I use ZAP [1] with the OAST add-on for this at the moment. I admit the UX isn't perfect, but it serves my purpose. If I also want control over the responses (e

I use ZAP [1] with the OAST add-on for this at the moment. I admit the UX isn't perfect, but it serves my purpose. If I also want control over the responses (e.g. return a 401 status code for every fifth request), I have a custom extender script [2] for that. [1]: https://www.zaproxy.org/ https://www.zaproxy.org/ [2]: https://www.zaproxy.org/blog/2022-09-13-zap-extender-scripts/#use-zap-as-a-web-server https://www.zaproxy.org/blog/2022-09-13-zap-extender-scripts...