Nightcrawler-mitm

Latest version: v0.3.0

Safety actively analyzes 722491 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

0.3.0

0.2.0

Added

- Packaged the project using `pyproject.toml` for installation via `pip` and
distribution on PyPI (as `nightcrawler`).
- Introduced a console script entry point: the `nightcrawler` command now wraps
`mitmdump` and loads the addon automatically.
- Added a **mandatory** command-line option `--nc-scope` to define the target
domain(s) for scanning and crawling (comma-separated).
- Implemented `--version` handling for the `nightcrawler` command to display the
package's own version alongside mitmproxy's version.
- Added basic addon lifecycle management using `running` and `done` hooks
(starting workers, closing shared HTTP client).
- Included basic `try...except` blocks in worker loops to improve resilience
against unexpected errors.

Changed

- **Major Refactor:** Restructured the single-script addon into multiple Python
modules (`addon.py`, `config.py`, `utils.py`, `passive_scanner.py`,
`crawler.py`, `sqli_scanner.py`, `xss_scanner.py`, `runner.py`) within a
`nightcrawler` package directory for better organization and maintainability.
- Internal imports updated to use absolute package paths (e.g.,
`from nightcrawler.utils import ...`).

Removed

- Removed the hardcoded `TARGET_SCOPE_DOMAINS` constant from `config.py`; scope
must now be provided via `--nc-scope`.

0.1.0

Added

- Initial version based on concept discussions.
- Core functionality as a `mitmproxy` addon script.
- Acts as an HTTP/HTTPS proxy.
- Basic passive scanning infrastructure (header/cookie checks - conceptual).
- Background crawling functionality (link discovery via `BeautifulSoup`, queuing
via `asyncio.Queue`, basic `_crawl_worker`).
- Background active scanning worker (`_scan_worker`).
- Basic Reflected XSS scanning (`scan_xss_basic` checking immediate response).
- Basic SQLi scanning (`scan_sqli_basic` checking for errors/time delays).
- Concurrency limiting for background tasks using `asyncio.Semaphore`.
- Basic debug logging implemented using `ctx.log`.
- Support for `mitmproxy` options like `--ssl-insecure` passed through via the
runner.

[Unreleased]:
https://github.com/thesp0nge/nightcrawler-mitm/compare/v0.3.0...HEAD

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.