Skip to content
Get packs

Guide · Open source

How to use Hetty: install, start and intercept traffic

Updated · written with AI from the project's own documentation and checked against our catalogue data

Hetty is an open-source HTTP toolkit for security research. It runs as a man-in-the-middle proxy between your browser and a website, logging requests and responses so you can search, intercept, edit and replay them. This guide shows you how to install Hetty, start it and use its main features, and it notes where the project's own documentation is the place to go for detail.

Hettydstotijn/hetty · ★ 12.5k · MIT

Quick start

  1. 1Install Hetty. Run the package manager command for your OS, such as brew install hettysoft/tap/hetty on macOS.
  2. 2Start Hetty. Run hetty in your terminal to start the HTTP server, proxy and admin interface.
  3. 3Review the options. Run hetty --help to see flags for certificate, key, database, address and Chrome launch.
  4. 4Set up the root CA certificate. Follow the Getting started doc at hetty.xyz so your browser or tool trusts Hetty's root CA certificate.
  5. 5Route traffic through the proxy. Point your browser or tool at Hetty's proxy address, which defaults to :8080, or use the --chrome flag.
  6. 6Inspect and edit traffic. Use the admin interface to search logs, intercept requests and responses, and replay or craft requests.

Install Hetty with a package manager

The quickest way to install and update Hetty is through a package manager. Pick the command for your operating system.

  • macOS: use Homebrew.
  • Linux: use Snap.
  • Windows: add the hettysoft Scoop bucket, then install Hetty from it.
brew install hettysoft/tap/hetty sudo snap install hetty scoop bucket add hettysoft https://github.com/hettysoft/scoop-bucket.git scoop install hettysoft/hetty

Other ways to install Hetty

If your OS is not covered by a package manager, you can download the latest release from GitHub for your OS and architecture, then move the binary to a directory in your $PATH.

Hetty also publishes Docker images on GitHub's Container registry and Docker Hub. Docker is only needed if you choose this option. The README's example runs Hetty with a volume for database and certificate storage and port 8080 forwarded.

docker run -v $HOME/.hetty:/root/.hetty -p 8080:8080 \ ghcr.io/dstotijn/hetty:latest

Start Hetty and check its options

Once installed, start Hetty with a single command. Hetty runs an HTTP server with the MITM proxy, a GraphQL service and a web-based admin interface.

To see every available option, run the help flag. By default the certificate, key and database are stored under ~/.hetty, and the server listens on :8080. The --chrome flag launches Chrome with proxy settings applied and certificate errors ignored.

  • --cert: path to the root CA certificate (default ~/.hetty/hetty_cert.pem).
  • --key: path to the root CA private key (default ~/.hetty/hetty_key.pem).
  • --db: database file path (default ~/.hetty/hetty.db).
  • --addr: address to listen on, as host:port (default :8080).
  • --chrome: launch Chrome with proxy settings applied.
  • --verbose and --json: control log output.
  • cert subcommand: certificate management.
hetty hetty --help

Trust the root CA certificate and route traffic through Hetty

Hetty acts as a man-in-the-middle, so your browser or tool needs to trust its root CA certificate. The README does not walk through this step in detail; it points to the Getting started doc at hetty.xyz for setup instructions.

The --chrome flag is one shortcut the README describes: it launches Chrome with the proxy settings applied and certificate errors ignored. Use it only in a test environment you control.

Intercept, search and replay traffic

Hetty logs the requests and responses that pass through the proxy and supports advanced search over them. You can intercept requests and responses for manual review, where you can edit them, send or receive them, or cancel them.

Hetty also includes an HTTP client for creating and editing requests manually and for replaying proxied requests. Scope support and project-based database storage help keep work organised.

  • Browse and search the proxy logs.
  • Intercept and edit requests before they are sent.
  • Replay proxied requests or craft new ones in the HTTP client.
  • Define scope to focus on the targets you are allowed to test.
  • Keep each project in its own database file.

Know the limits before you rely on Hetty

The README states that Hetty is under active development and aims to become an open-source alternative to commercial software like Burp Suite Pro. It does not claim feature parity today. The project's backlog shows the current status.

Only intercept traffic on systems you have permission to test. Intercepting traffic raises legal and ethical issues.

  • Check the backlog for current feature status.
  • Report bugs and request features through GitHub issues.
  • Ask questions and get troubleshooting help in GitHub discussions or the Discord server.

What people use it for

  • Testing a web application's requests and responses during a authorised security assessment.
  • Logging and searching HTTP traffic from a browser session during bug bounty work.
  • Intercepting a request, editing a parameter and sending it on to see how the server responds.
  • Replaying a proxied request from the HTTP client to check how it behaves.

Frequently asked questions

Is Hetty free?

Hetty is released under the MIT licence, which is listed in its README and LICENSE file. The source is open and the project describes itself as an open-source alternative to commercial tools like Burp Suite Pro.

How do I install Hetty on Mac, Linux or Windows?

Use brew install hettysoft/tap/hetty on macOS, sudo snap install hetty on Linux, or add the hettysoft Scoop bucket and run scoop install hettysoft/hetty on Windows. You can also download a release from GitHub.

Do I need Docker to run Hetty?

No. Docker is only needed if you use the Docker option. Hetty can also be installed with a package manager or from a GitHub release binary.

Is Hetty a full replacement for Burp Suite Pro?

Not yet by the project's own account. The README says Hetty is under active development and aims to become an alternative to Burp Suite Pro. Check the project backlog for current feature status.

How does Hetty compare to Burp Suite Community, OWASP ZAP or mitmproxy?

These are comparable projects, and the source does not include a feature comparison. Try the tools on a test environment you are allowed to use and compare the features you need, such as logging, search, interception and replay.

Why does Hetty ask me to install a root CA certificate?

Hetty works as a man-in-the-middle proxy, so it generates a root CA certificate that your browser or tool must trust to inspect HTTPS traffic. The certificate is stored at ~/.hetty/hetty_cert.pem by default. The Getting started doc at hetty.xyz covers the setup.

New agent skills, repos and AI tools — every week

The best new skills and open-source projects, the fastest-growing repos, and one free prompt. Five minutes to read. Unsubscribe anytime.

Our verdict

Hetty suits security researchers and bug bounty hunters who want a free, open-source proxy with logging, search, interception and replay, and who are comfortable running a local proxy and trusting a root CA certificate. It is not a finished, feature-complete replacement for Burp Suite Pro, and it is a poor fit for non-technical users who need guided, point-and-click setup. Use it only on systems you have permission to test.

Install options & downloads