Hetty The Open-Source Powerhouse for Hackers & Bug Bounty Hunters – Supercharge Your Security Research (Free, Fast, Fully Customizable)

Hetty The Open-Source Powerhouse for Hackers & Bug Bounty Hunters – Supercharge Your Security Research (Free, Fast, Fully Customizable)

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community.

Features

  • Machine-in-the-middle (MITM) HTTP proxy, with logs and advanced search
  • HTTP client for manually creating/editing requests, and replay proxied requests
  • Intercept requests and responses for manual review (edit, send/receive, cancel)
  • Scope support, to help keep work organized
  • Easy-to-use web based admin interface
  • Project based database storage, to help keep work organized

Supported Platforms

  • Windows
  • Linux
  • macOS
  • Docker

Install

MacOS

brew install hettysoft/tap/hetty

Linux

sudo snap install hetty

Windows

scoop bucket add hettysoft https://github.com/hettysoft/scoop-bucket.git
scoop install hettysoft/hetty

Run

Once installed, start Hetty from the command line:

hetty

When invoked without any options, this:

  • Creates a root CA certificate and private key, stored on disk at ~/.hetty/
  • Creates a BadgerDB database, stored on disk at ~/.hetty/db/
  • Runs an HTTP server that listens on 0.0.0.0:8080, used for proxying and serving the admin interface

You should see the following console output:

2022/03/01 11:09:15 INFO [main] Hetty (v0.5.1) is running on :8080 ...2022/03/01 11:09:15 INFO [main] Get started at http://localhost:8080

You can now visit http://localhost:8080 to access the admin interface.

License

MIT

© 2019–2025 Hetty Software

Resources & Downloads

GitHub - dstotijn/hetty: An HTTP toolkit for security research.
An HTTP toolkit for security research. Contribute to dstotijn/hetty development by creating an account on GitHub.
Hetty | Hetty
An HTTP toolkit for security research.

Read more