cariddi
Operator: Edoardo Ottavianelli and contributors, Italy
Local web crawler for finding URLs, endpoints, files and potentially exposed keys.
Technical Infrastructure
Product
cariddi, a locally installed Go command-line program for crawling and analysing web pages.
Availability and source date
Active
As of: 16 October 2026.
No functionality test has been performed.
Use in OSINT research
Searches linked web content for reachable endpoints and noteworthy patterns. A matching key or token pattern does not prove validity.
Queries
| Input | Result | Result type |
|---|---|---|
| URL | URLs, endpoints and linked files found during crawling. | Technical check according to provider |
| URL | Text passages matching patterns for keys, tokens, error messages or other information. | Derived |
Features
- Follows links from one or more specified web addresses.
- Searches for endpoints and file types.
- Detects patterns for exposed keys and tokens.
- Finds error messages and other noteworthy information in page content.
- Limits depth, concurrency and waiting time, and excludes specified URLs.
- Exports results as TXT, HTML or JSON.
Categories
- Technical Infrastructure
- Internet scanning
Coverage
Dataset
No regional dataset of its own. The specified target sites and configured data sources determine the results.
Access
Installation and deployment
Locally installable
Command-line program on your own computer. A web application or self-hosted API service is not described in the guide.
Requirements
Local installation through a package manager, a prebuilt release binary or building from source with Go. Target addresses are passed through standard input.
Export
TXT and HTML as files, JSON through the CLI standard output; optionally saved HTTP responses.
Provider
Edoardo Ottavianelli and contributors
Country of establishment
Italy
Interfaces
No API, MCP or AI integration is documented.
Maintenance
Licence
GPL-3.0
Latest activity
Commit 09/2026
Stars
approx. 3,800 (as of 16 October 2026)
Legal note
Limitations
- The crawler actively retrieves target pages.
- Pattern matches may be false positives; this does not check whether keys and tokens are valid.
- Unlinked, blocked or excluded content may be missing.
Guides and practical reports
Official · cariddi: installation and CLI examples
Edoardo Ottavianelli · EN
Explains target addresses, search options, exclusions and output files.