Skip to content

kzwr/Titanium-Web-Proxy

Repository files navigation

Titanium

A light weight http(s) proxy server written in C#

Build Status

Kindly report only issues/bugs here . For programming help or questions use StackOverflow with the tag Titanium-Web-Proxy.

alt tag

Features

  • Supports Http(s) and most features of HTTP 1.1
  • Supports relaying of WebSockets
  • Supports script injection

Usage

Refer the HTTP Proxy Server library in your project, look up Test project to learn usage.

Install by nuget:

Install-Package Titanium.Web.Proxy -Pre

After installing nuget package mark following files to be copied to app directory

  • makecert.exe
  • Titanium_Proxy_Test_Root.cer

Setup HTTP proxy:

	// listen to client request & server response events
	ProxyServer.BeforeRequest += OnRequest;
	ProxyServer.BeforeResponse += OnResponse;

	//Exclude Https addresses you don't want to proxy
	//Usefull for clients that use certificate pinning
	//for example dropbox.com
	var explicitEndPoint = new ExplicitProxyEndPoint(IPAddress.Any, 8000, true){
		ExcludedHttpsHostNameRegex = new List<string>() { "dropbox.com" }
	};

	//An explicit endpoint is where the client knows about the exististance of a proxy
	//So client sends request in a proxy friendly manner
	ProxyServer.AddEndPoint(explicitEndPoint);
	ProxyServer.Start();

	//You can also add/remove end points after proxy has been started
	//Transparent endpoint is usefull for reverse proxying
	//A transparent endpoint usually requires a network router port forwarding HTTP(S) packets to this endpoint
	//Please read about it before asking questions!
	//Currently do not support Server Name Indication (SNI is not currently supported by SslStream class)
	//That means that the transparent endpoint will always provide the same Generic Certificate to all HTTPS requests
	//In this example only google.com will work for HTTPS requests
	//Other sites will receive a certificate mismatch warning on browser
	var transparentEndPoint = new TransparentProxyEndPoint(IPAddress.Any, 8001, true) {  GenericCertificateName = "google.com"};         
	ProxyServer.AddEndPoint(transparentEndPoint);
	ProxyServer.RemoveEndPoint(transparentEndPoint);

	foreach (var endPoint in ProxyServer.ProxyEndPoints)
		Console.WriteLine("Listening on '{0}' endpoint at Ip {1} and port: {2} ", endPoint.GetType().Name, endPoint.IpAddress, endPoint.Port);

	//Only explicit proxies can be set as system proxy!
	ProxyServer.SetAsSystemHttpProxy(explicitEndPoint);
	ProxyServer.SetAsSystemHttpsProxy(explicitEndPoint);

	//wait here (You can use something else as a wait function, I am using this as a demo)
	Console.Read();
	
	//Unsubscribe & Quit
	ProxyServer.BeforeRequest -= OnRequest;
    ProxyServer.BeforeResponse -= OnResponse;
	ProxyServer.Stop();
	
	

Sample request and response event handlers

		
		//Test On Request, intercept requests
        public void OnRequest(object sender, SessionEventArgs e)
        {
            Console.WriteLine(e.ProxySession.Request.RequestUrl);

            //read request headers
            var requestHeaders = e.ProxySession.Request.RequestHeaders;

            if ((e.RequestMethod.ToUpper() == "POST" || e.RequestMethod.ToUpper() == "PUT"))
            {
                //Get/Set request body bytes
                byte[] bodyBytes = e.GetRequestBody();
                e.SetRequestBody(bodyBytes);

                //Get/Set request body as string
                string bodyString = e.GetRequestBodyAsString();
                e.SetRequestBodyString(bodyString);

            }

            //To cancel a request with a custom HTML content
            //Filter URL

            if (e.ProxySession.Request.RequestUrl.Contains("google.com"))
            {
                e.Ok("<!DOCTYPE html><html><body><h1>Website Blocked</h1><p>Blocked by titanium web proxy.</p></body></html>");
            }
        }
	
	 public void OnResponse(object sender, SessionEventArgs e)
	{
            ////read response headers
            var responseHeaders = e.ProxySession.Response.ResponseHeaders;


            if (e.ResponseStatusCode == "200")
            {
                if (e.ResponseContentType.Trim().ToLower().Contains("text/html"))
                {
                    //Get/Set response body bytes
                    byte[] responseBodyBytes = e.GetResponseBody();
                    e.SetResponseBody(responseBodyBytes);

                    //Get response body as string
                    string responseBody = e.GetResponseBodyAsString();

                    //Modify e.ServerResponse
                    Regex rex = new Regex("</body>", RegexOptions.RightToLeft | RegexOptions.IgnoreCase | RegexOptions.Multiline);
                    string modified = rex.Replace(responseBody, "<script type =\"text/javascript\">alert('Response was modified by this script!');</script></body>", 1);

                    //Set modifed response Html Body
                    e.SetResponseBodyString(modified);
                }
            }
	}

Future updates

  • Support mutual authentication
  • Support HTTP 2.0
  • Support modification of web socket requests

About

A light weight C#.NET http(s) proxy server

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C# 96.6%
  • PowerShell 3.1%
  • Batchfile 0.3%