mitmweb - mitmproxy

mitmweb is a web-based interface for mitmproxy. It provides a browser-accessible UI for inspecting and manipulating HTTP traffic, perfect for remote access and collaborative debugging.

Overview

mitmweb offers:

Browser-based UI - Access from any modern web browser
Remote access - Monitor traffic from anywhere on your network
Familiar interface - Web UI with standard browser controls
Real-time updates - Live traffic view via WebSocket
Export capabilities - Download flows in various formats
Search and filter - Powerful query interface

Basic Usage

mitmweb

By default, mitmweb:

Listens on 127.0.0.1:8081 for web interface
Listens on 0.0.0.0:8080 for proxy traffic
Automatically opens browser to web interface

Command-Line Options

Web Interface Options

Flag	Description
`--web-port PORT`	Web interface port (default: 8081)
`--web-host HOST`	Web interface host (default: 127.0.0.1)
`--web-open-browser`	Automatically open browser (default: true)
`--no-web-open-browser`	Don’t open browser automatically

General Options

Flag	Description
`--version`	Show version number and exit
`--options`	Show all options and their default values
`--commands`	Show all commands and their signatures
`--set option[=value]`	Set an option
`-q`, `--quiet`	Quiet mode
`-v`, `--verbose`	Increase log verbosity

Proxy Options

Flag	Description
`-p PORT`, `--listen-port PORT`	Proxy service port (default: 8080)
`--listen-host HOST`	Address to bind proxy to (default: 0.0.0.0)
`-m MODE`, `--mode MODE`	Proxy mode (regular, transparent, socks5, etc.)
`-n`, `--server`	Don’t connect to upstream servers
`--ignore-hosts HOST`	Ignore host(s) and pass through
`--allow-hosts HOST`	Only intercept these hosts
`--tcp-hosts HOST`	Generic TCP SSL proxy for these hosts

SSL Options

Flag	Description
`--certs SPEC`	SSL certificate specification
`--cert-passphrase PASS`	Passphrase for SSL certificate
`-k`, `--ssl-insecure`	Don’t verify upstream SSL/TLS certificates

File I/O

Flag	Description
`-r PATH`, `--rfile PATH`	Read flows from file
`-w PATH`, `--save-stream-file PATH`	Stream flows to file
`-s SCRIPT`, `--scripts SCRIPT`	Execute addon script(s)

Filtering & Interception

Flag	Description
`--intercept FILTER`	Intercept filter expression

Replay Options

Flag	Description
`-C PATH`, `--client-replay PATH`	Replay client requests
`-S PATH`, `--server-replay PATH`	Replay server responses

Modification Options

Flag	Description
`-M PATTERN`, `--map-remote PATTERN`	Map remote resources
`--map-local PATTERN`	Map to local files
`-B PATTERN`, `--modify-body PATTERN`	Modify body
`-H PATTERN`, `--modify-headers PATTERN`	Modify headers

Web Interface Features

Flow List

The main view shows all captured HTTP flows:

View Traffic

Flows appear in real-time as they’re captured

Method (GET, POST, etc.)
URL path
Status code
Response size
Timing information

Select Flow

Click any flow to view full details:

Request headers and body
Response headers and body
Timing breakdown
WebSocket messages (if applicable)

Filter Flows

Use the search box to filter:

Domain names
Methods
Status codes
Content types

Flow Details

When viewing a flow, you can:

Request Tab

View HTTP method and URL
Inspect request headers
View request body (formatted)
See query parameters

Response Tab

View status code and reason
Inspect response headers
View response body (formatted)
Check content type

Timing Tab

Connection timing
Request/response times
Total duration

WebSocket Tab

WebSocket messages
Message direction
Message content

Actions

Flow Actions

Per-flow actions:

Resume intercepted flow
Delete flow
Replay flow
Export flow (HAR, curl, etc.)
Revert modifications

Bulk Actions

Multiple flow actions:

Clear all flows
Resume all intercepted
Export selected flows
Filter and export

Examples

Basic Setup

Start mitmweb and access via browser:

mitmweb

Automatically opens http://127.0.0.1:8081 in your browser.

Remote Access

Allow access from other machines on your network:

mitmweb --web-host 0.0.0.0 --web-port 8081

Access from other machines: http://<your-ip>:8081

Custom Ports

Run on different ports to avoid conflicts:

mitmweb --web-port 9000 -p 9080

Web UI: http://localhost:9000
Proxy: localhost:9080

Headless Server

Run without opening browser (for servers):

mitmweb --no-web-open-browser --web-host 0.0.0.0

With Interception

Start with interception filter:

mitmweb --set intercept="~d api.example.com"

Requests to api.example.com will pause for inspection.

Load Saved Traffic

View previously captured traffic:

mitmweb -r traffic.mitm

Save While Viewing

Capture and view simultaneously:

mitmweb -w session.mitm

With Python Script

Run with custom addon:

mitmweb -s my_addon.py

Filter Expressions

mitmweb supports filter expressions in the search box:

~d example.com

Common Filters

Filter	Description	Example
`~d`	Domain	`~d example.com`
`~m`	Method	`~m GET`
`~u`	URL	`~u "/api/"`
`~c`	Status code	`~c 200`
`~t`	Content type	`~t "text/html"`
`~h`	Header	`~h "Authorization"`
`~b`	Body	`~b "error"`
`~q`	Request	`~q`
`~s`	Response	`~s`
`&`	And	`~d example.com & ~m POST`
`	`	Or	`~c 200	~c 304`
`!`	Not	`!~d cdn.example.com`

Export Formats

mitmweb can export flows in multiple formats:

HAR
cURL
Raw

HTTP Archive format, compatible with many tools:

Select flow(s)
Click Export
Choose “HAR”
Import into browser DevTools, Postman, etc.

Remote Debugging Setup

Mobile Device Testing

Start mitmweb

mitmweb --web-host 0.0.0.0

Configure Mobile Proxy

On your mobile device:

Wi-Fi settings → Proxy
Manual proxy
Host: Your computer’s IP
Port: 8080

Access Web Interface

From any browser on your network:

http://<computer-ip>:8081

View Traffic

Mobile app traffic appears in real-time in the web interface.

Team Collaboration

# On shared server
mitmweb --web-host 0.0.0.0 --web-port 8081 -p 8080

Security Considerations

Public network exposureBy default, --web-host 0.0.0.0 makes the web interface accessible to anyone on your network. Use authentication or firewall rules to restrict access.

Recommended for remote access:

Use SSH tunneling:

ssh -L 8081:localhost:8081 user@remote-server

Or set up authentication:

mitmweb --set web_auth=username:password

Use Cases

API Development

Start mitmweb

mitmweb --set intercept="~d api.example.com"

Make API Calls

Configure your app to use proxy, make requests

Inspect in Browser

View formatted JSON, headers, timing in web UI

Export for Documentation

Export as cURL or HAR for API documentation

Testing Mobile Apps

# Start mitmweb for mobile testing
mitmweb --web-host 0.0.0.0 --set console_eventlog_verbosity=error

Configure mobile device proxy
Use app normally
Monitor traffic in browser
Debug API issues

Demonstrating HTTP Issues

# Record problematic session
mitmweb -w problem-session.mitm

# Share web interface URL with team
# or export flows to share

Automated Testing Integration

import subprocess
import requests
import time

# Start mitmweb
proc = subprocess.Popen(["mitmweb", "--no-web-open-browser"])
time.sleep(2)

# Run tests through proxy
proxies = {"http": "http://localhost:8080", "https": "http://localhost:8080"}
response = requests.get("http://example.com", proxies=proxies)

# View captured traffic at http://localhost:8081
input("Check web interface, then press Enter to stop...")

proc.terminate()

Advanced Features

WebSocket Support

mitmweb automatically captures and displays WebSocket traffic:

View WebSocket handshake
See all messages in/out
Inspect message content
Filter by message type

Content Views

Automatic content formatting:

JSON (formatted and syntax highlighted)
XML/HTML (formatted)
Images (rendered preview)
Protocol buffers (if configured)
Custom content types via addons

Keyboard Shortcuts

In the web interface:

Key	Action
`/`	Focus search box
`↑` `↓`	Navigate flows
`Enter`	View selected flow
`Esc`	Close flow details
`r`	Resume flow
`x`	Delete flow

Performance Tips

For high-traffic scenarios:

Use filters to reduce displayed flows
Periodically clear old flows
Limit saved flows with --set view_filter
Consider using mitmdump for pure logging

mitmweb --set view_filter="~d api.example.com"

Troubleshooting

Can't access web interface

Solution:

Check web interface is running:
```
curl http://localhost:8081
```
Verify port isn’t blocked:
```
netstat -an | grep 8081
```
Try different port:
```
mitmweb --web-port 9000
```

No flows appearing

Check:

Proxy is configured correctly (port 8080)
Certificate is installed
No filters active (clear search box)
Flows aren’t being ignored (--ignore-hosts)

WebSocket disconnected

The web interface uses WebSocket for real-time updates.Fix:

Refresh browser
Check firewall/proxy settings
Try different browser

High memory usage

Reduce memory:

Clear flows regularly
Use filters to limit flows
Don’t keep web interface open when not needed

Comparison with Other Tools

Feature	mitmweb	mitmproxy	mitmdump
Interface	Web browser	Terminal UI	Command-line
Remote access	Yes	No	No
Interactivity	Click-based	Keyboard	None
Best for	Teams, demos	Power users	Automation
Resource usage	Medium	Medium	Low
Export	Multiple formats	Via commands	Via scripts

Integration Examples

Docker Deployment

FROM mitmproxy/mitmproxy:latest

EXPOSE 8080 8081

CMD ["mitmweb", "--web-host", "0.0.0.0", "--no-web-open-browser"]

Kubernetes Deployment

apiVersion: v1
kind: Pod
metadata:
  name: mitmweb
spec:
  containers:
  - name: mitmweb
    image: mitmproxy/mitmproxy:latest
    command: ["mitmweb"]
    args:
      - "--web-host"
      - "0.0.0.0"
      - "--no-web-open-browser"
    ports:
    - containerPort: 8080  # Proxy
    - containerPort: 8081  # Web UI

mitmproxy

Interactive TUI for advanced workflows

mitmdump

Command-line tool for automation

Get Started

Core Concepts

Tools

Addons & Scripting

Configuration

Advanced

Guides

​Overview

​Basic Usage

​Command-Line Options

​Web Interface Options

​General Options

​Proxy Options

​SSL Options

​File I/O

​Filtering & Interception

​Replay Options

​Modification Options

​Web Interface Features

​Flow List

​Flow Details

Request Tab

Response Tab

Timing Tab

WebSocket Tab

​Actions

​Examples

​Filter Expressions

​Common Filters

​Export Formats

​Remote Debugging Setup

​Mobile Device Testing

​Team Collaboration

​Security Considerations

​Use Cases

​API Development

​Testing Mobile Apps

​Demonstrating HTTP Issues

​Automated Testing Integration

​Advanced Features

​WebSocket Support

​Content Views

​Keyboard Shortcuts

​Performance Tips

​Troubleshooting

​Comparison with Other Tools

​Integration Examples

​Docker Deployment

​Kubernetes Deployment

​See Also

mitmproxy

mitmdump

Build docs developers (and LLMs) love

Overview

Basic Usage

Command-Line Options

Web Interface Options

General Options

Proxy Options

SSL Options

File I/O

Filtering & Interception

Replay Options

Modification Options

Web Interface Features

Flow List

Flow Details

Actions

Examples

Filter Expressions

Common Filters

Export Formats

Remote Debugging Setup

Mobile Device Testing

Team Collaboration

Security Considerations

Use Cases

API Development

Testing Mobile Apps

Demonstrating HTTP Issues

Automated Testing Integration

Advanced Features

WebSocket Support

Content Views

Keyboard Shortcuts

Performance Tips

Troubleshooting

Comparison with Other Tools

Integration Examples

Docker Deployment

Kubernetes Deployment

See Also