Esc4iCEscEsc / skanuvaty

Dangerously fast DNS/network/port scanner
890 stars 82 forks source link

Support crt.sh scan #3

Open Esc4iCEscEsc opened 2 years ago

Esc4iCEscEsc commented 2 years ago

We should do a search in certificate transparency logs before doing the bruteforce search, would be something like this:

curl "https://crt.sh?q=nmap.org&output=json" | jq ".[].common_name"

Seems crt.sh is having sometimes some uptime problems, sometimes we get 502 Bad Gateway errors from it. So should try at least 5 times with exponential backoff before giving up.

BobTheShoplifter commented 2 years ago

A tip to avoid the long wait times is to Connect directly to the crt.sh postgres database

psql -h crt.sh -p 5432 -U guest certwatch