MITM Proxy

MITM is a high-performance, production-ready Man-in-the-Middle (MITM) proxy built in Go. It intercepts, analyzes, and manipulates HTTP/HTTPS traffic on the fly with a rich web-based dashboard, engineered specifically for rigorous deployment environments.

• Blazing Fast: Written in pure Go, compiled entirely statically (CGO_ENABLED=0) with optimized build targets for minimal CPU footprint and instantaneous boot times.
• Production Hardened:
  • Runs in tightly sandboxed, non-root (appuser) Alpine containers.
  • Automatically mitigates embedded OS CVEs (like CVE-2026-40200 & CVE-2021-3538).
  • Active native health checks monitor system vitals to auto-recover from system freezes.
• Web Dashboard: An intuitive real-time request visualization dashboard that runs natively on port 8181.
• Zero-Friction Traffic Capture: Automatically parses and establishes root CAs (Certificate Authorities) for seamless SSL/TLS traffic decryption.
• State Persistence: Certificates are transparently routed to mapped Docker volumes ensuring connection continuity over container upgrades.

By default, the proxy operates across two distinct networks:

• 8080: The primary MITM Proxy Listener Network. Direct client proxy settings here to intercept network operations.
• 8181: The Web Interface Dashboard Listener. Access this port via your browser to track live traffic logs and network payloads.

• Docker Engine & Docker Compose
• Golang 1.26+ (If building from source)
• make toolkit

The easiest way to get the proxy rolling is via the bundled Docker configuration, which automatically manages dependencies and state.

# Provision the infrastructure and bring up the proxy in the background
make docker-up

# (Optional) Tail the live application logs
make docker-logs

Access the management dashboard at http://localhost:8181. CAs will be automatically generated and mapped to the local ./certs directory.

For manual local development and testing without Docker:

# Build the optimized binary executable
make build

# Run unit tests natively
make test

# Start the proxy directly from source
make run

# Start the compiled proxy process manually
./MITM

The project includes an integrated GitHub Actions pipeline designed to automatically test code integrity, enforce syntactical optimizations, and autonomously publish new container builds directly to Docker Hub.

If forking this repository, ensure you provide the following GitHub Secrets to your Actions environment to enable automatic Docker deployments:

• DOCKER_USERNAME
• DOCKER_PASSWORD

MIT License. See LICENSE for the full terms and distribution agreements.