#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
infobyte/faraday_addonA browser extension for faradaysec platform https://faradaysec.com
t0xodile-swig/http3-adapterBurp Suite extension that intercepts requests and sends them over HTTP/3, converting responses back for Burp, with support for kettled requests and…
alejandro-llanes/http_bridgeSOCKS5-to-HTTP proxy bridge that tunnels arbitrary TCP streams (SSH, SMTP, TLS) through standard HTTP requests, enabling network traffic obfuscation…
ejfkdev/avdrootRoot an Android Studio emulator by patching its ramdisk with Magisk — in pure Go.
0xmarik/aresiusNative HTTP/HTTPS interception proxy for penetration testers and bug bounty hunters with live request tampering, request replay, high-speed fuzzing,…
nccgroup/burpimportsitemapImport To Sitemap is a Burp Suite Extension to import wstalker CSV file or ZAP export file into Burp Sitemap
interceptsuite/interceptsuiteMITM proxy for TCP/TLS/DTLS/UDP traffic, with STARTTLS, IoT, Thick Client and more.
ajinabraham/oauth-request-crafterOAuth Request Crafter
kavryxdev-group/enterprise-abac-gatewayZero-trust reverse proxy and ABAC authorization gateway in Go with embedded OPA policy evaluation and distributed token revocation.
rakib-nyc/nulloriginResearch-only AI watermark robustness toolkit: local reverse proxy strips C2PA/EXIF/XMP, Unicode, image/audio stego, OOXML/PDF metadata, and scans…
yukibtc/redknifeA Swiss Army knife for offensive security.
larrypeseckis/burp-cc-bridgeREST API automation for Burp Suite Community Edition. Drop-in Java extension exposing send/repeat/history endpoints over a local HTTP API.
syss-research/wcfproxyA proxy for net.tcp-based WCF traffic.
0xbartita/cookie-swapperBurp Suite extension that auto-replaces cookies and headers in requests using configurable rules. Eliminates manual copy-pasting of session tokens…
confused-binary/waf-fuTerminal UI for browsing and replaying AWS WAF v2 logs from CloudWatch, S3, and the sampling API, with YAML filtering, auth detection, and…
hemp3l/cve-2017-6640-pocProof of concept for CVE-2017-6640 as burp extension
keith-amateur/cve-2022-1040Save the trouble to open the burpsuite...
nu11secur1ty/burpsuite-grand-master-toolsModular toolkit for pentesters that converts Burp Suite captured HTTP requests into browsable URLs and automates workflow actions with auditable…
