caido-plugin

Unify your OAST provider management and consolidate all interactions into a single, streamlined workflow.

Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output

Caido plugin that hunts CSP misconfigs & cracks headers wide open.

Multi-terminal plugin for Caido with AI presets and instant Cmd+J access

A simple yet effective JavaScript Logger Plugin for Caido, built to streamline the discovery of JS files during web app testing.

A Caido extension written in Typescript that makes an OPTIONS request and determines if other HTTP methods than the original request are available. If there are other methods available, findings are created on the fly which will be enhanced based on pending further capabilities from the Caido SDK.

Caido plugin to cap and split workspace files by size — ideal for proxy files/log uploads with file size limits.

Caido plugin to track all params in history

Impersonate TLS is a Caido plugin that applies browser-like TLS and HTTP transport profiles to selected traffic

Curated registry of community-built plugins and extensions for the Ogma web security proxy

Caido plugin that maps a bug bounty target's domains, JavaScript assets, and API surface into an interactive, agent-queryable attack-surface graph

Caido plugin that ranks HTTP responses by anomaly using a Burp-inspired categorical frequency model.

Plugin Caido use for quick test 5 method

Passive server-side and DOM open-redirect candidate triage for Caido

A Caido plugin that tests requests for Web Cache Deception (WCD) — when a caching layer stores an authenticated user's response under a static-looking URL and then serves it to anonymous users.

Safe editable CSRF proof-of-concept generation for Caido

Bring your HackerOne programs, scopes and reward tables straight into Caido — the HackerOne counterpart to YesWeCaido.

Caido plugin for background JavaScript secret discovery, sensitive-file triage, and false-positive review

Native Caido plugin to inspect, filter, and export Automate payloads directly to clipboard and wordlists.

SAML message inspection, signature testing and XML Signature Wrapping attacks in Caido.