Search code examples
pythonmitmproxy

mitmproxy & python - ignore all hosts with https/ssl

I've done alot of research, and I can't find anything which actually solves my issue.

Since basically no site accepts mitmdumps certificate for https, I want to ignore those hosts. I can access a specific website with "--ignore-hosts (ip)" like normal, but I need to ignore all HTTPS/SSL hosts. Is there any way I can do this at all?

Thanks alot!

Solution

  • There is a script file called tls_passthrough.py on the mitmproxy GitHub which ignores hosts which has previously failed a handshake due to the user not trusting the new certificate. Although it does not save for other sessions.

    What this also means is that the first SSL connection from this perticular host the will always fail. What I suggest you do is write out all the IPs which has failed previously into a text document and ignore all hosts which are in that text file.

    tls_passthrough.py

    To simply start it, you just add it with the script argument "-s (tls_passthrough.py path)"

    Example,

    mitmproxy -s tls_passthrough.py