Blocking specific HTTPS POST request by payload/endpoint?

help
1

We have a third party web app served over HTTPS.

There is a specific HTTP POST request that we’d like to block and/or manipulate - but only for certain payloads. We can find this based on a substring in the HTTP payload.

Assuming we can get the certificates setup on all clients, what is the best way to achieve this with mitmproxy?

I saw there’s a scripting (https://docs.mitmproxy.org/master/addons-scripting/) feature but there’s not a lot of examples/explanation on it. Is this the best way? Or is the another feature that works here?

Anybody done something similar?

Thanks,
Victor

2

Hi Victor,

You should be able to filter by body payload unless request/response streaming is activated (https://docs.mitmproxy.org/stable/concepts-filters/). Other than that, maybe all you need is https://docs.mitmproxy.org/stable/overview-features/#replacements?