#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
spectolabs/hoverflyLightweight service virtualization/ API simulation / API mocking tool for developers and testers
masterking32/masterhttprelayvpnDomain-fronted HTTP/SOCKS5 proxy tunneling traffic through Google Apps Script with MITM TLS interception, HTTP/1-2 multiplexing, and DPI evasion.
dstotijn/hettyAn HTTP toolkit for security research.
wkeeling/selenium-wireExtends Selenium's Python bindings to give you the ability to inspect requests made by the browser.
google/martianMartian is a library for building custom HTTP/S proxies
vmware-archive/burp-rest-apiREST/JSON API to the Burp Suite security tool.
mvrozanti/rat-via-telegramWindows Remote Administration Tool via Telegram
fruh/extendedmacroExtendedMacro - BurpSuite plugin providing extended macro functionality
mgeeky/redwardenCobalt Strike C2 Reverse proxy that fends off Blue Teams, AVs, EDRs, scanners through packet inspection and malleable profile correlation
conviso-archives/firefox_tunnelBrowser-based C2 tunnel that exfiltrates payloads through Firefox's cookie.sqlite and auto-submitting HTML/JS, enabling stealthy firewall bypass for…
1ultimat3/badintentIntercept, modify, repeat and attack Android's Binder transactions using Burp Suite
h2non/toxyHackable HTTP proxy for resiliency testing and simulated network conditions
xdavidhu/langhost👻 A LAN dropbox chatbot controllable via Telegram
spiderlabs/responderResponder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2,…
evilsocket/bettercapDEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap
p0cl4bs/wifi-pumpkin-deprecatedDEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3
