Trendshift - Ask AI

base on Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more <img src="https://github.com/edoardottt/images/blob/main/cariddi/logo.png"> Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more  <a href="https://goreportcard.com/report/github.com/edoardottt/cariddi"> <img src="https://goreportcard.com/badge/github.com/edoardottt/cariddi" alt="go-report-card" /> </a>  <a href="https://github.com/edoardottt/cariddi/actions"> <img src="https://github.com/edoardottt/cariddi/workflows/Go/badge.svg?branch=main" alt="workflows" /> </a> Coded with 💙 by edoardottt  <a href="https://twitter.com/intent/tweet?url=https://github.com/edoardottt/cariddi&text=Take%20a%20list%20of%20domains,%20crawl%20urls%20and%20scan%20for%20endpoints,%20secrets,%20api%20keys,%20file%20extensions,%20tokens%20and%20more...%20%23network%20%23security%20%23infosec%20%23oss%20%23github%20%23bugbounty%20%23linux" target="_blank">Share on Twitter! </a> <a href="#installation-">Install</a> • <a href="#get-started-">Get Started</a> • <a href="#examples-">Examples</a> • <a href="#changelog-">Changelog</a> • <a href="#contributing-">Contributing</a> • <a href="#license-">License</a>  <img src="https://github.com/edoardottt/images/blob/main/cariddi/cariddi.gif"> Installation 📡 ---------- ### Homebrew ``` brew install cariddi ``` ### Snap ```bash sudo snap install cariddi ``` ### Go ```bash go install -v github.com/edoardottt/cariddi/cmd/cariddi@latest ``` ### Pacman ```bash pacman -Syu cariddi ``` ### Building from source You need [Go](https://go.dev/) (>=1.18) - **Linux** - `git clone https://github.com/edoardottt/cariddi.git` - `cd cariddi` - `go get ./...` - `make linux` (to install) - `make unlinux` (to uninstall) Or in one line: `git clone https://github.com/edoardottt/cariddi.git; cd cariddi; go get; make linux` - **Windows** (executable works only in cariddi folder.) - `git clone https://github.com/edoardottt/cariddi.git` - `cd cariddi` - `go get ./...` - `.\make.bat windows` (to install) - `.\make.bat unwindows` (to uninstall) Get Started 🎉 ---------- `cariddi -h` prints the help. ``` Usage of cariddi: -c int Concurrency level. (default 20) -cache Use the .cariddi_cache folder as cache. -d int Delay between a page crawled and another. -debug Print debug information while crawling. -e Hunt for juicy endpoints. -ef string Use an external file (txt, one per line) to use custom parameters for endpoints hunting. -err Hunt for errors in websites. -examples Print the examples. -ext int Hunt for juicy file extensions. Integer from 1(juicy) to 7(not juicy). -h Print the help. -headers string Use custom headers for each request E.g. -headers "Cookie: auth=yes;;Client: type=2". -headersfile string Read from an external file custom headers (same format of headers flag). -json Print the output as JSON in stdout. -i string Ignore the URL containing at least one of the elements of this array. -info Hunt for useful informations in websites. -intensive Crawl searching for resources matching 2nd level domain. -it string Ignore the URL containing at least one of the lines of this file. -oh string Write the output into an HTML file. -ot string Write the output into a TXT file. -plain Print only the results. -proxy string Set a Proxy to be used (http and socks5 supported). -rua Use a random browser user agent on every request. -s Hunt for secrets. -sf string Use an external file (txt, one per line) to use custom regexes for secrets hunting. -sr Store HTTP responses. -t int Set timeout for the requests. (default 10) -ua string Use a custom User Agent. -version Print the version. ``` Examples 💡 ---------- - `cariddi -version` (Print the version) - `cariddi -h` (Print the help) - `cariddi -examples` (Print the examples) - `cat urls | cariddi -s` (Hunt for secrets) - `cat urls | cariddi -d 2` (2 seconds between a page crawled and another) - `cat urls | cariddi -c 200` (Set the concurrency level to 200) - `cat urls | cariddi -e` (Hunt for juicy endpoints) - `cat urls | cariddi -plain` (Print only results) - `cat urls | cariddi -ot target_name` (Results in txt file) - `cat urls | cariddi -oh target_name` (Results in html file) - `cat urls | cariddi -ext 2` (Hunt for juicy (level 2 out of 7) files) - `cat urls | cariddi -e -ef endpoints_file` (Hunt for custom endpoints) - `cat urls | cariddi -s -sf secrets_file` (Hunt for custom secrets) - `cat urls | cariddi -i forum,blog,community,open` (Ignore urls containing these words) - `cat urls | cariddi -it ignore_file` (Ignore urls containing at least one line in the input file) - `cat urls | cariddi -cache` (Use the .cariddi_cache folder as cache) - `cat urls | cariddi -t 5` (Set the timeout for the requests) - `cat urls | cariddi -intensive` (Crawl searching also subdomains, same as `*.target.com`) - `cat urls | cariddi -rua` (Use a random browser user agent on every request) - `cat urls | cariddi -proxy http://127.0.0.1:8080` (Set a Proxy, http and socks5 supported) - `cat urls | cariddi -headers "Cookie: auth=admin;type=2;; X-Custom: customHeader"` - `cat urls | cariddi -headersfile headers.txt` (Read from an external file custom headers) - `cat urls | cariddi -err` (Hunt for errors in websites) - `cat urls | cariddi -info` (Hunt for useful informations in websites) - `cat urls | cariddi -debug` (Print debug information while crawling) - `cat urls | cariddi -ua "Custom User Agent"` (Use a custom User Agent) - `cat urls | cariddi -json` (Print the output as JSON in stdout) - `cat urls | cariddi -sr` (Store HTTP responses) - For Windows: - use `powershell.exe -Command "cat urls | .\cariddi.exe"` inside the Command prompt - or just `cat urls | cariddi.exe` using PowerShell - To integrate cariddi with Burpsuite [follow these steps](https://github.com/edoardottt/cariddi/wiki/BurpSuite-Integration) or click the button below: <details> <summary>Integrate cariddi with Burpsuite</summary> Normally you use Burpsuite within your browser, so you just have to trust the burpsuite's certificate in the browser and you're done. In order to use cariddi with the BurpSuite proxy you should do some steps further. If you try to use cariddi with the option `-proxy http://127.0.0.1:8080` you will find this error in the burpsuite error log section: ```bash Received fatal alert: bad_certificate (or something similar related to the certificate). ``` To make cariddi working fine with Burpsuite you have also to trust the certificate within your entire pc, not just only the browser. These are the steps you have to follow: Go to Proxy tab in Bupsuite, then Options. Click on the CA Certificate button and export Certificate in DER format ```bash openssl x509 -in burp.der -inform DER -out burp.pem -outform PEM sudo chown root:root burp.pem sudo chmod 644 burp.pem sudo cp burp.pem /usr/local/share/ca-certificates/ sudo c_rehash cd /etc/ssl/certs/ sudo ln -s /usr/local/share/ca-certificates/burp.pem sudo c_rehash . ``` Source: Trust Burp Proxy certificate in Debian/Ubuntu After these steps, in order to use cariddi with Burpsuite you have to: 1. Open Burpsuite, making sure that the proxy is listening. 2. Use cariddi with the flag `-proxy http://127.0.0.1:8080`. 3. You will see that requests and responses will be logged in Burpsuite. </details> Changelog 📌 ------- Detailed changes for each release are documented in the [release notes](https://github.com/edoardottt/cariddi/releases). Contributing 🛠 ------- Just open an [issue](https://github.com/edoardottt/cariddi/issues)/[pull request](https://github.com/edoardottt/cariddi/pulls). Before opening a pull request, download [golangci-lint](https://golangci-lint.run/usage/install/) and run ```bash golangci-lint run ``` If there aren't errors, go ahead :) **Help me building this!** Special thanks to: [go-colly](http://go-colly.org/), [ocervell](https://github.com/ocervell), [zricethezav](https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml), [projectdiscovery](https://github.com/projectdiscovery/nuclei-templates/tree/master/file/keys), [tomnomnom](https://github.com/tomnomnom/gf/tree/master/examples), [RegexPassive](https://github.com/hahwul/RegexPassive) and [all the contributors](https://github.com/edoardottt/cariddi/wiki/Contributors). License 📝 ------- This repository is under [GNU General Public License v3.0](https://github.com/edoardottt/cariddi/blob/main/LICENSE). [edoardottt.com](https://edoardottt.com/) to contact me. ", Assign "at most 3 tags" to the expected json: {"id":"3090","tags":[]} "only from the tags list I provide: [{"id":77,"name":"3d"},{"id":89,"name":"agent"},{"id":17,"name":"ai"},{"id":54,"name":"algorithm"},{"id":24,"name":"api"},{"id":44,"name":"authentication"},{"id":3,"name":"aws"},{"id":27,"name":"backend"},{"id":60,"name":"benchmark"},{"id":72,"name":"best-practices"},{"id":39,"name":"bitcoin"},{"id":37,"name":"blockchain"},{"id":1,"name":"blog"},{"id":45,"name":"bundler"},{"id":58,"name":"cache"},{"id":21,"name":"chat"},{"id":49,"name":"cicd"},{"id":4,"name":"cli"},{"id":64,"name":"cloud-native"},{"id":48,"name":"cms"},{"id":61,"name":"compiler"},{"id":68,"name":"containerization"},{"id":92,"name":"crm"},{"id":34,"name":"data"},{"id":47,"name":"database"},{"id":8,"name":"declarative-gui "},{"id":9,"name":"deploy-tool"},{"id":53,"name":"desktop-app"},{"id":6,"name":"dev-exp-lib"},{"id":59,"name":"dev-tool"},{"id":13,"name":"ecommerce"},{"id":26,"name":"editor"},{"id":66,"name":"emulator"},{"id":62,"name":"filesystem"},{"id":80,"name":"finance"},{"id":15,"name":"firmware"},{"id":73,"name":"for-fun"},{"id":2,"name":"framework"},{"id":11,"name":"frontend"},{"id":22,"name":"game"},{"id":81,"name":"game-engine "},{"id":23,"name":"graphql"},{"id":84,"name":"gui"},{"id":91,"name":"http"},{"id":5,"name":"http-client"},{"id":51,"name":"iac"},{"id":30,"name":"ide"},{"id":78,"name":"iot"},{"id":40,"name":"json"},{"id":83,"name":"julian"},{"id":38,"name":"k8s"},{"id":31,"name":"language"},{"id":10,"name":"learning-resource"},{"id":33,"name":"lib"},{"id":41,"name":"linter"},{"id":28,"name":"lms"},{"id":16,"name":"logging"},{"id":76,"name":"low-code"},{"id":90,"name":"message-queue"},{"id":42,"name":"mobile-app"},{"id":18,"name":"monitoring"},{"id":36,"name":"networking"},{"id":7,"name":"node-version"},{"id":55,"name":"nosql"},{"id":57,"name":"observability"},{"id":46,"name":"orm"},{"id":52,"name":"os"},{"id":14,"name":"parser"},{"id":74,"name":"react"},{"id":82,"name":"real-time"},{"id":56,"name":"robot"},{"id":65,"name":"runtime"},{"id":32,"name":"sdk"},{"id":71,"name":"search"},{"id":63,"name":"secrets"},{"id":25,"name":"security"},{"id":85,"name":"server"},{"id":86,"name":"serverless"},{"id":70,"name":"storage"},{"id":75,"name":"system-design"},{"id":79,"name":"terminal"},{"id":29,"name":"testing"},{"id":12,"name":"ui"},{"id":50,"name":"ux"},{"id":88,"name":"video"},{"id":20,"name":"web-app"},{"id":35,"name":"web-server"},{"id":43,"name":"webassembly"},{"id":69,"name":"workflow"},{"id":87,"name":"yaml"}]" returns me the "expected json"

AI prompts

AI prompts