#1Tools for intercepting, analyzing, and modifying web traffic for security testing.
Kitploit recommended
mthbernardes/houseproxyProtect your parents from phishing
synacktiv/ipspinnerIPSpinner works as a local proxy that redirects requests through external services.
shadowy-pycoder/go-http-proxy-to-socksCLI MITM proxy that converts SOCKS4/SOCKS5 into HTTP/HTTPS/HTTP2/HTTP3 proxy with transparent TCP/UDP redirection, ARP/NDP/DNS spoofing, traffic…
joanbono/gurpBurp Commander written in Go
johndoe31415/ratchedRatched is a transparent Man-in-the-Middle TLS proxy intended for penetration testing
ytkoka/impersonate-proxyA local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML…
ipopov/starttls-mitmA starttls-capable transparent man-in-the-middle proxy
synlace/ferretThe collaborative web app pentest suite
nccgroup/extractorExtension adds a new tab in Burp Suite called Extractor
jas502n/burpsuite-pluginPlugin For BurpSuite (Pentester)
mirfansulaiman/customheaderThis Burp Suite extension allows you to customize header with put a new header into HTTP REQUEST BurpSuite (Scanner, Intruder, Repeater, Proxy…
hackvertor/shadow-repeaterBurp Suite Repeater extension that automatically mutates payloads and analyzes responses to uncover path traversal, SQL injection, XSS, and other web…
icecubesandwich/caddysmithGenerate Caddy redirector configs from Cobalt Strike or Sliver C2 profiles.
bishopfox/ca-cloneScripts to clone CA certificates for use in HTTPS client attacks.
mike01/pypacker:package: The fastest and simplest packet manipulation lib for Python
nccgroup/wcfdser-ngngA Burp Extender plugin, that will make binary soap objects readable and modifiable.
metrodango/pip3lineSwiss Army knife for raw bytes manipulation & interception
mrschyte/socksmonMonitor arbitrary TCP traffic using your HTTP interception proxy of choice
