kernel browser + mitmproxy

prompt.md

install mitmproxy locally and run mitmdump on 127.0.0.1:8080, expose it with a raw TCP tunnel using ssh -p 443 -T -R0:127.0.0.1:8080 tcp@free.pinggy.io (avoid Cloudflare quick tunnels because they reject proxy CONNECT; use ngrok TCP only if Pinggy fails), verify HTTPS proxying with curl and mitmproxy’s generated CA at ~/.mitmproxy/mitmproxy-ca-cert.pem, then create a Kernel custom HTTP proxy using the Pinggy hostname/port and pass that CA via --ca-bundle; run Kernel’s proxy health check, create a browser with --proxy-id, navigate to several HTTPS sites and send one identifiable POST with a custom header and JSON body, then inspect mitmproxy’s logs/HAR to confirm the decrypted URL, headers, body, HTTP version, and response status; report results and clean up the browser, Kernel proxy, tunnel, and mitmproxy process.