evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
-
Updated
May 25, 2026 - Python
evilwaf is a penetration testing tool designed to detect and bypass common Web Application Firewalls (WAFs).
Simulation and red team Phishing Framework
MITM HTTP debugging proxy: HTTPS, MongoDB, Redis, MySQL and gRPC. Also makes JSON logs human readable.
OS Cert Auth - provides info on managing CA certs on various operating systems
Local proxy that compresses your LLM API requests so you pay less, with no change to the answers. Trims wasted tokens from prompts, history, tool output, and code before they're sent: -31% input / -74% output, measured live. Any provider, no extra model calls. Also an MCP server and embeddable library (Rust, Python, Ruby, Kotlin, Swift, JS/TS).
The collaborative web app pentest suite
TLS fingerprint emulation upstream proxy replay any ClientHello
Defense-in-depth security toolkit for LLM agents — taint tracking, proxy secret guard, policy engine, and red-team benchmarking
Windsurf IDE 无限续杯工具:多账号自动切换、额度用完自动换号、MITM 代理无感替换身份、本地 OpenAI 兼容接口。支持批量导入账号,一键启动即用。Wails v2 桌面端,Windows / macOS / Linux 全平台。
AI-Powered Offensive Security Research Engine - desktop-native security testing platform with native MCP integration. 90 tools, MITM proxy, stealth browser, autonomous AI agent. Built on Tauri + Rust + React.
寿司郎排队助手 / Sushiro 排队叫号预测预约工具 (macOS/Win/Linux) — 实时排队、叫号预测、几点出发、到点提醒、自动预约取号、微信小程序凭证抓取
Enterprise AI traffic gateway — unified compliance, routing across 20+ LLM providers, semantic cache, quotas, and audit. SDK / network / OS-layer intercept.
Real-time LLM token and cost monitor with TLS-intercepting proxy or HTTP relay; cross-platform with macOS status bar app and browser dashboard
AI-native MITM proxy — MCP server for traffic interception, recording & replay
A local proxy that converts websites and APIs to clean Markdown. Convert HTML pages, JSON APIs, and dynamic sites. Get token counts for LLM budgeting.
Keep your secrets out of your AI coding agents. A local HTTPS proxy that swaps real credentials with placeholders and injects them at the network boundary.
MITM proxy for Claude Code with real-time TUI, web UI & MCP server — intercept, inspect, and send messages to the Anthropic API. Headless mode for automation.
A lightweight MITM proxy in Go for intercepting and modifying HTTP/HTTPS traffic. Features WebSocket support, dynamic TLS certificates, and rule-based traffic modification. Perfect for debugging and testing web applications.
SmartFoxServer 2X binary protocol implementation for Python
A composable HTTP debugger to intercept, mock, and rewrite traffic — with a rule engine you configure once and reuse forever.
Add a description, image, and links to the mitm-proxy topic page so that developers can more easily learn about it.
To associate your repository with the mitm-proxy topic, visit your repo's landing page and select "manage topics."