{% raw %} MiniProxy — Web UI

▶ MiniProxy

checking…
Captured requests
IDMethod StatusSize HostPath
Waiting for traffic…
Select a request…
Request line & headers

            
Body

            

              
              
              
              
            

            

            

          

          

            
Response headers

            

            
Body

            

              
              
              
              
            

            

            

          

          

            
Intruder results for the selected request

            
(none yet — run one from the Intruder tab)

          

          

            
Note

            
            

              
              
            

            
Highlight

            

          

        

        

          
          
          
          
          
          
          
          
        

      

    

  







  

    
  

  

    
Request history

    

      

        

          IDTime
          MethodURLStatus
        

        
No requests.

      

    

  







  

    
1 · Select request

    

      

        

          
          No request selected
          
        

      

    

  

  

    
2 · Edit & send

    

      

        
      

      

        

          
          
        

        

      

      

      

      

        
        
        
        
      

      
    

  

  






  

    
1 · Target

    

      

        

          
          No request selected
          
        

      

      

        

          
          
        

        

          
          

            
            
          

        

      

      

      

        
        

          
          
        

      

    

  

  

    
2 · Wordlist

    

      

        
        
        One wordlist, substituted into every §placeholder§.
      


      

        

          
          
          Lines starting with # are ignored. Spaces inside a word are kept, so payloads like
            admin' OR '1'='1 survive intact.

            A line that is just a number range expands — 1-255, 1-255:2 (step),
            255-1 (descending), 001-010 (zero-padded) — which is how you scan a
            private range like 192.168.0.§i§.
        

        

          
          
          
        

        

      


      

      

        
        
        
        
      

      
      
      
      

    

  

  







  

    

      Compare captures
      
    

    

      

        
A —
          

        
B —
          

        

          
          
        

      

      

        
        
        
        
        
        
      

      

    

  







  

    

      Noise filter
      
    

    

      

        Browser traffic drowns out the target. Enabled rules are dropped at
        capture time, so they never enter the DB. Static assets (images,
        fonts, css, js, media) are always eligible — the bundled list covers
        common telemetry and ad hosts and ships disabled.
      

      

        
        
        
      

      

      

      

        
        
        
      

      

    

  







  

    

      Match & replace
      
    

    

      

        Rules are applied to requests as they pass through the proxy,
        before they reach the server — so the target sees the modified values.
        For headers, Exact matches the header name and sets its
        value; Contains and Regex match inside the value.
      

      

        
        
        
        
        
      

      

      

    

  







  

    

      
1 · Proxy address

      

        

          …
          checking…
        

        
Detected from how you opened the dashboard (SSH tunnel / port-forward friendly). Other devices reach this same proxy at the addresses listed in “Addresses”.

        
Addresses

        

      

    

    

      
2 · Point the browser here

      

        

          
          

            
            
          

        

        

          
          
…

          
…

        

        
Full per-platform steps, phone setup, and VPS instructions live on the Connect page ↗ and in docs/connect.md.

      

    

    

      
3 · Trust the CA (HTTPS bodies)

      

        

          
          Download CA
        

        
…

      

    

    

      
4 · Verify & pair

      

        

          
          
        

        

          
          

            
            
          

          

        

        
Saved devices 

        
loading…

      

    

    

      
Scan from a phone

      

        

      

    

  





















{% endraw %}