Overview

fluxzy is a versatile HTTP intermediate and Man-In-The-Middle proxy for recording, analyzing, debugging, and altering HTTP/1.1, H2, WebSocket traffic over plain or secure channels.

fluxzy was build to produce precise performance indicators for various observability scenarios. To this end, and unlike most MITM tool, fluxzy provides full request/response streaming in every stage of the HTTP exchange including built-in active alteration actions.

You can use it as:

  • A desktop application, named Fluxzy Desktop available on Windows, macOS and linux.
  • A command line tool, named Fluxzy CLI (command fluxzy), for starting a new capture session, managing certificates, reading a fluxzy archive and directory and exporting fluxzy outputs to other formats.
  • .NET package named Fluxzy.Core available on nuget.org. You can find this project on Github.

Download & Install

Visit the download page page to get the latest stable for your platform.

Features

Core Features

Find below a non-exhaustive list of Fluxzy capabilities and features shared across all Fluxzy products:

Feature Desktop CLI Core Comment
Supports HTTP/1.1, HTTP/2, and Web Sockets
Inspects traffic in clear
Deflects OS traffic to Fluxzy
Act as system proxy
Automatic ROOT CA installation
Use a custom root certificate
Save and load captured HTTP exchanges
Save and load filters and actions
Replay captured HTTP exchanges
Run and hook browsers and terminals
Breakpoints
Live edit
Halt ongoing exchanges and edit requests and responses on the fly
Export and import HAR files
Export and import SAZ files (experimental)
Export exchange to cURL command for Bash and cmd
Codeless traffic alteration
Dual SSL engine
Choice between the OS default engine (SChannel for Windows, OpenSSL for Linux)
Capture raw network packets Needs elevation
Capture NSS Key logs with raw network packets Available when using Bouncy castle engine
Store NSS Keys with SSLKEYLOGFILE format Available when using Bouncy castle engine
Custom filter builder, including multiple filter combinations
Metadata support: comments and tags
Precise traffic measurements including transport-level timings
Multipart data viewer: retrieve an upload file in the exchange

Traffic Processing Features

Traffic Processing features are handled by filters and action directives.

You can use the search engine built on this page to list all available filters and actions on the latest stable version.

  • Add, remove, modify request and response headers
  • Change request method, path
  • Alter request and response body
  • Mock request body (file, immediate text, ..)
  • Mock response body (file, immediate text, ..)
  • Forward requests
  • Search in every part of request
  • Spoof DNS
  • Add client certificate (mutual TLS)
  • Force HTTP version
  • Force SSL/TLS version
  • Simulate failures
  • Extract variables from exchanges and reuse them
  • Write to stdout and to file on the fly