(失敗ã—ãŸ)CT Logã®SANãŒå¤§é‡ã«çµã³ã¤ã„ãŸè¨¼æ˜Žæ›¸ã‚’見ã¤ã‘ã¦ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã‚µã‚¤ãƒˆã‚’検知ã™ã‚‹æ–¹æ³• - ã¶ã‚‹ãƒ¼ãŸã‚‹ã”ã¶ã‚Šã‚“
年末ã«ãƒ„イッターã«æ›¸ã„ãŸã‘ã©ã€ç‰¹ã«è¨˜äº‹ã«ã—ã¦ã„ãªã‹ã£ãŸã®ã§ä¾›é¤Šã¨ã—ã¦ä¸€å¿œè¨˜äº‹ã«æ›¸ã„ã¦ã¿ã¾ã™ã€‚ CT Log ã® SAN ãŒç•°å¸¸ã«å¤šã„ CT Log ã¯ï¼™å‰² Malicious ãªã‚“ã˜ã‚ƒãªã„ã‹ï¼Ÿã¨æ€ã£ã¦ä»Š CT Log Streaming ã—ãªãŒã‚‰ãƒ•ã‚£ãƒ«ã‚¿ã‹ã‘ã¦ã¿ã¦ã‚‹ã‘ã©æ™®é€šã®ã‚„ã¤ãŒã‹ã‹ã‚Šã¾ãã£ã¦ãã¦æŽ¨æ¸¬ãŒå¤–ã‚ŒãŸã€‚— ã‚‚ã¤ã« (@akroasis5150) 2022å¹´12月23æ—¥ 失敗ã—ãŸå†…容ã§ã¯ã‚ã‚‹ã‚“ã§ã™ãŒã€ãŠãらãã“ã®è¦³ç‚¹ã§èª¿æŸ»ã—ã¦ã‚‹äººãŒå›½å†…ã«ã„ãªã„ã ã‚ã†ã—〠（多少関連ã™ã‚‹å†…容ã«ã¤ã„ã¦è¨˜è¼‰ã™ã‚‹ã®ã§ï¼‰ ã»ã‚“ã®å°‘ã—ã¯éœ€è¦ãŒã‚ã‚‹ã¨æ€ã£ã¦è¨˜è¼‰ã—ã¦ãŠãã¾ã™ã€‚ 一応以下ã®ã‚„ã¤ã‚’考慮ã«å…¥ã‚Œã¦æ¤œçŸ¥ã‚’考ãˆãŸã‘ã©å¤±æ•—ã—ãŸã£ã¦è©±ã§ã™ã€‚ censys 㧠SAN ã®æ•°ã‚’å…ƒã«ã—ãŸæ¤œç´¢ï¼ˆæ¤œç´¢ãŒãã‚‚ãã‚‚ã§ããªã„） crt.sh ã§ã€ SAN ã®æ•°ã‚’å…ƒã«ã—ãŸæ¤œç´¢ (検索ãŒãã‚‚ãã‚‚ã§ããªã„) crt.sh ãŒå…¬é–‹ã—ã¦ã„
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Converting X509 certificates to JSON objects -- Prefetch Technologies
How to display the Subject Alternative Name of a certificate?
PyOpenSSL - how can I get SAN(Subject Alternative Names) list
San Certificates: How Many Alt-Names Are Too Many?
How to Check Subject Alternative Names for a SSL/TLS Certificate?
https://bugbountyguide.org/2022/12/02/active-and-passive-subdomain-enumeration-technique/
The Hunt for Subdomains: A Guide to Subdomain Enumeration
Information Gathering&scanning for sensitive information[ Reloaded ]
handbook/content/information-gathering/subdomain-enumeration.md at 398dc3bba597812059aa2ae556e1541b2ed0b109 · 0xffsec/handbook
GitHub - jonluca/Anubis: Subdomain enumeration and information gathering tool
{{#tags}}- {{label}}
{{/tags}}