compare
ffuf vs mitmproxy
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | ffuf | mitmproxy |
|---|---|---|
| Language | Go | Python |
| Licence | MIT | MIT |
| Stars | 17k | 45k |
| Latest | v2.3.0 | v12.2.3 |
| Last push | 2026-09-26 | 2026-10-05 |
| Release cadence | about 140 days between releases | about 46 days between releases |
| Active contributors | 6 commit authors on the default branch in the last 90 days | 20 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
Both replace Burp Suite. Alternatives to Burp Suite →
PartialffufFuzzes paths, parameters and virtual hosts from the command line; no intercepting proxy or crawler.
PartialmitmproxyIntercepting proxy scripted in Python, with no built-in vulnerability scanner.
ffuf
- v2.3.02026-09-09256c1b02499f5f8672af965d4ad7a321d606bc65 Changelog: add v2.3.0, and backfill the v2.2.0 and v2.2.1 sections
- v2.2.12026-07-131571aa17535d8bfcf42258659a141df0b12efa51 Derive release version from git tag; git-<date>-<hash> for dev builds (#902)
- v2.2.02026-07-110aa36bcfa45c255f0d719f7d5bc58f7cc9c93659 ci: pin GPG signing subkey fingerprint in release workflow (#899)
- v2.1.02023-09-167a2756a Prepare for v2.1.0 release (#724)
- v2.0.02023-02-06e952deb Fix the v2 tagging for go install (#639)
ffuf
unsigned The latest release, v2.3.0, carries no signature GitHub could verify.
Loading the security report
mitmproxy
unsigned The latest release, v12.2.3, carries no signature GitHub could verify.
Loading the security report