Tool
mitmproxy2swagger
Command-line tool that reverse-engineers undocumented REST APIs from captured traffic. It reads a mitmproxy flow file, or a HAR export from the browser DevTools, and generates an OpenAPI 3.0 specification describing the observed endpoints. Running it again over further captures safely merges the new data into an existing schema.
- Targets
- Protocol · Website
- Category
- Website analysis tools
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- Installed from PyPI (also packaged for Arch Linux) or run via the provided Dockerfile; pyproject.toml marks version 0.15.0 and requires Python 3.12+.
- Takes a mitmproxy flow file or a browser HAR export as input; the analyst captures that traffic separately, for example with mitmproxy, and supplies the API base-URL prefix. The two-pass workflow lets several captures be merged into an existing schema.
- Intended for APIs and traffic the analyst is authorized to capture and analyze. The project metadata in pyproject.toml declares the MIT license; no standalone LICENSE file is present for GitHub to detect.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · alufers/mitmproxy2swagger · Revision f432aca
- pyproject.toml GitHub · alufers/mitmproxy2swagger · Revision f432aca
More in Websites
- JPEXS Free Flash Decompiler (FFDec) · Tool
- WasmLens: exploratory WebAssembly inspection · Tool
- synchrony · Tool
- sourcemapper · Tool
- ngrev · Tool
- jsluice · Tool