Ib migration guides

.agents/skills/grill-me/SKILL.md

@@ -0,0 +1,10 @@
+---
+name: grill-me
+description: Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me".
+---
+
+Interview me relentlessly about every aspect of this plan until we reach a shared understanding. Walk down each branch of the design tree, resolving dependencies between decisions one-by-one. For each question, provide your recommended answer.
+
+Ask the questions one at a time.
+
+If a question can be answered by exploring the codebase, explore the codebase instead.

.vitepress/components/Navbar.vue

@@ -3,7 +3,7 @@ import { useRoute } from "vitepress";
 import type { DefaultTheme } from "vitepress";
 import { computed } from "vue";
 
-import { appNavbar, dashboardNavbar } from "../navbars";
+import { appNavbar, burpSuiteNavbar, dashboardNavbar } from "../navbars";
 
 const route = useRoute();
 
@@ -17,6 +17,10 @@ const navItemsWithLinks = computed(() => {
     return dashboardNavbar.filter(
       (item): item is DefaultTheme.NavItemWithLink => "link" in item,
     );
+  } else if (route.path.startsWith("/burp-suite/")) {
+    return burpSuiteNavbar.filter(
+      (item): item is DefaultTheme.NavItemWithLink => "link" in item,
+    );
   }
   return [];
 });

.vitepress/config.mts

@@ -4,8 +4,8 @@ import llmstxt from "vitepress-plugin-llms";
 import type { DefaultTheme } from "vitepress";
 
 import MermaidExample from "./mermaid";
-import { appNavbar, dashboardNavbar } from "./navbars";
-import { appSidebars, dashboardSidebars } from "./sidebars";
+import { appNavbar, burpSuiteNavbar, dashboardNavbar } from "./navbars";
+import { appSidebars, burpSuiteSidebars, dashboardSidebars } from "./sidebars";
 
 // https://vitepress.dev/reference/site-config
 export default defineConfig({
@@ -78,6 +78,15 @@ export default defineConfig({
           items: dashboardNavbar,
         },
       },
+      {
+        component: "NavItem",
+        props: {
+          text: "Migrating from Burp Suite",
+          link: "/burp-suite/core/overview",
+          activeMatch: "^/burp-suite(/|$)",
+          items: burpSuiteNavbar,
+        },
+      },
       {
         component: "NavItem",
         props: {
@@ -98,6 +107,8 @@ export default defineConfig({
       "/dashboard/quickstart/": dashboardSidebars.quickstartSidebar,
       "/dashboard/guides/": dashboardSidebars.guidesSidebar,
       "/dashboard/concepts/": dashboardSidebars.conceptsSidebar,
+      "/burp-suite/core/": burpSuiteSidebars.coreSidebar,
+      "/burp-suite/extensibility/": burpSuiteSidebars.extensibilitySidebar,
     },
 
     outline: {

.vitepress/navbars/burp-suite.ts

@@ -0,0 +1,6 @@
+import type { DefaultTheme } from "vitepress";
+
+export const burpSuiteNavbar: DefaultTheme.NavItemWithLink[] = [
+  { text: "Core", link: "/burp-suite/core/overview" },
+  { text: "Extensibility", link: "/burp-suite/extensibility/overview" },
+];

.vitepress/navbars/index.ts

@@ -1,2 +1,3 @@
 export * from "./app";
+export * from "./burp-suite";
 export * from "./dashboard";

.vitepress/sidebars/app/reference.ts

@@ -9,8 +9,8 @@ export const referenceSidebar: DefaultTheme.SidebarItem[] = [
         link: "/app/reference/",
       },
       {
-        text: "Burp Suite vs Caido",
-        link: "/app/reference/burp_vs_caido",
+        text: "Migrating from Burp Suite",
+        link: "/burp-suite/core/overview",
       },
       {
         text: "CLI Options",

.vitepress/sidebars/burp-suite/core.ts

@@ -0,0 +1,20 @@
+import type { DefaultTheme } from "vitepress";
+
+export const coreSidebar: DefaultTheme.SidebarItem[] = [
+  {
+    text: "Core",
+    items: [
+      { text: "Overview", link: "/burp-suite/core/overview" },
+      { text: "Browser & Setup", link: "/burp-suite/core/browser-and-setup" },
+      {
+        text: "Project & Configuration",
+        link: "/burp-suite/core/project-and-configuration",
+      },
+      { text: "Target & Scope", link: "/burp-suite/core/target-and-scope" },
+      { text: "Tools", link: "/burp-suite/core/tools" },
+      { text: "AI", link: "/burp-suite/core/ai" },
+      { text: "Scans", link: "/burp-suite/core/scans" },
+      { text: "Reporting", link: "/burp-suite/core/reporting" },
+    ],
+  },
+];

.vitepress/sidebars/burp-suite/extensibility.ts

@@ -0,0 +1,16 @@
+import type { DefaultTheme } from "vitepress";
+
+export const extensibilitySidebar: DefaultTheme.SidebarItem[] = [
+  {
+    text: "Extensibility",
+    items: [
+      { text: "Overview", link: "/burp-suite/extensibility/overview" },
+      { text: "Extensions", link: "/burp-suite/extensibility/extensions" },
+      { text: "Bambdas", link: "/burp-suite/extensibility/bambdas" },
+      {
+        text: "Custom Scan Checks",
+        link: "/burp-suite/extensibility/custom-scan-checks",
+      },
+    ],
+  },
+];

.vitepress/sidebars/burp-suite/index.ts

@@ -0,0 +1,2 @@
+export * from "./core";
+export * from "./extensibility";

.vitepress/sidebars/index.ts

@@ -1,2 +1,3 @@
 export * as appSidebars from "./app";
+export * as burpSuiteSidebars from "./burp-suite";
 export * as dashboardSidebars from "./dashboard";

render.yaml

@@ -50,6 +50,12 @@ services:
       - type: redirect
         source: /troubleshooting/*
         destination: /app/troubleshooting/*
+      - type: redirect
+        source: /app/reference/burp_vs_caido
+        destination: /burp-suite/core/overview
+      - type: redirect
+        source: /app/reference/burp_vs_caido.html
+        destination: /burp-suite/core/overview
     domains:
       - docs.caido.io
     envVars:

src/app/reference/burp_vs_caido.md

@@ -1,73 +1,3 @@
 ---
-description: "A side-by-side reference of common Burp Suite features and where to find their counterparts in Caido."
+redirect: /burp-suite/core/overview
 ---
-
-# Burp Suite vs Caido
-
-This page provides a mapping of Burp Suite features to their counterparts in Caido.
-
-## Tools
-
-| Burp Suite | Caido |
-|------------|-------|
-| Dashboard | [Plugins](/app/quickstart/plugins.md) |
-| Target | [Sitemap](/app/quickstart/sitemap.md)/[Scopes](/app/quickstart/scopes.md)/[Findings](/app/quickstart/findings.md) |
-| Burp's browser | [Using a Preconfigured Browser](/app/guides/preconfigured_browser.md) |
-| Proxy | [Intercept](/app/quickstart/intercept.md)/[HTTP History](/app/quickstart/http_history.md)/[WS History](/app/quickstart/ws_history.md)/[Match & Replace](/app/quickstart/match_replace.md) |
-| Scanner | [Scanner](https://github.com/caido-community/scanner) |
-| Intruder | [Automate](/app/quickstart/automate.md) |
-| Repeater | [Replay](/app/quickstart/replay.md) |
-| Decoder | [Convert Workflows](/app/concepts/workflows_intro.md#convert-workflows) |
-| Comparer | [Compare](https://github.com/amrelsagaei/Compare) |
-| Logger | [Search](/app/quickstart/search.md)/[Cerebrum](https://github.com/DewSecOff/Caido-Plugin-Cerebrum) |
-| Collaborator | [QuickSSRF](https://github.com/caido-community/quickssrf)/[OmniOAST](https://github.com/hahwul/OmniOAST) |
-| Search | [HTTPQL](/app/reference/httpql.md) |
-| Organizer | [Findings](/app/quickstart/findings.md) |
-| Filter settings | [Filters](/app/quickstart/filters.md) |
-
-## Extensions
-
-::: info
-The functionality of many Burp Suite Bambdas, custom scan checks, and extensions can be implemented using [workflows](http://localhost:5173/app/concepts/workflows_intro.html) in Caido or by [defining checks for the Scanner plugin](https://github.com/caido-community/scanner#check-definition).
-:::
-
-| Burp Suite | Caido |
-|------------|-------|
-| Param Miner | [ParamFinder](https://github.com/bebiksior/ParamFinder) |
-| JWT Editor | [JWT Analyzer](https://github.com/amrelsagaei/JWT-Analyzer) |
-| JS Miner | [Data Grep](https://github.com/caido-community/data-grep) |
-| Active Scan++ | [Scanner: Custom Checks](https://github.com/caido-community/scanner#check-definition) |
-| Content Type Converter | [Convert Tools](https://github.com/caido-community/convert-tools) |
-| Logger++ | [Search](/app/guides/search_filtering.md) |
-| Hackvertor | [Convert Workflows](/app/concepts/workflows_intro.html#convert-workflows) |
-| 403 Bypasser | [403Bypasser](https://github.com/bebiksior/Caido403Bypasser) |
-| InQL | [GraphQL Analyzer](https://github.com/amrelsagaei/GraphQL-Analyzer) |
-| Autorize/Auth Analyzer | [Autorize](https://github.com/caido-community/autorize) |
-| Auth Analyzer | [Authify](https://github.com/saltify7/Authify) |
-| Bypass WAF| [Passive Workflows](/app/concepts/workflows_intro.html#passive-workflows) |
-| Reflected Parameters | [Passive Workflows](/app/concepts/workflows_intro.html#passive-workflows) |
-| Sensitive Discoverer | [Passive Workflows](/app/concepts/workflows_intro.html#passive-workflows) |
-| Additional Scanner Checks | [Scanner: Custom Checks](https://github.com/caido-community/scanner#check-definition)/[Passive Workflows](/app/concepts/workflows_intro.html#passive-workflows) |
-| CORS*, Additional CORS Checks | [Scanner: Custom Checks](https://github.com/caido-community/scanner#check-definition)/[Passive Workflows](/app/concepts/workflows_intro.html#passive-workflows) |
-| Request Minimizer | [Squash](https://github.com/evanconnelly/squash) |
-| Add Custom Header | [Add a Header Workflow](/app/tutorials/add_header.md) |
-| CSP Auditor | [CSP Auditor](https://github.com/GangGreenTemperTatum/csp-auditor) |
-| AuthMatrix | [AuthMatrix](https://github.com/caido-community/authmatrix) |
-| AWS Signer | [Resign AWS Requests Workflow](/app/tutorials/aws_signature.md) |
-| Notes | [Notes++](https://github.com/caido-community/NotesPlusPlus) |
-| YesWeBurp | [YesWeCaido](https://github.com/yeswehack/yeswecaido) |
-| Burp Share Requests | [Drop](https://github.com/caido-community/drop) |
-
-## AI
-
-| Burp Suite | Caido |
-|------------|-------|
-| Using Burp AI in Repeater | [Shift](https://github.com/caido-community/shift) |
-| Generating AI-powered explanations | [Prompting the Assistant to Explain Requests](/app/guides/assistant_explain.md) |
-| Automating tasks with custom actions | [Shift](https://github.com/caido-community/shift) |
-
-::: tip Additional Caido AI Plugins
-
-- [Chatio](https://github.com/amrelsagaei/Chatio)
-- [Ebka AI Assistant](https://github.com/Slonser/Ebka-Caido-AI)
-:::

src/burp-suite/core/ai.md

@@ -0,0 +1,74 @@
+---
+description: "Map Burp Suite Pro AI features to Caido AI plugins."
+---
+
+# Burp AI
+
+Burp Suite Pro AI features and their Caido equivalents.
+
+## Available
+
+### Generating AI-powered explanations
+
+Burp can generate natural-language explanations of HTTP requests and responses from Repeater.
+
+Caido offers the **Chatio** and **Shift** community plugins to explain and analyze HTTP traffic in natural language. **Chatio** provides a dedicated chat interface for security-focused Q&A; **Shift** adds in-context explanations and analysis on requests in **Replay**.
+
+#### Resources
+
+- [Chatio](https://github.com/caido-community/Chatio) (GitHub)
+- [Shift](https://github.com/caido-community/shift) (GitHub)
+- [Shift Tutorial](/app/tutorials/shift.md)
+
+### Using Burp AI in Repeater
+
+In Burp, AI actions run directly inside Repeater tabs to modify or analyze the current request.
+
+Caido offers the **Shift** plugin for AI-assisted request editing alongside native **Replay**. Shift provides in-context AI actions on requests, similar to Burp AI in Repeater.
+
+#### Resources
+
+- [Shift](https://github.com/caido-community/shift) (GitHub)
+- [Shift Tutorial](/app/tutorials/shift.md)
+- [Replay](/app/quickstart/replay.md)
+
+## Indirectly Available
+
+### Burp AI
+
+Burp AI is PortSwigger's built-in assistant for explaining requests, suggesting payloads, and running custom actions inside Repeater.
+
+Caido does not ship a single bundled AI product like Burp AI. Use **Shift** (including **Shift Agents** for autonomous background tasks) and **Chatio** for explanations, payload suggestions, and request editing. Each plugin manages its own API keys rather than a central credits system.
+
+#### Resources
+
+- [Shift](https://github.com/caido-community/shift) (GitHub)
+- [Shift Tutorial](/app/tutorials/shift.md)
+- [Chatio](https://github.com/caido-community/Chatio) (GitHub)
+
+### Automating tasks with custom actions
+
+Burp AI custom actions automate repetitive Repeater tasks with prompts and predefined workflows.
+
+Caido offers **Shift Agents** to assign autonomous background tasks to a model, and **Shift** custom prompts for repeatable AI actions on requests. Caido also covers non-AI repetitive task automation through native **Workflows** and **Automate**.
+
+#### Resources
+
+- [Shift Tutorial](/app/tutorials/shift.md)
+- [Shift](https://github.com/caido-community/shift) (GitHub)
+- [Workflows](/app/quickstart/workflows.md)
+- [Automate](/app/quickstart/automate.md)
+
+## Not Available
+
+### AI credits
+
+Burp tracks AI usage through a credits system tied to your PortSwigger subscription.
+
+Caido has no central AI credits system. AI plugins such as **Shift** and **Chatio** use your own API keys (OpenAI, Anthropic, etc.) or plugin-specific billing configured in each plugin's settings.
+
+#### Resources
+
+- [Shift Tutorial](/app/tutorials/shift.md)
+- [Shift](https://github.com/caido-community/shift) (GitHub)
+- [Chatio](https://github.com/caido-community/Chatio) (GitHub)

src/burp-suite/core/browser-and-setup.md

@@ -0,0 +1,85 @@
+---
+description: "Map Burp Suite Pro browser, mobile, and setup features to Caido."
+---
+
+# Browser & Setup
+
+Burp Suite Pro browser integration, transport, and setup features and their Caido equivalents.
+
+## Available
+
+### Testing mobile applications
+
+Burp proxies traffic from iOS and Android devices through the intercepting proxy.
+
+Caido supports proxying mobile device traffic the same way as Burp: install Caido's CA certificate on the device and point the proxy settings to your Caido instance. Caido supports mobile proxying natively through its listening proxy.
+
+#### Resources
+
+- [Setup](/app/quickstart/setup.md)
+- [Managing CA Certificates](/app/guides/ca_certificate_managing.md)
+- [Importing CA Certificates](/app/guides/ca_certificate_importing.md)
+- [Android Introduction Tutorial](/app/tutorials/android_introduction.md)
+
+### External browser configuration
+
+Burp lets you use a system browser other than its embedded browser with the proxy.
+
+Caido supports using a **preconfigured browser** or manually set any browser's proxy to point at Caido. Caido does not require its own embedded browser for proxy testing.
+
+#### Resources
+
+- [Using a Preconfigured Browser](/app/guides/preconfigured_browser.md)
+- [FoxyProxy Guide](/app/guides/foxyproxy.md)
+- [ZeroOmega Guide](/app/guides/zeroomega.md)
+
+### Invisible proxying
+
+Burp forwards non-proxy-aware clients through the proxy without explicit proxy configuration.
+
+Caido offers an **Invisible Proxy** setup to intercept traffic from clients that cannot be configured to use an explicit proxy. This requires network-level forwarding similar to Burp's invisible proxying mode.
+
+#### Resources
+
+- [Invisible Proxy Tutorial](/app/tutorials/invisible_proxy.md)
+- [Invisible Proxying Guide](/app/guides/invisible_proxying.md)
+
+### Managing CA certificates
+
+Burp lets you install and manage its CA certificate for intercepting HTTPS traffic.
+
+Caido lets you export and install its CA certificate from **Settings → Network → TLS**. Certificate management is built into Caido's network settings rather than a separate Burp-style CA tool tab.
+
+#### Resources
+
+- [Setup](/app/quickstart/setup.md)
+- [Managing CA Certificates](/app/guides/ca_certificate_managing.md)
+- [Importing CA Certificates](/app/guides/ca_certificate_importing.md)
+
+## Indirectly Available
+
+### Burp's browser
+
+Burp ships a Chromium-based browser preconfigured to proxy through Burp with DOM Invader integration.
+
+Caido supports configuring a **preconfigured browser** to proxy through Caido automatically. The **PwnFox** plugin integrates multi-profile Firefox containers for parallel sessions. Caido does not ship an embedded browser with DOM testing integration like Burp's browser; pair a system browser with **DOMLogger++** for partial DOM sink monitoring.
+
+#### Resources
+
+- [Using a Preconfigured Browser](/app/guides/preconfigured_browser.md)
+- [Setup](/app/quickstart/setup.md)
+- [PwnFox](https://github.com/caido-community/pwnfox) (GitHub)
+- [DOMLogger++](https://github.com/kevin-mizu/domloggerpp-caido) (GitHub)
+
+## Not Available
+
+### Testing with HTTP/2
+
+Burp lets you send and manipulate HTTP/2 requests, including exclusive attacks.
+
+Caido does not support HTTP/2 in the intercepting proxy or in **Replay**. Traffic is handled over HTTP/1.1; HTTP/2-specific testing and attacks are not available in Caido today.
+
+#### Resources
+
+- [Replay](/app/quickstart/replay.md)
+- [Intercept](/app/quickstart/intercept.md)