Yakit

About

Yakit is an interactive application security testing platform built around Yaklang, a cybersecurity-focused domain-specific language. Its client is a GUI that controls the Yaklang engine through a gRPC server, which the project describes as easy to deploy and platform-independent, with options for remote deployment or local use on a host.

The platform's core features include an MITM module that the project says can fully replace BurpSuite for intercepting, viewing, editing, and replaying requests and responses, along with passive scanning via plugins. It also provides a Web Fuzzer for interactive HTTP request replay and fuzzing, which uses Fuzztags such as {{int(1-10)}} and {{file(...)}} to generate payloads, and it fills in protocol details like Content-Length and CRLF handling automatically.

Yakit also includes reverse-connection tools based on port protocol multiplexing, covering a Reverse Shell receiver, reverse-connection exploitation payloads, and detection for TCP, DNSLog, and ICMP callbacks. The project states it is intended only for lawful, authorized security testing and learning, and its license terms restrict reverse engineering and commercial use without authorization.