The latest articles on DEV Community by Kinetikus (@kinetzki). https://dev.to/kinetzki https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4006970%2F72f127c8-f79a-4e2b-8b3b-214f18087683.jpg https://dev.to/kinetzki en Kinetikus Sun, 28 Jun 2026 20:40:52 +0000 https://dev.to/kinetzki/tired-of-paying-for-burpsuite-so-i-started-snorpy-4p2b https://dev.to/kinetzki/tired-of-paying-for-burpsuite-so-i-started-snorpy-4p2b <blockquote> <p><strong>Disclaimer:</strong> Snorpy is for <strong>authorized security testing only</strong>. Use it on systems you own or have explicit permission to test.</p> </blockquote> <h2> Why I started building this </h2> <p>Burp Suite is excellent. I’ve used it, I respect it, and for serious engagements it’s still the benchmark.</p> <p>But between licensing costs and a stack I couldn’t easily extend, I kept thinking: <em>what if there was an open-source alternative built with the tools I already use every day — React, TypeScript, Electron?</em></p> <p>That’s why I started <a href="https://github.com/Kinetzki/snorpy" rel="noopener noreferrer"><strong>Snorpy</strong></a>: a desktop MITM proxy with Proxy, Repeater, and Intruder. It’s early, it’s Apache 2.0, and it’s open for contributors — not a Burp clone yet, but a project I wish existed when I started pentesting.</p> <p><strong>Important honesty up front:</strong> Snorpy is <strong>not</strong> a full Burp replacement yet. Proxy, Repeater, and Intruder work today. Spider, Decoder, Comparer, and more are on the roadmap. I'm sharing this now because I'd rather build it <em>with</em> feedback than polish in private forever.</p> <h2> What Snorpy does today </h2> <h3> ✅ Working now </h3> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Tool</th> <th>What it does</th> </tr> </thead> <tbody> <tr> <td><strong>Proxy</strong></td> <td>HTTP(S) intercept on port <code>8080</code>, target scoping, request hold/modify/forward</td> </tr> <tr> <td><strong>Repeater</strong></td> <td>Edit headers/body and resend requests manually</td> </tr> <tr> <td><strong>Intruder</strong></td> <td>Fuzz with <code>§placeholder§</code> markers, wordlists, configurable concurrency</td> </tr> </tbody> </table></div> <h3> 🚧 Coming soon </h3> <p>The sidebar already sketches the roadmap: <strong>Spider</strong>, <strong>Decoder</strong>, <strong>Comparer</strong>, <strong>Buster</strong>, <strong>AI Analyzer</strong>, log export, and project settings. These are great places to contribute if you're looking for a first PR.</p> <h2> Architecture: why Electron + mockttp? </h2> <p>Snorpy splits cleanly into two worlds:</p> electron opensource react security