Take a list of domains and scan for endpoints, secrets, api keys, tokens and more...



_{Coded with 💙 by edoardottt.}
Share on Twitter!

Preview • Install • Get Started • Examples • Contributing

Preview 📊

Installation 📡

You need Go.

• Linux

  • git clone https://github.com/edoardottt/cariddi.git
  • cd cariddi
  • go get
  • make linux (to install)
  • make unlinux (to uninstall)

  Or in one line: git clone https://github.com/edoardottt/cariddi.git; cd cariddi; go get; make linux

• Windows (executable works only in cariddi folder.)

  • git clone https://github.com/edoardottt/cariddi.git
  • cd cariddi
  • go get
  • .\make.bat windows (to install)
  • .\make.bat unwindows (to uninstall)

Get Started 🎉

cariddi help prints the help in the command line.

Usage of cariddi:
  -c int
    	Concurrency level. (default 20)
  -d int
    	Delay between a page crawled and another.
  -e	Hunt for juicy endpoints.
  -ef string
    	Use an external file (txt, one per line) to use custom parameters for endpoints hunting.
  -examples
    	Print the examples.
  -h	Print the help.
  -oh string
    	Write the output into an HTML file.
  -ot string
    	Write the output into a TXT file.
  -plain
    	Print only the results.
  -s	Hunt for secrets.
  -sf string
    	Use an external file (txt, one per line) to use custom regexes for secrets hunting.
  -version
    	Print the version.

Examples 💡

• cat urls | cariddi -version (Print the version)
• cat urls | cariddi -h (Print the help)
• cat urls | cariddi -e (Hunt for secrets)
• cat urls | cariddi -d 2 (2 seconds between a page crawled and another)
• cat urls | cariddi -c 200 (Set the concurrency level to 200)
• cat urls | cariddi -s (Hunt for juicy endpoints)
• cat urls | cariddi -plain (Print only useful things)
• cat urls | cariddi -ot target_name (Results in txt file)
• cat urls | cariddi -oh target_name (Results in html file)

Contributing 🛠

Just open an issue/pull request. See also CONTRIBUTING.md and CODE OF CONDUCT.md

Help me building this!

A special thanks to:

• zricethezav

To do:

• Tests (😂)

• Tor support

• Proxy support

• Plain output (print only results)

• HTML output

• Build an Input Struct and use it as parameter

• Output color

• TXT output

License 📝

This repository is under GNU General Public License v3.0.
edoardoottavianelli.it to contact me.