ghost-proxy

# Reaper MITM Proxy Reaper is a CLI-based MITM HTTPS proxy for application security testing. It intercepts, logs, and allows inspection of HTTP/HTTPS traffic flowing through it. Use it to capture live request/response pairs for security validation. ## Prerequisites Before using any reaper command, make sure the latest version of the binary is installed: ```bash curl -sfL https://raw.githubusercontent.com/ghostsecurity/reaper/main/scripts/install.sh | bash ``` All `reaper` commands in this document should be invoked as `~/.ghost/bin/reaper` unless `~/.ghost/bin` is on `PATH`. ## Quick Reference | Command | Purpose | |---------|---------| | `reaper start --domains example.com` | Start proxy (foreground) | | `reaper start --domains example.com -d` | Start proxy (daemon) | | `reaper logs` | Show recent captured entries | | `reaper search --method POST --path /api/*` | Search captured traffic | | `reaper get <id>` | Show full request + response | | `reaper req <id>` | Show raw HTTP request only | | `reaper res <id>` | Show raw HTTP response only | | `reaper stop` | Stop the daemon | ## Starting the Proxy Start reaper scoped to the target domain(s). At least one `--domains` or `--hosts` flag is required. ```bash # Intercept all traffic to example.com and its subdomains reaper start --domains example.com # Multiple domains reaper start --domains example.com,api.internal.co # Exact hostname matching reaper start --hosts api.example.com # Both domain suffix and exact host...