如何使用Cariddi扫描域名相关的各种敏感信息

git clone https://github.com/edoardottt/cariddi.gitcd cariddigo get

make linux

make unlinux

git clone https://github.com/edoardottt/cariddi.git; cd cariddi; go get; make linux

git clone https://github.com/edoardottt/cariddi.gitcd cariddigo get

.make.bat windows

.make.bat unwindows

Usage of cariddi:  -c int
     Concurrency level. (default 20)
  -cache
Use the .cariddi_cache folder as cache.
  -d int
     Delay between a page crawled and another.
  -e Hunt for juicy endpoints.
  -ef string
     Use an external file (txt, one per line) to use custom parameters for endpoints hunting.
  -examples
     Print the examples.
  -ext int
     Hunt for juicy file extensions. Integer from 1(juicy) to 7(not juicy).
  -h Print the help.
  -i string
     Ignore the URL containing at least one of the elements of this array.
  -intensive
     Crawl searching for resources matching 2nd level domain.
  -it string
     Ignore the URL containing at least one of the lines of this file.
  -oh string
     Write the output into an HTML file.
  -ot string
     Write the output into a TXT file.
  -plain
     Print only the results.
  -s Hunt for secrets.
  -sf string
     Use an external file (txt, one per line) to use custom regexes for secrets hunting.
  -t int
   Set timeout for the requests. (default 10)
  -version
     Print the version.

cariddi -version (打印工具版本信息)
cariddi -h (打印工具帮助信息)
cariddi -examples (输出样例)
cat urls | cariddi -s (搜索敏感信息)
cat urls | cariddi -d 2 (设置页面爬取间隔为2秒)
cat urls | cariddi -c 200 (将并发级别设置为200)
cat urls | cariddi -e (搜索有价值的终端节点)
cat urls | cariddi -plain (仅输出有用的信息)
cat urls | cariddi -ot target_name (将结果存储至txt文件中)
cat urls | cariddi -oh target_name (将结果存储至html文件中)
cat urls | cariddi -ext 2 (搜索有价值的文件(等级2-7))
cat urls | cariddi -e -ef endpoints_file (搜索自定义终端节点)
cat urls | cariddi -s -sf secrets_file (搜索自定义敏感信息)
cat urls | cariddi -i forum,blog,community,open (忽略包含这些关键词的URL)
cat urls | cariddi -it ignore_file (忽略包含输入文件中内容的URL)
cat urls | cariddi -cache (使用.cariddi_cache作为缓存目录)
cat urls | cariddi -t 5 (设置请求超时)
cat urls | cariddi -intensive (爬取搜索与第二级域匹配的资源)

powershell.exe -Command "cat urls | .cariddi.exe"