Proxy & Intercept

Burp Suite

Industry-standard intercepting proxy for web/app security testing.

beginner

Windows

Linux

macOS

Enumeration

Exploitation

Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.

Any web application assessment — manual testing core.

Configure browser proxy/CA cert; intercept, repeater, intruder, scanner (Pro).

Gold standard for understanding HTTP request/response manipulation.

Commands & usage

# Launch Burp → Proxy → Intercept on; browse target

Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.

OWASP ZAP

Free intercepting proxy and automated web scanner.

Caido

Modern lightweight web security auditing toolkit (proxy).

mitmproxy

Interactive CLI/web intercepting proxy with Python scripting.

FoxyProxy + Browser DevTools

Browser proxy switching and built-in developer tools for web testing.