search

Lissy93 / web-check

🕵️‍♂️ All-in-one OSINT tool for analysing any website
https://web-check.xyz
MIT License
20.76k stars 1.53k forks source link

Idea: Show Certificate Transparency (CT) for a domain #153

Open SeriousM opened 2 weeks ago

SeriousM commented 2 weeks ago

The Certificate Transparency is a movement of popular (free) certificate issues like LetsEncrypt or digicert.

A list of "CT Monitors" can be found here: https://certificate.transparency.dev/logs/

One of them is https://crt.sh/

When querying for a domain one would may find a subdomain even if it's not mentioned somewhere else (eg. company certificate). I took an example of https://crt.sh/?q=esaflip.duckdns.org (disclaimer: I don't know the owner, I just picked it as good example)

image

Using exclude=expired like in https://crt.sh/?q=duckdns.org&exclude=expired would show only current issued certificates.

Displaying this information in the report would be helpful identifying subdomains based on open data (OSINT)