#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
infisical/agent-vaultA HTTP credential proxy and vault for AI agents like Claude Code, OpenClaw, Hermes, custom agents + harnesses, and more.
infobyte/evilgradeEvilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.
caido/caidoLightweight web proxy for intercepting, inspecting, and modifying HTTP traffic to audit web applications during penetration testing and bug bounty…
kdzwinel/betwixt:zap: Web Debugging Proxy based on Chrome DevTools Network panel.
projectdiscovery/proxifyA versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.
secforce/tunnaTunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled…
p0cl4bs/wifipumpkin3Powerful framework for rogue access point attack.
qustavo/httplabInteractive web server for inspecting HTTP requests and forging responses, with a terminal UI for real-time debugging and API testing.
ge0rg3/requests-ip-rotatorA Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.
federicodotta/bridaThe new bridge between Burp Suite and Frida!
matrixleons/evilwafevilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
barre/privaxyPrivaxy is the next generation tracker and advertisement blocker. It blocks ads and trackers by MITMing HTTP(s) traffic. Also check out my new…
denoland/clawpatrolWire-level proxy firewall for AI agents that intercepts and gates SQL, Kubernetes, and HTTP traffic using HCL rules, with per-process tunnel…
synacktiv/hoplaHopLa Burp Suite Extender plugin - Brings AI capabilities, autocompletion support, and a set of useful payloads to Burp Suite
repplus/rep-chromerep+ — Burp-style HTTP Repeater for Chrome DevTools with built‑in AI to explain requests and suggest attacks
mandatoryprogrammer/thermopticA next-generation HTTP stealth proxy which perfectly cloaks requests as the Chrome browser across all layers of the stack.
malfunkt/hyperfoxHTTP/HTTPS MITM proxy and recorder.
nccgroup/autorepeaterAutomated HTTP Request Repeating With Burp Suite
