#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
secforce/tunnaTunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled…
metrodango/pip3lineSwiss Army knife for raw bytes manipulation & interception
sensepost/malletMallet is an intercepting proxy for arbitrary protocols
joanbono/gurpBurp Commander written in Go
ebryx/aes-killerBurp Plugin to decrypt AES encrypted traffic on the fly
d0ge/sign-saboteurSignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
secdev/scapyPython-based interactive packet manipulation library for forging, decoding, sending, capturing, and analyzing network packets across a wide range of…
rhinosecuritylabs/iprotate_burp_extensionExtension for Burp Suite which uses AWS API Gateway to rotate your IP on every request.
justmao945/malloryHTTP/HTTPS proxy over SSH
icecubesandwich/caddysmithGenerate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.
p3n73st3r/ghaziGhazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab Will Replace…
artssec/burp-exporterExporter is a Burp Suite extension to copy a request to a file or the clipboard as multiple programming languages functions.
sshuttle/sshuttleTransparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS…
hahwul/webhackersweapons⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting
zaproxy/zap-hudThe ZAP Heads Up Display (HUD)
yeswehack/pwnfoxFirefox/Burp extension for security audits with single-click proxy, container profiles, postMessage logging, JS injection toolbox, and security…
ethicalhackingplayground/erebusErebus is a fast tool for parameter-based vulnerability scanning using a Yaml based template engine like nuclei.
