Sniper
Sniper is a free, open-source desktop proxy for intercepting, inspecting, and modifying HTTP/HTTPS traffic.
What Sniper is
Sniper is a free, open-source desktop proxy for intercepting, inspecting, and modifying HTTP/HTTPS traffic. It is intended for penetration testers, bug bounty hunters, security researchers, and developers working on web security testing or API debugging. Sniper records HTTP history and WebSocket sessions, with an intercept queue and match-and-replace rules. Its testing tools include request replay, payload-based fuzzing, and a passive scanner for sensitive data, CORS issues, missing headers, and JWT issues. Isolated workspaces, host or wildcard scope filtering, and a site map visualization support traffic organization. The bundled sniper-cli offers JSON-first scripting, and the repository includes Claude and Codex skill templates. Sniper can chain authenticated upstream HTTP and SOCKS5 proxies, though its incoming listener accepts HTTP proxy requests and CONNECT, not SOCKS client requests. The project is MIT licensed. Windows x64 is described as its first port, with Linux validation pending; Windows installers are unsigned, and the portable ZIP requires Microsoft Edge WebView2 Runtime.
Good
- Captures HTTP history and WebSocket sessions
- Includes request replay and payload-based fuzzing
- Passive scanner checks sensitive data and common issues
- Provides JSON-first CLI scripting
Watch out
- Linux validation is still pending
- Windows releases are not code-signed
- Portable Windows ZIP requires Microsoft Edge WebView2 Runtime
- Headless remote UI serves HTTP rather than TLS
Who it suits
Sniper is aimed at security testers, bug bounty hunters, researchers, and developers who need to inspect or modify network traffic. It may fit users who can account for its Windows and remote-listener setup notes.
Verdict
Sniper brings traffic inspection, replay, scanning, and scripting into a desktop proxy workflow. Check the platform and security setup notes before choosing a Windows release or exposing the headless UI remotely.
Plans and prices
From Sniper's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Sniper | Free | Open-source desktop web proxy |
The facts
Each one read from Sniper's own pages, with the date it was checked.
What it does
- AI and automation
- The bundled JSON first CLI supports scripting, and the repository includes Claude and Codex skill templates.checked 9 Oct 2026
- Audience
- It is aimed at penetration testers, bug bounty hunters, security researchers, and developers who need to inspect network traffic.checked 9 Oct 2026
- Automation
- The bundled sniper-cli provides JSON-first scripting, and the repository includes Claude and Codex skill templates.checked 4 Oct 2026
- Capture and replay
- It captures HTTP history and WebSocket sessions, supports request interception, and can modify and resend captured requests.checked 9 Oct 2026
- Downloads
- The README directs Windows users to a setup executable or ZIP and macOS users to a DMG from GitHub Releases.checked 4 Oct 2026
- Intended users
- The project names penetration testers, bug bounty hunters, security researchers, and developers as its intended users.checked 4 Oct 2026
- License
- The repository identifies Sniper as MIT licensed.checked 9 Oct 2026
- Product
- Sniper is an open-source desktop proxy that intercepts, inspects, and modifies HTTP/HTTPS traffic.checked 9 Oct 2026
- Proxy chaining
- Sniper can chain outgoing traffic through authenticated HTTP or SOCKS5 proxies; its incoming listener accepts HTTP proxy requests and CONNECT, not SOCKS client requests.checked 9 Oct 2026
- Purpose
- Sniper is an open-source desktop web security proxy that intercepts, inspects, and modifies HTTP/HTTPS traffic for security testing, bug bounty work, and API debugging.checked 4 Oct 2026
- Release limitation
- The Windows x64 portable ZIP requires Microsoft Edge WebView2 Runtime, is unsigned, and has no in app updater.checked 9 Oct 2026
- Remote access
- For a non loopback headless UI listener, remote clients must redeem a one time token, and the project advises using an SSH tunnel or authenticated TLS reverse proxy across untrusted networks because the UI serves HTTP.checked 9 Oct 2026
- Security
- The README says installers are not yet code signed and recommends checking the adjacent SHA-256 file before running them.checked 9 Oct 2026
- Security findings
- Its passive scanner checks for sensitive data, CORS issues, missing security headers, and JWT issues.checked 9 Oct 2026
- Security setup
- The install instructions say each Windows installer has a SHA-256 file to check and that releases are not yet code-signed.checked 4 Oct 2026
- Sessions and scope
- It supports isolated workspaces and host or wildcard scope filtering with a site map visualization.checked 9 Oct 2026
- Testing tools
- It includes payload based fuzzing, match and replace rules, and tools for decoding, encoding, hashing, and inspecting JWTs.checked 9 Oct 2026
- Traffic capture
- It captures HTTP history and WebSocket sessions and provides an intercept queue and match-and-replace rules.checked 4 Oct 2026
- Use cases
- The project describes it for web application security testing, bug bounty hunting, and API debugging.checked 9 Oct 2026
Where it runs
- Platform limitation
- The README says Windows x64 is the first port and Linux validation is still pending.checked 4 Oct 2026
- Platforms
- The project provides macOS and Windows downloads; it says Linux validation is still pending.checked 9 Oct 2026
Alternatives to Sniper
- 1
Fluxzy
Free planOpen sourceAndroidiOSAPILinux8.4€49 one-time - 2
NetworkSpy
Free planOpen sourceAndroidiOSAPILinux8.4From $18 a year - 3
Moni Proxy
Free planAndroidiOSLinuxmacOS8.0$71 one-time - 4
Reqable
Free planAndroidiOSAPILinux8.0From $49.90 a year - 5
ProxyHawk
Free planAndroidiOSmacOS7.8From ₹3,750 a year - 6
mitmproxy
Free planOpen sourceWebAPILinuxmacOS7.7Free plan