Tools
cariddi
edoardottt/cariddi
A reconnaissance CLI that crawls a list of domains and scans for endpoints, secrets, API keys, tokens and interesting file extensions, aimed at bug-bounty and red-team work.
Topics
Related projects
wordlists1.8kA regularly updated collection of real-world infosec wordlists covering CMS paths, robots.txt entries and subdomains for use in security testing.
hetty12.5kHetty is an HTTP toolkit for security research, combining a MITM proxy, request replay, interception, scope management and a web admin interface as an open-source alternative to Burp Suite Pro.
osmedeus6.6kA security-focused declarative orchestration engine that defines reconnaissance and scanning pipelines in YAML. It supports distributed workers, scheduling, cloud provisioning, and optional agentic LLM steps for penetration testing.
uncover3.1kuncover is a Go command-line tool that queries multiple internet search engines such as Shodan, Censys, and FOFA to discover exposed hosts, designed for reconnaissance pipelines.
ScopeSentry2.3kScopeSentry is a distributed attack-surface and vulnerability scanning platform with subdomain enumeration, port and directory scanning, sensitive-data discovery and page monitoring.- metabigor1.9kMetabigor is a keyless OSINT reconnaissance CLI for mapping network ranges, certificates, IP ports and CVEs, related domains, CDN origins and archived URLs.