edoardottt / cariddi

Take a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more
https://edoardoottavianelli.it
GNU General Public License v3.0
1.49k stars 152 forks source link

feat: add Alibaba OSS bucket detection #149

Closed hugo-syn closed 4 months ago

hugo-syn commented 4 months ago

Add support for Alibaba OSS buckets, it's like the S3 but for Alibaba cloud

$ echo "http://127.0.0.1:8000/alibaba.txt" | ./cariddi -s        
                 _     _     _ _ 
                (_)   | |   | (_)
   ___ __ _ _ __ _  __| | __| |_ 
  / __/ _` | '__| |/ _` |/ _` | |
 | (_| (_| | |  | | (_| | (_| | |
  \___\__,_|_|  |_|\__,_|\__,_|_| v1.3.4

 > github.com/edoardottt/cariddi
 > edoardoottavianelli.it
========================================
http://127.0.0.1:8000/alibaba.txt
[ Alibaba OSS Bucket ] oss-eu-central-1.aliyuncs.com/test in http://127.0.0.1:8000/alibaba.txt
[ Alibaba OSS Bucket ] oss://test-oss-bucket in http://127.0.0.1:8000/alibaba.txt
[ Alibaba OSS Bucket ] testbucket-name.oss-eu-central-1.aliyuncs.com in http://127.0.0.1:8000/alibaba.txt
edoardottt commented 4 months ago

Thanks so much @hugo-syn for your contribution!!! Appreciated :)

hugo-syn commented 4 months ago

You're welcome I really like your tool ! :)