You can check OWASP ZAP
https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project