#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
kerlenton/mcpsnoopWireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.
ge0rg3/requests-ip-rotatorA Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
yaklang/yakitAll-in-one penetration testing platform with MITM proxy, web fuzzer, reverse connection handler, and plugin system for automated security testing and…
zaproxy/zaproxyOpen-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…
projectdiscovery/httpxFast, multi-probe HTTP toolkit for reconnaissance and information gathering. Probes TLS, CSP, headers, tech stack, and CDN. Supports matchers,…
irsdl/burpsuitejsbeautifierBurp Suite JS Beautifier
argos83/ritmRuby In The Middle (HTTP/HTTPS interception proxy)
nccgroup/binproxyBinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.
asciimoo/mortyPrivacy aware web content sanitizer proxy as a service
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
asciimoo/wuzzInteractive cli tool for HTTP inspection
nccgroup/wssipApplication for capturing, modifying and sending custom WebSocket data from client to server and vice versa.
mrschyte/socksmonMonitor arbitrary TCP traffic using your HTTP interception proxy of choice
syhunt/sandcatAn open-source, pentest and developer-oriented web browser, using the power of Lua
mthbernardes/houseproxyProtect your parents from phishing
johndoe31415/ratchedRatched is a transparent Man-in-the-Middle TLS proxy intended for penetration testing
malfunkt/hyperfoxHTTP/HTTPS MITM proxy and recorder.
infobyte/evilgradeEvilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.
