
mitmproxy
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

A Burp Suite extension that exposes the full Montoya API as a local REST API, with Swagger UI

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

AI-driven penetration testing agent that connects to a Kali box, autonomously runs security tools, analyzes results, and iterates through…

Android Full-Stack Device Control Platform: WebRTC/H.264 remote desktop, UI/OCR/image-matching automation, one-click MITM, built-in Frida,…

Root an Android Studio emulator by patching its ramdisk with Magisk — in pure Go.

Frida toolkit that bypasses SSL/TLS certificate pinning on Android apps, hooking Java TrustManager, OkHttp, Conscrypt, and native OpenSSL/BoringSSL…

Blackbox tool to disable SSL certificate validation - including certificate pinning - within iOS and macOS applications.

A fast, keyboard-driven HTTP intercepting proxy and pentesting toolkit for the terminal built for humans and AI agents alike.

Persists BurpSuite proxy history, Repeater requests, and Intruder payloads across sessions; exports and imports .log files for web pentesting context.

a fully autonomous AI agent for reverse engineering

Android proxy app that circumvents Deep Packet Inspection censorship by fragmenting TLS ClientHello packets and rewriting the TLS version to restore…

This repository provides penetration testers and red teams with an extensive collection of dynamic phishing templates designed specifically for use…

A Swiss Army knife for offensive security.

An open, local-first security testing platform for pentesters, AI agents, CI/CD pipelines, and teams.

Tunna is a set of tools which will wrap and tunnel any TCP communication over HTTP. It can be used to bypass network restrictions in fully firewalled…

The new bridge between Burp Suite and Frida!

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic