#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
icecubesandwich/caddysmithGenerate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.
mufeedvh/log4jailA firewall reverse proxy for preventing Log4J (Log4Shell aka CVE-2021-44228) attacks.
infobyte/faraday_burpBurp Extension for collaboration in Faraday
nccgroup/http-mcp-bridgeHTTP proxy bridge for security testing of remote MCP servers, allowing standard HTTP tools to send JSON-RPC messages and manage sessions.
modzero/burp-responseclustererBurp plugin that clusters responses to show an overview of received responses
mr-pmillz/gofireproxFireProx written in Go
hoodoer/colonelclusteredA Java Burp Plugin that performs text clustering on responses to identify outliers/groups based on the actual content of the server responses, say…
zaproxy/zap-api-rustRust client library for the OWASP ZAP API, enabling programmatic access to web application security scanning, vulnerability detection, and proxy…
welfordian/mitm-proxyGo-based MITM HTTP/HTTPS proxy with HTTP/2 and HTTP/1.1 interception, local CA/per-host cert generation, CONNECT/WebSocket tunneling, disk caching,…
ericmtzmtz/pwnproxyAn open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.
cappricio-securities/burpflowBurpFlow is one of the best Burp Suite automation tools for bug bounty hunters and penetration testers, widely used to load recon data via proxy and…
pentagridsec/pentagridresponseoverviewResponse Overview Extension for BurpSuite - Find exotic responses by grouping response bodies
pennacle-security/summitOpen-source web security testing platform: proxy, scanner and fuzzer in one CLI. By Pennacle Security.
sunghoojung/reverse-engineering-browserLocal-first macOS research browser built on a custom Brave build that captures network traffic, fingerprints, scripts, and runtime evidence for…
dongpohezui/cve-2021-33045Exploit for Dahua camera authentication bypass (CVE-2021-33045) using mitmproxy to intercept and modify login requests to /RPC2_Login.
vid4l-07/roxyTerminal-based HTTP intercepting proxy with TUI for capturing, inspecting, and modifying requests in real time, plus a Repeater for resending and…
qyvora/qyvora-toha3eeGo-based network exploitation and MITM framework for authorized penetration testing, network reconnaissance, traffic interception, wireless security…
splinters-io/blinderContent-blind reverse proxy for exposure-protected security scanning
