node-mitm - Intercept and mock outgoing Node

•    Javascript

---

Mitm.js is a library for Node.js (and Io.js) to intercept and mock outgoing network TCP and HTTP connections. Mitm.js intercepts and gives you a Net.Socket to communicate as if you were the remote server. For HTTP requests it even gives you Http.IncomingMessage and Http.ServerResponse — just like you're used to when writing Node.js servers. Except there's no actual server running, it's all just In-Process Interception™. Intercepting connections and requests is extremely useful to test and ensure your code does what you expect. Assert on request parameters and send back various responses to your code without ever having to hit the real network. Fast as hell and a lot easier to develop with than external test servers.

http https intercept interception mock network socket tcp test webmock

xhook - Easily intercept and modify XHR request and response

•    Javascript

---

Modifying any property of the request object will modify the underlying XHR before it is sent.

xhr ajax intercept modify hook

rocky - Full-featured, middleware-oriented, programmatic HTTP and WebSocket proxy for node.js

•    Javascript

---

A multipurpose, full-featured, middleware-oriented and hackable HTTP/S and WebSocket proxy with powerful built-in features such as versatile routing layer, traffic interceptor and replay to multiple backends, built-in balancer, traffic retry/backoff logic, hierarchical configuration, among others. Built for node.js/io.js.rocky can be fluently used programmatically or via command-line interface. It's framework agnostic, but you can optionally plug in with connect/express apps.

http-proxy replay-requests middleware proxy replay gateway microservice forward-proxy forward balancer http websocket reverse migration migrate repeat traffic router intercept interceptor capture sniffer mitm load hackable

dom-interceptor - patch DOM APIs to intercept calls to them

•    Javascript

---

patch DOM APIs to intercept calls to them

dom patch api intercept hacks

stream-interceptor - Intercept, modify and/or ignore chunks data and events in any readable stream

•    Javascript

---

Tiny node.js module to intercept, modify and/or ignore chunks of data and events in any readable compatible stream before it's processed by other stream consumers (e.g: via pipe()).It becomes particularly useful to deal with net/http/fs streams.

stream intercept interceptor control modify capture sniff sniffer spy events emitter readable pipe http transform

bcc - An IPP tool to Man-in-the-Middle all traffic to a local printer

•    Javascript

---

This is an example of a Bonjour/Zeroconf Man-in-the-Middle attack. This software showcases the attack of an IPP enabled printer. It will intercept all print jobs sent to the target printer.This attack only works for Bonjour/Zeroconf and IPP enabled printers. Only jobs sent from clients that have the printer configured using Bonjour/Zeroconf will have their jobs intercepted.

ipp print printer intercept man-in-the-middle mitm mim mitma attack dns-sd dnssd bonjour zeroconf

dnsjack - A simple DNS proxy that lets you intercept domains and route them to whatever IP you decide

•    Javascript

---

A simple DNS proxy that lets you intercept domains and route them to whatever IP you decide.You probably need to run the above example with sudo as we need to listen to port 80 and 53. Now change your local DNS server to 127.0.0.1 and visit http://www.google.com in your browser.

dns proxy intercept debug

catch-links - intercept local link clicks on a page

•    Javascript

---

This is useful for doing client-side pushState UIs.We'll intercept the relative links <host>/a and <host>/b, printing them. The external link to npmjs.org will go through as usual.

link browser click intercept spa single-page-app

balboa - Simple HTTP forward proxy

•    Javascript

---

Simple, programmatic and hackable node.js HTTP forward proxy built-on-top of rocky.Not designed for serious things, only for playground/development purposes.

http proxy http-proxy forward programmatic sniffer intercept https modify monitor logger

hook-std - Hook and modify stdout/stderr

•    Javascript

---

Hook stdout and stderr.Returns a function that unhooks stdout and stderr.

hook intercept capture modify change test assert check std stdio stdout stderr console log process

filternet - A proxy library that provides easy hooks to manipulate http and https traffic consistently

•    Javascript

---

Run this and it will automatically listen at port 8128. This example will work as both a regular HTTPS proxy (via CONNECT) as well as a transparent HTTPS proxy (via SNI). The proxy will log bodies for all HTTP responses, and only HTTPS responses that fit '*.github.com' (note that the asterisk only works one level deep, see the SSL Certificates section).

proxy http https mitm intercept transparent

tlsjack - A simple TLS forwarder that lets you intercept traffic and play with them.

•    Javascript

---

A simple TLS forwarder that lets you intercept traffic and play with them. Refer the exmaples folder, for more real world use cases.

tls jack connections tlsjack hijack intercept proxy ssl terminator

fetch-token-intercept

•    Javascript

---

Library for easy renewing of access tokens in OAuth's refresh token flow. This library will monkey patch fetch on your target environment and will try to resolve unauthorized requests automatically by renewing the current access token and then retrying an initial fetch operation. Note: This library expects that fetch and promise api's are available at target environment. You should provide a polyfill when necessary.

fetch intercept refresh token access

ng-wedge - Intercept $http request from the website without modifying code or installing plugins.

•    Javascript

---

Intercept $http request from the website without modifying code or installing plugins. If you have a method on the scope that uses $http service to make Ajax calls, you can intercept and return mock values without modifying the application or installing additional plugins. Just drive this ng-wedge into your app from the browser console and set up the fake $http for this particular scope's method. You can return different status, or mock data or even slow down the responses by any amount.

angular angularjs http httpbackend mock testing local client browser intercept request

fetch-intercept - Interceptor library for the native fetch command inspired by angular http intercepts

•    Javascript

---

Interceptor library for the native fetch command inspired by angular http interceptors. fetch-intercept monkey patches the global fetch method and allows you the usage in Browser, Node and Webworker environments.

fetch interceptor intercept request hooks

PRISM-AP - An automated Wireless RogueAP MITM attack framework.

•    Shell

---

PRISM-AP is an automated Wireless RogueAP MITM attack framework. This script is distributed "as is" and no support will be provided in it's current state (not intended for beginners).

wireless pentesting pentest framework kali security automated mitm mana karma hsts bypass intercept tool tools 802-1x

interaptor - Intercept HTTP requests for testing purposes.

•    Javascript

---

Intercept HTTP requests for testing purposes. Uses mitm under the hood. Interaptor is released under the MIT license.

intercept mitm http request

superagent-intercept - Add functions that will be called during end() e

•    Javascript

---

Add interceptors that will be called during end() e.g. for handling error conditions without having the same code all over the place.

superagent intercept proxy interceptor error-handling middleware ajax request