Search the Community

Hetty is an HTTP toolkit for security research. It aims to become an open source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug bounty community. Features Man-in-the-middle (MITM) HTTP/1.1 proxy with logs Project-based database storage (SQLite) Scope support Headless management API using GraphQL Embedded web interface (Next.js) Changelog v0.6 This release has two improvements that should make Hetty easier to work with: bef52d9 Add support to launch Chrome – Check this guide for details. ad26478 Add certificate management subcommands – Check this doc for details. Changelog 6aa93b7 Add “Copy to Sender” button in reqlog table 7afc23b Add Homebrew tap to GoReleaser config ad26478 Add certificate management subcommands 2ddf2a7 Add logger bef52d9 Add support to launch Chrome d438f93 Fix incorrect var names 8269af9 Fix missing HTTP/1.0 proto enums af26987 Fix sort order of request logs f15438e Fix stray outdated enum values 857aa0c Misc lint fixes fa3f24e Move gql handler out of main, improve admin route matching ed9a539 Remove stray console.log calls c5f76e1 Remove unused project open/close event listeners 29550ff Update README ca0c085 Use ffcli, tidy up usage message [hide][Hidden Content]]

info Show target info like: id full name biography followed follow is it a business account? business category (if the target has a business account) is verified? addrs Return a list with address (GPS) tagged by the target in his photos. The list has a post, address, and date fields. followers Return a list with target followers with id, nickname and full name followings Return a list with users followed by target with id, nickname and full name hashtags Return a list with all hashtag used by target in his photos likes Return the total number of likes in target’s posts comments Return the total number of comments in target’s posts photodes Return a list with the description of the content of the target’s photos photos Download all target’s photos in the output folder. When you run the command, the script asks you how many photos you want to download. Type ENTER to download all photos available or type a number to choose how many photos you want to download. Run a command: photos captions Return a list of all captions used by target in his photos. mediatype Return the number of photos and video shared by the target propic Download target profile picture (HD if is available) Changelog v0.6 new wcommented command (#27) new target command added json dump also for captions command fix empty addrs bug (#12) added options as arguments (#24) new Instagram APIs (#26) minor improvement [hide][Hidden Content]]