caido-proxy

Search and replay HTTP proxy traffic via Caido MCP tools.

11|1|Updated May 4, 2026
One-click install
npx skills add https://github.com/dreadnode/capabilities --skill caido-proxy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: caido-proxy
Source: https://github.com/dreadnode/capabilities/tree/main/capabilities/web-security/skills/caido-proxy
Command: npx skills add https://github.com/dreadnode/capabilities --skill caido-proxy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security testers and red teamers waste hours manually sifting through large volumes of captured HTTP proxy traffic to identify vulnerabilities, test modified requests, and document security findings.

Core Features & Use Cases

  • HTTP Traffic Search: Use HTTPQL to quickly filter Caido proxy history for specific requests, headers, response codes, or body content relevant to security testing.
  • Request Replay & Validation: Send modified versions of captured requests to test for vulnerabilities like IDOR or broken authentication.
  • Fuzzing Result Triage: Review and analyze automated fuzzing session results to identify anomalous responses that indicate potential vulnerabilities.
  • Finding Documentation: Log security findings directly associated with relevant proxy requests to streamline reporting and remediation tracking.

Quick Start

Use the caido-proxy skill to search your Caido proxy history for all POST requests to the /api/users endpoint and replay the first result with a modified user ID to test for insecure direct object reference vulnerabilities.

Frequently Asked Questions about caido-proxy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I search captured HTTP proxy traffic for specific security vulnerabilities?

You can search captured HTTP proxy traffic using HTTPQL queries to quickly filter Caido proxy history by specific requests, headers, response codes, or body content, eliminating manual sifting during security testing.

Can I replay modified HTTP requests to test for IDOR vulnerabilities?

Yes, you can replay modified versions of captured requests to validate vulnerabilities like IDOR or broken authentication by sending altered requests directly through the Caido proxy integration.

What is the best way to triage fuzzing results from web application security testing?

Triage fuzzing results by reviewing and analyzing automated fuzzing session outputs to identify anomalous responses that indicate potential vulnerabilities within your captured proxy traffic.

How do I document security findings directly from captured proxy requests?

You can log security findings directly associated with relevant proxy requests to streamline reporting and remediation tracking without manual context switching between tools.

Does Caido proxy support filtering large request histories during red teaming workflows?

Yes, Caido proxy supports fast filtered search of large request histories using HTTPQL, enabling red teamers to quickly locate specific requests, headers, or response codes relevant to their testing.

When do I need HTTPQL queries for web security testing?

You need HTTPQL queries when manually sifting through large volumes of captured HTTP proxy traffic becomes inefficient, allowing you to filter history for specific security testing criteria quickly.