#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
sia-iotechnology/kittysploit-frameworkPython Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....
forefy/reburpA Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI
ultrafunkamsterdam/nodriverSuccessor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…
go-appsec/toolboxCollaborative application security testing between humans and agents via CLI and MCP
threatexpert/goncNetcat with automated NAT traversal, secure P2P, and advanced features for shell access, file transfer, and network proxying.
pennacle-security/summitOpen-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.
germondai/trawlSelf-hosted scraping engine — bypasses any JS challenge & captcha: Cloudflare, Turnstile, reCAPTCHA, hCaptcha, GeeTest. FlareSolverr & Byparr…
kulikov0/whitelist-bypassTunneling data over webrtc to bypass censorship
interceptsuite/interceptsuiteMITM proxy for TCP/TLS/DTLS/UDP traffic, with STARTTLS, IoT, Thick Client and more.
vmoranv/jshookmcpA search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.
spectolabs/hoverflyLightweight service virtualization/ API simulation / API mocking tool for developers and testers
matrixleons/evilwafevilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
bettercap/bettercapThe Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
squid-cache/squidSquid Web Proxy Cache - Source Code
interceptsuite/proxybridgeForce Proxy to any Windows/MacOS/Linux Application TCP and UDP traffic
whispergate/infraguardInfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
mitmproxy/mitmproxy_rsRust components for traffic interception and redirection, enabling WireGuard device proxying and local app redirection across macOS, Windows, and…
portswigger/bambdasBambdas collection for Burp Suite Professional and Community.
