Capturing and Inspecting Web Traffic
Intercept
For advanced documentation on this topic - click here.
Intercept
allows you to capture requests as well as responses for inspection/modification and forward or drop them arbitrarily. Requests are shown on the left and responses are shown on the right.
- Select the
Intercept
tab from the left-hand menu within the Caido window. - Clicking this button will toggle between
Queuing
(intercept traffic) andForwarding
(forward traffic). - Click
Requests
,Responses
or both to specify whatQueuing
is applied to. Intercept on is signified by||
and intercept off is signified by>>
. - The
Drop
andForward
buttons will drop or forward requests/responses respecively.
HTTP History
For advanced documentation on this topic - click here.
The HTTP History
tab lists all the traffic that Caido has proxied.
- Select the
HTTP History
tab from the left-hand menu within the Caido window. - All the proxied requests will appear in this pane. Select them arbitrarily.
- Search/filter for requests or responses within Caido's history by entering an HTTPQL query in this input bar.
- Clicking the
Advanced
button will present checkbox options to further filter what is displayed in the history (filter by response status code(s) and custom presets). - Clicking the
Column preferences
cog wheel icon will present checkbox options that you can select/deselect to customize the information provided about each request.
WS History
For advanced documentation on this topic - click here.
The WS History
tab lists all of the WebSocket stream traffic that Caido has proxied.
- Select the
WS History
tab from the left-hand menu within the Caido window. - All the proxied WebSocket streams will appear in this pane. Select them arbitrarily.
- Select a message within the selected stream in this pane.
- The contents of the selected message are presented in this pane.
TIP
You can click on any of the column names above the request/response/stream list pane to sort in ascending/descending/alphabetical/numerical order, by extension/presence/absence/size, or by time waited/time sent depending on the tab/category selected.
Forwarding and Modifying Requests Repeatedly
Once you have familiarized yourself with capturing and inspecting web traffic - basic modification steps using Replay
are available here: