mitmproxy (5G SBI)

Mobile (5G / NR)Ready to RunLocation: /usr/bin/mitmproxy

Command Line Execution

Run this command in the TelcoChisel terminal to launch or execute the tool:

mitmproxy (5G SBI) Command
mitmproxy --version

Detailed Technical Overview

mitmproxy is an interactive SSL/TLS-capable intercepting HTTP/2 proxy. In 5G Standalone (SA) architectures, core network functions (AMF, SMF, NRF, UDM, AUSF) communicate over the Service Based Architecture (SBA/SBI) using HTTP/2 REST APIs and JSON payloads. Pre-configured with 3GPP OpenAPI schemas and certificates, mitmproxy decrypts, inspects, and modifies 5G SBI control plane traffic in real time.

Configuration & Usage Guide

To initialize and configure mitmproxy (5G SBI) for telecom security audits, follow these steps:

  1. 1Launch mitmproxy on default port 8080: mitmproxy -p 8080
  2. 2Launch with web UI interface: mitmweb -p 8080 --web-port 8081
  3. 3Intercept 5G NRF registration requests: mitmproxy --view-filter '~u /nnrf-nfm/v1/nf-instances'

Troubleshooting & Security Audits

mitmproxy (5G SBI) Audit Warning
If 5G Core network functions reject the proxy with TLS alert 46 (unknown certificate), export mitmproxy's CA certificate (~/.mitmproxy/mitmproxy-ca-cert.pem) and add it to the system trust store (/usr/local/share/ca-certificates/).
5G SA CORE SANDBOX

Master mitmproxy (5G SBI) with Interactive Telecom Labs

Practice deploying mitmproxy (5G SBI) against live cellular networks, radio interfaces, and mobile cores in TelcoSec Academy's browser-accessible cloud sandboxes.

Interactive Cloud Labs No Hardware Required CTSP Certification
Launch Interactive Labapp.telcosec.net · Instant access

Frequently Asked Questions

How is mitmproxy used in 5G Core pentesting?

It intercepts HTTP/2 REST API communications between 5G network functions, allowing operators to tamper with subscriber profile updates, authentication tokens, and slice selection parameters.

Does mitmproxy support HTTP/2 multiplexing?

Yes, it fully supports HTTP/2 multiplexed streams, server push, and header compression (HPACK) standard in 3GPP Rel-15 through Rel-18.

Back to Tools Directory