Tools
caido
caido/caido
Caido is a web application security auditing proxy for security professionals, offering interception, replay and request manipulation in a desktop client. This repository hosts its releases, wiki and roadmap.
Topics
Related projects
hetty12.5kHetty is an HTTP toolkit for security research, combining a MITM proxy, request replay, interception, scope management and a web admin interface as an open-source alternative to Burp Suite Pro.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.- metabigor1.9kMetabigor is a keyless OSINT reconnaissance CLI for mapping network ranges, certificates, IP ports and CVEs, related domains, CDN origins and archived URLs.
jwt-hack1.1kjwt-hack is a high-performance toolkit for testing, analyzing, and attacking JSON Web Tokens, covering encoding, verification, cracking, payload generation, and vulnerability scanning.
wstg10.3kThe OWASP Web Security Testing Guide, a comprehensive open-source guide and framework for testing web application security.
burp-ai-agent1.6kCustom AI Agent is a Burp Suite extension that brings AI-assisted analysis and passive/active vulnerability scanning into security workflows, with multi-model backends and MCP tooling for external AI clients.