

INTACEPT MACOS UPDATE
Run following command to update rules and enable pfctl sudo pfctl -f pf. They will NOT redirect traffic coming from the box running pf itself. Rdr rules in pf.conf above apply only to inbound traffic. Assuming your Network Interface is en0 add the following config to a file called pf.conf rdr on en0 inet proto tcp to any port -> 127.0.0.1 port 8080 Update the pfctl configuration to redirect the traffic on ports 80 and 443 to the mitmproxy instance running on port 8080. Just complete the following steps to enable it : Once we have the mitmproxy certificate installed on the device. Add the IP address of the host as the proxy. Now update the Wi-Fi settings -> Select Network -> Advanced Settings -> Proxy configuration. You will be able to see the interactive console. Start the proxy in basic mode by running mitmproxy -host MITMProxy supports both HTTPS and HTTP, by installing its custom certificates on the client devices. This means mitmproxy does not support transparent mode for earlier versions of OSX. On OSX it is integrated in versions since OSX Lion. Mitmproxy uses pf packet filter to implement transparent mode. I have MITMProxy installed using Brew, pre-built binaries can also be downloaded from their releases page.

INTACEPT MACOS ANDROID
I have a Mac running MacOS HighSierra and a Android test device connected to the same Wi-Fi network. We were looking to setup a Transparent proxy as we had control over the devices connected to the Network, so setting up the certificates on them would not be an issue. The are explained in detail here Operation modes. It provides various modes of proxying like : But Charles does something behind the scenes that I can't seem to get Burp to do.After evaluating other tools, we thought we’d a spike on MITMProxy, a man-in-the-middle proxy for both HTTP and HTTPS with an interactive console interface.

Also Charles Proxy on my macOS does in fact intercept ALL app traffic, so I know it's possible. However, I don't have to do any of this (add any items to hosts file or set up other listeners other than 8080) on Windows. In the last case directly above, Burp won't let me "enable" the listeners on 80 and 443.
INTACEPT MACOS HOW TO
Instead, I get dozens of results talking about how to proxy iOS or Android apps. If I do a web search for proxying macOS apps using Burp Suite, I don't get any useful info.
