Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Is there any "nicer" alternative to Burp?

Maybe it's just that I haven't used it enough, but whenever I have some pentestish need and reach for Burp I get disappointed. The UI is confusing and everything is just so cumbersome, seemingly without reason. I get vibes of old school blender (with the right-click to select behaviour).

I would pay good money for something in the style of Proxyman, with Burp Collaborator features and a sensible extension system.



Caido[1] a interception proxy written in Rust, is positioning itself as a "lightweight" alternative to Burp. It can't compete yet with Burp in terms of functionality, although the product is certainly looking promising.

Perhaps the only contender to Burp in respect to functionality/features is ZAP[2].

EDIT: You can run your own collaborator type setup with Project discovery's interactsh[3].

Further EDIT: A downvote might be because of the mention of Rust / closed source - this is explicitly mentioned because a large pain point for Burp is it's a Java memory hog. If Caido was written in C++ with Qt, this fact would be notable for the exact same reason.

[1] https://caido.io/

[2] https://www.zaproxy.org/

[3] https://github.com/projectdiscovery/interactsh


Co-Founder of Caido here. Happy to answer questions. We plan on working on extensibility in 2024.

We are not open source since we are a small bootstrap shop and sales drive our growth. I have nothing against OSS but it is not a business model.

We are client/server at heart, you can run the server anywhere and access it via the browser.


By "extensibility" does this mean the ability to write your own extensions? Being able to develop and contribute plugins back to the community (similar to Burp's BApp store) could really accelerate the competitiveness of Caido up against Burp.


note Caido is NOT OPEN SOURCE.


I'm using httptoolkit and very happy with it. It's not as featureful as burp but the out of the box experience is very nice for average Joe like me that just occasionally need to leverage a tool like this.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: