Connect Akto with MITM Proxy

This mitmproxy addon script can be used to populate the Akto inventory.

mitmproxy An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

How it works?

mitmdump is essentially the command-line version of mitmproxy, functioning much like tcpdump but for HTTP traffic. By utilizing this add-on script with the -s option, you can effectively save the API data collected in mitmdump to Akto.

The script initializes a JSON object and starts populating it with HAR entries. When the JSON object reaches a size exceeding 20MB, it then proceeds to transmit the HAR JSON to Akto.

Usage

Standalone mitmproxy

pip install mitmproxy requests
export AKTO_BASE_URL="https://app.akto.io"
export AKTO_API_KEY="YOUR_API_KEY"
mitmdump -s ./akto.py --set akto_collection=YOUR_COLLECTION_NAME

Dockerized mitmproxy

docker build -t mitm .

docker run --rm -it \
  -v $(pwd):/opt/mitm \
  -p 8080:8080 \
  -e AKTO_BASE_URL="https://app.akto.io" \
  -e AKTO_API_KEY="YOUR_API_KEY" \
  mitm mitmdump -s /opt/mitm/akto.py \
  --set akto_collection=YOUR_COLLECTION_NAME

Note: Upon completion of the execution, ensure the mitmdump is exited (or the mitmdump container is stopped) to transmit the remaining data to Akto.