#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
tanprathan/mobileapp-pentest-cheatsheetThe Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…
asciimoo/wuzzInteractive cli tool for HTTP inspection
interceptsuite/proxybridgeProxifier Alternative to redirect any Windows/MacOS/Linux TCP and UDP traffic to HTTP/Socks5 proxy
everywall/ladderSelfhosted alternative to 12ft.io. and 1ft.io. Proxy to remove CORS headers and modify HTML
ultrafunkamsterdam/nodriverSuccessor of Undetected-Chromedriver. Providing a blazing fast framework for web automation, webscraping, bots and any other creative ideas which are…
masterking32/masterhttprelayvpnDomain-fronted HTTP/SOCKS5 proxy tunneling traffic through Google Apps Script with MITM TLS interception, HTTP/1-2 multiplexing, and DPI evasion.
squid-cache/squidSquid Web Proxy Cache - Source Code
ignitetechnologies/burpsuite-for-pentesterThis cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 solely and…
venomous/cloudscraperA Python module to bypass Cloudflare's anti-bot page.
bugcrowd/huntFlags parameters commonly associated with injection, SSRF, path traversal, IDOR, and SSTI, via passive Burp/ZAP scanning; also organizes manual…
spectolabs/hoverflyLightweight service virtualization/ API simulation / API mocking tool for developers and testers
httptoolkit/frida-interception-and-unpinningFrida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic
denuitt1/mhr-cfwA Domain-Fronting Relay that routes traffic though GAS (Google Apps Script) and forwards it to Cloudflare Workers. Designed to bypass DPI.
httptoolkit/httptoolkitHTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac :tada: Open an issue here…
abhinavsingh/proxy.py💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪…
kevwan/tproxyA cli tool to proxy and analyze TCP connections.
nabla-c0d3/ssl-kill-switch2Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.
