mitm-proxy

evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).

针对GPT 5.6的破甲实验项目，基于Rust开发

Simulation and red team Phishing Framework

Local proxy that compresses your LLM API requests so you pay less, with no change to the answers. Trims wasted tokens from prompts, history, tool output, and code before they're sent: -31% input / -74% output, measured live. Any provider, no extra model calls. Also an MCP server and embeddable library (Rust, Python, Ruby, Kotlin, Swift, JS/TS).

MITM HTTP debugging proxy: HTTPS, MongoDB, Redis, MySQL and gRPC. Also makes JSON logs human readable.

OS Cert Auth - provides info on managing CA certs on various operating systems

The collaborative web app pentest suite

TLS fingerprint emulation upstream proxy replay any ClientHello

AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. Built on Tauri + Rust + React.

Defense-in-depth security toolkit for LLM agents — taint tracking, proxy secret guard, policy engine, and red-team benchmarking

Free, self-hosted alternative to Burp Suite Pro — MITM proxy + full active scanner (SQLi/XSS/SSRF/XXE/SSTI/smuggling), recon→CVE, OAST, nuclei-style templates, and a CI security gate. Qt6/C++, MIT, no telemetry.

A local MITM proxy that lets you control TLS fingerprints (JA3/JA4), HTTP/2 fingerprints, HTTP header order, and User-Agent — all from a single YAML config file.

寿司郎排队助手 / Sushiro 排队叫号预测预约工具 (macOS/Win/Linux) — 实时排队、叫号预测、几点出发、到点提醒、自动预约取号、微信小程序凭证抓取

Enterprise AI traffic gateway — unified compliance, routing across 20+ LLM providers, semantic cache, quotas, and audit. SDK / network / OS-layer intercept.

AI-native MITM proxy — MCP server for traffic interception, recording & replay

MITM proxy for Claude Code with real-time TUI, web UI & MCP server — intercept, inspect, and send messages to the Anthropic API. Headless mode for automation.

Real-time LLM token and cost monitor with TLS-intercepting proxy or HTTP relay; cross-platform with macOS status bar app and browser dashboard

抓包 · HTTPS 证书 · 协议逆向 · AI 分析· JA3。 AI-native desktop traffic capture, protocol analysis, AI evidence reports, request replay, and code generation.

Windows fork of pxpipe: transparent Fable 5 compression for Claude Desktop on Windows 11.

See exactly what your coding agent does on the wire. TLS-intercepting tracer for the Claude Code, Codex, Grok and Kimi CLIs: full first-party capture in a live web UI — reconstructed sessions, session replay, find-in-session, per-turn cost/cache/latency, and a cross-project dashboard of every run.