Skip to content
GitHub·

🔒MITM Proxy Controls TLS Fingerprints and HTTP Headers

Control your TLS fingerprints like a pro

TL;DR

A new MITM proxy allows fine-grained control over TLS fingerprints, HTTP header order, User-Agent strings, and source IP addresses. Perfect for security testing of WAF bot-detection systems.

MITM Proxy now lets you tweak everything from TLS fingerprints to HTTP/2 settings in a single YAML config file. This is huge for anyone doing security audits or testing web app firewalls (WAFs). You can customize User-Agent headers, spoof source IPs, and even reorder HTTP headers—all without touching the codebase. The proxy supports macOS/Linux and requires Go 1.22+. It auto-generates a CA cert on first run and stores it in `ca.crt` and `ca.key`. This is essential for anyone who needs to simulate different client behaviors or test security measures against sophisticated bots.

MITM Proxy Controls TLS Fingerprints and HTTP Headers — GitHub

Key Points

1

MITM proxy controls JA3/JA4 TLS fingerprints, HTTP/2 settings, and header order via YAML config

2

Includes a Chrome extension to toggle the proxy and switch fingerprint profiles from browser toolbar

3

Requires Go 1.22+; distro-packaged Go often outdated—install official binary directly

4

Supports multiple TLS fingerprint presets including Chrome, Firefox, Safari, Edge, iOS, random

5

Proxy exposes mgmt_listen (default 127.0.0.1:8081) for management and configuration via HTTP API

Why It Matters

If you're testing WAFs or auditing web apps against sophisticated bots, this proxy is a game changer. It lets you simulate different client behaviors by tweaking TLS fingerprints, User-Agent headers, and even source IPs. But it's not just for security pros—developers building robust systems need to understand how their software behaves under these conditions.

tls-fingerprintshttp-headerswaf-testingchrome-extension

Frequently Asked Questions

Why does this matter?

If you're testing WAFs or auditing web apps against sophisticated bots, this proxy is a game changer. It lets you simulate different client behaviors by tweaking TLS fingerprints, User-Agent headers, and even source IPs. But it's not just for security pros—developers building robust systems need to understand how their software behaves under these conditions.

What happened?

A new MITM proxy allows fine-grained control over TLS fingerprints, HTTP header order, User-Agent strings, and source IP addresses. Perfect for security testing of WAF bot-detection systems.

Comments

Subscribe to join the conversation...

Be the first to comment

Enjoyed this article?

Get it daily. 7am. Free. Reads in 5 minutes.

Join 3,165 builders reading daily.

Also get