Comments (6)
Can you show me what domain are you trying this on? Also does it show any results when you look for it directly on crt.sh?
from lazyrecon.
Can you show me what domain are you trying this on? Also does it show any results when you look for it directly on crt.sh?
domain=paloalto.com ; curl -s https://certspotter.com/api/v0/certs\?domain\=$domain | jq '.[].dns_names[]' | sed 's/\"//g' | sed 's/\*\.//g' | sort -u | grep $domain
Works fine :)
domain=www.paloalto.com ; curl -s https://certspotter.com/api/v0/certs\?domain\=$domain | jq '.[].dns_names[]' | sed 's/\"//g' | sed 's/\*\.//g' | sort -u | grep $domain
jq: error (at <stdin>:0): Cannot index string with string "dns_names"
:P
from lazyrecon.
After this happens, the script freezes and does not end.
from lazyrecon.
Unfortunately I think this is related to Certspotter limit on requests using the free API key subscription.
For this reason, sometimes the curl does not return anything.
Also, the prices are really high if you want higher limits!
curl -s https://certspotter.com/api/v0/certs\?domain\=vpn.hackerone.net {"code":"rate_limited","message":"You have exceeded the domain search rate limit for the Cert Spotter API. Please try again later, or authenticate with an API key."}
from lazyrecon.
Fixed in #52
@nahamsec Please, take a look at it.
from lazyrecon.
Aparently the V0 API has been discontinuated, I recived this message:
{"code":"api_discontinued","message":"Cert Spotter APIv0 has been discontinued in favor of APIv1. Please see <https://sslmate.com/help/reference/ct_search_api_v1> for documentation."}
, then I figured out the V1 API, you can use like this to find domains and subdomains:
curl -s https://certspotter.com/api/v1/issuances\?$domain\=clubhouse.com\&expand\=dns_names\&include_subdomains\=true
.
I hope this helped.
from lazyrecon.
Related Issues (20)
- Everything working besides aquatone screenshots. HOT 2
- jq: error (at <stdin>:0): Cannot iterate over null (null) HOT 3
- jq: error (at <stdin>:0): Cannot index string with string "dns_names" HOT 3
- when massdns run my internet is stugg HOT 7
- Aquatone scans doesn't run due to urllist.txt not populated HOT 10
- Missing subdomains list in final report HOT 5
- Script stuck at "Checking http://crt.sh" HOT 4
- FAIL PLEASE HELP HOT 2
- PLEASE HELP HOT 3
- No such file or directory... HOT 6
- Problem in mass function HOT 2
- Amass maybe?
- STUCK AT MASSDNS STEP. HOT 1
- wc: /home/kali/tools/dirsearch/reports///: Is a directory
- aquatone not scanning due to empty urllist.txt HOT 4
- mkdir: command not found HOT 2
- Script not working
- waybackurls HOT 1
- For me
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from lazyrecon.