OpenTRAP

Linux web application security testing suite positioned as a free alternative to Burp Suite. Pairs an intercepting proxy with Repeater, Intruder, Sequencer, Decoder, Comparer and an out-of-band Collaborator, and runs passive and active scans through a bundled OWASP ZAP engine. Ships as a self-contained AppImage that bundles its own Java runtime, scan engine and a proxy-routed Chromium.