#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
simplerhacking/evilginx3-phishletsThis repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use…
diegovargasj/cve-2025-32407Proof-of-concept exploit for CVE-2025-32407: TLS certificate validation bypass in Samsung Internet for Galaxy Watch, enabling Man-in-the-Middle…
caido-community/burp2caidoA tool to migrate Burpsuite HTTP history to Caido
xepor/xeporFlask-like routing framework for mitmproxy to intercept, modify, and spoof HTTP requests/responses. Enables rapid development of MITM scripts for…
abhinavsingh/proxy.py💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪…
synacktiv/ipspinnerIPSpinner works as a local proxy that redirects requests through external services.
nccgroup/blackboxprotobufBlackbox Protobuf is a set of tools for working with encoded Protocol Buffers (protobuf) without the matching protobuf definition.
infobyte/faraday_burpBurp Extension for collaboration in Faraday
google/martianMartian is a library for building custom HTTP/S proxies
d0ge/sign-saboteurSignSaboteur is a Burp Suite extension for editing, signing, verifying various signed web tokens
muraenateam/muraenaAutomates phishing and post-phishing activities with an almost-transparent reverse proxy that dynamically mirrors target web apps and interacts with…
t3l3machus/pentest-pivotingA compact guide to network pivoting for penetration testings / CTF challenges.
sensepost/malletMallet is an intercepting proxy for arbitrary protocols
nccgroup/berserkoBurp Suite extension to perform Kerberos authentication
xiaolichan/redcaddyC2 redirector base on caddy
mr-pmillz/gofireproxFireProx written in Go
stolenusername/cowitnessCoWitness is a powerful web application testing tool that enhances the accuracy and efficiency of your testing efforts. It allows you to mimic an…
qustavo/httplabInteractive web server for inspecting HTTP requests and forging responses, with a terminal UI for real-time debugging and API testing.
