The Swiss Army knife for 802.11, BLE, HID, CAN-bus, IPv4 and IPv6 networks reconnaissance and MITM attacks.

A collection of hacking / penetration testing resources to make you better!

A cross-platform programmable network tool

An HTTP toolkit for security research.

Modlishka. Reverse Proxy.

🤖 A CLI application that automatically prepares Android APK files for HTTPS inspection

:zap: Web Debugging Proxy based on Chrome DevTools Network panel.

Android Reverse-Engineering Workbench for VS Code

Framework for Man-In-The-Middle attacks

💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework

DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3

A versatile and portable proxy for capturing, manipulating, and replaying HTTP/HTTPS traffic on the go.

:lock: Memorable site for testing clients against bad SSL configs.

Privaxy is the next generation tracker and advertisement blocker. It blocks ads and trackers by MITMing HTTP(s) traffic. Also check out my new project, https://github.com/Barre/ZeroFS

DEPRECATED, bettercap developement moved here: https://github.com/bettercap/bettercap

Lightweight service virtualization/ API simulation / API mocking tool for developers and testers

Powerful framework for rogue access point attack.

A web proxy in Golang with amazing features.

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

SSH man-in-the-middle tool

📡 A python program to create a fake AP and sniff data.

HTTP proxy server,support HTTPS&websocket.MITM impl,intercept and tamper HTTPS traffic.

mitmproxy implemented with golang. 用 Golang 实现的中间人攻击（Man-in-the-middle），解析、监测、篡改 HTTP/HTTPS 流量。

Perform a MitM attack and extract clear text credentials from RDP connections

SSH-MITM - ssh audits made simple

一款基于 NodeJS，可通过 JS 修改网络请求，以及定时运行脚本或 SHELL 指令的网络工具。

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates.

Websploit is a high level MITM framework

Security Apps for Android