An open-source Java proxy for penetration testing, enabling traffic analysis and modification of TCP/UDP application protocols.
PETEP is an open-source penetration testing proxy written in Java that allows security professionals to intercept, analyze, and modify TCP and UDP network traffic. It acts as a man-in-the-middle tool to test the security of applications by enabling traffic manipulation between clients and servers. The tool supports various protocols, SSL/TLS, and integration with external proxies like Burp Suite.
Penetration testers, security researchers, and developers who need to analyze and manipulate network traffic for security assessments of TCP/UDP-based applications.
Developers choose PETEP for its protocol-agnostic design, extensibility via Java extensions, and unique features like external HTTP proxy tunneling and Deluder integration for proxy-unaware apps, offering a flexible alternative to commercial tools.
PETEP (PEnetration TEsting Proxy) is an open-source Java application for traffic analysis & modification using TCP/UDP proxies. PETEP is a useful tool for performing penetration tests of applications with various application protocols. ⚡
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports both TCP and UDP with SSL/TLS and STARTTLS, enabling interception of diverse application-layer protocols beyond HTTP, as highlighted in the README's feature list.
Allows development of custom extensions for new protocols and modules via Java, with a dedicated developer guide, making it adaptable for specialized testing scenarios.
Can tunnel TCP traffic through tools like Burp Suite or OWASP Zap, reusing existing proxy workflows for non-HTTP protocols, as illustrated in the README's schema and methodology.
Integrates with Deluder to intercept traffic from applications that don't support proxies, expanding testing scope for hard-to-reach targets, noted in the README as a key feature.
Requires users to generate and manage certificates externally with tools like keytool for SSL/TLS interception, adding complexity compared to tools with auto-generated certificates.
Changes to projects are not automatically saved; users must manually save via the GUI, risking data loss if forgotten, as warned in the README's installation tips.
The Scripter extension requires GraalVM and additional language installations (e.g., JavaScript), complicating script-based automation and adding setup overhead.
PETEP is an open-source alternative to the following products:
Burp Suite is a comprehensive platform for web application security testing, used by penetration testers to identify vulnerabilities through intercepting and modifying HTTP traffic.
OWASP ZAP (Zed Attack Proxy) is a free, open-source web application security scanner used for finding vulnerabilities in web applications.