Alternatives

Products that do what ExploitSpec does

Turn proven HTTP exploits into permanent regression tests

1. 1
   FetchSandbox▲347

   API integration testing that remembers what breaks

   Jul 2026 · fetchsandbox.com

2. 2HM
   HTTP Mock – Intercept, debug and mock HTTP(S) with zero setup▲341

   2019 · httptoolkit.tech

3. 3
   AbTest.io▲122

   A free url shortener with A/B testing features

   2017

4. 4AS
   A simple, highly commented, rootkit which attacks GCC and Python▲94

   2014 · github.com

5. 5
   Probely▲87

   Intuitive and easy-to-use webapp vulnerability scanner

   2018

6. 6OC
   Online C/C++ obfuscator▲44

   2018 · picheta.me

7. 7HI
   Hellepoll is a blazingly-fast async HTTP server written in C++▲35

   This is based on an approach I made for a very high performance message and video multiplexing server. The project died, but I'm glad I get to share the a basic version with some http test code now. I admit this is the second time I've tried to show this off here today; I posted earlier but it got lost when no-one was watching :(

   2011 · github.com

8. 8AI
   AbTest.io a free url shortener with A/B testing features▲7

   2017 · abtest.io

9. 9
   WebSlurp▲9

   The Fastest Way to Test API Security Inside Chrome DevTools

   Jul 2026 · webslurp.github.io

10. 10
    Mugiwara Security▲16

    Proves vulnerabilities before reporting them.

    8d ago · dashboard-seven-self-13.vercel.app

11. 11FC
    Fakettp – Command line http debugging proxy▲8

    2015 · github.com

12. 12
    NeuraPent▲6

    Find Out Whats Exploitable. In Hours, Not Weeks.

    Jul 2026 · neurapent.com

13. 13PA
    ProKZee – An Open-Source Network Security Tool Written in Go▲7

    Hi HN! After several months of work, I'm excited to share ProKZee, a free and open-source network security tool built with Go and React using Wails framework. ProKZee allows developers, security researchers, and penetration testers to intercept, inspect, and modify HTTP/S traffic — similar to tools like Burp Suite, OWASP ZAP, and Caido — but with a fast native UI, modern UX, and some unique features. https://github.com/al-sultani/prokzee

    2025 · github.com

14. 14BD
    BIND9 Denial of Service Exploit Checker▲9

    2015 · scan.patrolserver.com

15. 15AC
    A CLI that lets you execute HTTP requests from static YAML files▲11

    2017 · github.com

16. 16AS
    API Security Assessment Tool▲6

    Free and instant penetration testing for rest APIs. Please try and let me know what do you think? https://www.apisec.ai/free-api-pen-test

    2022

17. 17
    TestingURL▲3

    Free sandbox for scraping, HTTP & AI agent testing

    20d ago · testingurl.dev

18. 18
    ScanReq▲4

    Find outdated deps and CVEs across 8 ecosystems in VS Code

    Jun 2026 · scanreq.com

19. 19TA
    Timing attack to check presence of devtools▲7

    2016 · github.com

20. 20AC
    A CLI tool for quickly identifying failed tests in GitHub Actions▲5

    2023 · github.com

21. 21BG
    Bloodhound – Grey-box attack-path discovery in Rust/Go/C++ binaries▲5

    We originally set out to solve complex debugging headaches and useless alerts caused by traditional security scanners in our own projects. Static Analysis (SAST) flagged too much noise because it couldn't verify runtime context, while Dynamic Analysis (DAST) missed internal logic bugs because it treated the app like a black box. We built a CLI tool to bridge this gap using grey box testing from a red team approach. We use internal knowledge of the codebase to guide parallel execution, allowing us to find complex or hidden logic errors and attack paths standard linters/scanners miss. The…

    Dec 2025 · bloodhoundsecurity.ca

22. 22CF
    CR4SH3R – Fast WordPress Plugin Vulnerability Scanner▲5

    A few months ago, a friend asked me to check his WordPress site for vulnerabilities. What I found shocked me – critical flaws exposing sensitive data everywhere. That's why I built CR4SH3R: a focused tool to detect Arbitrary File Download flaws before attackers do Key Features: Lightning-fast multi-threaded scanning, Extracts credentials from exposed files (like wp-config.php), Generates actionable Excel reports, Simple GUI for one-click security checks Would love your feedback!

    2025 · github.com

23. 23AO
    An offensive security toolkit written in Rust▲6

    Remote Code Oxidation is a collection of tools that help offensive security professionals quickly adapt payloads to the needs of their engagement. Any and all feedback is welcome!

    2022 · github.com

24. 24OA
    Oembed ANY URL (Slack-Like URL Previews). Fully Open Sourced. Golang▲6

    2015 · proc.link

Ranked by how close each launch is in meaning, then by votes. Refine with a description →