I'm looking for SSL proxy capable of dumping requests.

I want to test custom browser against SSL-MITM attacks.

I'm able to re-route all traffic ongoing from browser to machine with proxy.

Basically proxy should:

  • initiate SSL connection with legitimate website
  • issue self-signed certificate
  • pass data received from legitimate website to browser
  • capture requests issued by browser

closed as off-topic by Xander, TildalWave, RoraΖ, schroeder, Jens Erat Jan 24 '15 at 0:15

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.


Burp Suite is one of the best.


If you want a stand alone app, Fiddler works nicely with SSL capture enabled.

  • Does it works also like proxy? If browser is on machine A and proxy is on machine B? – pixel Dec 30 '10 at 15:22
  • Yes it does, you can enable remote connections in the settings – mcont Jan 29 '17 at 13:25

I typically use Burp Proxy - it seems to do everything you would need. Or if you want to do more, the entire Burp Suite does a huge amount. It is my first goto tool for the automated part of a security assessment, allowing me to spider an application, run scripts, test for particular vulnerabilities, and even an element for fuzzing/sequencing.

Not the answer you're looking for? Browse other questions tagged or ask your own question.