Queries crt.sh and pycrtsh Certificate Transparency logs to detect phishing domains, unauthorized certs, shadow IT, and brand impersonations via Levenshtein distance. For proactive security monitoring.
npx claudepluginhub killvxk/cybersecurity-skills-zhThis skill uses the workspace's default tool permissions.
通过查询 crt.sh 证书透明度数据库,查找针对您组织品牌相似域名签发的证书,检测钓鱼基础设施。
Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, typosquatting via Levenshtein distance, unauthorized certs, and shadow IT. For proactive security monitoring and threat hunting.
Queries crt.sh and pycrtsh Certificate Transparency logs to detect phishing domains, typosquatting via Levenshtein distance, unauthorized certs, and shadow IT.
Monitors Certificate Transparency logs with crt.sh for historical queries and Certstream for real-time to detect phishing domains, impersonating certificates, and unauthorized issuances for your organization.
Share bugs, ideas, or general feedback.
通过查询 crt.sh 证书透明度数据库,查找针对您组织品牌相似域名签发的证书,检测钓鱼基础设施。
from pycrtsh import Crtsh
c = Crtsh()
# 搜索与域名匹配的证书
certs = c.search("example.com")
for cert in certs:
print(cert["id"], cert["name_value"])
# 获取完整证书详情
details = c.get(certs[0]["id"], type="id")
关键分析步骤:
from pycrtsh import Crtsh
c = Crtsh()
certs = c.search("%.example.com")
for cert in certs:
print(f"签发者: {cert.get('issuer_name')}, 域名: {cert.get('name_value')}")