Moxy
Open-source DAST tool for pentesting powered by agentic AI capabilities supporting Ollama and OpenAI.
0 projects
About Moxy
Moxy is a next-generation Man-in-the-Middle (MITM) proxy and Dynamic Application Security Testing (DAST) tool designed for ethical security research. It leverages MITMproxy to capture, analyze, and modify HTTP/HTTPS traffic in real-time. The tool features an optional agentic AI layer that can reason about an application's attack surface, replay or modify traffic, and drive browser sessions via browser-use to generate test scenarios. By default, Moxy operates as a standard intercepting proxy without requiring AI credentials. When enabled, it supports local processing via Ollama or cloud-based analysis through OpenAI. The system uses a modular architecture with a Python backend (managed by `uv`) and a React-based frontend, and it can be deployed via Docker. Data is persisted in individual SQLite databases for each project.
Summarised from the official page linked above.