Certificate Search Dashboard - ecstatic-nobel/OSweep GitHub Wiki

  1. Switch to the Certificate Search dashboard in the OSweep™ app.
  2. Add the list of IOCs to the "Domain, IP (+)" textbox.
  3. Select "Yes" or "No" from the "Wildcard" dropdown to search for subdomains.
  4. Click "Submit".

crtsh - Dashboard

Certificate Search - Adhoc

| crtsh <DOMAINS>
| fillnull value="-"
| search NOT "issuer ca id"="-"
| dedup "issuer ca id" "issuer name" "name value" "min cert id" "min entry timestamp" "not before" "not after"
| table "issuer ca id" "issuer name" "name value" "min cert id" "min entry timestamp" "not before" "not after"
| sort - "min cert id"

or to search for subdomains,

| crtsh subdomain <DOMAINS>
| fillnull value="-"
| search NOT "issuer ca id"="-"
| dedup "issuer ca id" "issuer name" "name value" "min cert id" "min entry timestamp" "not before" "not after"
| table "issuer ca id" "issuer name" "name value" "min cert id" "min entry timestamp" "not before" "not after"
| sort - "min cert id"

or to search for wildcard,

| crtsh wildcard <DOMAINS>
| fillnull value="-"
| search NOT "issuer ca id"="-"
| dedup "issuer ca id" "issuer name" "name value" "min cert id" "min entry timestamp" "not before" "not after"
| table "issuer ca id" "issuer name" "name value" "min cert id" "min entry timestamp" "not before" "not after"
| sort - "min cert id"
⚠️ **GitHub.com Fallback** ⚠️