edoardottt / cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
https://edoardoottavianelli.it
GNU General Public License v3.0
1.49k stars 152 forks source link

Store raw HTTP responses #121

Closed edoardottt closed 1 year ago

edoardottt commented 1 year ago

Add -sr to store the HTTP responses (see https://github.com/tomnomnom/meg#basic-usage)

edoardottt commented 1 year ago

Added in branch https://github.com/edoardottt/cariddi/tree/store-resp

@ocervell if interested, could you test it when u have free time? What do you think about that? If you have some suggestion let me know :)

jaikishantulswani commented 1 year ago

@edoardottt thank you for the implement. Here while testing this I found that it got stuck even on supplying a single target like

 cariddi -plain -s -ot https://example.com 

 cariddi -plain -sr -s -ot https://example.com

but on both it got stuck, one more thing if it have an argument to control redirect -redirect true or something like that

please correct on the usage in above commands.

edoardottt commented 1 year ago

@jaikishantulswani

First of all you should test using the branch store-resp, since the main and the devel branches don't have the -sr support yet.

Then cariddi is taking input in pipe, so something like this:

echo https://example.com | go run cmd/cariddi/main.go

Doing so it is working fine for me, let me know

jaikishantulswani commented 1 year ago

@edoardottt Yes ! its working good, can you provide sample regex file too to use regexes from the file. Thank you.

edoardottt commented 1 year ago

@jaikishantulswani let me know if you see some strange behavior

jaikishantulswani commented 1 year ago

@edoardottt sure and thank you again.

edoardottt commented 1 year ago

pushed in devel