Skip to content

KuroSystems/Proxima_TUI

BranchesTags

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

3 Commits
README.md
README.md
 
 

Repository files navigation


██████╗ ██████╗  ██████╗ ██╗  ██╗██╗███╗   ███╗ █████╗     ████████╗██╗   ██╗██╗
██╔══██╗██╔══██╗██╔═══██╗╚██╗██╔╝██║████╗ ████║██╔══██╗    ╚══██╔══╝██║   ██║██║
██████╔╝██████╔╝██║   ██║ ╚███╔╝ ██║██╔████╔██║███████║       ██║   ██║   ██║██║
██╔═══╝ ██╔══██╗██║   ██║ ██╔██╗ ██║██║╚██╔╝██║██╔══██║       ██║   ██║   ██║██║
██║     ██║  ██║╚██████╔╝██╔╝ ██╗██║██║ ╚═╝ ██║██║  ██║       ██║   ╚██████╔╝██║
╚═╝     ╚═╝  ╚═╝ ╚═════╝ ╚═╝  ╚═╝╚═╝╚═╝     ╚═╝╚═╝  ╚═╝       ╚═╝    ╚═════╝ ╚═╝

⚡ Burp Suite Pro — Reimagined for the Terminal

A blazing-fast, fully offline, Burp Suite–style intercepting proxy & security testing suite
built from the ground up in Rust with a native TUI powered by ratatui.


Version Platform License Language Stars


📦 This repository distributes pre-built executables and CA certificates only.
No source code is included. Download. Run. Hack.


🔮 What is Proxima TUI?

Proxima TUI is a terminal-native web application security testing tool that puts the full power of an enterprise-grade intercepting proxy right in your terminal — zero GUI, zero browser plugins, zero bloat.

Think Burp Suite Professional, but:https://github.com/KuroSystems/Proxima_TUI/releases/tag/v0.1.0-alpha

Burp Suite Pro Proxima TUI
Runtime JVM (Java) Native binary (Rust)
Interface GUI (Swing) Terminal UI (ratatui)
Startup ~10s < 1s
Memory ~800 MB < 50 MB
License $449/year Free
Offline ❌ Needs activation ✅ Fully offline
Extensible Java extensions WASM plugins

🎯 Feature Arsenal

┌─────────────────────────────────────────────────────────────────────────────┐
│                                                                             │
│   🌐 PROXY        │  🔁 REPEATER      │  💣 INTRUDER      │  🔍 SCANNER   │
│   Live intercept   │  Edit & resend    │  Payload attacks  │  Passive +    │
│   HTTP/2 + ALPN    │  Full history     │  4 attack modes   │  Active scans │
│                    │                    │                   │               │
│   🔓 DECODER      │  📊 COMPARER      │  🌐 WEBSOCKETS   │  🤖 AI TAB    │
│   Multi-chain      │  Line/Word/Hex    │  WS intercept     │  Ollama LLM   │
│   Base64/Hex/JWT   │  Diff engine      │  Frame logging    │  Flow analysis│
│                    │                    │                   │               │
│   🧩 PLUGINS      │  ⚙️ SETTINGS      │  🎯 SCOPE         │  📁 PROJECTS  │
│   WASM sandboxed   │  Proxy control    │  Regex rules      │  SQLite DB    │
│   Hot-reload       │  Live config      │  Include/Exclude  │  Save/Open    │
│                                                                             │
└─────────────────────────────────────────────────────────────────────────────┘

🌐 Proxy — Live HTTP/HTTPS Interception
  • Real-time traffic capture with split request/response detail pane
  • HTTP/2 support via ALPN for MITM TLS connections
  • In-scope flow highlighting based on regex scope rules
  • Automatic MITM CA generation on first launch
  • Configurable listen address (127.0.0.1:8080 by default)
  • Mouse wheel scrolling, search (/), and vim-style navigation
🔁 Repeater — Edit & Resend Requests
  • Open any captured flow as editable raw HTTP
  • Async send with full response details (status, headers, body, timing, size)
  • Multi-tab interface with rename support (F2)
  • Send history per tab
💣 Intruder — Automated Payload Attacks
  • Mark positions with §value§ markers
  • 4 attack strategies: Sniper · Battering Ram · Pitchfork · Cluster Bomb
  • Streamed results into a sortable table
  • Status code filtering (0/2/4/5) and CSV export (F9)
🔍 Scanner — Passive & Active Security Scanning
  • Passive: YAML/JSON-based issue definitions against captured traffic
  • Active: Opt-in, scope-gated, non-destructive probes (10 req/s throttle)
  • Severity/confidence filtering, check toggling, JSON/HTML export
  • Findings persisted to project database
🔓 Decoder — Multi-Chain Transform Pipeline
  • Supports: Base64 · Hex · URL · HTML · Hash (MD5/SHA) · JWT · JSON
  • Chain multiple transforms with live preview
  • Reorder transforms with Alt+Up/Down
  • Send selected proxy body directly with Ctrl+D
📊 Comparer — Side-by-Side Diff Engine
  • Line diff, Word diff, and Binary hex diff modes
  • Dual-pane editing for any two inputs
  • Mark two proxy flows with Ctrl+M for instant comparison
🤖 AI Tab — Local LLM Security Analyst
  • Powered by Ollama (fully offline, fully local)
  • Attach any proxy flow with Ctrl+A
  • 6 quick prompt shortcuts (Alt+1..6)
  • Context-aware risk analysis, explanation, and safe next-step suggestions
🧩 Plugins — WASM Extension System
  • Sandboxed WebAssembly modules
  • Host APIs: get_selected_flow · send_request · log_message · add_finding
  • Hot-reload from ~/.proxima/plugins/ or PROXIMA_PLUGIN_DIR
  • Sidecar JSON manifest for metadata and hook registration

Manual Download

Go to Releases → and grab the binary for your platform:

Platform Binary Architecture
🐧 Executable proxima-tui x86_64 (static) 
# Example: Linux
chmod +x proxima-tui
./proxima-tui

🚀 Getting Started

1 ️⃣ Launch Proxima

./proxima-tui

2️⃣ Start the Proxy

Press Tab to navigate to Settings tab → press s to start the proxy listener.

Default listen address: 127.0.0.1:8080
Override: set PROXIMA_PROXY_LISTEN=127.0.0.1:9090 before launch.

3️⃣ Install the CA Certificate

On first launch, Proxima auto-generates a MITM CA:

certs/
├── proxima-ca.pem         ← Import this into your browser/OS
└── proxima-ca-key.pem     ← Private key (keep secure)
📜 Certificate Installation by OS

🐧 Linux (Debian/Ubuntu)

sudo cp certs/proxima-ca.pem /usr/local/share/ca-certificates/proxima-tui-ca.crt
sudo update-ca-certificates

🍎 macOS

sudo security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain certs/proxima-ca.pem

🪟 Windows

certutil -addstore "Root" certs\proxima-ca.pem

🌐 Firefox (all platforms)

Settings → Privacy & Security → Certificates → View Certificates → Import

4️⃣ Configure Your Browser Proxy

Set your browser or system HTTP/HTTPS proxy to 127.0.0.1:8080, then browse normally. All traffic will appear in the Proxy tab.


⌨️ Keyboard Reference

🔀 Global Navigation

Key Action
Tab / Shift+Tab Switch tabs forward / backward
← / → Switch tabs
Ctrl+C / Esc / q Quit
🌐 Proxy Tab
Key Action
j / k or ↑ / ↓ Navigate flows
g / G Jump to first / last flow
/ Search flows
Ctrl+D Send selected body to Decoder
Ctrl+M Mark flow for Comparer
Mouse wheel Scroll details pane
🔁 Repeater Tab
Key Action
Ctrl+Enter Send request
Ctrl+T Open new tab from proxy flow
Ctrl+W Close current tab
F2 Rename tab
Ctrl+← / Ctrl+→ Switch sub-tabs
💣 Intruder Tab
Key Action
F5 Start / Resume attack
F6 Pause attack
F7 Stop attack
F8 Cycle attack type
F9 Export results CSV
0 / 2 / 4 / 5 Filter by status code
🎯 Scope Tab
Key Action
a Add regex rule
e Edit rule
d Delete rule
Space Enable / Disable
i / o Include / Exclude
t Test URL against scope
🔍 Scanner Tab
Key Action
Enter Jump to flow
i/l/m/h/c Filter severity
1/2/3 Filter confidence
[ / ] Select check
e Toggle check
r Reload definitions
x Export JSON/HTML
🔓 Decoder Tab
Key Action
1 – 0 Add transform
Delete Remove transform
Alt+↑ / Alt+↓ Reorder transforms
📊 Comparer Tab
Key Action
Tab Switch pane focus
F3 / w Toggle line / word / binary mode
🤖 AI Tab
Key Action
Ctrl+A Attach selected proxy flow
Alt+1..6 Load quick prompt
Enter / Ctrl+Enter Send prompt
Alt+Enter Insert newline
🧩 Plugins Tab
Key Action
r Reload plugins
e / Space Toggle plugin
j / k Navigate
⚙️ Settings Tab
Key Action
s Start proxy
x Stop proxy
Ctrl+S Save project
Ctrl+O Open project

📁 Project Management

Proxima stores all data in SQLite .db project files.

Environment Variable Purpose
PROXIMA_PROJECT Open a specific project on startup
PROXIMA_SAVE_AS=/path/to/project.db Save-as path (used with Ctrl+S)
PROXIMA_OPEN_PROJECT=/path/to/project.db Open another project (used with Ctrl+O)

If no project is specified, Proxima creates an untitled project in the system temp directory.


🔧 Environment Variables

Variable Default Description
PROXIMA_PROXY_LISTEN 127.0.0.1:8080 Proxy listen address
PROXIMA_PROJECT (temp dir) Project database path
PROXIMA_SAVE_AS — Save project to this path
PROXIMA_OPEN_PROJECT — Open project from this path
PROXIMA_PLUGIN_DIR ~/.proxima/plugins WASM plugin directory
PROXIMA_STDOUT_LOG 0 Set 1 for stdout traffic logs
PROXIMA_INSTALL_DIR /usr/local/bin Custom install directory
PROXIMA_VERSION latest Specific release tag to install
PROXIMA_CA_CERT — Auto-install CA cert path

📂 Repository Structure

This repository contains only pre-built executables and certificates:

BurpSuitePro_TUI/
│
├── 📄 README.md                          ← You are here
│
├── 📁 certs/
│   ├── proxima-ca.pem                    ← MITM CA certificate (import this)
│   └── proxima-ca-key.pem               ← CA private key
│
├── 📁 releases/
│   ├── proxima-tui-x86_64-linux-musl     ← Linux binary (static)
│   ├── proxima-tui-x86_64-apple-darwin   ← macOS Intel binary
│   ├── proxima-tui-aarch64-apple-darwin  ← macOS ARM binary
│   └── proxima-tui-x86_64-windows.exe   ← Windows binary
│
└── 📁 scripts/
    └── install.sh                        ← One-line installer script

⚠️ No source code is distributed in this repository.
Binaries are built via automated CI/CD pipelines from a private codebase.


🛡️ Security & Ethics

╔══════════════════════════════════════════════════════════════════════╗
║                                                                      ║
║   ⚠️  AUTHORIZED TESTING ONLY                                       ║
║                                                                      ║
║   • Only intercept systems you OWN or have WRITTEN authorization     ║
║   • Active scans send real traffic — may trigger IDS/WAF alerts      ║
║   • Keep scope rules narrow and precise                              ║
║   • Respect rate limits and stop if target behaves unexpectedly      ║
║   • Misuse may violate laws including CFAA, CMA, IT Act, etc.       ║
║                                                                      ║
╚══════════════════════════════════════════════════════════════════════╝

Proxima's active checks are designed to be safe and non-destructive, but they still send traffic to targets. You are solely responsible for ensuring you have proper authorization before testing any system.


🤝 Support & Community

Channel Link
🐛 Bug Reports GitHub Issues
💬 Discussions GitHub Discussions
⭐ Star This Repo Help us grow — Give a Star! 


╦╔═╦ ╦╦═╗╔═╗  ╔═╗╦ ╦╔═╗╔╦╗╔═╗╔╦╗╔═╗
╠╩╗║ ║╠╦╝║ ║  ╚═╗╚╦╝╚═╗ ║ ║╣ ║║║╚═╗
╩ ╩╚═╝╩╚═╚═╝  ╚═╝ ╩ ╚═╝ ╩ ╚═╝╩ ╩╚═╝

Built with 🦀 Rust · Powered by Ratatui · Designed for Hackers

© 2025 Kuro Systems — All Rights Reserved



About

Proxima TUI is a terminal-native web application security testing tool that puts the full power of an enterprise-grade intercepting proxy right in your terminal — zero GUI, zero browser plugins, zero bloat.

Topics

api-testingbugbountyburp-suiteburpsuitecybersecuritydevsecopshacker-toolsintercepting-proxypenetration-testingpentestingproxyratatuiredteamreverse-proxyrustsecurity-toolsterminal-apptuiwasm-pluginsweb-security

Resources

Readme
Activity
Custom properties

Stars

0 stars

Watchers

0 watching

Forks

0 forks
Report repository

Releases

Packages

Contributors