DEV Community

Jojin John
Jojin John

Posted on

Building CyvoraX Suite: An Open-Source Web Security & Penetration Testing Workbench

#opensource #java #webdev #cybersecurity

Building CyvoraX Suite: An Open-Source Web Security & Penetration Testing Workbench

Hello everyone! πŸ‘‹

Over the past several months, I've been working on CyvoraX Suite, an open-source desktop application for web security testing and penetration testing.

The project is still under active development, and I'm sharing it early because I believe open-source software improves when it's built with community feedback rather than behind closed doors.

Why I Started This Project

As someone interested in cybersecurity and bug bounty hunting, I wanted to understand how professional web security tools work under the hood.

Rather than simply using existing tools, I wanted to explore questions like:

  • How does a MITM proxy intercept HTTPS traffic?
  • How can HTTP requests and responses be modified efficiently?
  • What does a scalable plugin architecture look like?
  • How can AI assist security researchers without replacing human analysis?

Those questions eventually became CyvoraX Suite.

Tech Stack

The project is primarily built with:

  • Java 17
  • JavaFX
  • Netty

To keep the architecture modular, some components are implemented using:

  • Rust
  • Go
  • C
  • C++
  • C#

Current Features

Current functionality includes:

  • πŸ›‘οΈ MITM Interception Proxy
  • 🌐 HTTP Request & Response Editor
  • πŸ—ΊοΈ Target Site Mapping
  • ⚑ Turbo Intruder
  • πŸ€– AI Vulnerability Assistant
  • πŸ”Œ Modular Plugin Architecture

Current Status

The project is functional, but it is not feature complete.

Some areas still need work, including:

  • UI/UX improvements
  • Additional proxy features
  • More scanners
  • Better documentation
  • Performance optimizations
  • Testing
  • Plugin ecosystem

Looking for Contributors

I'd love to collaborate with developers interested in:

  • Java
  • JavaFX
  • Netty
  • Rust
  • Go
  • C/C++
  • UI/UX
  • Documentation
  • Web Security
  • Testing

Whether you're fixing bugs, improving the UI, writing documentation, or implementing new features, every contribution is appreciated.

Roadmap

Some of the features I'm planning include:

  • HTTP/3 support
  • Additional vulnerability scanners
  • Plugin SDK improvements
  • Better AI workflows
  • Performance optimizations
  • Improved reporting
  • More cross-platform support

Feedback Welcome

If you have suggestions about the architecture, performance, user experience, or feature set, I'd genuinely appreciate your feedback.

Open-source projects become better through discussion and collaboration.

GitHub

⭐ Repository:

https://github.com/jojin1709/CyvoraX-Suite

🌐 Website:

https://jojin1709.github.io/CyvoraX-Suite/

Thank you for reading!

Top comments (0)