A Postman alternative crafted for pentesters and security engineers. Built with Tauri + React + Rust. No telemetry. No cloud required.
Full-featured request builder with method support, custom headers, authentication, and response inspection. Everything you expect, nothing you don't need.
Built-in fuzzer inspired by ffuf. Define wordlists, set match conditions, configure threads. Discover endpoints without leaving the interface.
Your data stays on your machine. No accounts, no cloud sync by default, no telemetry. Collections stored locally in human-readable JSON.
Craft requests with precision. Support for all HTTP methods, custom headers, query parameters, and body formats. Variables, environments, and pre-request scripts for complex workflows.
No more context switching between your HTTP client and ffuf. HttpFuzzer brings fuzzing capabilities directly into your workflow with a familiar interface and powerful configuration.
├── pentest-project-alpha/
│ ├── collection.json
│ ├── environment.json
│ └── requests/
│ ├── auth-bypass.json
│ └── sql-injection.json
├── bug-bounty-targets/
│ └── collection.json
└── .sync-config # optionalYour collections live on your filesystem in plain JSON. Version control them with Git. Back them up how you want. No proprietary formats, no vendor lock-in.
Lightweight runtime with native system access. Smaller binaries than Electron, lower memory footprint, better security model.
RuntimeComponent-based UI with TypeScript. Fast iteration, predictable state management, and a rich ecosystem.
FrontendPerformance-critical operations in Rust. Memory safety without garbage collection. Native speed for fuzzing and file operations.
BackendNo telemetry, no analytics, no phone-home. Your requests and collections never leave your machine unless you explicitly configure sync.
Works entirely offline. No account required. No internet dependency for core functionality.
Open source under MIT license. Audit the code yourself. Contribute improvements. Fork it if you want.
Download HttpFuzzer for your platform. Free, open source, no strings attached.
Or build from source:
git clone https://github.com/Xyloforge/http-fuzzer && cd http-fuzzer && cargo tauri build