Charles Proxy - Hackdot

Re:Charles Proxy by doomerhunter on Saturday December 20, 2025 @06:19AM (#46335372)

I am a Burp guy, but lately Caido[1] has been trending, pretty lightweight and can be ran in headless mode. It's still very security-oriented (as Burp Suite is), but might be worth your time, notably as you can run it on a VPS/container to proxy all your traffic through it (which is by-design, contrary to my beloved burp/zap)

[1] https://caido.io/

[ Parent | on HN ]

Re:Charles Proxy by Sytten on Saturday December 20, 2025 @09:34AM (#46336467)

Caido co-founder here, thanks for the shoutout! We are slowly moving to the DevSecOps space too.

[ Parent | on HN ]

Re:Charles Proxy by ghxst on Saturday December 20, 2025 @10:09AM (#46336722)

Please consider allowing the user to modify the TLS handshake / ClientHello. Out of all proxies I have used only Burp offers this through a plugin / extension.

[ Parent | on HN ]

Re:Charles Proxy by Sytten on Sunday December 21, 2025 @07:01PM (#46349915)

Agreed this is something we need to do, but not easy to do properly. The TLS 1.3 spec has a lot of extensions, currently we use openssl that for example doesn't support GREASE.

[ Parent | on HN ]

Re:Charles Proxy by doomerhunter on Sunday December 21, 2025 @11:27AM (#46345952)

My pleasure, your team is doing a great job and its good to see competition in that space, forces everyone to push forward :D

[ Parent | on HN ]