An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.
Repository Index
81,588 visible repositories in the index
1–24 of 88 · Most stars
The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.
- password-sniffer
- mitm
- rogue-ap
- wifi
GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.
Capture SSL/TLS plaintext with eBPF—no MITM proxy or custom CA installation. Supports Linux and Android on x86_64\arm64 and loong64.
Open source free capture HTTP(S) traffic software ProxyPin, supporting full platform systems
- proxy
- zhuabao
- proxypin
- capture-traffic
An HTTP toolkit for security research.
- mitm
- proxy
- http
- pentesting
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
- kubernetes
- golang
- rest
- grpc
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know.
Cyber Security ALL-IN-ONE Platform
- redteam
- redteam-tools
- hacking-tools
- scanner
Arkime is an open source, large scale, full packet capturing, indexing, and database system.
A Hardware Hacking Tool with Web-Based CLI That Speaks Every Protocol
Dshell is a network forensic analysis framework.
Kyanos is a networking analysis tool using eBPF. It can visualize the time packets spend in the kernel, capture requests/responses, makes troubleshooting more efficient.
MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.
- mock-server
- proxy
- java-client
- javascript-client
Security Onion is a free and open platform for threat hunting, enterprise security monitoring, and log management. It includes our own interfaces for alerting, dashboards, hunting, PCAP, detections, and case management. It also includes other tools such as osquery, CyberChef, Elasticsearch, Logstash, Kibana, Suricata, and Zeek.
- case-management
- cyber-security
- endpoint-security
- information-security
Open Source Deep Packet Inspection Software Toolkit
- ndpi
- dpi
- deep-packet-inspection
- traffic-analysis
An in-app HTTP inspector for Android OkHttp clients
🔎 An HTTP inspector for Android & OkHTTP (like Charles but on device)
- okhttp
- interceptor
- okhttpclient
- android
Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).
全能协议分析工具：浏览器抓包 + MITM 代理 + 指纹伪装 + AI 分析 + MCP Server 无缝对接 AI Agent/IDE | All-in-one protocol analysis toolkit — built-in browser capture, MITM proxy, JS hooks, fingerprint spoofing, AI analysis & MCP server for agent integration
- 2api
- ai-tools
- api-analysis
- automation-tools
HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac :tada: Open an issue here to give feedback or ask for help.
- feedback
- developer-tools
- http
💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework
- http-proxy
- python3
- webserver
- proxy
Network Analysis Tool
Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy