Skip to content

Commit 5d91500

Browse files
committed
docs: Add human-in-the-loop section to proxy documentation
1 parent 4384f5b commit 5d91500

1 file changed

Lines changed: 21 additions & 0 deletions

File tree

docs/tools/proxy.mdx

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,27 @@ for req in user_requests.get('requests', []):
8080
print(f"Potential IDOR: {test_id} returned 200")
8181
```
8282

83+
## Human-in-the-Loop
84+
85+
Strix exposes the Caido proxy to your host machine, so you can interact with it alongside the automated scan. When the sandbox starts, the Caido URL is displayed in the TUI sidebar — click it to copy, then open it in Caido Desktop.
86+
87+
### Accessing Caido
88+
89+
1. Start a scan as usual
90+
2. Look for the **Caido** URL in the sidebar stats panel (e.g. `localhost:52341`)
91+
3. Open the URL in Caido Desktop
92+
4. Click **Continue as guest** to access the instance
93+
94+
### What You Can Do
95+
96+
- **Inspect traffic** — Browse all HTTP/HTTPS requests the agent is making in real time
97+
- **Replay requests** — Take any captured request and resend it with your own modifications
98+
- **Intercept and modify** — Pause requests mid-flight, edit them, then forward
99+
- **Explore the sitemap** — See the full attack surface the agent has discovered
100+
- **Manual testing** — Use Caido's tools to test findings the agent reports, or explore areas it hasn't reached
101+
102+
This turns Strix from a fully automated scanner into a collaborative tool — the agent handles the heavy lifting while you focus on the interesting parts.
103+
83104
## Scope
84105

85106
Create scopes to filter traffic to relevant domains:

0 commit comments

Comments
 (0)