Ogma v0.1.0

Initial public alpha release.

Core proxy

• HTTPS MITM proxy with CA certificate management
• HTTP/1.1, HTTP/2, and WebSocket capture
• HTTPQL query language for filtering history
• Intercept, inspect, edit, forward, and drop requests
• Match & Replace rules with regex, header, body, and query support
• Scope presets with HTTPQL and wildcard support

Replay and automation

• Replay editor with raw HTTP editing and parallel send
• Automate (Sniper, Pitchfork, Cluster Bomb) with payload extractors and matchers
• Race condition testing
• HTTP request sequences with variable chaining

Scanning

• Passive scanner
• Active scanner (SQLi, XSS, SSRF, CMDi, SSTI, path traversal, open redirect)
• Content discovery with 9,300 path wordlist
• Custom passive rules

Utilities

• Decoder/encoder (base64, hex, URL, JWT, hash, crypto)
• Sitemap and extracted endpoints view
• OAST (out-of-band testing) with HTTP, HTTPS, DNS, SMTP listeners
• Compare, Notes, Payloads, Reverse Shell generator

Data and organization

• Project management with named projects and temporary sessions
• HAR import/export, Burp XML import, OpenAPI/Postman import
• Findings panel with CVSS scoring and evidence links
• Exports (CSV, JSON, Markdown, HTML report)

AI and automation

• Integrated AI assistant with 36 built-in tools
• MCP server with 160+ tools for external AI clients
• Headless pentest CLI: ogma pentest <url>
• Visual workflow builder

Plugin system

• JavaScript/TypeScript plugin SDK (@kaijinlab/ogma-sdk)
• Sandboxed backend and frontend plugin execution
• Plugin marketplace with SHA-256 verified installs
• sdk.events, sdk.findings, sdk.requests, sdk.storage, sdk.matchReplace, sdk.workflows, sdk.fs

Desktop

• Electron desktop app (Linux, macOS, Windows)
• Built-in Chromium browser (auto-proxied)
• Auto-updater