Tools

argos83/ritm

Ruby In The Middle (HTTP/HTTPS interception proxy)

ipopov/starttls-mitm

A starttls-capable transparent man-in-the-middle proxy

jbsouthe/http-breakout-proxy

HTTP Proxy Analysis for reverse engineering protocol communication

nccgroup/readable-thrift

Human-friendly Thrift encoder/decoder

singe/burp_global_match_replace

Match & Replace rules for Portswigger's Burp that operate globally across all utilities.

infobyte/faraday_burp

Burp Extension for collaboration in Faraday

benrich127n/react2shell_analyzer

a dart package to analyze CVE-2025-55182 react2shell

mindpatch/zaphoster

Fix host header error in zaproxy

wkeeling/selenium-wire

Extends Selenium's Python bindings to give you the ability to inspect requests made by the browser.

evilsocket/bettercap

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

p0cl4bs/wifi-pumpkin-deprecated

DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3

xdavidhu/langhost

👻 A LAN dropbox chatbot controllable via Telegram

two06/linkedintel

LinkedIn recon the easy way

dstotijn/hetty

An HTTP toolkit for security research.

tanprathan/mobileapp-pentest-cheatsheet

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

hahwul/webhackersweapons

⚔️ Web Hacker's Weapons / A collection of cool tools used by Web hackers. Happy hacking , Happy bug-hunting

kdzwinel/betwixt

:zap: Web Debugging Proxy based on Chrome DevTools Network panel.

httptoolkit/frida-interception-and-unpinning

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic