v0.45.1

Changelog

Small release to fix some bugs.

🐞 Bug Fixes

• Fixed sitemap not being updated when switching scopes
• Fixed missing default shortcuts for Send-To commands
• Increased time before displaying URL decoder tooltip
• Hides URL decoder tooltip when selection changes

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.45.0

Changelog

This release includes improvements to request interception, manual finding creation, and updates to the plugin SDK.

🔥 Features

• HTTPQL for Intercept: Filter requests and responses during interception based on HTTPQL queries.
• Manual Findings: Added the ability to right-click and select "Send to Findings…" to manually create findings.
• URL Decoding Tooltip: Tooltips now display decoded values for URL-encoded strings in the editor.
• Quick Project Creation: Projects can now be quickly created via the top-right project selector dropdown.

🎨 Plugin SDK Updates

• Frontend SDK:
  • Added sdk.[page].getScopeId() and sdk.[page].setScope() to retrieve or set the current page scope.
  • Added sdk.env.getVars() to retrieve all available environment variables.
• Backend SDK:
  • Added sdk.meta.version() to retrieve the Caido instance version.
  • Added sdk.meta.updateAvailable() to check if an update is available.
  • Added sdk.env.getVars() to retrieve all available environment variables.

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.44.1

Changelog

Small release to fix some bugs.

🐞 Bug Fixes

• Fixed bug in Environment integration with Workflows
• Fixed missing typing in the JS Node Editor

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.44.0

Changelog

This update brings a new variable store feature, SNI overrides, as well as important improvements to the plugin SDK for both backend and frontend development.

🗂️ Variable Store

You can now define variables that can be automatically inserted into replay and automate requests. Multiple environments can be created to organize variables and easily switch between them.

📄 CA Certificate Import

You can now import your own CA certificates into Caido.

🔧 SNI Overrides

You can now overwrite the SNI in your replay sessions.

📂 Tab Reordering

Replay and automate session tabs can now be reordered.

🛠️ Backend SDK

• RequestSpec now supports working with raw bytes in its getters and setters instead of strings. This enables handling non-UTF8 characters in methods like setMethod and setPath and allows retrieving data as a Uint8Array.

🎨 Frontend SDK

• sdk.env.getVar: Fetch variables from the new variable store.
• sdk.navigation.addPage: Added an onEnter callback to execute custom logic when navigating to a specific page.

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.43.1

Changelog

Small release to fix some bugs.

🐞 Bug Fixes

• Fixed update ofMatch & Replace Rules
• Fixed background color of tab rename
• Fixed missing subscriptions for automate

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.43.0

Changelog

This release adds new APIs for plugin developers.

🎨 Frontend SDK

• FilesSDK: List / Create / Update / Delete files
• FilterSDK: List / Create / Update / Delete filter presets
• HTTPHistorySDK: Get / Set HTTPQL queries
• SearchSDK: Get / Set HTTPQL queries
• MatchReplaceSDK:
  • List / Create / Update / Delete match & replace rules
  • List / Create / Update / Delete collections
• ReplaySDK:
  • List / Create / Delete tabs
  • List collections
  • List / Rename sessions

⚒️ Backend SDK

• sdk.events.onProjectChange: Run a function when the selected project has changed
• sdk.requests.matches: Check if a given request/response matches an HTTPQL query
• import { fetch } from "caido:http": You can now perform HTTP requests in a backend plugin using the fetch function

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.42.0

Changelog

This release brings SOCKS proxy support as well as enhancements to the workflow editor.

🧦 SOCKS Proxy Support

You can now redirect traffic to SOCKS proxies, giving you more control over how your requests are handled. Multiple proxies can be configured at once, allowing you to assign specific traffic to different proxies based on the destination target.

🤖 Workflow Improvements

• The node editor sidebar now clearly indicates which inputs are required or optional and prevents the use of invalid references.
• "Matches HTTPQL" node now has true/false exec branches. No need to use the "if/else" node to process the result anymore.

⚒️ Backend/Workflow SDK

We've expanded our backend/workflow SDKs with new APIs.

• "crypto" module: Implemented a subset of the NodeJS "crypto" module. Check https://github.com/caido/sdk-js/blob/main/packages/quickjs-types/src/llrt/crypto.d.ts for more info on what's implemented.
• RequestSpec.parse("GET / ..."): Create a RequestSpec based on an HTTP request string
• sdk.replay.createSession: Create a replay session
• sdk.replaySession.getCollections: Get the list of replay collections

🎨 Frontend SDK

New API has been added to the frontend SDK to customize editors more extensively.

• Editor.getEditorView: Retrieve the internal CodeMirror EditorView

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.41.0

Changelog

This release brings significant enhancements, including the introduction of a new community store, expanded SDK APIs, and important bug fixes.

🛒 Community Plugin Store

We have a community plugin store! This new store allows users to install plugins with a single click.

All plugins in the store are open source and submitted through github.com/caido/store.

Checkout the developer documentation to get started and to publish your own plugin: https://developer.caido.io/

🛠️ Backend SDK
We've expanded our backend SDK with new APIs to enhance plugin capabilities.

• sdk.requests.get(): Retrieve a request by its ID.
• sdk.meta.path(): Retrieve the file system path of the plugin.
• sdk.meta.db(): Access the SQLite database associated with the plugin.
• sdk.findings.get(): Fetch a finding associated with a specific request.
• Request.getUrl(): Obtain the URL for a given request.
• "net" module: Plugins can now utilize TCP sockets for enhanced connectivity.
• "sqlite" module: Create SQLite databases

🎨 Frontend SDK
New APIs have been added to the frontend SDK to provide additional UI components for plugins.

• sdk.ui.httpRequestEditor(): A read-only HTTPRequestEditor for displaying request details.
• sdk.ui.httpResponseEditor(): A read-only HTTPResponseEditor for viewing response content.

🐞 Bug Fixes

• Resolved issues related to JSON formatting in the editor
• Fixes issue where the undo history would be lost when switching between replay tabs

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.40.0

Changelog

This release brings a major upgrade to our desktop app, as well as a few improvements to HTTPQL, workflows and plugins.

We’ve transitioned from Tauri to Electron to improve performance and fix bugs, especially on Linux. If you’ve found the desktop experience sluggish on Linux, give it another try.

Note: The upgrade will remove your existing instance list. You will need to re-add your instances.

🔍 HTTPQL

• Added filtering based on req.len and resp.len fields for more precise querying.

🛠️ Plugins & Workflows

• Added atob and btoa functions.
• Implemented the Node.js “process” API to allow spawning new processes.
• Added support for setTimeout and setInterval.

These JavaScript enhancements are available for JS nodes in workflows and backend plugins.

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.39.0

Changelog

This release introduces backend plugins, workflow integration in Replay, and more.

🎨 Backend Plugins

Plugin developers can now add server-side logic to interact with frontend plugins.
Examples of server-side logic include interacting with the file system, which was not possible with frontend-only plugins.

Checkout https://github.com/caido/starterkit-plugin to get started.

🤖 Replay Workflow Integration

You can now apply preprocessors/workflows to your replay sessions. Use preprocessors to automatically encode portions of a request, calculate signatures/hashes and run command line tools.

🧰 Other notable changes

• HTTPQL: Added a new field req.tls to filter HTTPS requests
• Workflows: You can now specify a "Dedupe Key" when using the "Create Finding" node to prevent duplicate findings

Issues

This release also includes other bug fixes and improvements.
View the full list of changes here.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• (Experimental) Linux x86_64 (deb)
• (Experimental) Linux x86_64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64