An open-source HTTP reverse proxy for authorized web security research. It transparently proxies traffic for multiple destination domains through a controlled proxy domain, supports credential capture and a beta session-impersonation feature, and can inject JavaScript into matching proxied responses. MFA relay and session use depend on the target authentication flow; phishing-resistant, origin-bound FIDO2/WebAuthn is designed to resist phishing.
Go
RESTRICTED_ACCESS_BLUR_MARKER