Gulpsuite v0.1.0 (Stable) — Gulp it before burp

Full Changelog: v0.0.9...v0.1.0

Gulpsuite v0.0.9 — Gulp it before burp

Full Changelog: v0.0.8...v0.0.9

Gulpsuite v0.0.8 — Gulp it before burp

Gulpsuite v0.0.8 — "Gulp it before burp"

• Real-Time Scanner → Logger Integration (proxy.rs, scanner.rs, logger.rs, dashboard.rs): Every HTTP request and payload sent by the Scanner (crawl, active SQLi/XSS/SSRF/CMDi/SSTI probes, CVE probes, Nuclei YAML templates, and BChecks), Repeater, Intruder, and Discover now streams directly into Logger and Dashboard → Logger.
• UI & Functional Bug Fixes (repeater.rs, mod.rs, decoder.rs, proxy.rs, intruder.rs, collaborator.rs, organizer.rs, comparer.rs, sequencer.rs, discover.rs):
  • Fixed Repeater response header spacing (Response 200 18 ms) and Inspector sidebar ›/× button clipping.
  • Fixed Decoder Stage 2 output pane width to match Stage 1 input pane.
  • Unified Intruder attack results header and body into a single aligned Grid with full-row click selection.
  • Removed .stick_to_bottom(true) scroll jumping in Logger, added full-text/method/status filtering, and auto-selected the newest entry.
  • Removed blurry double-pass text rendering on unread Collaborator rows and added seed fallback in Discover.

Gulpsuite v0.0.7 — Gulp it before burp

Gulpsuite v0.0.7 — "Gulp it before burp"

• Responsive Dashboard & Issues Layout (dashboard.rs, target.rs, scanner.rs): Eliminated overlapping icons/columns in Most serious vulnerabilities found (live), and made the Issues filter bar, scanner progress banner, 5-column Discovered issues table, and Advisory title wrap and scale responsively across narrow and wide panes without overlap.
• Smooth Anti-Aliased Fonts & 4x MSAA Across All OSes (gulpsuite.rs, app.rs): Embedded Lato-Regular.ttf and SourceCodePro-Regular.ttf directly into the binary, and enabled 4x MSAA hardware anti-aliasing (multisampling: 4) + vector feathering (feathering: true) on Linux (CachyOS/Arch/Ubuntu), Windows, and macOS.
• Spec-Compliant Type-2 ELF + SquashFS AppImage (Gulpsuite-0.0.7-x86_64.AppImage) & Native CachyOS/Arch Package (gulpsuite-0.0.7-1-x86_64.pkg.tar.gz).

Gulpsuite v0.0.6 — Gulp it before burp

Gulpsuite v0.0.6 — "Gulp it before burp"

• CachyOS / Arch Linux AppImage & Native pacman Package: FUSE-free portable Gulpsuite-0.0.6-x86_64.AppImage (--install, --appimage-extract, --appimage-extract-and-run) and native gulpsuite-0.0.6-1-x86_64.pkg.tar.gz + packaging/arch/PKGBUILD.
• Crisp Font Rendering on Linux CachyOS & Live UI Zoom: Automatic CachyOS/Arch static TrueType font discovery (/usr/share/fonts/TTF/, /usr/share/fonts/noto/, /usr/share/fonts/liberation/, fc-match with variable/light font filtering), disabled mesh feathering on Linux, and live Display scaling (UI Zoom: 90% .. 175%) in Settings → User interface.
• 100% Certificate Generator & CA Import/Export Wizard: Full X.509v3 CA & per-host certificate generator supporting all 4 listener modes (CA-signed per-host, Self-signed, Specific hostname, Custom certificate), live Regenerate CA certificate, and the Import / export CA certificate wizard (DER, PEM, PKCS#12, and raw PKCS#8 DER private key).
• Official Gulpsuite Logo & Icons, Rate this at GitHub, and Clickable/Toggleable Scan & Task Cards.

Gulpsuite v0.0.5 — Gulp it before burp

Gulpsuite v0.0.5 — "Gulp it before burp"

• Official Gulpsuite Logo & Native OS App Icons: Integrated across window titlebars/taskbars, macOS .app bundles (Gulpsuite.icns), Windows executables & shortcuts (gulpsuite.ico), Linux desktop entries, Setup Wizard, and documentation.
• Upgraded Settings Dialog & 5-Tab Proxy Listener Editor: Hierarchical navigation tree, All | User | Project filter pills, Project setting / User setting badges, and full 5-tab Add / Edit proxy listener modal (Binding, Request handling, Certificate, TLS Protocols, HTTP).
• Worldwide CVE / Retire.js / Live OSV.dev Vulnerability Audit & Native Nuclei YAML Engine.

Gulpsuite v0.0.4 — Auto Gzip/Deflate Decompression, WebSockets History Table, Site Map Folder Collapse & Worldwide CVE Audit

Gulpsuite v0.0.4 release: automatic gzip/deflate & chunked HTTP response decompression across Proxy/Repeater/Intruder/Scanner, upgraded WebSockets History table + permessage-deflate frame inflation, collapsible Site Map host/folder/query tree nodes, self-extracting attached Chromium setup wizard (Publisher: Aryma-f4), worldwide CVE/OSV/Retire.js deep audit, and Gulp branding across all 183 KB definitions.

Gulpsuite v0.0.3 — Worldwide CVE/OSV Deep Audit, Dockable Inspector & Notes, and Responsive Setup Wizard

Gulpsuite v0.0.3

Highlights

• Worldwide CVE / OSV / Retire.js Deep Audit & Crawl:
  • Embedded all 477 Retire.js + modern npm/JS library vulnerability ranges in a zero-heap-allocation static table.
  • Added real-time OSV.dev / NVD / GHSA () live CVE querying during Deep Audit & Crawl for any detected package/version.
  • Added active origin-level high-impact CVE & exposure probes ( Next.js auth bypass, / Apache path traversal, / Jetty/Tomcat normalization bypass, Spring Boot Actuator exposure, , ) verified against the baseline response.
• Responsive Standalone Setup Wizard (Publisher: ):
  • Remastered and with pinned bottom navigation bar, automatic compact/sidebar responsive layout, hidden shortcut creation (zero console flashes or PowerShell cold-start lag), and verified Publisher ****.
• Stability & Memory Optimizations:
  • Fixed header syntax-highlighting length mismatch () and clamped editor cursor ranges so sending requests with markers from Intruder to Repeater never panics or closes.
  • Bounded active-scan in-flight probe tasks per page and capped highlight cache to keep idle RAM at ~50 MB and active scan RAM minimal.

Gulpsuite v0.0.2

Gulpsuite v0.0.2

• Responsive Window & Split Layouts: Full-width proportional column scaling and dynamic height adaptation across Target (Site map & Issues), Proxy (HTTP history & Intercept), Repeater, Intruder, and Logger; eliminated 16px horizontal split overflow.
• Crisp Vector Icons & Symbol Font Fallbacks: Replaced missing Unicode glyphs with vector icons and cross-platform symbol font fallbacks so no missing-glyph boxes appear on macOS, Windows, or Linux.
• Scanner Loading Bar & Accuracy: Added animated #5B4FFF purple pill progress bar with scanning.svg radar-pulse icon and severity pills; tightened active/passive scanner checks with baseline differential verification and host-level passive issue consolidation.
• In-Place Selection Encoding & CWE Hyperlinks: Right-click Convert selection (Base64 encode/decode, URL encode/decode, HTML encode/decode, Hex encode/decode) replaces blocked text in-place across editors; CWE/CAPEC and reference items in Target -> Issues and Advisory are clickable hyperlinks.
• Memory & Performance Optimizations: Replaced per-frame ps/sysctl subprocess spawning with in-process proc_pid_rusage (ri_phys_footprint), shared Arc<rustls::ClientConfig> across HTTPS probes, and cached HTTP history rows and syntax-highlighted display layouts.

Gulpsuite v0.0.1

Gulpsuite v0.0.1

Gulpsuite is a native, cross-platform web application security testing and HTTP/HTTPS interception suite built in Rust (eframe / egui + tokio + rustls).

---

Screenshots

1. Dashboard (Light & Dark Themes)

Live task orchestration (Live passive crawl from Proxy, Live audit from Proxy, active/crawl scan tasks), categorized Issue activity with severity & confidence badges, interactive Advisory & Request/Response evidence tabs, and bottom Event log / All issues drawers.

---

2. New Scan Launcher (Crawl and audit / Crawl / Audit selected items / API-only scan)

Standalone scan configuration window featuring #26649D navigation tiles (Scan details, Scan configuration, Application login, Resource pool), full-card clickable scan type and preset cards (Crawl strategy: Fastest / Faster / More complete / Most complete & Audit coverage: Critical issues only / Light / Medium / Thorough), OpenAPI/SOAP/Postman API definition parser, and custom BChecks support.

---

3. Target (Site map / Scope / Issue definitions)

Hierarchical host/folder/endpoint tree with custom vector node icons, Contents & Issues split views, target scope inclusion/exclusion rules, and searchable vulnerability knowledge base.

---

4. Proxy (Intercept / HTTP history / WebSockets history / Proxy settings)

MITM HTTP/1.1, HTTP/2, TLS (dynamic per-host X.509 certificate minting via rcgen + rustls), and WebSocket interception proxy with live Intercept queue, Configure filter modal (Settings mode & Bambda script mode), and 9-section Proxy settings (listeners, request/response/WebSocket interception rules, response modification rules, match & replace rules, TLS pass through, and miscellaneous options).

---

5. Intruder (Sniper / Battering ram / Pitchfork / Cluster bomb)

Multi-tab automated fuzzing and brute-force workbench with § payload position markers (Add §, Clear §, Auto §), 19 payload generator types, 13-rule Payload processing pipeline, Payload encoding, Resource pool concurrency & throttling, Grep - match / extract / payloads, and real-time results table.

---

6. Repeater (Getting started & Multi-Tab Request/Response Workbench)

Interactive HTTP request manipulation and replay across multiple grouped tabs, featuring:

• 50/50 Getting Started guide when first opened
• Single-row Action Toolbar: Send + ▼ group send (sequence single connection, sequence separate connections, parallel), Cancel, < / History ▼ / > with per-tab exchange history, Follow redirection, tab-specific ⚙ connection/header/redirect settings, and Target: / Override SNI configuration
• Line-numbered Request & Response editors/viewers with [ Pretty | Raw | Hex | Render ] [\n] [≡] pill bars and full HTTP/HTML/JSON/JS syntax highlighting.

---

7. Decoder, Comparer, Sequencer, Collaborator, Logger, Organizer, Extensions & Discover

• Decoder: Multi-layer Smart decode, URL, HTML, Base64, ASCII hex, Gzip, and SHA-256/SHA-512/MD5 transformations with live Text & Hex dump views.
• Comparer: Word-level and Byte-level visual diff engine for comparing any two requests or responses.
• Sequencer: FIPS-style token randomness and entropy analyzer (character-level & bit-level uniformity across live captures or manual token lists).
• Collaborator: Out-of-band (OOB) interaction client with payload generator and polling.
• Logger: Full-fidelity stream of HTTP, WebSocket, DNS, and SMTP traffic across all tools.
• Organizer: Long-term request/response storage with collections, notes, and search.
• Extensions (Bambda): Live HTTP traffic filter and transformation scripting engine.
• Discover: Threaded directory and content discovery scanner.
• In-App Auto-Updater: Automatic startup & on-demand (Help -> Check for updates…, Settings -> Suite -> Software Updates, Extensions -> Updates) GitHub Releases checker with SHA-256 verification and 1-click native installer launch across macOS, Windows, and Linux.

---

Cross-Platform Installers (v0.0.1)

Platform	Architecture	Installer Packages	Format
macOS (Apple Silicon)	arm64	Gulpsuite-0.0.1-macos-arm64.dmg / Gulpsuite-0.0.1-macos-arm64-setup.pkg	macOS Disk Image (.dmg) & Native GUI Setup Package (.pkg)
macOS (Intel)	x86_64	Gulpsuite-0.0.1-macos-x64.dmg / Gulpsuite-0.0.1-macos-x64-setup.pkg	macOS Disk Image (.dmg) & Native GUI Setup Package (.pkg)
Windows	x86_64	Gulpsuite-0.0.1-windows-x64-setup.exe	Windows Graphical Setup Wizard (.exe)
Linux	x86_64	Gulpsuite-0.0.1-linux-x64-setup.run / gulpsuite_0.0.1_amd64.deb	Self-Extracting Setup Installer (.run) & Debian/Ubuntu Package (.deb)

---

Building & Running

Prerequisites

• Rust toolchain (rustup, cargo 1.78+)
• Python 3 (for cross-platform installer packaging)

Build Release Binaries & Run Full Test Suite

./build.sh

This compiles the optimized release binaries (./gulpsuite and ./gulpsuite-setup) and runs all 450+ unit, integration, and headless egui_kittest UI parity tests.

Cross-Platform Installation

• macOS / Linux:

  ./install.sh
  # or launch the graphical setup wizard:
  ./gulpsuite-setup

• Windows:

  install.bat
  REM or launch the graphical setup wizard:
  gulpsuite-setup.exe

Launch Gulpsuite

./gulpsuite       # macOS / Linux
gulpsuite.exe     # Windows

Build macOS .app Bundle

./bundle.sh
open Gulpsuite.app

---

Keyboard Shortcuts

Shortcut	Action
Cmd/Ctrl + R	Send selected request to Repeater
Cmd/Ctrl + I	Send selected request to Intruder
Cmd/Ctrl + F	Open global Search
Cmd/Ctrl + ,	Open global Settings
Alt + D / T / P / N / R / O / S / E / C / L / G / X / I	Switch directly to Dashboard, Target, Proxy, Intruder, Repeater, Collaborator, Sequencer, Decoder, Comparer, Logger, Organizer, Extensions, or Discover

---

License

Provided for authorized security testing, research, and educational use.