#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
sia-iotechnology/kittysploit-frameworkPython Exploitation Framework, V8 Engine Debugger, Proxy interceptor, marketplace, post-exploitation, backdoor generator,....
ericmtzmtz/pwnproxyAn open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.
infisical/agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
spectolabs/hoverflyLightweight service virtualization/ API simulation / API mocking tool for developers and testers
vichhka-git/universal-flutter-ssl-pinningAutomated SSL pinning bypass for any Flutter & Shorebird version — PyGhidra static analysis auto-discovers BoringSSL and generates ready-to-run Frida…
squid-cache/squidSquid Web Proxy Cache - Source Code
jpillora/chiselFast TCP/UDP tunnel over HTTP with SSH encryption, supporting reverse port forwarding, SOCKS5 proxy, and client authentication for secure network…
firerpa/lamdaAndroid Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…
rofl0r/proxychains-ngproxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more…
davidcarliez/coverKeep private data, internal infrastructure and secrets out of cloud coding agents without breaking your workflow.
kerlenton/mcpsnoopWireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.
paradigmxyz/iron-proxyAn egress firewall for untrusted workloads.
bugcrowd/huntFlags parameters commonly associated with injection, SSRF, path traversal, IDOR, and SSTI, via passive Burp/ZAP scanning; also organizes manual…
mitmproxy/mitmproxyAn interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
shopify/toxiproxy:alarm_clock: :fire: A TCP proxy to simulate network and system conditions for chaos and resiliency testing
jp/hermes-proxyHermes Proxy - HTTP Traffic Analyzer
emo-crab/slingerAn HTTP client specifically developed for security researchers
whispergate/infraguardInfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
