Caido

Lightweight web security auditing toolkit

Description

Caido is a lightweight, fast web security auditing tool. Think of it as a modern alternative to Burp Suite, built with performance in mind. Features include request interception, replay, and automation.

Installation

                        BASH
                        
                            # Download from https://caido.io/download
# Available for Linux, macOS, Windows

# Linux AppImage
chmod +x caido-desktop-linux-x86_64.AppImage
./caido-desktop-linux-x86_64.AppImage

Key Features

Intercept — Capture and modify HTTP/S requests
Replay — Resend modified requests
Automate — Script workflows with JavaScript
Search — Full text search across all traffic
Sitemap — Visual sitemap generation

Basic Usage

                        TEXT
                        
                    

                            1. Launch Caido and configure browser proxy (default 127.0.0.1:8080)
2. Install Caido CA certificate for HTTPS
3. Browse target — all traffic captured
4. Use Intercept tab to modify requests in transit
5. Use Replay tab to resend and modify specific requests
                        

Tips

                        TEXT
                        
                            # Scope configuration
Settings → Scope → Add target domains

# Export requests
Select request → Export as cURL/raw

# Keyboard shortcuts
Ctrl+I — Toggle intercept
Ctrl+R — Send to Replay

Back to Miscellaneous