#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
nyamisty/ssl-kill-switch3Next Generation SSLKillSwitch with much more support!
tanprathan/mobileapp-pentest-cheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…
qustavo/httplabInteractive web server for inspecting HTTP requests and forging responses, with a terminal UI for real-time debugging and API testing.
p0cl4bs/wifipumpkin3Powerful framework for rogue access point attack.
wkeeling/selenium-wireExtends Selenium's Python bindings to give you the ability to inspect requests made by the browser.
syhunt/sandcatAn open-source, pentest and developer-oriented web browser, using the power of Lua
justmao945/malloryHTTP/HTTPS proxy over SSH
zaproxy/zap-api-rustRust client library for the OWASP ZAP API, enabling programmatic access to web application security scanning, vulnerability detection, and proxy…
nabla-c0d3/ssl-kill-switch2Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
metrodango/pip3lineSwiss Army knife for raw bytes manipulation & interception
codextf2/burp2malleableQuick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
xnl-h4ck3r/auto-repeaterAutomated HTTP Request Repeating With Burp Suite
mirfansulaiman/customheaderThis Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, Proxy…
barre/privaxyPrivaxy is the next generation tracker and advertisement blocker. It blocks ads and trackers by MITMing HTTP(s) traffic. Also check out my new…
threatexpress/cs2modrewriteConvert Cobalt Strike profiles to modrewrite scripts
nccgroup/burpimportsitemapImport To Sitemap is a Burp Suite Extension to import wstalker CSV file or ZAP export file into Burp Sitemap
nccgroup/jwt-reauthCaches JWT authentication tokens from an auth URL and attaches them as headers to in-scope requests in Burp Suite for automated session handling.
keith-amateur/cve-2022-1040Save the trouble to open the burpsuite...
