Tool Open source · AGPL-3.0

Yakit

Yakit is an interactive application-security testing platform developed by the Yaklang.io team. It provides a graphical client for controlling the Yaklang security engine through a gRPC server, which can run locally or be deployed remotely. Yaklang is built around CDSL, a Turing-complete cybersecurity domain-specific language hosted by a stack virtual machine.

View repository

Overview

The platform includes an HTTP MITM proxy that can intercept, decode, display, modify, replay, and replace requests and responses, with history, repeater, intruder, passive-scanning, hot-loading, and packet-marking workflows. Its Web Fuzzer sends user-defined raw HTTP requests and repairs protocol details such as CRLF, Content-Type, chunked-transfer settings, multipart boundaries, and Content-Length. Fuzztag expressions support generated values, external dictionaries, Cartesian-product parameter combinations, and hot-loaded Yak scripts for custom data generation.

Yakit also provides a plugin store, Yaklang scripting within testing workflows, reverse-shell handling, reverse-exploitation callbacks, and TCP, DNSLog, and ICMP callback detection. The project is intended for authorized security testing and learning; its repository states that commercial use requires official authorization.