I am working on HTTP client code that makes REST api calls to a server and processes responses.
The client talks to server via SSL, but the SSL session is terminated at a Web Application Firewall.The Web Application Firewall is like a man-in-the-middle proxy.
I would like to make the client robust enough to handle any erroneous behavior by this proxy. Are there any tools that provide such tests? For instance, the proxy could redirect the client elsewhere, or modify the response sent by the server. I am able to find a lot of test suites to test web server code, but not client code. I looked at
https://mitmproxy.org/ and some options in Kali Linux that let you setup malicious web server that serves malware. Are there any other options?