MITMEngine
A Go-based tool for detecting HTTPS interception (man-in-the-middle) through TLS and HTTP fingerprint analysis.
What is MITMEngine?
MITMEngine is a Go-based tool for detecting HTTPS interception (man-in-the-middle attacks) by analyzing TLS and HTTP fingerprints. It compares observed client request fingerprints against expected browser signatures to identify mismatches that indicate traffic interception. The project was originally developed to power Cloudflare's MALCOLM service for monitoring interception on the web.
Security engineers, network administrators, and researchers focused on TLS security, traffic analysis, and detecting malicious or unwanted HTTPS interception in enterprise or provider environments.
It provides a robust, signature-driven methodology based on academic research, with an extensible architecture for fingerprint management and a reference database built from real-world traffic, offering more accurate detection than generic TLS analysis tools.
Overview
A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:
Use Cases
Best For
- Detecting corporate or ISP HTTPS proxies that intercept encrypted traffic
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
