Repository Index

An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.

• python
• security
• man-in-the-middle
• tls

GoReplay is an open-source tool for capturing and replaying live HTTP traffic into a test environment in order to continuously test your system with real data. It can be used to increase confidence in code deployments, configuration changes and infrastructure changes.

• go
• testing
• testing-tools
• devops

An HTTP toolkit for security research.

• mitm
• proxy
• http
• pentesting

MockServer is an HTTP(S) mock server and proxy for testing that lets you mock APIs, inspect and modify live traffic, and inject failures. It supports HTTP/1.1, HTTP/2, gRPC, WebSockets, TCP and more on a single port, with additional support for HTTP/3, message brokers, and AI/LLM APIs.

• mock-server
• proxy
• java-client
• javascript-client

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

• hacktoberfest
• rdp
• pentest
• honeypot

Edit and replay captured network traffic at arbitrary speeds — a suite of pcap tools for *NIX and Windows.

• tcpreplay
• pcap
• netmap
• c

A free, open-source alternative to Burp Suite: an intercepting proxy and web app security testing suite with Repeater, Intruder, Collaborator and a built-in OWASP ZAP scanner. Linux, AGPL-3.0.

• application-security
• appsec
• bug-bounty
• burp-alternative

Fast, native API client for REST, gRPC, WebSocket and GraphQL. A local-first Postman alternative written in Go: no Electron, no account, no cloud.

• api
• golang
• grpc
• rest

TranslatedPacket monster (っ‘-’)╮=͟͟͞͞◒ ヽ( '-'ヽ) TUI tool for sending packets of arbitrary input and monitoring packets on any network interfaces (default: eth0). Windows/macOS/Linux

• packet-generator
• packet-analyzer
• network
• networking