● Covered by 1 source · 1 reportLow impact1 neutral
Local MITM Proxy Controls TLS/HTTP/2 Fingerprints for WAF Bot-Detection Testing
Key points
- Controls TLS (JA3/JA4) and HTTP/2 fingerprints.
- Manages HTTP header order, User-Agent, and source IP headers.
- Configured via a single YAML file.
- Includes a Chrome extension for proxy toggling and profile switching.
New MITM Proxy for Fingerprint Control
A new local Man-in-the-Middle (MITM) proxy has been introduced, offering granular control over various network fingerprints. This proxy enables manipulation of TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, User-Agent strings, and source IP headers. All configurations are managed through a single YAML file.
Purpose and Functionality
The primary purpose of this proxy is for authorized security testing of Web Application Firewall (WAF) bot-detection systems. It allows security professionals to route traffic from tools like curl, browsers, or Playwright through the proxy to observe how different fingerprint combinations are classified by WAFs. A Chrome extension is also provided to toggle the proxy and switch fingerprint profiles directly from the browser toolbar without requiring a proxy restart.
Technical Implementation
The proxy operates by performing MITM TLS interception and then using uTLS to generate custom JA3/JA4 fingerprints. It also includes a header rewriter for User-Agent, header order, and addition/deletion of headers, along with an HTTP/2 framer to control SETTINGS, WINDOW_UPDATE, and pseudo-header order. The tool is compatible with macOS and Linux (amd64/arm64) and requires Go 1.22+ for installation and operation.
Setup and Usage
Installation involves cloning the repository, building the project, and running it to generate a CA certificate. Clients using the proxy must trust this MITM CA to avoid certificate rejections. Instructions are provided for trusting the CA across macOS, Linux, curl, and Playwright/Node.js environments.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Primary sources
GitHub cmc_internal/api GitHub github/collect GitHub ytkoka/impersonate-proxy GitHub _private/browser GitHub get-started/accessibility GitHub open-source/sponsorsReporting from
A new local Man-in-the-Middle (MITM) proxy has been released that allows users to control TLS (JA3/JA4) and HTTP/2 fingerprints, HTTP header order, User-Agent, and source IP headers via a single YAML configuration. This tool is designed for authorized security testing of Web Application Firewall (WAF) bot-detection systems.