Andy Dixon
5dbf85f84e
Toggleable transparent interception via mitmdump in a venv. Own RSA CA generated in-app, downloadable (public cert only, key never leaves the box), with per-OS install guide and fingerprint. nftables redirect accepts only dnat'd connections (never an open proxy). HTTP Explorer with headers and opt-in body viewers (JSON/ text/hex/image, sandboxed). Honest status: pinned/untrusting = reported errors, excluded hosts pass through, bodies off by default. Helper op + systemd unit + installer venv build + boot restore.
14 lines
744 B
Bash
Executable File
14 lines
744 B
Bash
Executable File
#!/bin/bash
|
|
# Launches mitmdump for PiLens interception from the core-written env file.
|
|
# Runs as the unprivileged 'pilens' user under the pilens-proxy.service unit.
|
|
set -eu
|
|
ENV=/var/lib/pilens/proxy/proxy.env
|
|
[ -f "$ENV" ] || { echo "no proxy.env; interception not configured" >&2; exit 1; }
|
|
. "$ENV"
|
|
export PILENS_FLOWS PILENS_BODIES PILENS_CAPTURE_BODIES PILENS_MAX_BODY_KB
|
|
args=( --mode transparent --listen-host 0.0.0.0 --listen-port "$PILENS_PROXY_PORT"
|
|
--set "confdir=$PILENS_CONFDIR" --set block_global=false --set connection_strategy=lazy
|
|
--set stream_large_bodies=1m -s "$PILENS_ADDON" -q )
|
|
if [ -n "${PILENS_IGNORE:-}" ]; then args+=( --ignore-hosts "$PILENS_IGNORE" ); fi
|
|
exec "$PILENS_VENV/bin/mitmdump" "${args[@]}"
|