dstotijn/hetty
Hetty
Hetty is an HTTP intercepting proxy and web security research toolkit used to capture, inspect, and modify traffic between a browser and a server. It functions as an HTTP request editor for creating and replaying manual requests to test server behavior and as a project-based traffic logger that isolates network logs across different security research engagements.
The tool provides a request-response interception loop that pauses outgoing requests and incoming responses in transit, allowing for manual editing or cancellation. It includes a manual request replay engine to construct and transmit custom HTTP requests for probing server endpoints and identifying security vulnerabilities.
The system manages web traffic through middleman proxy routing and persists captured communication to a database. These capabilities support activities such as API vulnerability testing and bug bounty hunting by organizing traffic logs and configurations into separate project scopes.
Features
- Intercepting Proxies - Functions as an HTTP intercepting proxy to capture and modify traffic between a browser and a server.
- HTTP Proxies - Provides a comprehensive HTTP proxy for logging and analyzing web communication.
- Captured Request Replayers - Includes a manual request replay engine to resend and test captured HTTP requests.
- Proxy Routing - Implements middleman proxy routing to facilitate the inspection and logging of all network communication.
- Traffic Interception - Routes network traffic through proxy ports to permit manual editing of requests in transit.
- Traffic Proxying - Routes web traffic through a middleman proxy to log and analyze communication.
- HTTP Request and Response Modifiers - Intercepts and alters HTTP request or response data in real time to test server behavior.
- HTTP Request Editors - Allows manual modification of URLs, headers, and bodies of outgoing HTTP requests before forwarding.
- HTTP Traffic Inspection - Performs real-time analysis of HTTP request and response data to find security vulnerabilities.
- Web Application Analysis Toolkits - Offers a suite of tools for identifying web vulnerabilities through traffic analysis and manual request crafting.
- Web Application Security Assessments - Provides capabilities for analyzing web application structures and headers to identify security vulnerabilities.
- Traffic Interception and Modification - Hhalts requests and responses in transit for manual review, modification, or cancellation.
- Network Traffic Logs - Persists captured HTTP communication to a database for historical analysis and searching.
- Request Testing - Allows users to manually craft and send HTTP requests to test server behaviors.
- HTTP Request Manipulations - Provides logic for altering HTTP requests through manual editing and resending.
- Breakpoint-Based Interception - Provides a request-response interception loop that pauses traffic for manual editing or cancellation.
- Security Engagement Scoping - Organizes traffic logs and configurations into project databases to separate security engagements.
- Project Resource Isolators - Isolates research targets and traffic logs into independent project scopes.
- API Security Testing - Enables probing of server endpoints for security weaknesses via manual request editing.
- Bug Bounty Toolkits - Supports bug bounty hunting by managing traffic logs and crafting requests for specific targets.
- Project-Based Log Isolation - Stores traffic logs in separate database instances to keep different security research engagements isolated.
- Developer Utilities - HTTP toolkit for security research and proxying.
- Proxy Tools - HTTP toolkit designed for security research and traffic analysis.
- Application Security - HTTP toolkit for security research and interception.
- General Web Scanners - HTTP toolkit for security research with an intercepting proxy.
- Sandboxing and Reverse Engineering - HTTP toolkit for security research and web analysis.
- Security and Auditing - HTTP toolkit for security research.
- Traffic Proxying and Interception - HTTP toolkit designed for security research and analysis.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
