Docs

Grroxy is a cyber security toolkit that blends manual testing with AI Agents.

Getting Started

PageDescription
InstallationInstall Grroxy, set up the CA certificate, and start proxying in minutes.
ArchitectureUnderstand how Grroxy's three components — launcher, app, and tool — work together.
DADQL FilteringDADQL query language for filtering captured HTTP data with expressive operators.

AI

PageDescription
SidebarAI sidebar connected to every tab — analyze requests, suggest tests, and generate payloads.
MCP ServerExpose Grroxy tools via MCP protocol for AI agents to interact with proxy data.
Claude CodeRun security testing from your terminal with Claude Code connected to Grroxy via MCP.

API Reference

Launcher API

Project management, templates, updates, and shared utilities.

SectionDescription
Ca CertificateDownload the CA certificate for HTTPS interception.
ProjectsList, create, and open projects.
CommandsExecute shell commands.
CookSearch patterns, generate and apply transformations.
FilesRead and save files from cache, config, or CWD.
File WatcherSSE-based file watching for template directories.
RegexTest regex patterns and SQL operations.
SqlTest SQL queries.
TemplatesList, create, and delete templates.
ToolsGet tool server info.
UpdatesCheck for and apply updates.

App API

Proxy, intercept, repeater, sitemap, labels, terminal, and MCP server.

SectionDescription
InfoVersion, paths, and project details.
ProxyStart, stop, restart, and list proxy instances.
InterceptForward or drop intercepted requests.
RequestsAdd and modify captured requests.
RepeaterSend requests through the repeater.
HttpSend raw HTTP requests.
SitemapCreate and fetch sitemaps.
LabelsCreate, delete, and attach labels to requests.
CookSearch patterns, generate and apply transformations.
ExtractExtract data from requests.
FiltersCheck DADQL filter expressions.
Cwd File WatcherFile watcher and current working directory.
TerminalManage xterm terminal sessions.
Mcp ServerMCP SSE, message handling, and Claude setup.

Tool API

Fuzzer, SDK, and command execution endpoints.

SectionDescription
SdkSDK status and authentication.
FuzzerStart and stop fuzzing sessions.
CommandsExecute shell commands.