
Hermes-Proxy
Hermes Proxy - HTTP Traffic Analyzer

Hermes Proxy - HTTP Traffic Analyzer

Collaborative application security testing between humans and agents via CLI and MCP

Evidence-oriented DAST scanner in Go that crawls web apps and APIs, then runs adaptive SQLi, XSS, RCE, SSRF, and auth checks with replayable proof.

Wireshark for MCP. A transparent proxy between your AI client and MCP server. Watch every call live in your terminal, fail CI on what it finds,…

⚡️ Multiple target ZAP Scanning

Unified security scanner for MCP servers with config, pentest, and repo-scan modes. Generates SARIF reports for CI/CD integration, detects secrets,…

Full-stack platform for authorized web application security scanning with a detector-based engine, async Celery workers, and a React dashboard for…

The AI toolkit for building reliable browser automations

Find the vulnerability your tests were never written to catch. A ReGrade demo modeling CVE-2023-5968: catch a password-hash leak by comparing an app…

An API hooking framework for intercepting and monitoring Windows applications

Automated testing suite with live traffic record and replay

A Burp Suite extension that brings full DOM rendering capabilities directly into Burp, enabling effective security testing of modern JavaScript-heavy…

MAPS cloud scanner and response parser for Microsoft Defender research.

Automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full …

Martian is a library for building custom HTTP/S proxies

PyJFuzz - Python JSON Fuzzer

BurpSuite Standard/Private Collaborator Library

WEB SERVICE SECURITY ASSESSMENT TOOL