Censys Community | Censys Community

Recent activity
Help others
Categories

MattK_CensysCensys Community Manager

Censys Release Notes for November 11, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.Censys ASMFixed several bugs impacting the displayed risk count in the ASM console. The Overview dashboard, Trends & Benchmarks dashboard widgets, and Asset Inventory now display the correct risk count. You may see a drop in active risks on the Trends & Benchmarks dashboard. This is expected, as Censys is changing how this dashboard is calculating risks. On the Risk Instances page in the ASM console, the port, service name, and risk change history are now displayed in the expanded risk display.Updates to end-of-life software versions in ASMThe end-of-life (EOL) versions for existing risks associated with the following software in ASM have been updated to reflect their most up-to-date EOL versions. The following table provides a complete list of affected software. Software EOL Versions MySQL Versions 5.7 and below, between 8.1 and 8.3, and between 9.0.0 and

130

1 day ago

janeNew Participant

Search Q&A

I need global domain name database

我需要全球域名数据库

4 days ago

MattK_CensysCensys Community Manager

Search Q&A

Cool Query of the Week for November 7, 2024: Find services likely running malware based on a suspicious certificate component

Howdy! This week I’m sharing a query that searches for hosts running services presenting a certificate with a particular string in the subject DN, in this case “AsyncRAT Server”, which could indicate that that host and service are running malware.services.tls.certificates.leaf_data.subject_dn=`AsyncRAT Server`This is part of a regular series of posts in which we’ll highlight useful, interesting, and otherwise cool queries for use with Censys Search and ASM. If you have any questions, similar queries, or custom versions of this week’s highlight, let us know!

100

5 days ago

MattK_CensysCensys Community Manager

Censys Release Notes for November 4, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.Censys ASMSend Censys-discovered assets and their risks to Google Security Operations (SecOps) using our new integration. Conduct logging, reporting, and correlation on your Censys data from a central location to simplify your security workflows. Rapid ResponseThe Censys Rapid Response team published information about and queries for the following issues and vulnerabilities:CyberPanel RCE Leveraged for Ransomware [CVE-2024-51378] Censys Search query Censys ASM query New FingerprintsAdded the following fingerprints: Type Name Description Query software Reverse_SSH Server This is a reverse_ssh server. Search Query

220

8 days ago

TalklessNew Participant

Search Q&A

Couldn't download universal data with API

I have been set the right value for $CENSYS_API_ID and $CENSYS_API_SECRETHowever, the server sends me “error message” so I seek for help to download data with my api.curl -X "GET" "https://search.censys.io/api/v1/data/universal-internet-dataset-v2-ipv4" -H "Accept: application/json" --user "$CENSYS_API_ID:$CENSYS_API_SECRET"{"status": "error", "error": "This server could not verify that you are authorized to access the document you requested. Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.", "error_type": "unknown"}

312

10 days ago

MattK_CensysCensys Community Manager

Censys Release Notes for October 28, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.Rapid ResponseThe Censys Rapid Response team published information about and queries for the following issues and vulnerabilities:Zero day in Fortinet FortiManager seeing Active Exploitation [CVE-2024-47575] To identify all exposed FortiManager instances regardless of version, the following Censys queries can be used: Censys Search Query: services.software: (vendor="Fortinet" and product="FortiManager") Censys ASM Query: host.services.software: (vendor="Fortinet" and product="FortiManager") or web_entity.instances.software: (vendor="Fortinet" and product="FortiManager") New FingerprintsAdded the following fingerprints: Type Name Description Query software ScienceLogic SL1 This is a ScienceLogic SL1 Server. Search Query

250

15 days ago

MattK_CensysCensys Community Manager

Search findings, use cases, and queries

Cool Query of the Week for October 25, 2024: Intro to using historical data in Search

For this week’s cool query I’m deviating again from sharing a formal query and instead diving into another component of Search: accessing and using historical data.I recently published this lesson in the Censys Academy that walks through how to find and use historical data in Search. It uses both the web interface and the API. Check it out here.This is part of a regular series of posts in which we’ll highlight useful, interesting, and otherwise cool queries for use with Censys Search and ASM. If you have any questions, similar queries, or custom versions of this week’s highlight, let us know!

johnNew Participant

What scanning strategy does Censys use to provide coverage over the IPv6 address space?

614

20 days ago

MattK_CensysCensys Community Manager

Censys Release Notes for October 21, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.New FingerprintsAdded the following fingerprints: Type Name Description Query software Linear eMerge This is a Linear eMerge Device. Search Query software PolarSSL This is a PolarSSL Server. Search Query software PTZOptics Camera This is a PTZOptics Camera Device. Search Query

140

22 days ago

MattK_CensysCensys Community Manager

Search findings, use cases, and queries

Learn how to discover OT and IOT devices in our new ebook

Our team just released a fresh ebook - Unleash the Power of Censys Search: A Hassle-Free Handbook for Cyber Heroes.There’s a lot of great content in here but one of the things I find most helpful was the example covering how to discover operational technology (OT) and internet of things (IOT) assets in Search.You can start by inputting protocols and names/manufacturers of interest in plaintext. The example in the ebook starts with:BACnet and siemensWhich you could then combine with a key-value pair like a service port:BACNet and siemens and services.port= 80 Which can return potential HMIs accessible by the outside world. Find more info about this example as well as other great queries in the ebook!

240

26 days ago

janeNew Participant

Search Q&A

I need global domain name database

我需要全球域名数据库

4 days ago

TalklessNew Participant

Search Q&A

Couldn't download universal data with API

johnNew Participant

What scanning strategy does Censys use to provide coverage over the IPv6 address space?

614

20 days ago

GiriNew Member

ASM Q&A

Doesn't find Integrations

I didn’t find a Integrations part. Kindly help me to find out

261

28 days ago

MrTiTiNew Participant

Threat hunting

Ogre Routing - Hunting for Nodes of Ogre Nodes

Hello! We are trying to map IPs in our address space to OGRE router nodes and TOR nodes. Do you know of any way to investigate this through Censys or do you know of any sources of information related to this?Here are some links on the subject of Ogre Routing, with some similarities to TOR Routing:-https://github.com/NthMetal/ogre-router/blob/master/README.md-https://github.com/NthMetal/ogre-router-server Thanks!

391

2 months ago

MattK_CensysCensys Community Manager

Search Q&A

Can I specify a historical date for my search?

We often hear this question from search users, and the response is at the moment you cannot.Searches run in the web UI and API are always for hosts and virtual hosts as they are currently known.However, on any host page, you can select Host History to see a chronology of events and go back to a historical view, but searches using history are not supported.

461

2 months ago

MattK_CensysCensys Community Manager

ASM Q&A

How to obtain total ASM asset numbers and new ASM assets using the API

This is a question we’ve received from a few customers and I wanted to share the info here for folks to use.Total number of assets (can be broken down by type by adding query=type%3AHOST, for example):curl -X GET "https://app.in.corp.censys.io/api/inventory/v1?workspaces=<INSERT WORKSPACE_ID>&query=%2A&pageSize=100&fields=type" -H "accept: application/json" -H "Censys-Api-Key: <INSERT ASM_API_KEY>"Total number of new assets (can be broken down by asset type as described above, edit the association_date as needed:curl -X GET "https://app.in.corp.censys.io/api/inventory/v1?workspaces=<INSERT WORKSPACE_ID>&query=association_date%3A%20%5Bnow-24h%20TO%20now%5D&pageSize=100&fields=type" -H "accept: application/json" -H "Censys-Api-Key: <INSERT ASM_API_KEY>"

190

2 months ago

jowestNew Participant

Search Q&A

List of towns in a county?

Hi,Is there perhaps a list of towns to check in a specific country, if there is where can I find it.Please let me know.Thanks!

734

3 months ago

DavidSH_CensysCensys Team

ASM Q&A

Which Qualys APIs are used to Add and Remove IPs from Qualys VMDR?

Censys’s integration with Qualys VMDR Automatically add new hosts to your Qualys VMDR environment for vulnerability scans. With this connection, you can view and add Censys-discovered unknown hosts to Qualys asset groups.Below are sample API calls and links back to the Qualys API docs that are used in the integration. Please note that the calls differ based on Qualys User Permissions:If the user is a Unit Manager, the call to add IP to a subscription must include ag_title (Asset group title) and the actions of “Add IP to subscription” and “Add IP to asset group” will happen in one request. If the user is a Manager, the call to add IP to a subscription does not include ag_title, and the actions of “Add IP to subscription” and “Add IP to asset group” will happen in two requests.For all requests use header Accept: application/xmlUnit Manager:Add IP to subscription and asset group:https://<USERNAME>:<PASSWORD>@qualysapi.qg2.apps.qualys.com/api/2.0/fo/asset/ip/?action=add&ag

330

3 months ago

ZebazNew Participant

Search Q&A

Searching services within history of large number of hosts

I have a use case where I want to search for historical activity of services on a large number of hosts (200k+)Currently this is my approach (using the API):Search for hosts For each host: get changed events within a time period For each changed event: check if the event potentially matches the service criteria (e.g. port or protocol) For each of these candidate events: get host details at the candidate event timestamp Extract service details from response This works, but is quite involved and consumes a lot of API credits.Did anyone find a better way to query the service history of multiple hosts?Thanks!

1182

3 months ago

Welcome

Everything you need to know about the Censys Community

Getting started in the Community

5 topics
0 Replies

Announcements

3 topics
0 Replies

Introductions

6 topics
4 Replies

General security topics

Talk about general security topics, using Censys and other tools to discover and investigate potential threats, and more

Security news

3 topics
3 Replies

Threat hunting

8 topics
7 Replies

Censys Rapid Response

6 topics
0 Replies

Ask the community

Find answers to all your Censys questions here

Search Q&A

13 topics
19 Replies

ASM Q&A

7 topics
3 Replies

Use-cases, queries, and findings

Share your use-cases, queries, and unique findings with Search or ASM

Search findings, use cases, and queries

21 topics
4 Replies

ASM use cases and queries

2 topics
0 Replies

Welcome to the Censys Community!

Community Forum

Knowledge Base

Censys Academy

Product Updates

Events

Groups

Welcome

Getting started in the Community

Announcements

Introductions

General security topics

Security news

Threat hunting

Censys Rapid Response

Other security topics

Ask the community

Search Q&A

ASM Q&A

Use-cases, queries, and findings

Search findings, use cases, and queries

ASM use cases and queries

Events Calendar

Welcome to the Censys Community!

Events Calendar

Sign up

Log in to the Censys Community

Scanning file for viruses.

This file cannot be downloaded