HTTP debugging proxy for Linux and Mac [closed]

问题:

I use the Fiddler proxy to debug all kinds of HTTP issues on Windows. It's great for inspecting headers and responses across multiple pages.

Is there a good HTTP debugging proxy for Mac and Linux? I found Charles, but it's $50 once the trial runs out and it crashed on me. I could use Wireshark, but it's a pain.

回答1:

You can of course, just use Fiddler on a Windows PC and point the Mac/Linux box at it. http://www.fiddlerbook.com/fiddler/help/hookup.asp#Q-NonWindows

You can also run Fiddler in a Windows or Linux virtual machine on the Mac itself: http://blogs.telerik.com/fiddler/posts/14-01-15/running-fiddler-in-virtualbox-on-mac

回答2:

Mitmproxy is a useful command-line proxy tool.

It has also an user UI.

• From the command line run mitmweb
• Set up your app to use a proxy server and point it at http://127.0.0.1:8080
• Go to http://127.0.0.1:8081 to see all the requests in the "flow" tab. Very similar to the Google Chrome Console "Network" tab.

回答3:

Zaproxy, a fork of Paros, is a cross-platform open source debugging proxy and is actively maintained under OWASP.

回答4:

Charles is $50 as you know, but I find it to be completely worth the money. A ton of features, including SSL support.

FWIW, I've never had it crash on me.

回答5:

Wireshark won't help you if you have to debug HTTPS requests (unless you can get the encryption keys for both endpoints - see the Wireshark site for details). Firebug and Tamper Data are getting close, but for thorough analysis, I sometimes like to save a recorded session. I'd recommend giving the OWASP Zed Attack Proxy (the successor of Parosproxy, which is no longer actively developed) a try. It is a Java application serving as a http(s) proxy; it provides quite a lot of features and proved to be very helpful to me in the past.

ZAP offers an easy autoconfiguration of Firefox. Bear in mind to do that on a separate (meaning: not for other browsing activities) Firefox profile: In order to intercept https, ZAP will install a new SSL certificate.

回答6:

You may want to try Live HTTP Headers add-on for Firefox.

回答7:

Paros works like a charm for me on my Ubuntu Jaunty x64. Just as simple as download, run, set proxy settings in browser to localhost:8080 and you are ready to inspect your http browsing.

It is Java so it works on Windows, Linux and Mac.

I prefer this to firefox plugin because I can use it with different browsers and software.

ParosProxy download: http://sourceforge.net/projects/paros/

Paros hasn't been updated for many years. However there is an actively maintained fork of Paros - the OWASP Zed Attack Proxy (ZAP): https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project

回答8:

There are a number of Chrome store apps now. I'm using DHC by Restlet now.

回答9:

I personally find Wireshark to be quite easy to use. Just apply a filter for HTTP traffic and right click on the traffic going/coming to/from your site and click "Follow TCP stream".

But, if you want something a little more specific for HTTP debugging I would recommend Firebug http://getfirebug.com/

回答10:

If you limit yourself to Firefox, the Tamper Data extension is pretty solid.

回答11:

Burp Proxy

Betwixt - based on Chrome DevTools interface

Some additional options located on Ask Ubuntu.

回答12:

Another option is something that doesn't require a desktop app. Runscope is a "cloud" based proxy that let's you debug requests. It can't capture requests on localhost or internal networks, but if you're debugging apps or third-party API integrations over the public internet, it can help.

(Disclaimer, I'm one of the founders.)

回答13:

If you can do some Perl, I think you should have a look at the HTTP::Proxy module.

回答14:

You can also try Proxy.app by Websecurify. It is 100% native, available from the Mac App Store.

回答15:

You can use chrome: chrome://net-internals/#events

回答16:

I know this an old question but I have ended up here many times looking for a solution for this.

I tried Wireshark ( Horrible ) Burp ( Ok just not good enough ) Fiddler mono version ( Buggy as hell ) Charles & many more.

Non of these tools felt half as useful as fiddler on windows.

I found a new extension to Postman ( Nice tool for making http request ) Postman proxy it allows you to monitor http requests much the same way as fiddler does in windows.

Hope this helps someone.

回答17:

ZAP 2.4.3 Standard is the finest HTTP debugging proxy for Mac and Linux i can find. I have used Fiddler on windows but for Linux i faced similar problem and during my search i came to know about ZAP. I am using it and it has a very rich user interface.