Caido Snippets

🔎 Filters presets ¹

No Browser's own requests

req.host.ncont:"safebrowsing.googleapis.com" AND 
req.host.ncont:"detectportal.firefox.com" AND 
req.host.nregex:".*.mozilla.com|org|net" AND 
req.host.ncont:"spocs.getpocket.com" AND 
req.host.ncont:"update.googleapis.com" AND 
req.host.ncont:"optimizationguide-pa.googleapis.com" AND 
req.host.ncont:"content-autofill.googleapis.com" AND 
req.host.ncont:"clients4.google.com" AND 
req.host.ncont:"clients2.google.com" AND 
req.host.ncont:"msftncsi.com" AND 
req.host.ncont:"msftconnecttest.com" AND 
req.host.ncont:"edge.microsoft.com" AND 
req.host.ncont:"apple.com" AND 
req.host.ncont:"icloud.com" AND 

No 3rd-party requests

req.host.ncont:"www.google-analytics.com" AND
req.host.ncont:"darkreader.org"
AND req.host.ncont:"www.googletagmanager.com"

Only Set-Cookie

resp.raw.regex:"(?i)Set-Cookie:"

Only Redirects

(resp.raw.regex:"(?i)Location: " OR (resp.code.eq:301 OR (resp.code.eq:302 OR (resp.code.eq:307 OR resp.code.eq:308))))

Hide .js

req.ext.ncont:"js"

🤖 Assistant prompts ²

🔩 GraphQL snippet ³

Caido version and platform

{
  runtime{
    version
    platform
  }
}

🪄 Trick

Get AccessToken

console.log(JSON.parse(localStorage.CAIDO_AUTHENTICATION).accessToken)

AccessToken is used in the Authorization header of Caido's GraphQL, etc.

Footnotes

1. Sidebar > filters ↩

2. Sidebar > assistant ↩

3. Topbar > User > GraphQL Playground ↩