SECURITY Signal 497
impersonate-proxy provides local MITM proxy for controlling TLS, HTTP/2, and header fingerprints
impersonate-proxy is a local MITM proxy that consolidates control over TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, User-Agent, and source IP headers into a single YAML configuration file.
WAF bot-detection systems increasingly classify traffic by fingerprinting clients across multiple protocol layers, and testing those systems requires controlling all those layers simultaneously. This tool consolidates TLS, HTTP/2, and header manipulation into one proxy rather than requiring separate tools for each layer.
Written by elseif from the cluster below · every claim links back to a sourceThe three things worth knowing
impersonate-proxy controls TLS fingerprints via uTLS presets or custom specs, HTTP/2 SETTINGS and pseudo-header order, and HTTP/1.1 header order and content from one YAML file.
A Chrome extension allows toggling the proxy and switching fingerprint profiles from the browser toolbar without restarting the proxy.
The proxy generates its own CA certificate for MITM termination and supports routing curl, browsers, or Playwright through it on macOS and Linux.
THE CLUSTER