caido-mode

What problem does it solve?

This Skill eliminates the tedious manual work of copy-pasting large session cookies and authentication tokens when testing authenticated web endpoints, removing the risk of human error and streamlining security testing workflows that require preserved authentication context.

Core Features & Use Cases

• Preserved Auth Request Editing: Modify paths, methods, headers, or request bodies of existing authenticated requests without losing cookies or tokens, ideal for IDOR, privilege escalation, and header bypass testing.
• Comprehensive Caido API Access: Interact with all Caido features including HTTP history search via HTTPQL, replay session and collection management, scope/filter/environment configuration, findings creation, and intercept control directly from the terminal.
• Real-World Use Case: A security tester can locate an authenticated request in Caido's history, edit the user ID parameter to test for insecure direct object references, and export the modified request as a curl command for reporting, all without manually handling authentication headers.

Quick Start

Use the caido-mode skill to search Caido's HTTP history for an authenticated POST request to /api/user, edit its path to /api/user/999 to test for IDOR vulnerabilities, and export the modified request as a curl command for your security report.