https://github.com/0xbharath/censys-enumeration

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys
https://github.com/0xbharath/censys-enumeration

Last synced: about 1 month ago
JSON representation

A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys

• Host: GitHub
• URL: https://github.com/0xbharath/censys-enumeration
• Owner: 0xbharath
• Created: 2018-02-06T16:11:20.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2022-12-07T23:44:52.000Z (about 2 years ago)
• Last Synced: 2024-08-01T10:16:08.176Z (4 months ago)
• Language: Python
• Homepage:
• Size: 1.53 MB
• Stars: 153
• Watchers: 7
• Forks: 34
• Open Issues: 5
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-bugbounty-tools - censys-enumeration - A script to extract subdomains/emails for a given domain using SSL/TLS certificate dataset on Censys (Recon / Subdomain Enumeration)
• awesome-ip-search-engines - Censys Enumeration

README

        
# Censys Enumeration

- A script to extract subdomains/emails for a given domain using SSL/TLS certificates dataset on Censys

- The output is in JSON format

## Demo

![script-in-action](imgs/demo.gif)

## Screenshots

#### Non verbose mode

![non-verbose](imgs/non_verbose.png)

#### Verbose mode

![verbose](imgs/verbose_output.png)

#### Sample JSON output

![non-verbose](imgs/sample_json_output.png)

## 3rd party package dependency 

[**censys**](https://pypi.python.org/pypi/censys)

[**click**](https://pypi.python.org/pypi/click)

## Setup

- Clone this repo

```bash

$ git clone [email protected]:yamakira/censys-enumeration.git

```

- Install dependencies

```bash

$ pip install -r requirements.txt

```

- Get Censys API ID and Censys API secret by creating a account on `https://censys.io`

- Add Censys API ID and Censys API secret as  `CENSYS_API_ID` & `CENSYS_API_SECRET` respectively to the OS environment variables. On Linux you can use a command similar to following to do this

```bash

$ export CENSYS_API_SECRET="iySd1n0l2JLnHTMisbFHzxClFuE0"

```

- Check help menu

```bash

$ python censys_enumeration.py --help                                                                                                 

Usage: censys_enumeration.py [OPTIONS] FILE

Options:

  --verbose                       Verbose output

  --subdomains / --no-subdomains  Enable/Disable subdomain enumeration

  --emails / --no-emails          Enable/Disable email enumeration

  --help                          Show this message and exit.

```

## Usage

- Subdomain and email enumeration

```

$ python censys_enumeration.py domains.txt

```

- Only subdomain enumeration

```

$ python censys_enumeration.py --no-emails domains.txt 

```

- Only email enumeration

```

$ python censys_enumeration.py --no-sudomains domains.txt 

```

- Verbose output

```

$ python censys_enumeration.py --verbose domains.txt 

```

- Output to custom file

$ python censys_enumeration.py --verbose --outfile results.json domains.txt 

```

```