Pākiki Proxy – An intercepting proxy for penetration testing

In plain words

Pākiki Proxy is an intercepting proxy designed for penetration testing and security work. Built with native platform frameworks, it provides a desktop application experience while offering an embedded Python scripting engine for automation. The tool includes built-in scripts for reconnaissance, content discovery, and authorization testing. Its native architecture prioritizes system resource efficiency compared to existing alternatives, with an open-source core.

written from the facts on this page · September 2026

From the sources

In the maker’s words, at launch

Hey HN, I've been working on an intercepting proxy for penetration testing over the last few years in my spare time. Some points of difference from the existing tools: * The UIs are built using the native platform frameworks, meaning they look and behave like other applications on the desktop. * It has a fully…

• 
  Proxyman2019 · proxyman.com · ▲196

  An modern and intuitive HTTP debugging proxy

• PI
  Pixie, Instant Kubernetes-Native Application Observability Using EBPF2020 · pixielabs.ai · ▲108
• TY
  Test your WireGuard connectivity and see global stats, no client needed2024 · probe.sh · ▲43

  Hi HN, Some misbehaving networks drop WireGuard packets either by accident or on purpose. Commonly the latter is done with simple DPI rules that block the handshake initiation [1], but it could be applied to other message types as well. We thought it would be great if there was tool for folks to use as a quick litmus test to see if this happening for them, without having to configure a client to send data through a random, functional WireGuard tunnel to an untrusted remote host. So we built probe.sh. How it works: - The probe.sh web app is an Elixir Phoenix app that spawns a few gen_udp…

• 
  Local Privacy Firewall-blocks PII and secrets before ChatGPT sees themDec 2025 · github.com · ▲111

  OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…

• 
  Proxy.app2015 · ▲80

  Web Interception Proxy For Mac OS X

• 
  Browser-based XSS scanner2024 · github.com · ▲57

  This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…

• 
  /dev/null▲486

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  AI Content Genie▲1,071

  AI autopilot for content creation & marketing

  AI · 2023 · typeface.ai

• 
  Nudge 2.0▲1,051

  In-app experiences to activate, retain, & understand users

  Growth · 2023 · nudgenow.com

• 
  Cal.ai Email Assistant▲918

  World's first open source AI scheduling assistant

  AI · 2023 · cal.com

• 
  Design Studio by Tiledesk▲867

  Unlock AI magic for elevated customer engagement, fast

  AI · 2023 · tiledesk.com

• 
  TalkNotes▲854

  Turn your thoughts into actionable notes, fast

  AI · 2023 · talknotes.io

• 
  OpenAPI DevTools – Chrome extension that generates an API spec▲811

  Effortlessly discover API behaviour with a Chrome extension that automatically generates OpenAPI specifications in real time for any app or website.

  Dev tools · 2023 · github.com