Open-source alternatives to Rapid

Reqable is a cross-platform network debugging tool that functions as an HTTP/HTTPS debugging proxy, a REST API client, and a traffic replay tool. It captures, inspects, and modifies live traffic using a local MITM proxy engine, supports VPN tunnel capture for mobile devices, and provides a Python scripting sandbox for custom traffic processing. The application is available on Windows, macOS, Linux, iOS, and Android. The tool distinguishes itself by combining traffic interception with breakpoint-based request modification, allowing users to pause live HTTP traffic for manual inspection and alt

spy-debugger is an HTTP proxy debugging tool designed for intercepting and analyzing network traffic from mobile devices, WebViews, and mobile browsers. It functions as a network packet capture tool and a remote browser inspector, allowing users to monitor HTTP and HTTPS requests wirelessly without the need for USB cables. The project distinguishes itself by using script injection to enable remote debugging. It injects JavaScript into HTTP response bodies, providing the ability to inspect HTML and CSS elements and perform live page content editing directly on the mobile screen. Additionally,

React Native Debugger is a standalone developer application for inspecting and debugging JavaScript runtimes in mobile applications built with React Native. It provides a dedicated interface to monitor the runtime state, network requests, and console logs of a remote mobile environment. The tool integrates specialized inspectors for Redux state management and GraphQL client debugging, allowing for time-traveling state transitions and the analysis of queries, mutations, and local cache. It also features a component hierarchy viewer for visualizing and modifying UI properties in real time. Bro

A Burp Suite Extension for pentester and bug bounty hunters an to maintain checklist, map flows, write test cases and track vulnerabilities

Burp Suite Extension to convert a POST request to JSON message, moving any .NET request verification token to HTTP headers if present

Burp Suite extension to track vulnerability assessment progress

A Burp Suite extension that checks if a particular URL responds differently to various User-Agent headers

A Burp Suite Extension that adds Header Checks and other helper features

Burp Extender python plugin that decrypts and encrypts AES encrypted post parameters on the fly. - This is just a mini project I used for a specific mobile app, so please don't try to judge the code quality. :D - For details :…

Burp suite HTTP history advanced search and statistics.

Burp and ZAP plugin to analyse Content-Security-Policy headers or generate template CSP configuration from crawling a Website

一款存储HTTP请求入库的burpsuite插件

Burp plugin that clusters responses to show an overview of received responses

Automated HTTP Request Repeating With Burp Suite

Advanced Burp Suite Logging Extension

Burp Extractor is intended to be used as a one-size-fits-all tool for extracting data from HTTP responses to be reused in HTTP requests. This can be items such as CSRF tokens, Auth Bearer tokens, timestamps, etc. The extension uses regex to extract needed data from responses, and will insert…

This Burp Suite extension automatically detects and exploits HTTP Request Smuggling vulnerabilities using advanced desynchronization techniques developed by PortSwigger researcher James Kettle. It supports comprehensive scanning for HTTP/1.1 and HTTP/2-downgrade desync vulnerabilities,…

Burp extension to help developers replicate findings from pen tests

Burp Suite Extension to monitor new scope

Turbo Intruder is a Burp Suite extension for sending large numbers of HTTP requests and analyzing the results.

Burp Suite Extension to monitor new scope

This burpsuite extender provides a solution on testing Enterprise applications that involve security Authorization tokens into every HTTP requests.Furthermore, this solution provides a better approach to solve the problem of Burp suite automated scanning failures when Authorization tokens exist.

Reclaim control of your Burp Suite Repeater tabs with this powerful extension

BURP extension to record every HTTP request send via BURP and create an audit trail log of an assessment.