Burp Suite vs Caido
This page provides a mapping of Burp Suite features to their counterparts in Caido.
Tools
| Burp Suite | Caido |
|---|---|
| Dashboard | Plugins |
| Target | Sitemap/Scopes/Findings |
| Burp's browser | Using a Preconfigured Browser |
| Proxy | Intercept/HTTP History/WS History/Match & Replace |
| Scanner | Scanner |
| Intruder | Automate |
| Repeater | Replay |
| Decoder | Convert Workflows |
| Comparer | Compare |
| Logger | Search/Cerebrum |
| Collaborator | QuickSSRF/OmniOAST |
| Search | HTTPQL |
| Organizer | Findings |
| Filter settings | Filters |
Extensions
INFO
The functionality of many Burp Suite Bambdas, custom scan checks, and extensions can be implemented using workflows in Caido or by defining checks for the Scanner plugin.
| Burp Suite | Caido |
|---|---|
| Param Miner | ParamFinder |
| JWT Editor | JWT Analyzer |
| JS Miner | Data Grep |
| Active Scan++ | Scanner: Custom Checks |
| Content Type Converter | Convert Tools |
| Logger++ | Search |
| Hackvertor | Convert Workflows |
| 403 Bypasser | 403Bypasser |
| InQL | GraphQL Analyzer |
| Auth Analyzer | Authify |
| Bypass WAF | Passive Workflows |
| Reflected Parameters | Passive Workflows |
| Sensitive Discoverer | Passive Workflows |
| Additional Scanner Checks | Scanner: Custom Checks/Passive Workflows |
| CORS*, Additional CORS Checks | Scanner: Custom Checks/Passive Workflows |
| Request Minimizer | Squash |
| Add Custom Header | Add a Header Workflow |
| CSP Auditor | CSP Auditor |
| AuthMatrix | AuthMatrix |
| AWS Signer | Resign AWS Requests Workflow |
| Notes | Notes++ |
| YesWeBurp | YesWeCaido |
| Burp Share Requests | Drop |
AI
| Burp Suite | Caido |
|---|---|
| Using Burp AI in Repeater | Shift |
| Generating AI-powered explanations | Prompting the Assistant to Explain Requests |
| Automating tasks with custom actions | Shift |
Additional Caido AI Plugins