
cariddi
Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more

An automated tool which can simultaneously crawl, fill forms, trigger error/debug pages and "loot" secrets out of the client-facing code of sites.

OSINT intelligence on any IP, domain, or ASN

Jbin will gather all the URLs from the website and then it will try to expose the secret data from them such as API keys, API secrets, API tokens and…

🕵️ Python project to crawl for JavaScript files and search for secrets like API keys, authorization tokens, hardcoded credentials, etc.

Automated Python scanner to detect hardcoded secrets (Private Keys, API Tokens) in client-side JavaScript files.

A python tool used to discover endpoints, potential parameters, a target specific wordlist for a given target and secrets

Advanced recon engine that finds real secrets, validates them live, and builds exploit paths from client-side intelligence.