Dashboard

The Dashboard is the first view you see when you open Hugin. It combines two roles in one screen: a high-level engagement overview at the top (active scans, recent findings, race-test signals, scope coverage), and the HTTP History panel below it for live flow inspection.

Most hunters live in this view. Treat the rest of the UI as places you visit to take an action and come back.

🔗Overview Panels

🔗RatRace Summary

Total race tests, positive signals, endpoints discovered, code findings. Recent signals stream as they arrive, with severity badges (CleanCatch / DirtyCatch / SilentSuccess / LogicalRace).

🔗Issue Activity

Per-severity counters (Critical / High / Medium / Low / Info) for the active project. Below the counters, a list of the most recent confirmed vulnerabilities with title and severity badge. Click any item to jump to that finding in the Findings tab.

🔗Active Tasks

Shows long-running operations (scans, intruder attacks, crawls, ratrace runs) with progress bars. Click to navigate into the owning view.

🔗Recent Events

Tail of the system event log — extension errors, scope changes, project switches, MCP tool calls. The full log is in the Events view.

🔗HTTP History Panel

The flow table dominates the lower portion of the view. Same data and controls as the standalone Logger view — the panel here is identical, just embedded in the dashboard layout.

Quick reference:

  • Search bar — full-text across method, URL, host, status, body
  • Filter pills — Method, Status, Host, In-Scope, Flagged
  • Source filter — proxy / repeater / scanner / intruder / crawler / mcp
  • Columns — sortable; right-click the header to show/hide columns
  • Selection — click to inspect, shift-click for range, ctrl-click for multi
  • Right-click menu — Send to (Repeater / Intruder / Scanner / Comparer / Findings), Copy as cURL, Flag, Annotate, Delete

🔗Detail Pane

Selecting a flow opens the request/response detail pane. Body content can be viewed in Pretty, Raw, or Hex modes. Headers, cookies, and parameters are surfaced in their own subviews. Persisted intelligence (Nerve findings, reflections, response intel) attached to the selected flow appears alongside the body.

🔗Bulk Actions

Multi-select flows (shift-click, ctrl-click, or select all) to enable the bulk action bar:

  • Bulk send to scanner / intruder / repeater (one attack per selected flow)
  • Bulk flag / unflag
  • Bulk delete
  • Bulk export (JSON, HAR, CSV)
  • Bulk add to organizer with a tag

🔗Keyboard Shortcuts

A handful of the most-used shortcuts (full list and rebinding in Settings → Shortcuts):

  • Cmd/Ctrl+R — Send selected flow to Repeater
  • Cmd/Ctrl+I — Send selected flow to Intruder
  • Cmd/Ctrl+D — Send selected flow to Decoder
  • Cmd/Ctrl+Shift+S — Send to Scanner
  • Cmd/Ctrl+Shift+R — Repeat last request
  • Cmd/Ctrl+Shift+C — Copy as cURL
  • Cmd/Ctrl+U — Copy URL
  • Cmd/Ctrl+E — Export selected flow
  • Cmd/Ctrl+F — Find (in current view)
  • Cmd/Ctrl+Shift+F — Global Search
  • Cmd/Ctrl+G — Go to Flow (paste any flow ID or short prefix)
  • Cmd/Ctrl+K — Command palette
  • Cmd/Ctrl+, — Open Settings
  • Cmd/Ctrl+9 — Switch to Settings view
  • Ctrl+; — Forward intercepted request
  • Ctrl+D — Drop intercepted request
  • Esc — Close dialog

🔗Empty State

On a fresh project the dashboard shows the Quick Start card with three buttons: configure proxy, install CA, launch a browser. The card disappears once flows start arriving.