:00 mitmproxy 10.0.0 2023-08-04T09:37:12+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2023-08-04T09:37:12+00:00 mitmproxy 10.1.0 2023-09-24T15:12:45+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2023-09-24T15:12:45+00:00 mitmproxy 10.1.1 2023-09-27T11:29:20+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2023-09-27T11:29:20+00:00 mitmproxy 10.1.2 2023-11-03T11:58:00+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2023-11-03T11:58:00+00:00 mitmproxy 10.1.3 2023-11-04T11:02:03+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2023-11-04T11:02:03+00:00 mitmproxy 10.1.4 2023-11-13T14:11:23+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2023-11-13T14:11:23+00:00 mitmproxy 10.1.5 2023-11-14T12:54:50+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2023-11-14T12:54:50+00:00 mitmproxy 10.1.6 2023-12-14T09:39:21+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2023-12-14T09:39:21+00:00 mitmproxy 10.2.0 2024-01-04T12:00:27+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2024-01-04T12:00:27+00:00 mitmproxy 10.2.1 2024-01-06T14:17:27+00:00 Changes: See [CHANGELOG.md](https://github.com/mitmproxy/mitmproxy/blob/main/CHANGELOG.md). You can find the latest release packages at https://mitmproxy.org/downloads/. 2024-01-06T14:17:27+00:00