#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
4ier/neoTurn any web app into an API. Chrome extension captures browser traffic, auto-generates schemas, lets AI replay APIs directly. No official API needed.
kerlenton/mcpsnoopWireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.
syhunt/sandcatAn open-source, pentest and developer-oriented web browser, using the power of Lua
sauravrao637/oproxyOpen-source MITM proxy to intercept, inspect, and mock network traffic.
asciimoo/mortyPrivacy aware web content sanitizer proxy as a service
nccgroup/binproxyBinProxy is a proxy for arbitrary TCP connections. You can define custom message formats using the BinData gem.
wofeiwo/webcgi-exploitsMulti-language web CGI interfaces exploits.
nccgroup/autochromeThis tool downloads, installs, and configures a shiny new copy of Chromium.
cyberark/mitm_interceptA little bit less hackish way to intercept and modify non-HTTP protocols through Burp & others.
justmao945/malloryHTTP/HTTPS proxy over SSH
whispergate/infraguardInfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution
codextf2/burp2malleableQuick python utility I wrote to turn HTTP requests from burp suite into Cobalt Strike Malleable C2 profiles
nccgroup/wssipApplication for capturing, modifying and sending custom WebSocket data from client to server and vice versa.
nccgroup/solitudeSolitude is a privacy analysis tool that enables anyone to conduct their own privacy investigations. Whether a curious novice or a more advanced…
sensepost/malletMallet is an intercepting proxy for arbitrary protocols
xorrior/ravenCobaltStrike External C2 for Websockets
lyehe/porterminalQuick n' dirty web/mcp terminal tunneling your phone & pc
proxymanapp/atlantis-androidCapture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging.
