47 matches found
ParamFinder
ParamFinder Обнаруживайте скрытые параметры прямо из Caido! Установка Через Community Store рекомендуется 1. В вашем Caido перейдите на страницу Plugins 2. Перейдите в Community Store 3. Найдите ParamFinder 4. Нажмите Install 5. Готово! 🎉 Установка вручную 1. Перейдите на страницу Releases 2...
strix
Strix 오픈소스 AI 펜테스팅 도구. 앱의 취약점을 찾아 수정하는 자율 AI 해커입니다. !TIP 새로운 기능! Strix는 GitHub Actions 및 CI/CD 파이프라인과 완벽하게 통합됩니다. 모든 풀 리퀘스트에서 취약점을 자동으로 스캔하고 안전하지 않은 코드가 프로덕션에 도달하기 전에 차단하세요 - 설정 없이 바로 시작하기. Strix 개요 Strix는 실제 해커처럼 행동하는 자율 AI 침투 테스트 에이전트입니다. 코드를 동적으로 실행하고, 취약점을 찾아내고, 실제 개념 증명PoC을 통해 검증합니다. 수동 펜테스팅...
airecon
AI 驱动的自主渗透测试代理 -orange.svg AIRecon 是一个自主渗透测试代理，它结合了自托管的 Ollama LLM 与 Kali Linux Docker 沙箱 、原生的 Caido 代理集成 、结构化的 RECON → ANALYSIS → EXPLOIT → REPORT 流程，以及实时的 Textual TUI ——完全离线，无需 API 密钥。 为什么选择 AIRecon？ 基于商业 API 的模型（OpenAI GPT-4、Claude、Gemini）对于递归、自主的侦察工作流来说成本高昂，每会话可能需要数千次 LLM 调用。 AIRecon...
caido
Webseite • Dashboard • Dokumentation • Roadmap • Markenauftritt • Discord 👋 Willkommen Willkommen bei Caido! Caido zielt darauf ab, Sicherheitsexperten und Enthusiasten bei der Prüfung von Webanwendungen mit Effizienz und Leichtigkeit zu unterstützen. Hier können Sie sich an der Entwicklung unser...
burp2caido
परिचय Burp2Caido एक उपकरण है जो आपको निर्यात की गई Burpsuite HTTP history फ़ाइलों को Caido में स्थानांतरित करने की अनुमति देता है। इसे मूल रूप से Monke द्वारा विकसित किया गया था। !WARNING यह उपकरण HTTP डेटा को सीधे Caido प्रोजेक्ट में सम्मिलित करता है। इसे कई बार चलाने पर हर बार अनुरोध फिर से जुड...
Caido-Plugin
Github • Documentation  ...
CVE-2026-24853
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...
CVE-2026-24853
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...
CVE-2026-24853 Caido has an insufficient patch for DNS rebind leading to RCE
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...
CVE-2026-24853 Caido has an insufficient patch for DNS rebind leading to RCE
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...
CVE-2026-24853
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...
CVE-2026-24853 Caido has an insufficient patch for DNS rebind leading to RCE
Caido is a web security auditing toolkit. Prior to 0.55.0, Caido blocks non whitelisted domains to reach out through the 8080 port, and shows Host/IP is not allowed to connect to Caido on all endpoints. But this is bypassable by injecting a X-Forwarded-Host: 127.0.0.1:8080 header. This...
CVE-2026-24853
CVE-2026-24853 affects Caido before version 0.55.0. The issue allows bypassing domain-based access controls on the 8080 port by injecting an X-Forwarded-Host header (127.0.0.1:8080). Multiple sources confirm the vulnerability exists in Caido up to 0.54.x and was fixed in 0.55.0. Impact details in...
PT-2026-8042
Name of the Vulnerable Software and Affected Versions Caido versions prior to 0.55.0 Description Caido is a web security auditing toolkit. Before version 0.55.0, the software blocked connections from non-whitelisted domains attempting to reach the 8080 port, displaying a message indicating the...
Caido 安全漏洞
Caido is an open-source application developed by Caido. It aims to help security professionals and enthusiasts efficiently and easily audit web applications. Versions of Caido prior to 0.55.0 contained a security vulnerability that allowed bypassing connection restrictions for domains not on the...
CVE-2025-23039
Caido is a web security auditing toolkit. A Cross-Site Scripting XSS vulnerability was identified in Caido v0.45.0 due to improper sanitization in the URL decoding tooltip of HTTP request and response editors. This issue could allow an attacker to execute arbitrary scripts, potentially leading to...
CVE-2025-66025
Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or...
CVE-2025-66025
Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or...
CVE-2025-66025 Caido Improperly Handles External Links in Markdown
Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or...
EUVD-2025-199691
Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or...