#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
rakib-nyc/nulloriginResearch-only AI watermark robustness toolkit: local reverse proxy strips C2PA/EXIF/XMP, Unicode, image/audio stego, OOXML/PDF metadata, and scans…
t3l3machus/pentest-pivotingA compact guide to network pivoting for penetration testings / CTF challenges.
codextf2/burp2malleableQuick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
kevwan/tproxyA cli tool to proxy and analyze TCP connections.
tanprathan/mobileapp-pentest-cheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…
static-flow/burpsuite-team-extensionThis Burpsuite plugin allows for multiple web app testers to share their proxy history with each other in real time. Requests that comes through your…
ignitetechnologies/burpsuite-for-pentesterThis cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…
nyamisty/ssl-kill-switch3Next Generation SSLKillSwitch with much more support!
xnl-h4ck3r/auto-repeaterAutomated HTTP Request Repeating With Burp Suite
d3mondev/burp-vps-proxyThis Burp Suite extension allows for the automatic creation and deletion of an upstream SOCKS5 proxy on popular cloud services.
mr-pmillz/gofireproxFireProx written in Go
xiaolichan/redcaddyC2 redirector base on caddy
bugcrowd/huntFlags parameters commonly associated with injection, SSRF, path traversal, IDOR, and SSTI, via passive Burp/ZAP scanning; also organizes manual…
irsdl/burpsuitesharpenerexThis extension enhances Burp Suite by adding several UI and functional features, making it more user-friendly.
caido-community/burp2caidoA tool to migrate Burpsuite HTTP history to Caido
two06/linkedintelLinkedIn recon the easy way
gabriel-sztejnworcel/pipe-interceptIntercept Windows Named Pipes communication using Burp or similar HTTP proxy tools
mandatoryprogrammer/thermopticA next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.
