Getting Started
Welcome to gori. This section takes you from a clean machine to a live proxy session: traffic in History, a few Day-1 keys under your fingers, and a first Repeater.
What You'll Learn
- How to install and build gori
- Starting the proxy and trusting the root CA (including a pre-trusted browser)
- Capturing, filtering, and inspecting your first flows
- The two discovery surfaces: command palette (
Ctrl-P) and space menu (Space) - Sending a flow to Repeater / Fuzzer and running one send
- Where gori stores its data and how to configure it
What Is gori?
gori (고리, Korean for ring, link, loop) is a keyboard-driven HTTP/HTTPS intercepting proxy and web-hacking toolkit that runs entirely in your terminal. It sits in the loop between your client and the target, records every request/response as a flow, and gives you a pentest workbench to inspect, replay, fuzz, and scan that traffic without leaving the shell.
It understands HTTP/1.1, HTTP/2, WebSocket, gRPC, and Server-Sent Events, and decodes common formats like JWT, SAML, and GraphQL inline. Everything you can do in the TUI is also reachable non-interactively through gori run and the built-in MCP server, so agents and scripts can drive the same project.
Next Steps
- Installation: Homebrew, the AUR, Docker, a binary, or from source
- Quick Start: capture, keys, and your first Repeater
- Configuration: settings, storage, and the CA