Tools

barre/privaxy

Privaxy is the next generation tracker and advertisement blocker. It blocks ads and trackers by MITMing HTTP(s) traffic. Also check out my new…

k3ystr0k3r/routeglass

Multi-threaded router fingerprinting tool that identifies web-exposed network devices by analyzing HTTP responses, headers, and favicon hashes for…

noptrix/httpgrep

Async HTTP(S) scanner that greps response bodies and headers for strings or regex across hosts, ports, CIDR/ranges and TLS-cert vhosts.

t3l3machus/hoaxshell

A Windows reverse shell payload generator and handler that abuses the http(s) protocol to establish a beacon-like reverse shell.

iwallplace/cve-2026-46368-openwrt-exploit

Proof of Concept exploit for CVE-2026-46368 — authenticated root command injection in OpenWrt luci-app-https-dns-proxy (EDB-52521)

mhils/honeyproxy

This project is now part of @mitmproxy.

franccesco/getaltname

Extract subdomains from SSL certificates in HTTPS sites.

niklashigi/apk-mitm

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

caddyserver/caddy

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

dinotools/sslscan

SSLScan tests SSL/TLS enabled services to discover supported cipher suites

trusttunnel/trusttunnel

Open-source VPN protocol that tunnels TCP, UDP, and ICMP traffic over HTTPS, bypassing DPI and throttling. Features split tunneling, SOCKS5 proxy,…

redsiege/egress-assess

Multi-protocol data exfiltration testing tool that simulates real-world egress scenarios over FTP, HTTP, HTTPS, DNS, ICMP, SMB, SMTP, and SFTP to…

nextdns/nextdns

Command-line DNS-over-HTTPS client and proxy for encrypted, tamper-resistant DNS resolution; works with any DoH provider and supports split-horizon…

1tayh/noisy

Simple random DNS, HTTP/S internet traffic noise generator

certbot/certbot

Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any…