Crusader Security

Crusader is a desktop or cli HTTP intercept proxy tool designed for web application security testing, bug bounty hunting, and penetration testing. It functions as an alternative to tools like Burp Suite Pro, offering a local-first architecture where all captured data is stored in a SQLite database on the user's machine with no app telemetry. Core capabilities include: - HTTP/1.1, HTTP/2, and WebSocket proxy interception with request/response inspection - Repeater with automatic line-level response diffing against a baseline - Attack Studio for parameter fuzzing, ID sweeping, and anomaly clustering - Active and passive scanning for vulnerabilities including BOLA/BFLA/IDOR, GraphQL, OAuth, SQLi, and command injection - Built-in Beacon for out-of-band (OAST) DNS, HTTP, and SMTP callbacks - Native Android mobile interception with Frida integration for certificate pinning bypass in a single click - Browser-impersonation TLS transport (Chrome/Firefox/Safari fingerprints) to avoid anti-bot fingerprint blocking - Identity Shadow Replay for replaying captured requests as alternate principals to test authorization boundaries - A JavaScript plugin system that automatically exposes plugins as GUI panels, CLI verbs, and MCP tools - A full CLI with 40+ verbs and an MCP server for agent-driven workflows Crusader supports importing existing project files from Burp Suite (.burp), Caido, HAR, and Fiddler SAZ formats. The tool targets individual security researchers and bug bounty hunters, with a Squad tier for small teams. Pricing includes a free tier, a Founder's Edition at $249/year, a Hunter Pro tier at $499/year, and a Squad tier at $699/seat/year. A 14-day full-featured trial is available with email only, no credit card required.