Edit authenticated Caido HTTP requests without losing cookies or tokens.
npx skills add https://github.com/caido/skills --skill caido-mode
Please help me install this Agent Skill. Skill: caido-mode Source: https://github.com/caido/skills/tree/main/skills/caido-mode Command: npx skills add https://github.com/caido/skills --skill caido-mode
This Skill eliminates the tedious manual work of copy-pasting large session cookies and authentication tokens when testing authenticated web endpoints, removing the risk of human error and streamlining security testing workflows that require preserved authentication context.
Use the caido-mode skill to search Caido's HTTP history for an authenticated POST request to /api/user, edit its path to /api/user/999 to test for IDOR vulnerabilities, and export the modified request as a curl command for your security report.
High-intent search queries and answers about installing and using this skill.
By using Caido's HTTP history and replay features via terminal commands, you can modify authenticated requests in-place. This preserves your session cookies and authentication tokens during security testing without manual copy-pasting.
Locate an authenticated request in Caido's HTTP history, edit its user ID parameter to test for insecure direct object references, and export the modified request as a curl command. Authentication context is preserved automatically during IDOR testing.
Yes, executing CLI commands built on the @caido/sdk-client requires Node.js v24+. You also need a running Caido instance and a Personal Access Token to authenticate API requests for security testing.
Yes, you can interact with all Caido features including HTTP history search via HTTPQL, replay session management, scope configuration, findings creation, and intercept control directly from the terminal using the Caido SDK.
Yes, preserved auth request editing supports security testing workflows including privilege escalation, header bypass testing, and API reconnaissance. You modify existing authenticated requests without losing cookies or tokens during privilege escalation testing.
Manual copy-pasting of large session cookies and authentication tokens introduces human error and breaks security testing workflows. In-place request modification with preserved authentication context eliminates this risk when testing authenticated web endpoints.
filipnyquistAnalyze and replay HTTP traffic through the Caido proxy with JSON output.
zebbernIdentify and exploit IDOR vulnerabilities in web applications.
dreadnodeSearch and replay HTTP proxy traffic via Caido MCP tools.
zebbernAutomate Burp Suite web application security testing across intercept, modify, scan, and manual workflows.
