riciplay-miniproxy 0.7.0 → 0.8.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +4 -3
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -151,13 +151,14 @@ Tools that ignore proxy env vars can usually be pointed explicitly (`curl -x`, `
|
|
|
151
151
|
- **Compare captures** — diff two requests the way Burp's Compare does. Added a parameter and want to know what changed? The summary names it: `role: 'user' → 'admin'`.
|
|
152
152
|
- **Body search** — full-text over request *and* response bodies, where flags and leaked tokens actually live.
|
|
153
153
|
- **Host focus + Hide static** — one tap to narrow to your target, or drop images/fonts/css/js.
|
|
154
|
-
- **
|
|
154
|
+
- **Tabbed everything** — Live / Log / Repeater / Intruder / **Diff** / **Noise** / **Rewrite** / Connect. Compare, noise rules and match & replace are top-level tabs, and the ⋮ menu or detail pane hands a capture straight to the right tab.
|
|
155
155
|
|
|
156
156
|
### Testing tools
|
|
157
157
|
|
|
158
158
|
- **Repeater** — persistent tabs with per-tab send history, auto-saving edits, and an optional **follow redirects** so you can see where a 302 lands.
|
|
159
159
|
- **Intruder** — `§param§` fuzzing in two modes: one wordlist into every position, or **pitchfork** (a different list per position — usernames × passwords, which is how auth labs are actually solved).
|
|
160
160
|
- **Bundled wordlists** — IDs, usernames, passwords, parameter names, ports, paths. No `.txt` hunting on a fresh install.
|
|
161
|
+
- **Paste a wordlist** — no file needed. Single list takes a live-updating paste box; every pitchfork row has its own. Newline- or comma-separated, `#` comments ignored, spaces kept so payloads like `admin' OR '1'='1` survive.
|
|
161
162
|
- **Match & replace** — rewrite headers, query params or bodies on requests as they pass through the proxy.
|
|
162
163
|
|
|
163
164
|
Captures persist across refreshes and restarts until you click
|
|
@@ -239,10 +240,10 @@ src/miniproxy/
|
|
|
239
240
|
```bash
|
|
240
241
|
git clone https://github.com/Zaidux/miniproxy && cd miniproxy
|
|
241
242
|
pip install -e ".[dev]"
|
|
242
|
-
pytest #
|
|
243
|
+
pytest # 400+ tests: db, devices, API, exports, intruder,
|
|
243
244
|
# process mgr, TUI, connect, noise, JS/Python parity,
|
|
244
245
|
# dashboard XSS, live mitmdump capture, diff,
|
|
245
|
-
# body search, pitchfork, selection safety
|
|
246
|
+
# body search, pitchfork, selection safety, tabs
|
|
246
247
|
```
|
|
247
248
|
|
|
248
249
|
CI runs the suite on Linux/macOS (Python 3.10/3.12) for every push and PR,
|
package/package.json
CHANGED