#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
matank001/moxyMoxy is an open-source DAST tool designed for modern web application security testing. It provides an easy-to-use interface with agentic capabilities…
adityatelange/frida-uiInteract with Frida devices, processes, and scripts directly from your browser.
dereeqw/web-mitm-labWeb traffic interception simulation tool for cybersecurity research and defensive learning in isolated lab environments.
jp/hermes-proxyHermes Proxy - HTTP Traffic Analyzer
0xbartita/cookie-swapperBurp Suite extension that auto-replaces cookies and headers in requests using configurable rules. Eliminates manual copy-pasting of session tokens…
asaotomo/hx0-hawkeye一个轻量级浏览器抓包与安全分析扩展，在浏览器侧边栏中即可完成抓包、拦截、修改、重放、规则检测与AI辅助分析的完整工作流。（A lightweight browser extension for traffic capture and security analysis, enabling…
shadowy-pycoder/go-http-proxy-to-socksCLI MITM proxy that converts SOCKS4/SOCKS5 into HTTP/HTTPS/HTTP2/HTTP3 proxy with transparent TCP/UDP redirection, ARP/NDP/DNS spoofing, traffic…
squid-cache/squidSquid Web Proxy Cache - Source Code
whispergate/infraguardInfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
benrich127n/react2shell_analyzera dart package to analyze CVE-2025-55182 react2shell
syss-research/wcfproxyA proxy for net.tcp-based WCF traffic.
infisical/agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
4ier/neoTurn any web app into an API. Chrome extension captures browser traffic, auto-generates schemas, lets AI replay APIs directly. No official API needed.
vichhka-git/universal-flutter-ssl-pinningAutomated SSL pinning bypass for any Flutter & Shorebird version — PyGhidra static analysis auto-discovers BoringSSL and generates ready-to-run Frida…
go-appsec/toolboxCollaborative application security testing between humans and agents via CLI and MCP
proxymanapp/atlantis-androidCapture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging.
sia-iotechnology/kittysploit-frameworkPython Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....
praetorian-inc/titusHigh-performance secrets scanner. CLI, Go library, Burp Suite extension, and Chrome extension. 487 detection rules with live credential validation.
