
Security News
TeamPCP and BreachForums Launch $1,000 Contest for Supply Chain Attacks
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.
bproxy 一款代理工具,为前端开发带来乐趣。配置文件是一个 JS 脚本,你可以在里面写 NodeJS 代码。
独立配置: 配置文件可以跟着项目走,支持多人跨平台协同开发抓包:http、https、ws、wsshttps过滤:自定义需要抓包的 https 白名单代理webSocket修改响应内容:指向本地文件、指向本地目录、指向本地 http 服务、自定义响应头。HTTPS证书:自动安装 https 证书HOST:一个域名可以配置多个 host弱网模拟:弱网模拟支持自定义延时配置Chrome开发者工具:远程调试npm i bproxy -g
升级
npm i bproxy@latest -g
支持 Windows & MacOS
下载地址:http://www.bproxy.cn
配置文件 bproxy.config.js
module.exports = {
port: 8888, // 本地代理服务器的端口
https: true, // 开启所有的https都抓包
// 代理规则列表
rules: [
{
// url是匹配什么什么请求
url: 'https?://m.v.qq.com/tvp/',
// target是配置请求如何响应,返回字符串内容
target: 'hello world',
},
],
};
把服务端目录代理到本地目录
{
url: 'https://google.com/static/**',
target: '/path/to/your/folder'
}
把服务端文件代理到本地文件
{
url: 'https://google.com/static/a.js',
target: '/path/to/your/folder/a.js'
}
把服务端 url 代理到 local server
{
url: 'https://baidu.com/pages/demo',
target: 'http://127.0.0.1:3000',
}
{
url: 'https://google.com/user',
responseHeaders: {
"Access-Control-Allow-Origin": "https://qq.com",
"Access-Control-Allow-Credentials": "true",
},
requestHeaders: {
"cache-control": "no-store",
},
}
// 同一个域名下,不同的接口,可以配置不同的host
{
url: 'https://google.com/api/user',
target: '127.0.0.1',
}
{
url: 'https://google.com/api/login',
target: '192.168.0.1',
}
请求 http 状态码502
{
url: 'https://google.com/user',
target: 502,
}
2s 后返回
{
url: 'https://google.com/user',
delay: 2000, // 2000ms
}
{
url: 'https://google.com',
proxy: 'http://127.0.0.1:1080',
}
{
url: 'http://m.v.qq.com/tvp',
debug: true,
}
{
// 快速修改JSON数据
url: '/api/json',
target: function draft(data) {
data.error = 1001;
}
}
/**
json format
{
"error": 0,
"msg": "ok",
"data": {
"list": []
}
}
*/
FAQs
The npm package bproxy receives a total of 43 weekly downloads. As such, bproxy popularity was classified as not popular.
We found that bproxy demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.