Agent skill · security · aradotso
mitm-domainfronting
mitm-domainfronting — an agent skill for coding agents.
Why this skill is useful
Provides specific configuration steps and scripts for setting up a MITM proxy with domain fronting that are not commonly found in public documentation.
What it needs
Requires v2rayn, v2rayng, xray-core installed locally. About 5k tokens when loaded. Last updated 2026-07-09. 70 stars on the source repository.
What this skill does
Browser (HTTPS) → [MITM: fake cert intercepts, decrypts] → [Domain Fronting: re-encrypts with fronted SNI] → Google Servers bat @echo off REM certificate-generator.bat REM Place this in v2rayN-windows-64\bin and run it there openssl req -x509 -newkey rsa:4096 -keyout mycert.key -out mycert.crt -sha256 -days 3650 -nodes -subj "/C=US/ST=State/L=City/O=Org/CN=localhost" echo Done! mycert.crt and mycert.key created. pause Settings → Privacy and security → Security → Manage certificates → Manage imported certificates from Windows → Trusted Root Certification Authorities → Import → Select mycert.crt → Place all certificates in the following store → Select "Trusted Root Certification Authorities" Settings → Security and privacy → More security settings → Install from device storage → CA Certificate → Install anyway → Select mycert.crt Settings → Security and privacy → More security settings → View security certificates → User firefox → Settings → About Firefox → Tap logo 5 times → Settings → Secret Settings → Toggle "Use third party CA certificates" json { "log": { "loglevel": "warning" }, "inbounds": [ { "tag": "http-in", "port": 10809, "protocol": "http", "settings": { "allowTransparent": true }, "sniffing": { "enabled": true, "destOverride": ["http", "tls"] } } ], "outbounds": [ { "tag": "mitm-out", "protocol": "freedom", "settings": {} } ], "policy": { "levels": { "0": { "handshakeMitm": true } } }, "mitm": { "enabled": true, "listenPort": 10810, "certFile": "mycert.crt", "keyFile": "mycert.key", "domainFronting": { "enabled": true, "frontDomain": "www.googleapis.com", "targetDomain": "www.google.com" } } } bash Place mycert.crt, mycert.key, and MITM-DomainFronting.json in the same directory as xray binary Download xray wget https://github.com/XTLS/Xray-core/releases/latest/download/Xray-linux-64.zip unzip Xray-linux-64.zip -d xray-bin cd xray-bin Copy your cert files here cp /path/to/mycert.crt . cp /path/to/mycert.key . cp /path/to/MITM-DomainFronting.json . …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/mitm-domainfronting