v0.58.0

Changelog

This release adds a new Replay session type called "Pipeline" for race condition testing, new header and body fields in HTTPQL, a reworked Plugin page, a customizable sidebar, and more.

Features

Replay Pipeline

Replay sessions now come in three types: HTTP Request, WebSocket, and Pipeline. A Pipeline session groups several requests together and sends them as one run, which is what you need to test race conditions and other timing-dependent behavior.

Create one with New Session and pick Pipeline. Add your requests, choose a Pipeline strategy, then hit Run. Two strategies are available:

• Sequential sends the requests one after the other, in order.
• Last Byte Synchronization holds back the final byte of every request and releases them together, so they land on the server at the same moment.

Header and Body Fields in HTTPQL

HTTPQL now has header and body fields on both the request and the response namespace. Until now, matching on either section meant querying raw and scanning the entire request or response.

req.header.name.eq:"Authorization"
req.header["Authorization"].cont:"Bearer"
req.body.regex:"password=[^&]+"
resp.body.cont:"stack trace"

Reworked Plugin Page

The Plugin page has been reworked to make plugins easier to browse and judge before you install them. Plugins now carry an Official badge when maintained by Caido, plus a quality rating, and the list shows author, downloads, and version. You can filter to Official or Community plugins and install or update several at once.

Customizable Sidebar

You can now move sidebar items around. Click Customize to drag pages and plugins into a different order, pin the ones you reach for most, hide what you never use, or add your own categories.

QoL Improvements

Along with bug fixes, we also have a few QoL improvements worth mentioning:

• The editors are now faster when working with large requests and responses.
• Pages and plugins can now be reached with "Go to" in the command palette.
• The same shortcut can now be set on multiple commands.
• Shift clicking a Sitemap element now fully expands it.

Issues

This release also includes other bug fixes and improvements.
View the full list of changes.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.57.1

Changelog

This release fixes a few issues with the replay page:

• Fixes an issue where navigating in the replay history would show the wrong request
• Fixes an issue where sending large requests would reset the scroll position

Issues

This release also includes other bug fixes and improvements.
View the full list of changes.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.57.0

Changelog

This release adds major features such as WebSocket support in Replay and M&R, custom extractors in Automate, a new StreamQL query language for WebSocket filtering, and more.

🔥 Features

WebSocket in Replay

You can now send WebSocket messages from the Replay page. Create a new WebSocket session, set the initial HTTP request, and start sending messages.

Users on the free tier may create up to 1 WebSocket session at a time. Individual and Team tiers can create unlimited WebSocket sessions.

Automate Extractors

Automate now has support for custom extractors, allowing you to extract response sections and view them as a custom column in the result tables.

Add an extractor, define a regex with a capture group, and start the Automate session.

Websocket Filtering with StreamQL

Websocket messages in the WS History page can now be filtered using a new StreamQL language. This brings the experience closer to what is already available in the HTTP History and Search pages.

QoL Improvements

Along with bug fixes, we also have a few QoL improvements worth mentioning:

• Match & Replace rules can now be applied to websocket requests and responses
• Filters can now be made "Global", making them accessible across all of your projects.
• A new "Logging" node in Workflows to help you debug fields without having to rely on the JS nodes.

Issues

This release also includes other bug fixes and improvements.
View the full list of changes.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.56.2

Changelog

This release fixes an issue where the "version available" notification would continue to appear after the app had already been updated.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.56.1

Changelog

This release fixes an issue preventing users from accessing IPv6 URLs directly.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.56.0

Changelog

This adds many QoL improvements including:

• Match & Replace in Replay
• Connecting to remote instances via HTTPs
• Collection/session re-ordering in Replay

Issues

This release also includes other bug fixes and improvements.
View the full list of changes.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.55.3

Changelog

• Fixed an issue with long-running instances where the sync-service would consume more resources than intended
• Fixed an issue causing large responses to freeze the app

Issues

This release also includes other bug fixes and improvements.
View the full list of changes.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.55.2

Changelog

• Fixes an issue where checkboxes in the Replay options dropdown would not update
• Fixes "Go to" navigation in the command palette
• Fixes backup imports for projects containing secret environment variables
• Uses a new certificate to sign Windows binaries

Issues

This release also includes other bug fixes and improvements.
View the full list of changes.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.55.1

Changelog

• Fixes an issue where Ctrl+F does not show the editor search pane.
• Fixes an issue where the user settings would be reset.

Issues

This release also includes other bug fixes and improvements.
View the full list of changes.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64

v0.55.0

Changelog

This release introduces workflow string interpolation, a new extra field to pass data to JS workflow nodes, import/export capabilities for Match & Replace and Findings, and more SDK functionality for better plugin integration.

🔥 Features

Workflow String Interpolation

Workflows now support string interpolation using <% %> syntax, allowing you to dynamically insert values into workflow node text fields.

Example: You can use this syntax to inject the HTTP method from a previous step directly into a Finding description:

The server returns 200 when passing the HTTP method: <% my_node_alias.request.getMethod() %>

New Extra Input in Javascript Nodes

JavaScript nodes now support an extra input field. This allows you to easily pass multiple inputs into the JS node and perform more complex operations.

Import/Export Match & Replace Rules and Findings

You can now import and export Match & Replace collections and Findings to share rules and findings with your team, between instances and between projects.

👩‍💻 Developer Features

🎨 Frontend SDK

• Added the following functionality:
  • sdk.ai.getUpstreamProviders()
  • sdk.automate.addResponseViewMode()
  • sdk.automate.getSessions()
  • sdk.automate.getEntries()
  • sdk.automate.addEntryIndicator()
  • sdk.files.onUploadedHostedFile()
  • sdk.files.onUpdatedHostedFile()
  • sdk.files.onDeletedHostedFile()
  • sdk.findings.addResponseViewMode()
  • sdk.httpHistory.addResponseViewMode()
  • sdk.intercept.addResponseViewMode()
  • sdk.matchReplace.addRuleIndicator()
  • sdk.replay.addResponseViewMode()
  • sdk.replay.addSessionIndicator()
  • sdk.search.addResponseViewMode()
  • sdk.settings.addToSlot()
  • sdk.sitemap.onEntryChildStateUpdate()
  • sdk.sitemap.getTreeEntries()
  • sdk.sitemap.getChildren()
  • sdk.sitemap.addResponseViewMode()
  • sdk.sitemap.addEntryIndicator()
  • sdk.window.getContext()
  • sdk.window.onContextChange()

🛠️ Backend SDK

• Added the following functionality:

  • sdk.events.onUpstream()
  • sdk.meta.id()
  • sdk.net.connect()
  • RequestSpec.getInfo()
  • RequestSpec.getUrl()
  • RequestSpecRaw.getInfo()
  • RequestSpecRaw.toSpec()

• Added the following modules:

  • https

Issues

This release also includes other bug fixes and improvements.
View the full list of changes.

CLI

• Linux x86_64
• Linux AArch64
• macOS x86_64
• macOS AArch64
• Windows x86_64

Desktop

• Linux x86_64 (deb)
• Linux x86_64 (tar.gz)
• Linux x86_64 (AppImage)
• Linux AArch64 (deb)
• Linux AArch64 (tar.gz)
• Linux AArch64 (AppImage)
• macOS x86_64
• macOS AArch64
• Windows x86_64