Awesome
CaidoReflector
CaidoReflector
is a passive workflow for Caido that will automatically look for paramater reflections in the HTTP response.
Installation [Recommended]
- Install EvenBetter extension https://github.com/bebiksior/EvenBetter
- Go to Workflows -> Library
- Search for CaidoReflector and click Add
- Done 🎉
Installation [without EvenBetter plugin]
- Download https://github.com/bebiksior/CaidoReflector/blob/main/Reflector.json
- In Caido, navigate to the Workflows page
- Click Import and select the downloaded JSON file.
- Done 🎉
TODO
- support query parameters without value
- support JSON request body
- allow users to easily disable scanning POST requests
Contribution
Feel free to contribute! If you'd like to request a feature or report a bug, please create a GitHub Issue.