cariddi
Take a list of domains, crawl URLs, and scan for endpoints, secrets, API keys, file extensions, tokens, and moreā¦
Details
Category: Discovery
Publisher: trickest-mhmdiaa
Created Date: 2/5/2022
Container: quay.io/trickest/cariddi:v1.3.1
Source URL: https://github.com/edoardottt/cariddi
Parameters
err
boolean
Command:
-err
- Hunt for errors in websites.json
boolean
Command:
-json
- Print the output as JSON in stdout.debug
boolean
Command:
-debug
- Print debug information while crawling.plain
boolean
Command:
-plain
- Print only the results.proxy
string
Command:
-proxy
- Set a Proxy to be used (http and socks5 supported).domains
file
requiredCommand:
- List of domains to scanheaders
string
Command:
-headers
- Use custom headers for each request E.g. Cookie: auth=yes;;Client: type=2.timeout
string
Command:
-t
- Set timeout for the requests. (default 10)hunt-info
boolean
Command:
-info
- Hunt for useful informations in websites.intensive
boolean
Command:
-intensive
- Crawl searching for resources matching 2nd level domain.user-agent
string
Command:
-ua
- Use a custom User Agent.headersfile
file
Command:
-headersfile
- Read from an external file custom headers (same format of headers flag).hunt-secrets
boolean
Command:
-s
- Hunt for secrets.random-agent
boolean
Command:
-rua
- Use a random browser user agent on every request.external-file
file
Command:
-ef
- Use an external file (txt, one per line) to use custom parameters for endpoints hunting.juicy-endpoint
boolean
Command:
-e
- Hunt for juicy endpoints.juicy-extensions
string
Command:
-ext
- Hunt for juicy file extensions. Integer from 1(juicy) to 7(not juicy).concurrency-level
string
Command:
-c
- Concurrency level. (default 20)ignore-url-element
string
Command:
-i
- Ignore the URL containing at least one of the elements of this array.delay-between-crawl
string
Command:
-d
- Delay between a page crawled and another.custom-regex-secrets
file
Command:
-sf
- Use an external file (txt, one per line) to use custom regexes for secrets hunting.ignore-url-element-file
file
Command:
-it
- Ignore the URL containing at least one of the lines of this file.