PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The ultimate beginner’s guide to Caido

bugcrowd.com | blog | #ai-security | #bug-bounty | #burp-suite | #web-security | #caido | #extensions | #proxy-tools
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Caido is a lightweight modern alternative to Burp Suite for intercepting HTTP traffic, offering a JavaScript extension SDK, community add-ons, and an AI assistant tailored to security research.
Published
Collected

Related coverage

blog · caido.io
Caido v0.59.0
Caido v0.59.0 adds configurable AI providers, AI-generated Workflows, traffic Capture controls, Replay from cURL, and multi-instance Desktop support.
blog · vercel.com
The three types of AI bot traffic and how to handle them
Bots account for over 20% of all web traffic. A quarter of that is AI crawlers alone. But not all bots are bad. Some are key to how your site gets discovered. Learn how AI bots shape visibility and what happens if you block them.
research · portswigger.net
Adapting Burp extensions for tailored pentesting
James Kettle shows how to customize open-source Burp extensions for tailored pentesting, modifying Collaborator Everywhere to inject SSRF-prone parameters found via Bugcrowd's HUNT.
vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
research · vercel.com
Security boundaries in agentic architectures
A framework for drawing security boundaries in agentic architectures. Most agents run with zero isolation between the agent and the code it generates. Learn where to draw the boundaries, from secret injection to full application sandboxing.
Back