Tools

zaproxy/zaproxy

Open-source web application security scanner for automated vulnerability detection, manual penetration testing, and API security testing with a…

spectolabs/hoverfly

Lightweight service virtualization/ API simulation / API mocking tool for developers and testers

infobyte/faraday_zap

Zap Extension for collaboration in Faraday

mitmproxy/mitmproxy

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

qustavo/httplab

Interactive web server for inspecting HTTP requests and forging responses, with a terminal UI for real-time debugging and API testing.

h2non/toxy

Hackable HTTP proxy for resiliency testing and simulated network conditions

mubeng/mubeng

An incredibly fast proxy checker & IP rotator with ease.

google/martian

Martian is a library for building custom HTTP/S proxies

nccgroup/autorepeater

Automated HTTP Request Repeating With Burp Suite

mrturvey/flareprox

Use Cloudflare to create HTTP pass-through proxies for unique IP rotation, similar to fireprox

ebryx/aes-killer

Burp Plugin to decrypt AES encrypted traffic on the fly

sauravrao637/oproxy

Open-source MITM proxy to intercept, inspect, and mock network traffic.

vmware-archive/burp-rest-api

REST/JSON API to the Burp Suite security tool.

kerlenton/mcpsnoop

Wireshark for MCP. A transparent proxy that shows every real tool call between your AI client and your MCP servers, live in your terminal.

jp/hermes-proxy

Hermes Proxy - HTTP Traffic Analyzer

jbsouthe/http-breakout-proxy

HTTP Proxy Analysis for reverse engineering protocol communication

joanbono/gurp

Burp Commander written in Go