Changelog

Release history

Added

  • Template Actions Engine — Hook-based automation on proxy traffic. Templates run on before_request, request, response hooks with conditions (dadql) and actions.
  • Actions: set, delete, replace (string/regex), create_label, send_request
  • _templates collection — DB-backed template storage on launcher with migration + default seed
  • Default templatesextensions, mime, paths, proxy-configs embedded in binary, seeded on first run
  • 3-level enable/disable — Global, per-project, per-proxy. New projects and proxies default to enabled.
  • Live reload — Launcher watches templates for changes and notifies running projects
  • /api/templates/check — Validate template YAML before saving
  • /api/templates/info — Full syntax reference for AI agents
  • /api/project/delete — Delete a project, its DB record, and project folder
  • MCP template toolstemplateList, templateRead, templateGetInfo, templateCreate, templateUpdate for Claude Code and MCP clients
  • Frontend AI tools — Template CRUD tools in AI SDK
  • Proxy auto-color — New proxies get a color from the palette automatically
  • Frontend — Template editor with all 5 actions (create_label, set, delete, replace, send_request), shared ColorDialog, editable author, sidebar status indicators
  • E2E test script — Full integration test: project creation, template CRUD, proxy traffic, label verification, send_request, toggles, restart persistence

Fixed

  • Header matchingRequestUpdateKey and RequestDeleteKey now handle both Header: and Header: formats
  • Project data preserved on restartResetProjectStates no longer overwrites templatesEnabled
  • send_request action — Fixed host stripping, raw request fetching, line ending normalization, Host header cleanup for direct replay
  • PocketBase JSON field parsing — Launcher hooks now handle types.JsonRaw correctly
v2026.3.9
March 16, 2026
  • Using single frontend for electron and binary.
  • Apple Developer Signed Binaries
  • ZoomSlider, App loading improvements and other misc fixes
Thanks to @Behi_Sec and @Sharo_k_h for suggesting UX improvements and reporting bug. Includes v0.28.0 and v0.27.1

v0.28.0 - Frontend Updates

  • Frontend: Convert to POST / GET — Convert requests between POST and GET, moving params between body and query string. @Behi_Sec
  • Frontend: Duplicate tab — Duplicate the active data tab including all persisted filters. @Behi_Sec
  • Frontend: Decoder panel stay minimized — Decoder panel stays minimized after user manually minimize it. @Behi_Sec
  • Frontend: Toggle sidebar — Show/hide the sidebar. @Behi_Sec
  • Frontend: Custom tab names — Ability to name tabs. @Behi_Sec
  • Frontend: Open in new tab — Open a request in a new tab from proxy or data tabs. @Behi_Sec
  • Frontend: Auto-remove headers — Filter to auto-hide unnecessary headers. @Behi_Sec
  • Frontend: Search bar — Unified search icon for general search in Data tab. @Behi_Sec
  • Frontend: New request popup — A button to create a new request.
  • Frontend: Send request shortcut — Shortcut to send the request
  • Intercepted landing page — Browser now opens a custom intercepted.html page (served via file://) instead of grroxy.com. So we don't capture unwanted traffic.
  • /api/request/parse endpoint — Parse raw HTTP request/response into structured breakdown (method, path, query, headers, body). Uses existing rawhttp.ParseRequest and rawhttp.ParseResponse.
  • Frontend: Filter AddNew and Edit Popup — Add, edit filters from UI.
  • Frontend: Proxy page — Improved UI
  • Frontend: Cmd+Enter to send — Keyboard shortcut to send requests.

Fixed

  • Proxy Timeout — There waas a 60sec timeout for intercepting the request. @Sharo_k_h
  • Proxy Pastebin — Proxy pastebin was not working. @Sharo_k_h
  • Frontend: Repeater sort — Fixed repeater index sorting bug. @Sharo_k_h
  • Frontend: Proxy pastebin — Fixed proxy pastebin not working. @Sharo_k_h
  • Frontend: Long filter view — Fixed broken view when filter is long. @Behi_Sec
  • Frontend: Title bar tooltips — Tooltips in title bar were positioned at top-left corner.
  • Intercept counter not updating on toggle off — Per-proxy intercept counter now resets to 0 immediately when intercept is disabled.

[2026-MAR] - v0.27.1 - MCP Fixes, Proxy Endpoints & HTTP/2 Parsing

Added

  • Proxy HTTP endpoints/api/proxy/typetext, /api/proxy/waitforselector, /api/proxy/evaluate for browser automation via API.
  • MCP toolslistHosts, getHostInfo, getNoteForHost, setNoteForHost, modifyHostLabels, modifyHostNotes, interceptToggle, interceptPrintRowsInDetails, interceptGetRawRequestAndResponse, interceptAction, proxyList, proxyStart, proxyStop, proxyScreenshot, proxyClick, proxyElements, proxyType, proxyEval, proxyWaitForSelector, proxyListTabs, proxyOpenTab, proxyNavigateTab, proxyActivateTab, proxyCloseTab, proxyReloadTab, proxyGoBack, proxyGoForward.
  • Frontend: AI toolsproxyTypeText, proxyWaitForSelector, proxyEvaluate tool definitions and handlers in AI tools panel.
  • Frontend: backend API methodsproxyTypeText, proxyWaitForSelector, proxyEvaluate in backend_app.ts.
  • Frontend: MCP tools sorted alphabetically in HudTerminal.
  • Frontend: CWD File Explorer — VSCode-style file/folder explorer for browsing, opening, and previewing files from the current working directory.
  • File watcherfsnotify-based file watcher for CWD explorer live updates.
  • Chrome GetElements improved — Added input/textarea/select to interactive element selectors; unique CSS selector paths using nth-of-type.

Changed

  • proxyStart MCP tool — Removed browser and http options; hardcoded to Chrome with auto-assigned HTTP port.

Fixed

  • MCP interceptToggle not interceptingdao.SaveRecord() doesn't trigger OnRecordAfterUpdateRequest hooks; now sets inst.Proxy.Intercept directly in memory.
  • Edited request parsing: HTTP/2 rejectedhttp.ReadRequest requires major.minor format; normalizes HTTP/2HTTP/2.0.
  • Edited request parsing: unexpected EOF — Detects linebreak style (\r\n vs \n) and ensures request ends with double linebreak.
Show details
image ---

⚠️ Important Fix - Action Required

[BUG][FIXED] Electron left orphan processes on quit — Closing the app now kills the entire process group (grroxy, grroxy-app, grroxy-tool) instead of only the parent. Uses detached: true spawn + process.kill(-pid) for group termination. Required Actions: Quit grroxy and run below command to kill the orphan processes ``bash # mac/linux pkill -f 'grroxy-(app|tool)' # windows taskkill /F /IM grroxy-app.exe & taskkill /F /IM grroxy-tool.exe ` ---

Added

MCP Server
  • Built-in MCP server using mcp-go with SSE transport for AI tool integration
  • Tools: version, getRequestResponseFromID, hostPrintSitemap, hostPrintRowsInDetails, sendRequest
  • Endpoints: /mcp/start, /mcp/stop, /mcp/health, /mcp/listtools, /mcp/sse, /mcp/message, /mcp/setup/claude
  • Claude Code integration — /mcp/setup/claude writes .mcp.json + CLAUDE.md automatically
Terminal
  • Xterm scrollback replay — reconnecting clients receive up to 256KB of buffered output on reload
  • Multi-client sessions — up to 10 concurrent WebSocket viewers per terminal session
  • Persistent PTY reader — single goroutine per session broadcasts to all clients
Other
  • Dev UI — SvelteKit app (grx/dev) for interactive API testing #36
  • Updated Electron build script (cmd/electron/build.sh, package.json)

Fixed

  • Proxy timeouts → 10 min — prevents connection failures when requests are held for manual review
  • Stale WebSocket cleanup — all clients closed when a terminal session ends, no more hanging goroutines
  • Scrollback buffer compaction — in-place copy()` prevents unbounded array growth
  • Client cap per session — max 10 concurrent WebSocket connections to prevent resource exhaustion
v2026.3.6
March 7, 2026
Show details
fixed fuzzer and embeded cook in the electron binary
v2026.3.5
March 6, 2026
Show details
Desktop App
Fix error
March 6, 2026
Show details
`` go install github.com/glitchedgitz/grroxy/cmd/grroxy@latest go: github.com/glitchedgitz/grroxy/cmd/grroxy@latest (in github.com/glitchedgitz/grroxy@v0.26.1): The go.mod file for the module providing named packages contains one or more replace directives. It must not contain directives that would cause it to be interpreted differently than if it were the main module. ``
Show details
A cybersecurity toolkit blending manual testing with AI agents. ![Website](https://grroxy.com) ![Discord](https://discord.gg/K8pGK6XatC) image Check out!! https://grroxy.com/
Show details

Repository Rename: grroxy-dbgrroxy


Changed


  • Repository renamed from github.com/glitchedgitz/grroxy-db to github.com/glitchedgitz/grroxy
  • Go module path updated — All imports changed from github.com/glitchedgitz/grroxy-db/... to github.com/glitchedgitz/grroxy/...
  • Self-update URL updated — GitHub releases API URL now points to the new repo
  • Version bumped to v0.26.0

Migration (for users)


  • The old GitHub URL (github.com/glitchedgitz/grroxy-db) will redirect to the new one
  • Update your git remote: git remote set-url origin git@github.com:glitchedgitz/grroxy.git
  • If using go get: go get github.com/glitchedgitz/grroxy@latest
v0.22.0 - WebSocket
January 24, 2026
Show details
WebSocket Proxying & Capture - Full WebSocket proxying support through /rawproxy with MITM capabilities - _websockets collection for storing captured WebSocket messages - WebSocket frame parsing and capture (text, binary, close, ping, pong frames) - Bidirectional message tracking with direction indicators (send/recv) - Message indexing and correlation with HTTP upgrade requests via proxy_id - Support for both ws:// (plain) and wss:// (TLS) WebSocket connections - WebSocket message handler callback (OnWebSocketMessageHandler) - File-based WebSocket message logging with metadata - Automatic HTTP/1.1 enforcement for WebSocket upgrades (prevents HTTP/2 conflicts)
v0.21.0
January 24, 2026
Show details

[2026-JAN] - v0.21.0 - Browser Automation & Data Extraction

Added

  • Browser Automation via Chrome DevTools Protocol (605f41d)
- /api/proxy/screenshot - Capture screenshots (full-page or viewport, optional file save) - /api/proxy/click - Click elements using CSS selectors - /api/proxy/elements - Get clickable elements from current page
  • Data Extraction (5c87dbb)
- /api/extract - Extract fields from database records by host (supports req.*, resp.*, req_edited.*, resp_edited.*)
  • Request Modification (386148b, fc66654)
- /api/request/modify - Modify HTTP requests (set, delete, replace operations) - Wildcard header deletion support (fc66654)
  • System Info (5c87dbb)
- /api/info - Get version, directories, and project info

Changed

  • Enhanced proxy instances with Chrome browser integration (605f41d)
  • Improved request parsing and rebuilding (386148b)

Fixed

  • Content-Length header handling (843820b)
  • HTTP/1.1 protocol improvements (797e28b)
  • TLS browser connection issues (504d8c7)
  • InsecureSkipVerify for testing (7b43171)
  • Zstd decoder support (2a691f0)
v0.20.0
December 24, 2025
Show details

[2025-DEC] - v0.20.0 - Xterm Terminal Integration

  • Web-based terminal support using xterm.js frontend and PTY backend
  • /api/xterm/start - Create new terminal sessions with custom shell, working directory, and environment variables
  • /api/xterm/sessions - List all active terminal sessions
  • /api/xterm/sessions/:id - Close terminal sessions via DELETE endpoint
  • /api/xterm/ws/:id - WebSocket endpoint for bidirectional terminal I/O (input, output, resize, ping/pong)
  • Cross-platform terminal support (Linux, macOS, Windows)
  • PTY (Pseudo-Terminal) integration for full terminal emulation
  • Terminal session management with automatic cleanup on process exit
  • Support for interactive terminal applications (vim, htop, etc.)
  • Terminal resize functionality
  • Comprehensive xterm API documentation
v0.19.0
December 24, 2025
Show details

[2025-DEC] - v0.19.0 - Counter Table & Refactoring #27

Added

  • Counter table for different hook points and intercept operations
  • /api/filter/check - New API endpoint for filter validation using dadql
  • /api/repeater/send - New API endpoint for request replay functionality with automatic database storage
  • Counter support for intercept operations
  • New columns in _data collection: http and proxyid for better request tracking
  • Database unique index logging for better debugging
  • Time logging with all log entries
  • Comprehensive API documentation (api_docs.md) for all three apps (app, launcher, tools)

Changed

  • Merged grrhttp package into rawhttp for better organization
  • Moved packages to internal directory for better encapsulation
  • Moved packages to grx directory for modular organization
  • Renamed api directory to apps for clarity
  • Refactored certificate and profile path handling to use ConfigDirectory
  • Renamed ProjectDirectory to ProjectsDirectory for consistency
  • Updated configuration handling to use ConfigDirectory for certificate paths
  • Commented out verbose logs for cleaner output

Fixed

  • Fixed rawhttp HTTP/2 error handling
  • Fixed config-related issues and path handling
  • Fixed Electron preload issues
  • Fixed Electron build for Windows
  • Fixed macOS error on reopen from dock

Removed

  • Deleted duplicate markdown files
  • Removed unused files and project.go
  • Cleaned up codebase
v0.18.0
December 21, 2025
v0.17.0
October 21, 2025
Show details
v0.17.0
v0.16.0
April 15, 2024
Show details
  • Wappalyzer tech and logo
- Now using glitchedgitz/wappalyzergo
  • Uisng Cook v2.2.1 to wordlists
v0.15.8
March 13, 2024
v0.15.7
March 10, 2024
v0.15.5
March 4, 2024
v0.15.4
February 22, 2024
Show details
Marking version, as this is compatible with Cybernetic UI v0.15.4
v0.15.3
February 16, 2024
Show details
Mainly bug fixes and ui improvements
Show details
  • Fixed linux/mac build caused by using 0644 with make all directory, changed to 0755
  • Enhanced list output to show large records.
  • Enchanced code for serving app
Early Access Release
February 7, 2024
Show details
  • Authenticating Endpoints
  • Added cert here http://127.0.0.1:8090/cacert.crt
  • Terminal Layout Update
Compatible with cybernetic-ui v0.15.1
Show details
https://github.com/glitchedgitz/cybernetic-ui/releases/tag/v0.15.0
  • Label handling shift to backend and improved
  • Intercept OFF by default
  • No Media/CSS using req.ext now, instead resp.mime as using mime method lose imp endpoints.
  • Intercept Filter Update
Show details
frontend https://github.com/glitchedgitz/cybernetic-ui/releases/tag/v0.14.2 Marking this version! As this version works on lables handled by frontend.
v0.14.1
January 3, 2024
v0.14.0
January 1, 2024
First Release
December 31, 2023