#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended

Empire HTTP(S) C2 redirector setup script

BinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.

Browser-based C2 tunnel that exfiltrates payloads through Firefox's cookie.sqlite and auto-submitting HTML/JS, enabling stealthy firewall bypass for…

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

Big Iron Recon & Pwnage

Protect your parents from phishing

A library for integrating communication channels with the Cobalt Strike External C2 server

Automated script for setting up CobaltStrike redirectors (nginx reverse proxy, letsencrypt)

Monitor arbitrary TCP traffic using your HTTP interception proxy of choice

Intercept, modify, repeat and attack Android's Binder transactions using Burp Suite

Burp Suite extension exploiting CVE-2014-9301 in Alfresco Referer Proxy for targeted web application penetration testing.

This project is now part of @mitmproxy.

OAuth Request Crafter

Burp Suite JS Beautifier

A starttls-capable transparent man-in-the-middle proxy

Transparent proxy that decrypts SSL traffic and prints out IRC messages.