riciplay-miniproxy 0.6.3 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +13 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -148,8 +148,17 @@ Tools that ignore proxy env vars can usually be pointed explicitly (`curl -x`, `
|
|
|
148
148
|
- **Resizable / collapsible panes** — drag the divider, click it to hide the detail pane. Remembered across refreshes.
|
|
149
149
|
- **Highlight + notes** — an 8-colour Burp-style palette per row (tap the **⋮** button — a real touch target, no right-click needed) and free-text notes. Stored with the capture, so they survive restarts.
|
|
150
150
|
- **Pretty / Raw / Hex** — every body, both request and response. JSON re-indented, bytes escaped, or a full hex dump with offsets and an ASCII gutter.
|
|
151
|
+
- **Compare captures** — diff two requests the way Burp's Compare does. Added a parameter and want to know what changed? The summary names it: `role: 'user' → 'admin'`.
|
|
152
|
+
- **Body search** — full-text over request *and* response bodies, where flags and leaked tokens actually live.
|
|
151
153
|
- **Host focus + Hide static** — one tap to narrow to your target, or drop images/fonts/css/js.
|
|
152
|
-
- **
|
|
154
|
+
- **Tabbed everything** — Live / Log / Repeater / Intruder / **Diff** / **Noise** / **Rewrite** / Connect. Compare, noise rules and match & replace are top-level tabs, and the ⋮ menu or detail pane hands a capture straight to the right tab.
|
|
155
|
+
|
|
156
|
+
### Testing tools
|
|
157
|
+
|
|
158
|
+
- **Repeater** — persistent tabs with per-tab send history, auto-saving edits, and an optional **follow redirects** so you can see where a 302 lands.
|
|
159
|
+
- **Intruder** — `§param§` fuzzing in two modes: one wordlist into every position, or **pitchfork** (a different list per position — usernames × passwords, which is how auth labs are actually solved).
|
|
160
|
+
- **Bundled wordlists** — IDs, usernames, passwords, parameter names, ports, paths. No `.txt` hunting on a fresh install.
|
|
161
|
+
- **Match & replace** — rewrite headers, query params or bodies on requests as they pass through the proxy.
|
|
153
162
|
|
|
154
163
|
Captures persist across refreshes and restarts until you click
|
|
155
164
|
**Clear all captures…**.
|
|
@@ -230,9 +239,10 @@ src/miniproxy/
|
|
|
230
239
|
```bash
|
|
231
240
|
git clone https://github.com/Zaidux/miniproxy && cd miniproxy
|
|
232
241
|
pip install -e ".[dev]"
|
|
233
|
-
pytest #
|
|
242
|
+
pytest # 400+ tests: db, devices, API, exports, intruder,
|
|
234
243
|
# process mgr, TUI, connect, noise, JS/Python parity,
|
|
235
|
-
# dashboard XSS, live mitmdump capture
|
|
244
|
+
# dashboard XSS, live mitmdump capture, diff,
|
|
245
|
+
# body search, pitchfork, selection safety, tabs
|
|
236
246
|
```
|
|
237
247
|
|
|
238
248
|
CI runs the suite on Linux/macOS (Python 3.10/3.12) for every push and PR,
|
package/package.json
CHANGED