Corb3nik

@atvh.dev

Co-Founder @caido.io | Security Enthusiast | CTF Fanatic | Bug Bounty Hunter

🎉 You’ve been asking for it. The Caido Scanner plugin is finally here. Run checks in the background or scan specific requests on demand to find issues like reflected XSS, SQL injection, and CORS misconfigurations. All checks are open source. Add your own and help the list grow 💪

🚀New plugin in the Caido Store! Introducing "Chatio" by @amrelsagaei Ask AI questions with prompt templates, files, code or screenshots. You can also hit CTRL + SPACE to edit requests, create filters and more using natural language. Check out more details: github.com/amrelsagaei/...

🚀 New plugin in the Caido Store! Introducing "Notes++" by _StaticFlow_ and bebiksior. Markdown-powered notes within Caido! Embed replay sessions and insert selected text directly into your notes. Check out more details: github.com/caido-commun...

🚀New plugin in the Caido Store! Introducing "Exploit Generator" by @stealthcopter Generate executable proof-of-concept (PoC) code from intercepted requests, in multiple languages and frameworks, such as Python, JavaScript, and Bash/cURL. Check out more details: github.com/stealthcopte...

🚀New plugin in the Caido Store! Introducing "Drop" by @Rhynorater Get connected to your collaborator’s instance and share objects back and forth such as Replay tabs, M&R rules, scopes and filters. Check out more details: github.com/caido-commun...

🚀 v0.47.0 is here! ✅ Redesigned Match & Replace + Workflow support ✅ Built-in logs for better debugging ✅ DNS entry overrides ✅ Invisible proxying ✅ Request / replay response in browser ✅ Default project selection Here’s everything you need to know 🧵👇

We’re excited to share that we partnered with Parrot Security 🤝 Caido will now be pre-installed on Parrot OS and we will work toward more native integrations with the OS. Read all about it on our blog! https://buff.ly/3DXI5XD

Bild

🚀 v0.45.1 is out! You can now filter intercepted requests with HTTPQL to focus on the ones that matter to you. We’ve also added manual Finding creation, URL decoding on hover, and more. Full list of changes: https://buff.ly/3Whf3Z6

Yo, new big thing: Shift. AI seamlessly integrated into your HTTP proxy. Use cases: "Take this JS and build the JSON request body" "Fill in these IDs from my notes - UserA" "Create a match and replace rule to turn on this feature flag" "Generate a wordlist with all HTTP Verbs"

I suppose I never really advertise it BUT here goes: I run a free hacking newsletter every week called MonkeHacks, where I talk about what I've done for the week, list some useful resources I've read, and talk about research I've done. If you're subscribed already - thanks! If not - please sub!