Guide
In-depth guides to working with gori. Each tab in the TUI is a focused tool; together they cover a full assessment from capture to report.
Topics
Core β the capture-to-triage workflow:
- Proxy & History: capture, intercept, scope, import, match & replace, host overrides.
- Repeater & Fuzzer: the request workbench, env tokens, and the Intruder-style fuzzer.
- Scanning & Issues: Probe, Param Miner, Discover (spider & brute-force), Issues, Notes, Comparer, and the retest Diff.
Workbenches β focused, single-purpose analysis tools:
- Decoder: encode / decode / hash pipeline in the TUI.
- JWT: decode, re-sign, and attack JSON Web Tokens.
- Cookie: decode, verify, crack, and re-sign Flask / Rack / Django session cookies.
- Sequencer: grade the randomness of session and CSRF tokens.
- OAST: catch out-of-band callbacks to confirm blind vulnerabilities.
- Authorize: replay a request under several identities to find broken access control.
Automation β the same engines without a terminal in front of them:
- Scripting: drive gori headless with
gori run, for pipelines and CI. - MCP Server: hand the project to an AI agent over the Model Context Protocol.
Customize:
- Settings: the Preferences modal and every section in it.
- Themes: switch between built-in colour themes or create your own.
- Hotkeys: rebind gori's keyboard shortcuts.
The Interface at a Glance
gori is organized into tabs; move between them with [ / ] or jump with number keys. Two discovery surfaces cover almost everything: Ctrl-P opens the command palette (app-wide), and Space opens the space menu (actions for the focused pane). Day-1 chords live in the Quick Start.
| Tab | Purpose |
|---|---|
| Project | Home: scope, host overrides, env vars, description, network |
| Target | Sitemap (host β path endpoint tree) + Discover (spider & directory brute-force) + Diff (retest: two projects at endpoint scale) |
| History | Captured (and imported) flows with full request/response detail |
| Intercept | Hold requests/responses for a manual decision |
| Repeater | Request workbench (incl. WebSocket & gRPC modes) |
| Fuzzer | Intruder-style fuzzer with four attack modes |
| Miner | Hidden-parameter discovery (hidden by default) |
| OAST | Out-of-band callback listener for blind vulnerabilities |
| Sequencer | Token randomness / predictability analysis (hidden by default) |
| Decoder | Encode / decode / hash pipeline |
| JWT | Decode, re-sign, and attack JSON Web Tokens (hidden by default) |
| Cookie | Decode, verify, crack, and re-sign Flask / Rack / Django session cookies (hidden by default) |
| Comparer | Side-by-side diff of two flows |
| Rewriter | Match & Replace rules that rewrite traffic in flight |
| Colormarker | Row-colour rules for History, by query (hidden by default) |
| Probe | Passive & light-touch active security scanner |
| Authorize | Replay a request under several identities to find broken access control (hidden by default) |
| Issues | Triage results by severity and status |
| Notes | Per-project Markdown notes |
| Help | Key bindings and links |
Some tabs are hidden on a fresh install (Miner, Sequencer, Cookie, Colormarker, Authorize) to keep the bar uncluttered; reveal any of them from the tab-bar β― menu, the command palette, or Preferences (Ctrl-,) β Network & Tabs β Tabs. Global lenses that are not tabs: capture (c), intercept (i), and the scope lens (s) toggle from anywhere.