CertSpotter SDK

[d34dfr4m3]

I found a SDK to certspotter, link here https://pypi.org/project/certspotter/

But the SDK require a API KEY, today I can grab info without a api key. So need to check what the API KEY provides and if it is free.

[d34dfr4m3]

so i use without a api, holy fuck huh, wtf is happen

def certspotter(target):
  print("[+] Searching in Certspotter")
  target_list=[]
  try:
    data = requests.get("https://certspotter.com/api/v0/certs?domain="+target)
    if data.status_code == 429:
      print(data.json()['message'])
      return False
  except Exception as error:
    print("[CERTSPOTTER] ERROR: %s" % (error))
  payload=data.json()
  for domains in range(len(payload)):
    dnsNamesList = payload[domains]['dns_names']
    for i in range(len(dnsNamesList)):
      hostname=dnsNamesList[i]
      if not '*' in hostname:
        if target in hostname and target not in target_list:
          target_list.append(hostname)
          print("[+][CERTSPOTTER] HOSTNAME: %s" %(hostname))
          avoidDuplicata(hostname)

fucke it, works fine.