A Domain-Fronting Relay that routes traffic though GAS (Google Apps Script) and forwards it to Cloudflare Workers. Designed to bypass DPI.

Domain-fronted HTTP/SOCKS5 proxy tunneling traffic through Google Apps Script with MITM TLS interception, HTTP/1-2 multiplexing, and DPI evasion.

Framework for Man-In-The-Middle attacks

💫 Ngrok FRP Alternative • ⚡ Fast • 🪶 Lightweight • 0️⃣ Dependency • 🔌 Pluggable • 😈 TLS interception • 🔒 DNS-over-HTTPS • 🔥 Poor Man's VPN • ⏪ Reverse & ⏩ Forward • 👮🏿 "Proxy Server" framework • 🌐 "Web Server" framework • ➵ ➶ ➷ ➠ "PubSub" framework • 👷 "Work" acceptor & executor framework

DEPRECATED, wifipumpkin3 -> https://github.com/P0cL4bs/wifipumpkin3

Powerful framework for rogue access point attack.

RDP monster-in-the-middle (mitm) and library for Python with the ability to watch connections live or after the fact

📡 A python program to create a fake AP and sniff data.

SSH-MITM - ssh audits made simple

Perform a MitM attack and extract clear text credentials from RDP connections

Websploit is a high level MITM framework

Patch Binaries via MITM: BackdoorFactory + mitmProxy.

Remove Certificate Pinning from APKs

Raven-Storm is a powerful DDoS toolkit for penetration tests, including attacks for several protocols written in python. Takedown many connections using several exotic and classic protocols.

SpyGuard is a forked and enhanced version of TinyCheck. SpyGuard's main objective is to detect signs of compromise by monitoring network flows transmitted by a device.

Man in the middle testing

Eye candy ARP spoofer for Windows

Websploit is an advanced MITM framework.

Intercept Windows Named Pipes communication using Burp or similar HTTP proxy tools

Roast in the Middle