cariddi

Takes a list of domains, crawls them and hunts for endpoints, secrets, API keys, file extensions, tokens and other juicy information in the responses. Built for fast, scriptable reconnaissance during bug bounty and pentest engagements.