hetty README

The project's README from github.com/dstotijn/hetty. As one markdown file: README.md.

Latest GitHub release Build Status GitHub download count GitHub Documentation

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.

Hetty proxy logs (screenshot)

Features

👷‍♂️ Hetty is under active development. Check the backlog for the current status.

📣 Are you pen testing professionally in a team? I would love to hear your thoughts on tooling via this 5 minute survey. Thank you!

Getting started

💡 The Getting started doc has more detailed install and usage instructions.

Installation

The quickest way to install and update Hetty is via a package manager:

macOS

brew install hettysoft/tap/hetty

Linux

sudo snap install hetty

Windows

scoop bucket add hettysoft https://github.com/hettysoft/scoop-bucket.git
scoop install hettysoft/hetty

Other

Alternatively, you can download the latest release from GitHub for your OS and architecture, and move the binary to a directory in your $PATH. If your OS is not available for one of the package managers or not listed in the GitHub releases, you can compile from source (link coming soon).

Docker

Docker images are distributed via GitHub's Container registry and Docker Hub. To run Hetty via with a volume for database and certificate storage, and port 8080 forwarded:

docker run -v $HOME/.hetty:/root/.hetty -p 8080:8080 \
  ghcr.io/dstotijn/hetty:latest

Usage

Once installed, start Hetty via:

hetty

💡 Read the Getting started doc for more details.

To list all available options, run: hetty --help:

$ hetty --help

Usage:
    hetty [flags] [subcommand] [flags]

Runs an HTTP server with (MITM) proxy, GraphQL service, and a web based admin interface.

Options:
    --cert         Path to root CA certificate. Creates file if it doesn't exist. (Default: "~/.hetty/hetty_cert.pem")
    --key          Path to root CA private key. Creates file if it doesn't exist. (Default: "~/.hetty/hetty_key.pem")
    --db           Database file path. Creates file if it doesn't exist. (Default: "~/.hetty/hetty.db")
    --addr         TCP address for HTTP server to listen on, in the form \"host:port\". (Default: ":8080")
    --chrome       Launch Chrome with proxy settings applied and certificate errors ignored. (Default: false)
    --verbose      Enable verbose logging.
    --json         Encode logs as JSON, instead of pretty/human readable output.
    --version, -v  Output version.
    --help, -h     Output this usage text.

Subcommands:
    - cert  Certificate management

Run `hetty <subcommand> --help` for subcommand specific usage instructions.

Visit https://hetty.xyz to learn more about Hetty.

Documentation

📖 Read the docs

Support

Use issues for bug reports and feature requests, and discussions for questions and troubleshooting.

Community

💬 Join the Hetty Discord server

Contributing

Want to contribute? Great! Please check the Contribution Guidelines for details.

Acknowledgements

Sponsors

💖 Are you enjoying Hetty? You can sponsor me!

License

MIT

© 2019–2025 Hetty Software

hetty (dstotijn/hetty)

Searching Database…

12.5K ·GitHub
这是什么?Hetty 是一个用于安全研究的 HTTP 工具包,旨在成为 Burp Suite Pro 等商业工具的开源替代品,面向信息安全和漏洞赏金社区。
这是命令行代理,还是有界面?它从命令行运行 MITM HTTP 代理,并提供基于网页的管理界面,用于查看流量、编辑请求和重放请求。
我该如何安装和运行?可以通过包管理器安装(macOS、Linux、Windows),或下载适用于你的操作系统和架构的发布版二进制文件并将其添加到 PATH 中,然后运行 'hetty' 启动。也可以通过 GitHub Container Registry 和 Docker Hub 获取 Docker 镜像。
是否还需要安装其他东西,比如 Go?如果使用包管理器、发布版二进制文件或 Docker 镜像,则无需单独的运行时环境;如果从源码编译,则需要 Go,因为该项目是用 Go 编写的。
Hetty 的功能是否像 Burp Suite Pro 一样完整?否。它明确处于积极开发阶段,定位是一个有志成为开源替代品的项目,目前还不是成熟的替代品。
它支持哪些操作系统?macOS、Linux 和 Windows 都提供了对应的包管理器安装说明,此外还提供适用于各种操作系统和架构组合的 GitHub 发布版二进制文件以及 Docker 镜像。
我代理的流量数据存储在哪里?Hetty 会将所有数据按项目保存在你自己电脑上的本地数据库中,不会发送到任何远程服务。
除了记录流量,代理还能做什么?你可以使用高级过滤器搜索日志,通过内置客户端手动构造或编辑 HTTP 请求,重放已代理的请求,还可以拦截请求和响应,在其继续传输之前进行查看、编辑或取消。
Scope 有什么用?Scope 功能可以限定 Hetty 跟踪和显示的流量范围,通过过滤掉无关的主机或路径,帮助保持大型测试任务的条理清晰。
如何查看所有命令行选项?运行 'hetty --help' 即可列出所有可用的命令行选项。
What are similar projects?ffuf, httpx, evilginx2, ARTEX, dirsearch, ARTEX, bettercap, Cybermes
Creator
dstotijn
Size
1.7 MB
Stars
12.5K
Age
6y
Commits · 90 Days