# Install cariddi with Homebrew, apk, Nix

Scan for endpoints, secrets, API keys, file extensions, tokens and more. Version 1.4.6 via Homebrew; verified 2026-07-25. Also installable with nix: nix profile install nixpkgs#cariddi.

## Install

```sh
sudo av install brew:cariddi
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install cariddi
```

  Evidence: local Homebrew formula metadata

### Linux

- apk (92%):

```sh
sudo apk add cariddi
```

  Evidence: Alpine Linux edge package indexes: cariddi from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz

- Nix (92%):

```sh
nix profile install nixpkgs#cariddi
```

  Evidence: nixpkgs package indexes: pkgs/by-name/ca/cariddi/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

## Package facts

- **Package key:** brew:cariddi
- **Package manager:** Homebrew
- **Version:** 1.4.6
- **Source summary:** Scan for endpoints, secrets, API keys, file extensions, tokens and more
- **Homepage:** <https://edoardottt.com/>
- **Repository:** <https://github.com/edoardottt/cariddi>
- **Last updated:** 2026-07-25T14:20:48-04:00
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- cariddi (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 1.4.6
## Project history and usage

cariddi is a Go command-line web crawling and scanning tool for security reconnaissance. Its official README describes feeding it URLs or domains, then using flags to discover endpoints, secrets, API keys, file extensions, tokens, errors, and related web artifacts.

### Project history

The public GitHub repository was created in 2021 under edoardottt/cariddi. The project presents itself as a small focused CLI rather than a service: install it with Go or a package manager, pipe targets into stdin, and compose flags for the kind of reconnaissance desired.

### Adoption history

Official installation instructions list Homebrew, Snap, Go install, Pacman, NixOS, and source builds, while the input package facts also show packaging in Homebrew, apk, and Nix. That is the usual adoption shape for modern infosec CLIs: the tool lives upstream on GitHub, but package managers make it convenient to drop into bug bounty and automation environments.

### How it is used

cariddi reads targets from stdin or a file and can scan one URL or many. The README documents modes for secret hunting, endpoint discovery, extension checks, error checks, useful-information extraction, JSON output, proxy use, custom headers, custom ignore lists, cache use, timeout control, concurrency, and depth limits.

### Why package nerds care

For package-manager catalogs, cariddi is a representative Go security CLI: a single executable, broad install coverage, and behavior centered on Unix pipelines. Its value in a package index is that a reconnaissance workflow can depend on the packaged binary instead of a local Go checkout.

### Timeline

- 2021: Public GitHub repository created.
- 2020s: README documents Homebrew, Snap, Go install, Pacman, NixOS, and source-build installation paths.
- 2020s: Package facts show availability through Homebrew, apk, and Nix.

### Related projects

- Related package-manager neighbors are other bug-bounty and reconnaissance CLIs that accept URL lists on stdin and emit findings suitable for pipelines.
- The README points users to Go for source builds and to shell-oriented package managers for installation.

### Sources

- <https://api.github.com/repos/edoardottt/cariddi>
- <https://github.com/edoardottt/cariddi>
- <https://edoardottt.com/>
- <https://github.com/edoardottt/cariddi#readme>
- <https://formulae.brew.sh/api/formula/cariddi.json>


## Security Notes

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Other Package-Manager Records

- Nix - cariddi: normalized package name match | nixpkgs package indexes: pkgs/by-name/ca/cariddi/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
- apk - cariddi - 1.4.5-r5: normalized package name match | Alpine Linux edge package indexes: cariddi from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz | Crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more | https://github.com/edoardottt/cariddi


## Combined YAML source

View the package source record on GitHub. [combined/cariddi.yml](https://github.com/mxcl/pkgdb/blob/main/combined/cariddi.yml)


## Sources

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph