{"id":120054,"date":"2024-10-06T13:09:16","date_gmt":"2024-10-06T11:09:19","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-https-analizatora-mitmproxy-11-s-podderzhkoj-http-3"},"modified":"2024-10-06T13:09:16","modified_gmt":"2024-10-06T11:09:19","slug":"vypusk-https-analizatora-mitmproxy-11-s-podderzhkoj-http-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-https-analizatora-mitmproxy-11-s-podderzhkoj-http-3","title":{"rendered":"Lansarea analistului HTTPS Mitmproxy 11 cu suport pentru HTTP\/3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A fost lansat\u0103 versiunea proiectului Mitmproxy 11, care dezvolt\u0103 un set de instrumente pentru interceptarea traficului \u00een conexiuni stabilite prin HTTPS, av\u00e2nd capacit\u0103\u021bi de inspectare, modificare \u0219i reproducere a traficului. Principalul scop al Mitmproxy este organizarea monitoriz\u0103rii traficului \u00een sistemele corporative \u0219i diagnosticarea problemelor, de exemplu, identificarea activit\u0103\u021bii re\u021belei ascunse a aplica\u021biilor. Codul surs\u0103 al proiectului este scris \u00een Python \u0219i este distribuit sub licen\u021ba MIT. <\/p>\n

Pentru analiza traficului HTTPS, Mitmproxy este plasat pe un nod de tranzit, unde intercept\u0103 cererile clientului \u0219i le retransmite ca cereri trimise de el c\u0103tre destina\u021bie. server<\/a>. Cu serverul solicitat \u00een timpul sesiunii clientului, Mitmproxy stabile\u0219te o conexiune HTTPS obi\u0219nuit\u0103, iar cu clientul, \u00een numele serverului \u021bint\u0103, se stabile\u0219te o conexiune falsificat\u0103 cu un certificat SSL generat pe loc pentru client. Traficul primit de la client este redirec\u021bionat c\u0103tre serverul \u021bint\u0103, iar r\u0103spunsurile primite sunt retransmise clientului.

\"Lansarea<\/center> <\/p>\n

Pentru redirec\u021bionarea traficului prin mitmproxy sunt suportate mai multe metode, cum ar fi specificarea adresei mitmproxy ca proxy HTTP \u00een set\u0103rile browserului, func\u021bionarea ca proxy SOCKS5, utilizarea ca proxy invers \u00een fa\u021ba serverului HTTP \u0219i organizarea unei redirec\u021bion\u0103ri transparente prin reguli de filtrare a pachetelor sau \u00eenglobarea rut\u0103rii. Pentru ca certificatul falsificat utilizat \u00een conexiunea cu clientul s\u0103 nu genereze alerte din partea browserului referitoare la probleme de securitate, utilizatorului i se propune s\u0103 instaleze certificatul r\u0103d\u0103cin\u0103 mitmproxy, lucru ce poate fi realizat fie manual, fie deschiz\u00e2nd \u00een browser un host special mitm.it.

\"Lansarea<\/center> <\/p>\n

Mitmproxy suport\u0103 HTTP\/2, HTTP\/3, Websockets, normalizarea ordinii pachetelor \u00een flux, conectarea scripturilor de procesare pentru modificarea traficului \u00een timp real, salvarea cererilor pentru o reproducere ulterioar\u0103, generarea. certificatelor TLS<\/a> pentru sesiuni interceptate, cur\u0103\u021barea antetelor privind timpul de modificare pentru a dezactiva caching-ul pe partea clientului, modul proxy invers (Reverse proxy) pentru a redirec\u021biona traficul c\u0103tre server, listele de blocare pentru filtrarea anumitor cereri, redirec\u021bionarea selectiv\u0103 a cererilor (inclusiv pentru livrarea fi\u0219ierelor locale ca r\u0103spuns) \u0219i modificarea con\u021binutului \u0219i antetelor pe baza expresiilor regulate. Pentru analiza traficului este oferit\u0103 o utilitar de linie de comand\u0103 similar cu tcpdump, mitmdump \u0219i interfa\u021ba web mitmweb.

\"Lansarea<\/center>
\"Lansarea<\/center> <\/p>\n

\u00cembun\u0103t\u0103\u021birea cheie \u00een noua versiune este suportul complet pentru protocolul HTTP\/3, care utilizeaz\u0103 protocolul QUIC (Quick UDP Internet Connections) ca transport pentru HTTP\/2 (QUIC este un overlay pe protocolul UDP, care suport\u0103 multiplexarea mai multor conexiuni \u0219i ofer\u0103 metode de criptare echivalente TLS\/SSL). \u00cen Mitmproxy pentru HTTP\/3 se poate folosi at\u00e2t interceptarea transparent\u0103 a traficului, c\u00e2t \u0219i func\u021bionarea ca proxy invers. Func\u021bionarea \u00een interceptarea HTTP\/3 a fost testat\u0103 \u00een Firefox, Chrome \u0219i diverse versiuni de cURL. <\/p>\n

Alte modific\u0103ri notabile \u00een noua versiune sunt legate de \u00eembun\u0103t\u0103\u021birea suportului DNS \u00een contextul plas\u0103rii \u00eenregistr\u0103rilor DNS pentru HTTPS \u0219i ECH (Encrypted Client Hello). \u00cen noua versiune a fost ad\u0103ugat suportul pentru solicitarea \u00eenregistr\u0103rilor DNS diferite de A\/AAAA (de exemplu, \u00een ECH informa\u021biile despre cheia public\u0103 de criptare sunt transmise \u00een \u00eenregistr\u0103rile DNS HTTPSSVC). A fost ad\u0103ugat un mod de cur\u0103\u021bare a cheilor ECH din \u00eenregistr\u0103rile HTTPS \u00een DNS. Pentru a lucra cu DNS, a fost realizat\u0103 trecerea la biblioteca Hickory, scris\u0103 \u00een limbajul Rust \u0219i dezvoltat\u0103 de proiectul Let's Encrypt. A fost ad\u0103ugat suport pentru DNS-over-TCP. A fost implementat\u0103 o op\u021biune pentru dezactivarea proces\u0103rii set\u0103rilor din \/etc\/hosts.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Mitmproxy 11, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e HTTPS, \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c Mitmproxy \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0434\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0418\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MIT. \u0414\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120055,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120054","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea analizoarei HTTPS Mitmproxy 11 cu suport pentru HTTP\/3 | ProHoster","description":"A fost lansat\u0103 versiunea proiectului Mitmproxy 11, care dezvolt\u0103 un set de instrumente pentru interceptarea traficului din conexiunile stabilite prin HTTPS, cu capacit\u0103\u021bi de inspec\u021bie, modificare \u0219i reproducere a traficului.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-https-analizatora-mitmproxy-11-s-podderzhkoj-http-3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a HTTPS-\u0430\u043d\u0430\u043b\u0438\u0437\u0430\u0442\u043e\u0440\u0430 Mitmproxy 11 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 HTTP\/3 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Mitmproxy 11, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043e HTTPS, \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0438\u043d\u0441\u043f\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-https-analizatora-mitmproxy-11-s-podderzhkoj-http-3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-10-06T11:09:19+00:00","article:modified_time":"2024-10-06T11:09:19+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120054","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 22:02:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 07:05:19","updated":"2026-02-09 22:02:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=120054"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120054\/revisions"}],"predecessor-version":[{"id":160224,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/120054\/revisions\/160224"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/120055"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=120054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=120054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=120054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}