(失敗ã—ãŸ)CT Logã®SANãŒå¤§é‡ã«çµã³ã¤ã„ãŸè¨¼æ˜Žæ›¸ã‚’見ã¤ã‘ã¦ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã‚µã‚¤ãƒˆã‚’検知ã™ã‚‹æ–¹æ³• - ã¶ã‚‹ãƒ¼ãŸã‚‹ã”ã¶ã‚Šã‚“
年末ã«ãƒ„イッターã«æ›¸ã„ãŸã‘ã©ã€ç‰¹ã«è¨˜äº‹ã«ã—ã¦ã„ãªã‹ã£ãŸã®ã§ä¾›é¤Šã¨ã—ã¦ä¸€å¿œè¨˜äº‹ã«æ›¸ã„ã¦ã¿ã¾ã™ã€‚ CT Log ã® SAN ãŒç•°å¸¸ã«å¤šã„ CT Log ã¯ï¼™å‰² Malicious ãªã‚“ã˜ã‚ƒãªã„ã‹ï¼Ÿã¨æ€ã£ã¦ä»Š CT Log Streaming ã—ãªãŒã‚‰ãƒ•ã‚£ãƒ«ã‚¿ã‹ã‘ã¦ã¿ã¦ã‚‹ã‘ã©æ™®é€šã®ã‚„ã¤ãŒã‹ã‹ã‚Šã¾ãã£ã¦ãã¦æŽ¨æ¸¬ãŒå¤–ã‚ŒãŸã€‚— ã‚‚ã¤ã« (@akroasis5150) 2022å¹´12月23æ—¥ 失敗ã—ãŸå†…容ã§ã¯ã‚ã‚‹ã‚“ã§ã™ãŒã€ãŠãらãã“ã®è¦³ç‚¹ã§èª¿æŸ»ã—ã¦ã‚‹äººãŒå›½å†…ã«ã„ãªã„ã ã‚ã†ã—〠（多少関連ã™ã‚‹å†…容ã«ã¤ã„ã¦è¨˜è¼‰ã™ã‚‹ã®ã§ï¼‰ ã»ã‚“ã®å°‘ã—ã¯éœ€è¦ãŒã‚ã‚‹ã¨æ€ã£ã¦è¨˜è¼‰ã—ã¦ãŠãã¾ã™ã€‚ 一応以下ã®ã‚„ã¤ã‚’考慮ã«å…¥ã‚Œã¦æ¤œçŸ¥ã‚’考ãˆãŸã‘ã©å¤±æ•—ã—ãŸã£ã¦è©±ã§ã™ã€‚ censys 㧠SAN ã®æ•°ã‚’å…ƒã«ã—ãŸæ¤œç´¢ï¼ˆæ¤œç´¢ãŒãã‚‚ãã‚‚ã§ããªã„） crt.sh ã§ã€ SAN ã®æ•°ã‚’å…ƒã«ã—ãŸæ¤œç´¢ (検索ãŒãã‚‚ãã‚‚ã§ããªã„) crt.sh ãŒå…¬é–‹ã—ã¦ã„
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Hurricane Electric Super Looking Glass
certgrep - Search Certificate Transparency logs
GitHub - 0xJin/SubCerts: SubCerts is a simple tool that uses certificate transparency logs (via crt.sh) to extract subdomains of a given domain.
GitHub - ractiurd/acqhunt
GitHub - PinkNoize/ctlog-scrape-go
GitHub - PinkNoize/tls-observatory
Monitoring Certificate Transparency Logs Using the Elastic Stack
GitHub - jonticknor/ElasticPhish: Proof-of-concept for phishing intelligence in Elastic
GitHub - edepree/certstream-elk-ingestor: A transport script for moving data from a certstream server to Elasticsearch instance.
GitHub - devanshbatham/CertEagle: Weaponizing Live CT logs for automated monitoring of assets
GitHub - sahsanu/lectl: Script to check issued certificates by Let's Encrypt on CTL (Certificate Transparency Log) using https://crt.sh
GitHub - runejuhl/vhoasts: crt.sh scraper written in Clojure/babashka
GitHub - alecmuffett/real-world-onion-sites: This is a list of substantial, commercial-or-social-good mainstream websites which provide onion services.
GitHub - cisagov/admiral: Distributed certificate transparency log harvester
ohshint.gitbook.io/Lists_of_OSINT_Web_Resources/Digital-Network-Intelligence-DNINT.md at a242a573c602569268715f2282c2bbf0207a040a · OhShINT/ohshint.gitbook.io
Passive DNS recon techniques – Trickster Dev
Home ðŸ | Subdomain Enumeration Guide
The Hunt for Subdomains: A Guide to Subdomain Enumeration
Discovering Domains via a Time-Correlation Attack on Certificate Transparency
{{#tags}}- {{label}}
{{/tags}}