Tools

httptoolkit/httptoolkit

HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac 🎉 Open an issue here to…

httptoolkit/frida-interception-and-unpinning

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

nextdns/nextdns

Command-line DNS-over-HTTPS client and proxy for encrypted, tamper-resistant DNS resolution; works with any DoH provider and supports split-horizon…

tomnomnom/httprobe

Take a list of domains and probe for working HTTP and HTTPS servers

demon-i386/zoshrinkc2

DNS over HTTPS targeted malware (only runs once)

badsectorlabs/sccm-http-looter

Find interesting files stored on (System Center) Configuration Manager (SCCM/CM) shares via HTTP(s)

bishopfox/ca-clone

Scripts to clone CA certificates for use in HTTPS client attacks.

knqyf263/crtsh

API client for crt.sh

corelight/zeek-asyncrat-detector

A Zeek based AsyncRAT malware detector.

corelight/zeek-quasarrat-detector

Zeek detector for QuasarRat

k3ystr0k3r/routeglass

Multi-threaded router fingerprinting tool that identifies web-exposed network devices by analyzing HTTP responses, headers, and favicon hashes for…

mthcht/awesome-lists

Curated repository of threat intelligence feeds, IoC lists, YARA rules, and DFIR tool references for SOC/CERT/CTI detection and incident response.

haad/proxychains

proxychains - a tool that forces any TCP connection made by any given application to follow through proxy like TOR or any other SOCKS4, SOCKS5 or…

reconinfosec/web-traffic-generator

A quick and dirty HTTP/S "organic" traffic generator.

mhils/honeyproxy

This project is now part of @mitmproxy.

0sm0s1z/invoke-selfsignedwebrequest

This repo exists as a quick and dirty arsenal of methods and scripts to subvert .NET SSL/TLS certificate validation in PowerShell and press on with…