Home / RE Tooling / Traffic Interception

62 open-source Traffic Interception projects

Traffic Interception (RE Tooling): open-source projects that exist because someone reverse engineered a closed product, sorted by GitHub stars.

  1. mitmproxy★ 46,411 · active · Python

    Interactive TLS-capable intercepting HTTP proxy

  2. mitmproxy2swagger★ 9,675 · active · HTML

    Reverse-engineers REST APIs into OpenAPI specs from captured mitmproxy/HAR traffic

  3. spy-debugger★ 7,621 · slowing · JavaScript

    Remote WebView debugger and HTTPS capture proxy for WeChat and mobile pages

  4. apk-mitm★ 5,132 · slowing · TypeScript

    CLI that prepares Android APKs for HTTPS inspection by removing pinning

  5. AndroidHttpCapture★ 4,612 · active · Java

    Android on-device HTTP packet capture and network diagnosis app

  6. Anything Analyzer★ 3,799 · active · TypeScript

    Protocol analysis workstation: browser capture, MITM proxy, AI analysis and MCP server

  7. ssl-kill-switch2★ 3,324 · dormant · Objective-C

    Disables SSL certificate validation and pinning in iOS and macOS apps

  8. reverse-api-engineer★ 1,993 · active · Python

    Agent that captures website traffic and turns it into API clients

  9. Knot★ 1,801 · active · Swift

    iOS MITM-based HTTPS packet capture app

  10. go-mitmproxy★ 1,578 · active · Go

    mitmproxy-style HTTPS interception proxy implemented in Go

  11. USBPcap★ 1,152 · slowing · C

    USB packet capture for Windows, used for driver protocol analysis

  12. Proxelar★ 1,086 · active · Rust

    MitM proxy in Rust with TUI, terminal and web interfaces

  13. android-unpinner★ 1,056 · active · Python

    Removes certificate pinning from Android APKs

  14. Facedancer★ 1,038 · active · Python

    Python USB device emulation and proxy framework for reverse engineering USB devices

  15. Netzob★ 839 · slowing · Python

    Protocol reverse engineering, modeling and fuzzing tool

  16. tokentap (Sherlock)★ 811 · active · Python

    MitM proxy that intercepts LLM tool API traffic to show what coding agents send

  17. js-cookie-monitor-debugger-hook★ 782 · active · TypeScript

    Userscript to monitor and breakpoint JavaScript cookie changes for web RE

  18. Blackbox Protobuf★ 743 · active · Python

    Decodes and re-encodes Protocol Buffers messages without the .proto definitions

  19. HTTP Toolkit★ 738 · active · TypeScript

    Desktop app for intercepting and debugging HTTP(S) traffic

  20. USB Sniffer Lite★ 704 · slowing · C

    Simple USB sniffer based on the Raspberry Pi RP2040

  21. Protobuf Decoder★ 677 · active · JavaScript

    Web app that decodes Protobuf messages without a schema

  22. esp32_bluetooth_classic_sniffer★ 613 · dormant · C

    Active Bluetooth BR/EDR sniffer and injector on ESP32

  23. JS-Forward★ 579 · dormant · Python

    Tool for testing web apps whose front end encrypts request parameters

  24. httptoolkit-server★ 569 · active · JavaScript

    Backend of HTTP Toolkit HTTP(S) interception and debugging tool

  25. USBProxy-legacy★ 471 · dormant · C++

    Proxy for USB devices using libUSB and gadgetFS to sniff and modify traffic

  26. SunnyNetTools★ 411 · active · JavaScript

    Packet capture tool built on the SunnyNet network middleware

  27. frida-flutterproxy★ 362 · slowing · JavaScript

    Frida script to proxy Flutter app traffic through Burp

  28. Wireshark MCP★ 359 · active · Python

    MCP server that wraps tshark so agents can query packet captures

  29. usbrply★ 340 · slowing · Python

    Converts USB pcaps into Python/C replay scripts for driver reverse engineering

  30. frida-intercept-encrypted-api★ 334 · slowing · JavaScript

    Frida tool to intercept encrypted APIs in iOS and Android apps

  31. Charles MCP★ 330 · active · Python

    Charles Proxy MCP server for AI agents with live capture and traffic analysis

  32. tcpproxy★ 315 · slowing · Python

    Intercepting TCP proxy that modifies raw TCP streams with modules

  33. Packetry★ 296 · active · Rust

    USB 2.0 protocol analyzer for Cynthion captures and PCAP files

  34. shermie-proxy★ 268 · dormant · Go

    Go packet capture proxy for HTTP, HTTPS, WebSocket and TCP

  35. android_proxy_mcp★ 240 · active · Python

    MCP-based Android packet capture service for AI assistants

  36. Deluder★ 216 · active · Python

    Intercepts traffic of proxy-unaware applications by hooking TLS libraries

  37. xepor★ 215 · active · Python

    Flask-style web routing framework on mitmproxy for reverse engineers

  38. bluebox (web-hacker)★ 202 · active · Python

    Reverse engineers web apps' undocumented APIs from browser traffic

  39. mars★ 180 · dormant · Go

    HTTP(S) proxy for packet capture and debugging

  40. AutomatiQ★ 176 · active · Python

    Reverse-engineering agent that turns web app traffic into APIs

  41. mitmproxy-mcp★ 132 · active · Python

    MCP server wrapping mitmproxy for AI clients

  42. FlutterTap★ 129 · active · C++

    Zygisk module redirecting Flutter app traffic to a proxy

  43. spectral★ 121 · active · Python

    Captures app traffic and infers the underlying API

  44. Android-Request-Inspector-WebView★ 117 · active · Kotlin

    Inspect and intercept full HTTP requests from Android WebViews

  45. usbsnoop★ 88 · active · JavaScript

    Live system-wide USB transfer sniffer in eBPF with inline protocol decoding

  46. Android-BLE-Monitor★ 80 · dormant · C++

    BLE reverse engineering tool for Android

  47. BLE-Analyzer-pro-linux-capture★ 79 · active · C

    Linux capture tool for the reverse-engineered BLE Analyzer Pro USB sniffer

  48. NetPlier★ 76 · slowing · Python

    Probabilistic network protocol reverse engineering from message traces

  49. mitmcloak★ 65 · active · Python

    mitmproxy addon mirroring real browser TLS/H2/H3 fingerprints upstream

  50. http-breakout-proxy★ 61 · active · Go

    HTTP proxy for reverse engineering protocol communication

  51. Protocol Informatics★ 53 · dormant

    Automatic network protocol reverse engineering from captured traffic

  52. rever-browser★ 46 · active · TypeScript

    AI-agent browser for web API reverse engineering

  53. impersonate-proxy★ 44 · active · Go

    Local MitM proxy to control TLS (JA3/JA4) and HTTP/2 fingerprints

  54. api-reverse-engineer★ 36 · active · JavaScript

    Chrome extension capturing fetch/XHR calls to reverse engineer site APIs

  55. Browser Reverse Engineering Toolkit★ 32 · active · JavaScript

    Captures browser-session evidence and crawls sites to document web app architecture

  56. fritm★ 26 · dormant · Python

    Cross-platform network reverse engineering framework hooking processes with Frida

  57. ble-learning★ 21 · slowing · C

    Automata-learning framework that fingerprints Bluetooth Low Energy devices (research code)

  58. state-inspector★ 14 · dormant · C

    Grey-box protocol state machine learning from CCS research

  59. Claude Intercept★ 9 · active · JavaScript

    Local MITM proxy and dashboard that captures and decodes HTTP/S traffic from your own computer

  60. SniffUSB / usbsnoop★ 0

    Windows USB traffic sniffer used to reverse engineer USB device protocols for Linux drivers

  61. usbsniff★ 0

    USB reverse engineering utilities: capture, replay and analysis

  62. Wireshark★ 0

    Network protocol analyzer with dissectors for many reverse-engineered protocols