mitmproxy
Proxyman.io
Charles Proxy
HTTP Toolkit
Surge for Mac
Weer
Fiddler
James
Burp Suite
Nessus
Qualys
OpenVAS
Sqreen
Netsparker
Acunetix Vulnerability Scanner
AlienVault USM (from AT&T Cybersecurity)
mitmproxy Burp SuiteNo mitmproxy videos yet. You could help us improve this page by suggesting one.
Based on our record, mitmproxy should be more popular than Burp Suite. It has been mentiond 87 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
> if the rendering engine and network fetching were easily separable - and you could insert your own steps into that pipeline, you could do all sorts of neat stuff. Can’t that be done relatively easily with https://mitmproxy.org/? - Source: Hacker News / 18 days ago
Https://mitmproxy.org/ Either Python or PowerShell would work for the scripting. - Source: Hacker News / about 2 months ago
Years ago, I set up https://mitmproxy.org on a Raspberry Pi and used it to get logs of every site that my kids would visit. I should be clear that monitoring/spying != parenting, but it definitely made me feel a little better to have some idea of what the kids are using the internet for. From a technical perspective, it did exactly what you want. I had logs of full urls (not just domains). So, for example, I could... - Source: Hacker News / 3 months ago
The bug issue was reproducible in the production setup, the logs/metrics were not so useful with the clues for the cause. So, I cloned the project code to my laptop and launched a Postgres instance via Docker Compose. Additionally, I started mitmproxy to be able to intercept and inspect HTTP requests on my machine, and created a template of the request to the Internal service API with my own SSN in Postman. My... - Source: dev.to / 3 months ago
So time to over-engineer this simple problem: since my gym uses EGym / Netpulse, it has Member Card NFC check-ins, which can be accessed via a private API that is called within their App. Using mitmproxy allowed me to quickly identify the check-in related endpoints and the auth mechanism. - Source: dev.to / 3 months ago
The topics will be mostly from Portswigger Website. Also, for some more practical discussion, I'll refer to Kontra. - Source: dev.to / 5 months ago
There are many tools available for this, e.g. Burp Suite, ZAP, etc. We've evaluated a few and found Probely to be the most comprehensive. They have a trial, so your first few scans will be free. After each scan, you will get a report that includes a list of all findings and a recommendation on how to fix them. You will also get a PCI-DSS and OWASP compliance report. - Source: dev.to / 9 months ago
In addition, tools such as snyk or burp can be used to control the dependencies of a project. - Source: dev.to / 10 months ago
Check https://portswigger.net, they have learning material and labs about this topic. Source: over 2 years ago
I ask about serving websites because understanding how a web server works (very basically) with a browser or any client is a huge step in understanding HTTP, host headers, and even host header attacks (if you're into that sort of thing.. As an aside I did a quick google search and https://portswigger.net/ showed up.. Apparently they have interactive labs and very informative documentation on various attack... Source: over 2 years ago
Proxyman.io - Proxyman is a high-performance macOS app, which enables developers to view HTTP/HTTPS requests from apps and domains.
Nessus - Nessus Professional is a security platform designed for businesses who want to protect the security of themselves, their clients, and their customers.
Charles Proxy - HTTP proxy / HTTP monitor / Reverse Proxy
Qualys - Qualys helps your business automate the full spectrum of auditing, compliance and protection of your IT systems and web applications.
HTTP Toolkit - Beautiful, cross-platform & open-source tools to debug, test & build with HTTP(S). One-click setup for browsers, servers, Android, CLI tools, scripts and more.
OpenVAS - The Open Vulnerability Assessment System (OpenVAS) is a framework of several services and tools...
