undefined | Better HN

0 pointsFnoord2y ago0 comments

Because Burp Suite is the defacto tool for web pentesting. So that is what people know.

I've never liked Burp. Java, requires GUI, and subscription costing 365 USD/year. Where without a license you cannot even do trivial automated stuff (forcing you to click 'OK' all the time; easily circumvented with e.g. AHK).

At the very least a personal license for Pākiki is only 100 USD/year. Which is a lot less barrier of entry for amateurs (if you're a for-profit web pentester /care). How does Caido and Pākiki compare to mitmproxy?

0 comments

Sytten2y ago

We are also at 100USD/y. We both use a client / server architecture. We are both closer to burp suite in terms of functionality (aka focus on finding vulnerabilities, replay (invalid) traffic, mapping sites, etc compared to mitmproxy that is more a developper tool.

j / k navigate · click thread line to collapse

0 pointsFnoord2y ago0 comments

Because Burp Suite is the defacto tool for web pentesting. So that is what people know.

0 comments

Sytten2y ago

j / k navigate · click thread line to collapse