Intercepting, fuzzing and scanning web applications you are authorized to test.
Intercepting proxy and toolkit for testing web applications by hand.