Awesome Reverse Engineering / Web, JS & Protocols
Web, JS & Protocols
Bundles, source maps, traffic and undocumented APIs of services you use.
| Tool | Use it when | Cost | Last push · Stars |
|---|---|---|---|
| webcrack | Deobfuscates obfuscator.io output and unpacks webpack and browserify bundles. ▶ runs | Free | 2026-07 · ★ 3k |
| mitmproxy | Intercepting HTTPS proxy for your own apps' traffic; keep its CA on test devices only. | Free | 2026-10 · ★ 46k |
| mitmproxy2swagger | Turns captures into an OpenAPI spec; sanitize tokens first. | Free | 2026-10 · ★ 9.7k |
| Wireshark | Packet analysis; never run the GUI as root. | Free | website |
| Chrome DevTools | Sources with source maps, network panel and HAR export; use a separate browser profile with no wallet. | Free | website |
| Burp Suite | Intercepting proxy for testing web apps you are authorised to test. | Free · Paid | website |
| HTTP Toolkit | One-click interception for browsers, Android, Node and Docker. | Free · Paid | 2026-10 · ★ 738 |