v0.7.0

Cogitator v0.7.0

First public release.

What's included

Proxy Core

• TLS MITM intercepting proxy on 127.0.0.1:8080
• On-the-fly certificate signing via local CA (cogitator_ca.pem)
• HTTP/2 support with ALPN negotiation
• HTTP CONNECT tunneling
• Per-domain TlsAcceptor cache
• Export-CA command with browser/OS trust store instructions

Interception

• Frozen mode — pause live requests with Forward / Drop / Modify decisions
• Inline header and body editor with Ctrl+S commit
• WebSocket interception (RFC 6455) — bidirectional frame proxying, Forward / Drop / Replace per frame
• WebSocket frame history with opcode, direction, and payload preview

History

• 10,000-record FIFO ring buffer of all intercepted exchanges
• 1 MB body cap with truncation tag
• Filter by host, method, status range, and tag
• record_response fills in response side once origin replies

Repeater

• Multi-tab manual HTTP/1.1 request replay
• Send-To-Repeater <id> from history
• Brotli/gzip decompression on resend (strips Accept-Encoding before forwarding)
• Ctrl+Enter to send, Ctrl+N/W/H tab management

Active Scanner

• ScanCheck trait with semaphore-bounded concurrency
• SQL injection — error-based signatures (MySQL, Postgres, MSSQL, SQLite, Oracle)
• XSS — reflected and stored detection with unique per-probe markers
• Path traversal — per path-segment and per query-parameter substitution
• Scan-Site <domain> and Scan-Request <id> commands
• Scan-Diff — compares latest scan snapshot against previous run

Intruder

• Attack modes: Sniper, Battering Ram, Pitchfork, Cluster Bomb
• Lazy wordlist loading
• §PAYLOAD§ marker substitution in request templates
• Fuzz <url> <wordlist> and Intruder-Load <file> commands

Spider

• BFS crawler with configurable depth (Spider-Depth <domain> <N>)
• robots.txt caching and respect
• HTML link and form extraction
• History integration — discovered requests logged automatically
• Anomaly highlighting in Spider view
• truncate_middle() for long URLs in TUI

Scope System

• Include/exclude rules via regex (Scope-Add, Scope-Exclude)
• Ordered evaluation — any exclude match disqualifies the URL
• NDJSON persistence (Scope-List, Scope-Clear)

Sessions

• Cookie jar snapshot and restore (Session-Save, Session-Load, Session-List)

Workspace

• Full session state serialization to .cogitator file
• Workspace-Save, Workspace-Load, Workspace-New
• Scan snapshot accumulation for Scan-Diff

Web & Crypto Analysis

• Full site audit: headers, redirects, tech fingerprinting (Analyze-Site)
• JSON export (Analyze-Site-Json)
• Email security audit: SPF, DKIM, DMARC (Analyze-Email)
• TLS/cookie audit with A–F grading, HSTS analysis, JWT detection in cookies (crypto_forensic)
• CVE lookup via cve.circl.lu

Network & Process

• Active socket listing with reverse DNS resolution and TTL cache (GC)
• Process list, suspicious CPU detection, process kill (GP, Find-Suspicious, Exterminate <PID>)
• Network interface listing (Get-NIF)

Plugin System

• cogitator-plugin-api crate with versioned ABI
• export_plugin! macro for registration
• Built-in plugin registration via inventory
• External .so plugin loading via libloading

Infrastructure

• Structured JSON logging via tracing (cogitator.log)
• All magic numbers centralized in config.rs
• Shared reqwest::Client constructed once at startup
• SiteAnalyzer trait for dependency injection in proxy pipeline
• tokio async runtime with block_in_place for TUI/proxy coexistence
• System notifications via notify-rust

Requirements

• Rust 1.80+ (2024 edition)
• Linux / macOS / Windows