What about ZAP? https://www.zaproxy.org/