caido-proxy

What problem does it solve?

Security testers and red teamers waste hours manually sifting through large volumes of captured HTTP proxy traffic to identify vulnerabilities, test modified requests, and document security findings.

Core Features & Use Cases

• HTTP Traffic Search: Use HTTPQL to quickly filter Caido proxy history for specific requests, headers, response codes, or body content relevant to security testing.
• Request Replay & Validation: Send modified versions of captured requests to test for vulnerabilities like IDOR or broken authentication.
• Fuzzing Result Triage: Review and analyze automated fuzzing session results to identify anomalous responses that indicate potential vulnerabilities.
• Finding Documentation: Log security findings directly associated with relevant proxy requests to streamline reporting and remediation tracking.

Quick Start

Use the caido-proxy skill to search your Caido proxy history for all POST requests to the /api/users endpoint and replay the first result with a modified user ID to test for insecure direct object reference vulnerabilities.