sfp_certspotter - poppopjmp/spiderfoot GitHub Wiki

sfp_certspotter

Purpose: Queries the CertSpotter API for SSL/TLS certificate transparency logs related to the target domain. Useful for discovering new subdomains and monitoring certificate issuance.

Category: Security Analysis / Asset Discovery

Usage

  • Enabled for domain targets.
  • Can be run from the web UI or CLI:
python sf.py -s example.com -t DOMAIN_NAME -m sfp_certspotter

Output Example

Domain: example.com
Certificates Found: 3
Subdomains: dev.example.com, mail.example.com

API Keys Required

None (public API)

Tips

  • Use to monitor for unauthorized certificate issuance.
  • Combine with sfp_ssl and sfp_dnsresolve for full context.

Authored by poppopjmp

⚠️ **GitHub.com Fallback** ⚠️