caido

No entries match these filters. Clear filters

1. v0.59.0 Oct 26, 2026 · issue 121

   Caido v0.59.0 adds AI-generated workflows, cURL import in Replay, TLS pass-through, and multi-instance desktop support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.59.0 https://github.com/caido/caido.git
   # already have the repo? check out this version:
   $ git checkout v0.59.0

   └──▷ HOW TO FIND IT
   Quickly recreate a request observed in another tool without manually rebuilding it in Caido.
   📍In Replay, select Create from cURL, paste your cURL command, and send.
   Reduce log volume during a scoped engagement by recording only traffic that matches your defined scope.
   📍In Traffic Control settings, enable Log only in-scope requests to suppress out-of-scope traffic from the request log.
   • Adds AI workflow generation from natural-language prompts, with support for AWS Bedrock and OpenAI OAuth flow for personal subscriptions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds cURL import in Replay, letting practitioners create requests directly from copied cURL commands.
   • Adds TLS pass-through in Traffic Control, enabling raw TLS traffic to bypass interception.
   • Adds a 'log only in-scope requests' option in Traffic Control to reduce noise in recorded traffic.
   • Adds simultaneous connection to multiple Caido instances from the Desktop app.

   5 details in Everything

2. announced Oct 26, 2026 · issue 123

   caido: Adds Settings > AI > Providers to configure OpenAI, Anthropic, Google Gemini, SpaceXAI, OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code., and Amazon Bedrock from one place with credential testing before⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   ⤢ ⤢ ⤢
   └──▷ HOW TO FIND IT
   Connect a local LM Studio endpoint as a custom AI provider without an API key, so your prompts never leave your machine.
   📍In Caido, go to Settings › AI › Providers › Custom provider. Set Provider ID to a label of your choice, select the matching API type, enter your LM Studio Base URL (e.g. http://localhost:1234/v1), and leave API Key empty. Click Test to verify the connection.
   Keep noise out of a project by recording only in-scope hosts during an engagement.
   📍In Caido, open Intercept › Capture and select In-scope only. Caido will use the active Scope definition and silently pass through any out-of-scope requests without recording them.
   Turn a cURL command from a terminal session or report into a Replay request without manually rebuilding it.
   📍In Caido, open Replay and paste the cURL command (e.g. curl -X POST https://target.example/api/login -H 'Content-Type: application/json' -d '{"user":"test"}') directly into the Replay import area. Caido creates the corresponding request ready to send.
   • Adds Generate action in the Workflows page to produce an editable passive, active, or convert Workflow from a plain-language description.
   • Adds Intercept > Capture menu (marked Experimental) with three recording modes — All traffic, In-scope only, and Custom rules — plus a Passthrough list under the Custom rules mode so hosts on it pass through Caido without being recorded.
   • Adds multi-instance support to Caido Desktop, keeping each connection (local project, remote VPS, second test environment) in its own window simultaneously.
   • Reworks the macOS menu bar app to reopen Instance Manager and reconnect to a running local instance after its window is closed.
   • Adds cURL paste-to-import in Replay, creating the corresponding request directly from a cURL command.
   • Adds Generate action in the Workflows page to produce an editable passive, active, or convert Workflow from a plain-language description.
   • Adds Intercept > Capture menu (marked Experimental) with three recording modes — All traffic, In-scope only, and Custom rules — plus a Passthrough list under the Custom rules mode so hosts on it pass through Caido without being recorded.
   • Adds multi-instance support to Caido Desktop, keeping each connection (local project, remote VPS, second test environment) in its own window simultaneously.
   • Adds cURL paste-to-import in Replay, creating the corresponding request directly from a cURL command.

   1 more in Everything

3. v0.58.3 Sep 4, 2026 · issue 065

   Caido v0.58.3 adds inline autocomplete in the HTTP request editor and lets you add existing Replay requests to pipeline sessions.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.58.3 https://github.com/caido/caido.git
   # already have the repo? check out this version:
   $ git checkout v0.58.3

   • Adds inline autocomplete hints to the HTTP request editor.
   • Enables adding existing Replay requests directly to a pipeline session.

   2 more in Everything

4. v0.58.2 Aug 22, 2026 · issue 054

   Caido v0.58.2 adds progress logging to the project upgrade window for visibility into large migrations.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.58.2 https://github.com/caido/caido.git
   # already have the repo? check out this version:
   $ git checkout v0.58.2

   • The project upgrade window now displays live progress logs during migration, giving visibility into long-running upgrades.

   1 detail in Everything

5. v0.58.0 Aug 20, 2026 · issue 051

   Caido v0.58.0 adds race-condition testing via Replay Pipelines, HTTPQL header/body fields, and a reworked Plugin page.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.58.0 https://github.com/caido/caido.git
   # already have the repo? check out this version:
   $ git checkout v0.58.0

   └──▷ TRY IT
   Isolate Bearer tokenBearer tokenA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. headers or sensitive body patterns in HTTP history without false positives from the rest of the raw request.
   copy

   $ req.header["Authorization"].cont:"Bearer" and req.body.regex:"password=[^&]+"

   Test a login endpoint for race conditions by synchronising the final byte of multiple requests so they arrive at the server simultaneously.
   📍In Replay, select New Session › Pipeline, add the target requests, choose the Last Byte Synchronization strategy, then click Run.
   • Adds req.header, req.header["<name>"], req.body, resp.body, and resp.header fields to HTTPQL, enabling targeted matching on headers and body without scanning raw; supports .eq, .cont, and .regex operators.
   • Adds a new Pipeline Replay session type for race-condition testing, with two strategies: Sequential (ordered) and Last Byte Synchronization (holds the final byte of every request and releases them simultaneously).
   • Reworked Plugin page now shows an Official badge, quality rating, author, download count, and version per plugin; supports filtering by Official or Community and bulk install/update.
   • Customizable sidebar lets users reorder pages and plugins via drag-and-drop, pin frequently used items, hide unused ones, and create custom categories.
   • Pages and plugins are now reachable via Go to in the command palette.

   +1 more show less

   • The same keyboard shortcut can now be assigned to multiple commands simultaneously.

   6 details in Everything

6. v0.57.0 Jun 5, 2026 · release notes

   Caido v0.57.0 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. Replay, StreamQL filtering, Automate extractors, and global filters.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.57.0 https://github.com/caido/caido.git
   # already have the repo? check out this version:
   $ git checkout v0.57.0

   • Adds WebSocket message sending in Replay: create a WebSocket session, set the initial HTTP request, and send messages interactively.
   • Adds custom extractors in Automate, letting you define a regex capture group to extract response sections as custom columns in result tables.
   • Introduces StreamQL, a new query language for filtering WebSocket messages in the WS History page.
   • Extends Match & Replace rules to apply to WebSocket requests and responses.
   • Adds Global Filters, making saved filters accessible across all projects.

   +1 more show less

   • Adds a Logging node in Workflows for debugging field values without requiring JS nodes.

   6 details in Everything

7. v0.57.0 Jun 5, 2026 · issue 001

   Caido v0.57.0 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. Replay/M&R support, StreamQL filtering, Automate custom extractors, and global filters.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.57.0 https://github.com/caido/caido.git
   # already have the repo? check out this version:
   $ git checkout v0.57.0

   • Adds WebSocket session support in Replay — create a session, set the initial HTTP request, and send/inspect WebSocket messages interactively.
   • Supports WebSocket messages in Match & Replace rules, enabling automated transformation of WS requests and responses.
   • Introduces StreamQL, a new query language for filtering WebSocket messages in the WS History page, bringing parity with HTTP History and Search.
   • Adds custom extractors in Automate, letting you define a regex capture group to pull response sections into a dedicated result table column.
   • Enables Global Filters, making saved filters available across all projects rather than per-project only.

   +1 more show less

   • New Logging node in Workflows allows field-level debug output without requiring a JavaScript node.

   6 details in Everything

8. v0.56.0 Apr 10, 2026 · release notes

   Caido v0.56.0 adds Match & Replace in Replay, HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. remote instance connections, and collection/session reordering.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v0.56.0 https://github.com/caido/caido.git
   # already have the repo? check out this version:
   $ git checkout v0.56.0

   • Adds Match & Replace rules support directly within the Replay module.
   • Supports connecting to remote Caido instances via HTTPS.
   • Enables reordering of collections and sessions in Replay.

   3 details in Everything

9. advisory CVE-2026-24853 Feb 13, 2026 · issue 128
   • CVE-2026-24853: Insufficient patch for DNS rebind leading to RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives. (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 8.1, affects <0.55.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
10. v0.55.0 Jan 23, 2026 · release notes

    Caido v0.55.0 adds workflow string interpolation, JS node extra inputs, Match & Replace import/export, and a large SDK expansion.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.55.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.55.0

    • Adds workflow string interpolation via <% %> syntax to dynamically inject values from previous nodes into workflow text fields.
    • New extra input field on JavaScript workflow nodes enables passing multiple inputs for more complex operations.
    • Import and export Match & Replace rule collections and Findings to share across team members, instances, and projects.
    • Frontend SDK gains 22 new methods covering AI providers, Automate sessions/entries, hosted file events, response view modes, sitemap traversal, entry/rule indicators, settings slots, and window context.
    • Backend SDK adds sdk.events.onUpstream(), sdk.meta.id(), sdk.net.connect(), RequestSpec.getInfo(), RequestSpec.getUrl(), RequestSpecRaw.getInfo(), RequestSpecRaw.toSpec(), and an https module.

    5 details in Everything

11. v0.54.0 Dec 9, 2025 · release notes

    Caido v0.54.0 adds body format conversion, HTTPQL autocomplete, Match & Replace in Automate, Edge browser support, and expanded SDK APIs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.54.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.54.0

    • Adds right-click body format conversion in the editor, supporting x-www-form-urlencoded, JSON, multipart/form-data, and XML.
    • Adds HTTPQL history autocomplete, surfacing previously written filters to speed up complex query reuse.
    • Enables Match & Replace rules to run inside Automate (in addition to Intercept), selectable per-rule at activation time.
    • Adds support for launching a pre-configured Microsoft Edge browser alongside the existing Chrome and Chromium options.
    • Adds a new dns module to the Backend SDK.

    +2 more show less

    • Adds sdk.hostedFile to the Backend SDK for interacting with Caido's Hosted Files.
    • Adds Frontend SDK methods: sdk.filters.getCurrentFilter(), sdk.filters.onCurrentFilterChange(), sdk.filters.addToSlot(), sdk.httpHistory.addToSlot(), sdk.matchReplace.getCurrentRule(), sdk.matchReplace.onCurrentRuleChange(), sdk.matchReplace.addToSlot(), sdk.replay.getCurrentSession(), sdk.replay.showEntry(), sdk.replay.getEntry(), sdk.replay.onSessionCreate(), sdk.replay.onCollectionCreate(), sdk.scopes.getCurrentScope(), sdk.scopes.onCurrentScopeChange(), sdk.scopes.addToSlot(), and sdk.search.addToSlot().

    7 details in Everything

12. advisory CVE-2025-66025 Nov 25, 2025 · issue 128
    • CVE-2025-66025: Improper Handling of External Links in Markdown (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 4.3, affects <=0.52.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
13. v0.53.0 Nov 6, 2025 · release notes

    Caido v0.53.0 adds shared team instances, a Convert drawer, redirect following in Automate, SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. override, and major SDK expansions.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.53.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.53.0

    • New Shared Instances (Team Plan): multiple users can now connect to the same Caido instance, enabling hand-off and real-time collaboration on assessments.
    • New Convert Drawer: a bottom drawer provides automatic encoding detection and one-click conversions between Base64, Base64 URL, URL, and HTML encodings.
    • New right-click menu item to convert POST bodies between JSON and x-www-form-urlencoded formats.
    • New right-click menu item to save requests directly to a file.
    • Automate now supports automatic redirect following, enabling smooth automated testing across chained requests.

    +8 more show less

    • Match & Replace gains SNI (Server Name Indication) override support.
    • Backend SDK: sdk.requests.inScope now accepts an option to specify which scopes to match against.
    • Frontend SDK: adds sdk.log.info|warn|debug|error for plugin logging.
    • Frontend SDK: adds sdk.commandPalette.pushView to register custom views in the command palette.
    • Frontend SDK: adds sdk.projects.onCurrentProjectChange to react when a user switches projects.
    • Frontend SDK: adds sdk.navigation.onPageChange to track in-app navigation events.
    • Frontend SDK: adds sdk.replay.onCurrentSessionChange to track the currently selected replay session.
    • Frontend SDK: <a> tags can now open URLs in the user's default browser from plugin UI.

    13 details in Everything

14. v0.52.0 Sep 24, 2025 · release notes

    Caido v0.52.0 adds AI SDK for plugins, searchable Replay history, raw Match & Replace mode, and free project backups for all users.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.52.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.52.0

    • Adds searchable history to Replay sessions for easier request review.
    • New dedicated Store section for official Caido plugins simplifies discovery and installation of trusted extensions.
    • Collapsible sidebar groups keep the workspace organized.
    • Match & Replace rules can now be created directly on raw request/response payloads for more flexible traffic transformation.
    • New Force close connection option in Replay speeds up responses when the Connection: close header is absent.

    +6 more show less

    • Project backups are now available on all plans, including free.
    • New AI SDK lets plugins perform AI actions using the user's own API keys via Caido's provider system.
    • Backend SDK adds fs.rename and fs.renameSync for file system rename operations.
    • Backend SDK adds project.getPath() to retrieve the current project's on-disk location.
    • Frontend SDK supports custom request view modes, allowing plugins to add new tabs inside the request editor (e.g., GraphQL or Hex views).
    • Frontend SDK adds sdk.search.httpHistory.scrollTo(id) to jump directly to a specific request in HTTP History or Search.

    11 details in Everything

15. v0.51.0 Aug 26, 2025 · release notes

    Caido v0.51.0 adds workflow run history, Findings JSON export, and GraphQL access for backend plugins.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.51.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.51.0

    • Adds workflow run history for Convert, Passive, and Active workflows, showing per-node input and output for every past run.
    • Enables exporting Findings in JSON format for downstream processing, reporting, and team sharing.
    • Enables Backend SDK plugins to make direct GraphQL calls into Caido internals for richer plugin capabilities.

    3 details in Everything

16. v0.50.0 Jul 24, 2025 · release notes

    Caido v0.50.0 adds in-editor workflow testing, HTTPQL presets, jump-to-row, vertical layout, and custom UI fonts.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.50.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.50.0

    • Adds ability to run active and passive workflows directly from the workflow editor using a sample request and response.
    • New Jump to Row button in HTTP History and Search tables to instantly return to the currently selected row.
    • New vertical layout option in Settings → Appearance for better support on tall/vertical screens.
    • Enables saving HTTPQL queries as reusable presets via a Save button in any HTTPQL search bar.
    • New UI font customization setting available under Settings → Appearance.

    5 details in Everything

17. advisory CVE-2025-53834 Jul 14, 2025 · issue 128
    • CVE-2025-53834: Reflected XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. in Caido Toast (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 6.3, affects <0.49.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
18. v0.49.0 Jul 1, 2025 · release notes

    Caido v0.49.0 adds workflow keyboard shortcuts, Markdown findings, timeout support in sdk.requests.send, and backend scope/safe-mode APIs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.49.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.49.0

    • Assigns custom keyboard shortcuts to run specific workflows directly from the UI.
    • Supports Markdown formatting in the findings editor — bold, lists, code blocks, and images.
    • Adds a timeout option for sdk.requests.send in the plugin SDK.
    • Provides more meaningful error messages from sdk.requests.send.
    • Adds a shortcut to switch between tabs in Replay.

    +12 more show less

    • Enables closing Replay tabs with the mouse scroll-wheel button, like browser tabs.
    • Adds a button next to the Replay session bar via the Frontend SDK.
    • Exposes a length property on the Body object in the JS SDK.
    • Adds scope access support in the backend SDK.
    • Adds a getter for Request or Request ID in Findings via the Backend SDK.
    • Introduces backend safe mode for plugin stability.
    • Adds plugin search in the plugin manager.
    • Enables force-updating a plugin.
    • Supports dynamic extensions in the Replay editor.
    • Reworks the workflow limit for free users.
    • Enables Ctrl+F search in the Intercept view.
    • Moves + Create New Scope to the bottom of the context menu for cleaner UX.

    17 details in Everything

19. advisory CVE-2025-49004 Jun 9, 2025 · issue 128
    • CVE-2025-49004: Hijacking Caido instance during the initial setup via DNS Rebinding to achieve RCERCERemote code execution, the ability to run attacker-chosen code on another system through a vulnerability. Its impact depends on the permissions and access that code receives. (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 7.5, affects < 0.48.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
20. v0.48.0 May 14, 2025 · release notes

    Caido v0.48.0 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. interception, guest mode, automatic updates, and an API domain allowlist.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.48.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.48.0

    • New WebSocket interception: capture and modify WebSocket messages directly from the Intercept page, just like HTTP requests.
    • New guest mode: access Caido without an account using temporary projects and a single plugin.
    • Automatic updates for desktop users on macOS, Windows, and Linux (AppImage/deb experimental) with background download and one-click install.
    • New API domain allowlist: restrict Caido API access to trusted domains for improved security.
    • Adds keyboard navigation support for the sitemap.

    +11 more show less

    • Enables deleting nodes and clearing all items directly from the sitemap.
    • Headers are now preserved when following HTTP redirects.
    • Shell node max execution timeout raised to 24 hours.
    • Supports copying multiple request URLs at once from selection.
    • Adds Close Others, Close Right, and Close Left tab management via right-click on Replay tabs.
    • Replay tab search now indexes request path, method, host, and SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address..
    • Adds Temporary Workspace for disposable projects.
    • Enables quick navigation to related WebSocket streams from a request.
    • Supports zero-padded numbers as a payload type in Automate.
    • Plugin SDK: frontend SDK now supports registering custom CodeMirror extensions to the HTTP history request editor.
    • Plugin SDK: backend SDK allows updating variables assigned to any environment.

    16 details in Everything

21. v0.47.0 Mar 19, 2025 · release notes

    Caido v0.47.0 adds Invisible Proxying, DNS overriding, redesigned Match & Replace with workflow support, and backend log visibility.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.47.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.47.0

    • Adds Invisible Proxying to intercept traffic from non-proxy-aware clients without manual proxy configuration.
    • Adds DNS Entry Overriding to resolve domain names to a specific IP or DNS server on demand.
    • Exposes backend logs directly in the UI bottom panel for real-time debugging.
    • Extends Replay in Browser and View Response in Browser to all request/response panes.
    • Redesigns Match & Replace with a simplified Add Header action and support for workflows as dynamic replacements.

    +2 more show less

    • Adds a Reload Window command to the command palette for recovering from UI issues.
    • Adds Plugin SDK WorkflowSDK with sdk.workflows.getWorkflows(), onCreatedWorkflow(), onUpdatedWorkflow(), and onDeletedWorkflow() for workflow interaction.

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The MatchReplaceSDK (Frontend Plugin SDK) has been updated to fit the new Match & Replace redesign — existing plugins using MatchReplaceSDK will break and require updates.
22. v0.46.0 Feb 25, 2025 · release notes

    Caido v0.46.0 adds default project selection, in-browser response viewing, and expanded Plugin SDK capabilities.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.46.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.46.0

    • Adds ability to set a default project that opens automatically when launching Caido.
    • Enables replaying requests and viewing responses directly in the browser via right-click on any table row.
    • Plugin SDK now supports bundling extra files alongside plugins.
    • Backend plugins can now convert RequestSpecRaw objects to RequestSpec via RequestSpecRaw.getSpec() and RequestSpec.parse(RequestSpecRaw).
    • Frontend and backend Plugin SDK exposes sdk.runtime.getVersion() to retrieve the running Caido version.

    5 details in Everything

23. advisory CVE-2025-23039 Jan 17, 2025 · issue 128
    • CVE-2025-23039: Cross Site Scripting on URL decode Tooltip (CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. 5.2, affects = 0.45.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
24. v0.45.0 Jan 10, 2025 · release notes

    Caido v0.45.0 adds HTTPQL filtering for live intercept, manual findings creation, and expanded plugin SDK APIs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.45.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.45.0

    • Adds HTTPQL query filtering for requests and responses during live interception.
    • Enables manual finding creation via right-click Send to Findings… context menu in the editor.
    • New URL-decoding tooltip displays decoded values for URL-encoded strings inline in the editor.
    • Adds quick project creation directly from the top-right project selector dropdown.
    • Plugin Frontend SDK gains sdk.[page].getScopeId() and sdk.[page].setScope() to retrieve or set the current page scope.

    +4 more show less

    • Plugin Frontend SDK gains sdk.env.getVars() to retrieve all available environment variables.
    • Plugin Backend SDK gains sdk.meta.version() to retrieve the running Caido instance version.
    • Plugin Backend SDK gains sdk.meta.updateAvailable() to check whether a Caido update is available.
    • Plugin Backend SDK gains sdk.env.getVars() to retrieve all available environment variables.

    9 details in Everything

25. v0.44.0 Nov 28, 2024 · release notes

    Caido v0.44.0 adds a variable store with environments, CA cert import, SNISNIA TLS extension that lets a client declare which hostname it is connecting to during the handshake, allowing one server to host multiple certificates on a single IP address. overrides, and expanded plugin SDK APIs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.44.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.44.0

    • New variable store lets you define named variables that auto-insert into Replay and Automate requests, with multiple environments for easy context switching.
    • Supports importing your own CA certificates into Caido.
    • Adds SNI override capability for Replay sessions, enabling testing against hosts with mismatched certificates.
    • Replay and Automate session tabs can now be reordered.
    • Backend SDK: RequestSpec getters and setters now support raw bytes (Uint8Array), enabling handling of non-UTF8 data in methods like setMethod and setPath.

    +2 more show less

    • Frontend SDK: New sdk.env.getVar API lets plugins fetch variables from the variable store.
    • Frontend SDK: sdk.navigation.addPage gains an onEnter callback to execute custom logic when a user navigates to a plugin page.

    7 details in Everything

26. v0.43.0 Oct 29, 2024 · release notes

    Caido v0.43.0 expands the plugin SDK with file, filter, match-replace, and replay APIs plus backend HTTP fetch support.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.43.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.43.0

    • Adds FilesSDK to plugins: list, create, update, and delete files from the frontend.
    • Adds FilterSDK to plugins: full CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. for filter presets.
    • Adds HTTPHistorySDK and SearchSDK to plugins: get and set HTTPQL queries programmatically.
    • Adds MatchReplaceSDK to plugins: full CRUD for match & replace rules and collections.
    • Adds ReplaySDK to plugins: create/delete/list tabs, list collections, and list/rename sessions.

    +3 more show less

    • Adds sdk.events.onProjectChange backend event: trigger plugin logic whenever the active project changes.
    • Adds sdk.requests.matches backend API: test whether a given request/response satisfies an HTTPQL query.
    • Adds fetch from caido:http in backend plugins: enables plugins to make outbound HTTP requests server-side.

    8 details in Everything

27. v0.42.0 Oct 8, 2024 · release notes

    Caido v0.42.0 adds SOCKSSOCKSA proxy protocol that relays TCP (and optionally UDP) connections through an intermediary server, letting cyber tools route traffic through a pivot host or anonymizing layer without needing raw network access. proxy support, workflow branching improvements, and expanded SDK APIs.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.42.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.42.0

    • Adds SOCKS proxy support, enabling traffic redirection through one or more SOCKS proxies with per-destination routing rules.
    • Supports multiple simultaneous proxy configurations, letting testers assign specific traffic to different proxies based on target.
    • The Matches HTTPQL workflow node now has native true/false execution branches, eliminating the need for a separate if/else node.
    • Workflow node editor sidebar now surfaces which inputs are required vs. optional and blocks invalid references.
    • Adds a crypto module to the backend/workflow SDK implementing a subset of the Node.js crypto API.

    +4 more show less

    • Adds RequestSpec.parse() to the SDK, allowing creation of a RequestSpec directly from a raw HTTP request string.
    • Adds sdk.replay.createSession API to programmatically create replay sessions.
    • Adds sdk.replaySession.getCollections API to retrieve the list of replay collections.
    • Adds Editor.getEditorView to the frontend SDK, exposing the internal CodeMirror EditorView for deep editor customization.

    9 details in Everything

28. v0.41.0 Sep 17, 2024 · release notes

    Caido v0.41.0 adds a one-click community plugin store and major backend/frontend SDK expansions including TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. sockets and SQLite.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.41.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.41.0

    • New community plugin store enables one-click installation of open-source plugins submitted via github.com/caido/store.
    • New sdk.requests.get() backend API lets plugins retrieve a request by its ID.
    • New sdk.meta.path() backend API exposes the plugin's file system path.
    • New sdk.meta.db() backend API provides access to the SQLite database associated with a plugin.
    • New sdk.findings.get() backend API fetches a finding linked to a specific request.

    +5 more show less

    • New Request.getUrl() backend API returns the URL for a given request.
    • New net module enables plugins to use TCP sockets for external connectivity.
    • New sqlite module lets plugins create and manage SQLite databases.
    • New sdk.ui.httpRequestEditor() frontend API provides a read-only HTTP request editor component for plugin UIs.
    • New sdk.ui.httpResponseEditor() frontend API provides a read-only HTTP response editor component for plugin UIs.

    10 details in Everything

29. v0.40.0 Aug 6, 2024 · release notes

    Caido v0.40.0 adds request/response length filtering in HTTPQL and expands workflow JS APIs with process spawning and timers.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.40.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.40.0

    • Adds req.len and resp.len fields to HTTPQL for filtering requests and responses by byte length.
    • Adds atob and btoa functions to JS nodes in workflows and backend plugins.
    • Implements the Node.js process API in JS nodes, enabling spawning of new processes from workflows and backend plugins.
    • Adds setTimeout and setInterval support to JS nodes in workflows and backend plugins.
    • Desktop app migrated from Tauri to Electron, delivering improved performance especially on Linux.

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Upgrading the desktop app will remove your existing instance list; all instances must be re-added manually after upgrade.
30. v0.39.0 Jul 18, 2024 · release notes

    Caido v0.39.0 adds backend plugins, Replay workflow integration, and a new HTTPQL field for filtering HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. traffic.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.39.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.39.0

    • Adds backend plugin support, enabling server-side logic (e.g. file system access) to complement frontend plugins.
    • Enables preprocessors and workflows in Replay sessions for automatic encoding, signature/hash calculation, and CLI tool execution.
    • Adds new HTTPQL field req.tls to filter requests by HTTPS/TLS status.
    • Adds a Dedupe Key option to the Create Finding workflow node to prevent duplicate findings.

    4 details in Everything

31. v0.38.0 Jun 20, 2024 · release notes

    Caiddo v0.38.0 adds HTTPQL fields to automate filters, Numbers payloads, and new Frontend SDK APIs

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.38.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.38.0

    └──▷ USE IT
    Display a toast message from a custom automation script.
    code copy

    caido.window.showToast('Processing complete');

    Register a context menu item for response panes to process data.
    code copy

    caido.menu.registerItem({ "type": "Response" });

    • caido.window.showToast() function added to the Frontend SDK to display toast notifications.
    • caido.menu.registerItem({ "type": "Request" }) now allows registering context menu items on request panes via the Frontend SDK.
    • caido.menu.registerItem({ "type": "Response" }) now allows registering context menu items on response panes via the Frontend SDK.
    • Automate now supports filtering results with HTTPQL using the new row.id, source, and req.created_at fields.

    4 details in Everything

32. v0.37.0 May 22, 2024 · release notes

    Caido v0.37.0 adds plugin system, Automate preprocessors, new workflow nodes, and storage API.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.37.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.37.0

    └──▷ HOW TO FIND IT
    Add custom logic to Automate payloads before they are sent using the new Prefix preprocessor.
    📍In the Automate page, select your request payload and choose Prefix from the preprocessors dropdown.
    Use the new workflow nodes to transform data, such as pretty-printing JSON responses.
    📍In your Automate workflow, add a JSON Pretty node after the HTTP request step.
    • Adds a Plugins page for installing and managing extensions
    • Adds preprocessor support in the Automate page with Convert Workflows, URL Encode, Prefix, and Suffix nodes
    • Adds Match & Replace, JSON Minify, JSON Pretty, Trim, and Join workflow nodes
    • Adds Caido.storage.get/set/onChange API for frontend plugins

    4 details in Everything

33. v0.36.0 Apr 29, 2024 · release notes

    Caido v0.36.0 introduces Active Workflows for request actions and HTTPQL regex support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.36.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.36.0

    └──▷ USE IT
    Retrieve headers in a workflow script using the new SDK methods
    js copy

    const reqHeaders = request.getHeaders();
    const resHeaders = response.getHeaders();
    const spec = new RequestSpec(req);
    spec.removeHeader('Host');

    Search for items generated by a workflow in the advanced search panel
    📍source: workflow
    • Adds Active Workflows feature allowing actions to be executed against individual requests via right-click context menu
    • Adds /regex/ notation to HTTPQL for better regex escape sequence support
    • Adds getHeaders() methods to Request and Response types in the Workflow JS SDK
    • Adds removeHeader() method to RequestSpec in the Workflow JS SDK
    • Adds workflow as a source option in advanced search filters

    5 details in Everything

34. v0.35.0 Apr 9, 2024 · release notes

    Caido v0.35.0 adds JS node for workflows, cross-project sharing, and new Frontend SDK APIs

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.35.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.35.0

    └──▷ USE IT
    Use the new Frontend SDK to register a custom menu item in the Settings page and query GraphQL data from a plugin.
    text copy

    Caido.menu.registerItem({ label: 'My Plugin', action: () => { Caido.graphql.query('{ findings { id } }'); } });

    Share a workflow across all projects by changing its scope setting in the workflow editor instead of importing it manually per project.
    📍In the workflow editor, toggle the scope from project-specific to global.
    Load a large request body from disk directly into the replay editor without copying and pasting in the terminal.
    📍Click the Paste from file button in the replay editor and select the local file.
    • Adds a JavaScript node for use in passive/convert workflows to send HTTP requests, receive responses, and create findings
    • Enables workflows to be toggled between global and project-specific scopes so they can be shared across projects without manual import
    • Exposes Caido.menu.registerItem, Caido.graphql, and Caido.window.getActiveEditor in the Frontend SDK
    • Adds Paste from file button in the replay editor to load request content from a local file
    • Adds multi-select support (meta key+click) for tables in the UI

    +2 more show less

    • Allows deleting individual findings from the interface
    • Permits emptying the default replay collection

    7 details in Everything

35. v0.34.1 Mar 27, 2024 · release notes

    Caido v0.34.1 adds HTTPQL editor enhancements and fixes project crash on invalid rules

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.34.1 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.34.1

    └──▷ HOW TO FIND IT
    Type in the HTTPQL editor to immediately see autocomplete options, speeding up query construction.
    📍Open a request in Caido and start typing in the HTTPQL filter field.
    Select an autocomplete suggestion to automatically get the period appended, readying it for chaining or completion.
    📍Click a suggestion in the HTTPQL autocomplete dropdown.
    Verify that syntax errors in the HTTPQL editor are visually highlighted before submitting.
    📍Enter invalid syntax in the HTTPQL editor and observe visual cues.
    • HTTPQL autocomplete now displays without requiring initial keystrokes
    • A period (.) is automatically appended after selecting an HTTPQL suggestion
    • HTTPQL editor highlights syntax errors in real-time
    • Workflow reference field is now a dropdown selector

    4 details in Everything

36. v0.34.0 Mar 22, 2024 · release notes

    Caido v0.34.0 introduces a Create Finding workflow node, conditional match/replace, and UI plugin APIs for context menus.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.34.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.34.0

    • Adds Create Finding workflow node for passive workflows to flag requests of interest
    • Adds conditional Match & Replace rules based on HTTPQL queries

    2 details in Everything

37. v0.33.0 Mar 12, 2024 · release notes

    Pre-configured browser launcher and UI Plugin API with global Caido variable for custom commands, shortcuts, scopes, and sidebar pages

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.33.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.33.0

    └──▷ USE IT
    Register a custom keyboard shortcut (e.g. Ctrl+Shift+F) that triggers a plugin-specific action from the global Caido object.
    text copy

    Caido.shortcuts.register('Ctrl+Shift+F', () => { /* custom logic */ });

    Add a new entry to the command palette so users can trigger your plugin's main feature via Ctrl+P.
    text copy

    Caido.commandPalette.register({ id: 'my-plugin.search', label: 'Search My Plugin' });

    Add a custom page to the sidebar panel for plugin-specific UI elements.
    text copy

    Caido.sidebar.addPage({ id: 'my-plugin-dashboard', title: 'My Plugin', content: '<div>...</div>' });

    • Caido global variable exposed in the new UI Plugin API, enabling plugins to add custom commands, register command palette items and shortcuts, add sidebar items/pages, and manage scopes.
    • Pre-configured browser launcher (Chrome & Edge) that automatically applies CA certificate and proxy settings for desktop users.
    • Command palette includes previously missing navigation commands.

    3 details in Everything

38. v0.32.1 Feb 28, 2024 · release notes

    Caido v0.32.1 adds Shell node to passive workflows, workflow import/export/duplication, and a command palette (Ctrl+K).

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.32.1 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.32.1

    • shell node added to passive workflows for executing system commands on intercepted traffic.
    • Workflows can now be imported from, exported to, or duplicated within the UI.
    • Command palette available via Ctrl/Cmd + K supports navigation, sidebar toggling, and proxy interception toggling.

    3 details in Everything

39. v0.32.0 Feb 22, 2024 · release notes

    Caido v0.32.0 introduces passive workflows, automatic JSON prettying in editors, and PowerShell support in workflow nodes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.32.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.32.0

    └──▷ HOW TO FIND IT
    Use PowerShell to process request data within a workflow instead of limited shell commands.
    📍Add a Shell node in the Automate workflow editor and select powershell from the interpreter dropdown.
    Read readable, formatted JSON directly in the Replay tab without external tools.
    📍Open a request in the Replay editor; valid JSON bodies are automatically pretty-printed by default.
    Inject complex payload structures quickly into Automate actions.
    📍In the Automate editor, select Simple List and paste a JSON array or list directly from your clipboard.
    • Powershell support in workflow node enables running PowerShell scripts directly within Caido's Automate workflow engine
    • Adds automatic JSON prettying to Replay and Intercept editors for writable responses
    • Allow pasting list into Automate Simple List option for direct payload injection

    3 details in Everything

40. v0.31.1 Feb 13, 2024 · release notes

    Caido v0.31.1 now converts pasted LF line endings to CRLF on Linux/Unix

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.31.1 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.31.1

    • Updates request LF endings to CRLF on linux/unix systems when pasting from clipboard

    1 detail in Everything

41. v0.31.0 Feb 12, 2024 · release notes

    Caido v0.31.0 adds HTTPQL regex filtering in History, Follow Redirect button, and Workflow v2 nodes.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.31.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.31.0

    • Adds HTTPQL regex filtering to the HTTP History filter drawer
    • Adds a Follow Redirect button in Replay when a response contains a Location header
    • Introduces Workflows v2 with color-coded nodes and flexible inputs/outputs

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Free users are limited to a maximum of 2 projects (reduced from 10)
    • !Free users are limited to a maximum of 5 convert workflows
42. v0.30.4 Feb 1, 2024 · release notes

    Caido v0.30.4 adds custom CSS/JS injection, configurable table layouts, and new keyboard shortcuts.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.30.4 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.30.4

    └──▷ HOW TO FIND IT
    Inject custom styles or scripts to modify the Caido UI appearance and behavior.
    📍Open Settings › Developer in the Caido web interface to access the custom CSS/JS editor.
    Customize the visibility and order of data columns in various tables to focus on relevant fields.
    📍Right-click a column header in Intercept, HTTP History, Search, or Sitemap tables to reorder or hide columns.
    Speed up workflow using keyboard shortcuts for common actions like forwarding requests or switching tabs.
    📍Use configured keybindings for Drop Request/Response, Forward Request/Response, Next Tab, etc., within the Caido UI.
    • Adds ability to inject custom JavaScript and CSS into the Caido UI via Settings > Developer
    • Enables reordering and hiding of columns in Intercept, HTTP History, Search, and Sitemap tables
    • Makes the sidebar collapsible for space-efficient screen layouts
    • Adds keyboard shortcuts: Drop Request/Response, Forward Request/Response, Next Tab, Previous Tab, Send to Automate, and Close Tab

    4 details in Everything

43. v0.30.1 Jan 24, 2024 · release notes

    Adds upstream proxy support to Caido

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.30.1 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.30.1

    • Add upstream proxy support

    1 detail in Everything

44. v0.30.0 Dec 14, 2023 · release notes

    Introduces HTTPQL filtering engine with default filters, custom user-defined filters, and Wireshark-like syntax support for request matching

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.30.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.30.0

    • HTTPQL new filtering engine for quick filtering through HTTP requests
    • Adds default filters that apply automatically to the request list
    • Adds support for creating custom filters by users via the UI
    • Supports Wireshark like filters syntax in the filter input

    4 details in Everything

45. v0.29.2 Nov 14, 2023 · release notes

    Caido v0.29.2 adds HTTP History scope filtering and Clear All button

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.29.2 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.29.2

    └──▷ HOW TO FIND IT
    Clear all entries from the HTTP History view at once.
    📍Open the HTTP History panel and click the Clear all button.
    Limit the intercept module to only capture traffic for a specific scope.
    📍Configure scope in the Intercept settings UI.
    • Clear all option added to HTTP History panel for bulk deletion of intercepted requests.
    • Intercept feature now supports scope configuration to limit which hosts are captured.
    • Shortcut added for the Go to replay action in the Intercept interface.

    3 details in Everything

46. v0.29.0 Oct 3, 2023 · release notes

    Caide v0.29.0 adds response interception/modification, project backups, shell workflow nodes, and rename/delete history features

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.29.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.29.0

    • Enables intercepting and modifying HTTP responses via the proxy
    • Adds a Shell node to convert workflows for executing shell commands
    • Introduces a Backups page in Pro tier to import/export projects
    • Allows renaming existing projects from the UI
    • Permits deleting specific rows from the HTTP History view

    5 details in Everything

47. v0.28.0 Aug 22, 2023 · release notes

    Caido v0.28.0 adds WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. message recording, configurable keybindings, and glob-based scopes

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.28.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.28.0

    └──▷ HOW TO FIND IT
    Record and inspect WebSocket traffic passing through the Caido proxy for debugging real-time protocols.
    📍N/A - Feature is available in the proxy history view after enabling recording.
    • Record and display websocket messages in the proxy history
    • Scopes now use glob patterns instead of SQL LIKE syntax
    • Custom keybindings/shortcuts support via configuration

    3 details in Everything

48. v0.27.1 Jul 25, 2023 · release notes

    Adds Convert Workflows with drag-and-drop pipeline blocks and JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. decoder

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.27.1 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.27.1

    └──▷ HOW TO FIND IT
    Create a conversion chain by adding a JWT decoder block in the UI and executing it via drag-and-drop.
    📍Open the Convert panel, select JWT decoder from the blocks menu, and drop it into your workflow canvas
    • Adds Convert Workflows feature enabling drag-and-drop blocks to create complex conversion pipelines
    • Adds support for running JavaScript inside conversion pipelines for Pro users
    • Adds a new JWT decoder block to the Convert pipeline

    3 details in Everything

49. v0.26.0 Jun 13, 2023 · release notes

    Caido v0.26.0 introduces the Pro AI Assistant with a configurable font size shortcut.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.26.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.26.0

    └──▷ HOW TO FIND IT
    Access the new AI Assistant directly from the main interface or via context menu.
    📍Navigate to the Assistant page in the left sidebar or right-click a request and select Ask Caido Assistant.
    Adjust the interface font size for better readability.
    text copy

    In the user settings menu, locate the `font-size` field and enter a new integer value (e.g., 16).

    • Adds an AI Assistant feature available via right-click menu or dedicated page for pro users
    • Adds font-size configuration in user settings to make text scalable

    2 details in Everything

50. v0.25.3 May 19, 2023 · release notes

    Adds Display Special Chars toggle for CRLF in replay module and TLS 1.3 support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.25.3 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.25.3

    └──▷ HOW TO FIND IT
    Visualize line endings in HTTP responses by enabling the CRLF display mode.
    📍In the replay module, toggle Display Special Chars to view CRLF characters
51. v0.25.0 May 15, 2023 · release notes

    Caido v0.25 adds XML pretty print support and drag-to-resize panel layout without Edit Layout mode

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.25.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.25.0

    • Adds HTML, XML, JS, and CSS syntax highlighting for response bodies in the UI
    • Allows resizing panels by dragging edges without entering Edit Layout mode

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Linux deb package is no longer included in this release due to a webkit bug; use CLI or AppImage instead
52. v0.24.1 Mar 27, 2023 · release notes

    Adds copy as curl context menu option, POST/GET conversion, and request table timestamps

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.24.1 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.24.1

    └──▷ HOW TO FIND IT
    Export a captured request to the clipboard as a ready-to-run curl command for replay or scripting.
    📍Right-click in the request body › select copy as curl
    Toggle the HTTP method of a captured request directly from POST to GET (or vice versa) before replay.
    📍Select the request › use the new POST <-> GET conversion option
    View execution times for all requests in the table to analyze latency patterns.
    📍Check the request tables for newly added timestamp columns
    • Adds a copy as curl option when right-clicking in the body of a request
    • Adds an option to convert POST -> GET and GET -> POST
    • Adds timestamps to request tables

    3 details in Everything

53. v0.24.0 Mar 17, 2023 · release notes

    Caido v0.24 adds right-click scope presets, pasting URL as request, entry number navigation, and exporting from history search

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.24.0 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.24.0

    • Navigate between replay session entries by entry number for precise jumping in long sessions
    • Adding to scope presets by right-clicking a request in the context menu
    • Paste URL as request option available in the editor for quick HTTP requests
    • Export requests and responses from history search results to extract captured data

    4 details in Everything

54. v0.23.1 Feb 21, 2023 · release notes

    Adds HTML response preview and scope filtering to the sitemap page.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.23.1 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.23.1

    └──▷ HOW TO FIND IT
    View rendered HTML content directly in the tool to analyze client-side behavior.
    📍Navigate to a request with an HTML response type and switch to the HTML preview tab.
    Filter the sitemap view to only show entries matching your configured scope.
    📍Open the Sitemap page and apply the scope filter to exclude out-of-scope domains.
55. v0.22.1 Jan 11, 2023 · release notes

    Adds timing info to response panes in the UI

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v0.22.1 https://github.com/caido/caido.git
    # already have the repo? check out this version:
    $ git checkout v0.22.1

    └──▷ HOW TO FIND IT
    View request-response latency directly in the UI without opening browser dev tools.
    📍Inspect any intercepted request's response pane to see the new timing details.