ChYing  by yhy0

Web security testing toolkit for dynamic analysis

Created 2 years ago
608 stars

Top 54.0% on SourcePulse

GitHubView on GitHub
Project Summary

An open-source, interactive penetration testing platform designed as a lighter, more modern alternative to Burp Suite. It targets security professionals and enthusiasts seeking a customizable, fast-starting tool with a contemporary UI, integrating both interactive features and automated scanning capabilities.

How It Works

Built with a Go backend and Vue 3/TypeScript frontend using the Wails v3 framework, ChYing leverages AI assistance for its modern Glassmorphism UI. It combines a core HTTP proxy, repeater, and intruder module with integrated capabilities from the Jie scanner for passive and active vulnerability detection, all powered by a high-performance Go backend and local SQLite storage.

Quick Start & Requirements

  • Primary install / run command: Requires cloning the repository and building the application from source. Specific build instructions or pre-compiled binaries are not detailed.
  • Non-default prerequisites and dependencies: Implies Go and Node.js environments are needed for building. No specific hardware (GPU, CUDA) or OS requirements are listed.
  • Estimated setup time or resource footprint: Not specified.
  • Links:
    • ChYing GitHub: https://github.com/yhy0/ChYing
    • Jie GitHub: https://github.com/yhy0/Jie

Highlighted Details

  • Modern Glassmorphism UI with dark/light themes and responsive design.
  • Integration of the Jie scanner for comprehensive passive and active vulnerability assessments (XSS, SQLi, SSRF, RCE, Nuclei POCs).
  • AI-assisted development process enabling a sophisticated UI despite limited frontend expertise.
  • Lightweight architecture with Go backend and SQLite database for fast startup and local operation.

Maintenance & Community

Primarily a solo effort by yhy0. No community channels (Discord/Slack), sponsorships, or detailed roadmap are mentioned. The author encourages "Starring" the repository for support.

Licensing & Compatibility

License type is not specified in the provided text. Compatibility notes for commercial use or closed-source linking are not specified, contingent on license clarification.

Limitations & Caveats

The project is positioned as a lighter, more modern alternative to Burp Suite, not a direct replacement, suggesting it may not match the feature depth or maturity of commercial offerings. Specific bugs, unsupported platforms, or alpha status are not detailed. The author acknowledges the tool is "not perfect" and has "many areas for improvement."

Health Check
Last Commit

2 days ago

Responsiveness

Inactive

Pull Requests (30d)
0
Issues (30d)
4
Star History
198 stars in the last 30 days

Explore Similar Projects

Feedback? Help us improve.