[ILUG] non-transparent proxy server

[PhilipQuinlan]

Hi all,

I'm trying to reproduce a security flaw whereby a client claims that a 
non transparent proxy server can be used, rewriting request and response 
data, to hijack HTTP-sessions.

I belive them, but I have to reproduce this and unfortunately don't know 
of a nice configureable proxy server suited to the task.

Suitable suggestions please.

Thanks, Philip