Security Auditing

mitmproxy is an open‑source, console‑based proxy that lets security researchers and developers intercept, inspect, modify, and replay network traffic. It runs on Windows, macOS, Linux and can be accessed via a web UI for convenient analysis. The tool supports HTTP, HTTPS, and WebSocket protocols, offering powerful scripting capabilities in Python to automate testing and debugging. Being free and self‑hosted, it integrates easily into CI pipelines and local development environments.

✦ Best for security researchers needing deep, scriptable traffic manipulation

CyberChef is a web-based tool that lets security professionals and researchers quickly transform, decode, and analyze data using a simple drag‑and‑drop interface. It runs entirely in the browser, so no installation is required and your data never leaves your machine unless you choose to share it. With hundreds of built‑in operations ranging from encryption and compression to encoding and forensic analysis, CyberChef streamlines complex workflows into repeatable recipes, making it ideal for incident response, malware analysis, and data forensics.

✦ Best for security analysts needing quick, shareable browser‑based data transforms

Shhgit is a tool designed to find secrets in your code. It scans your repositories for sensitive information that could compromise your security. By using shhgit, you can identify and remove secrets before they fall into the wrong hands.

✦ Best for small dev teams and open-source projects