Skip to main content

Recently active topics

9
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for July 7, 2025

CVE risk rescan and scan data links in ASM, three new software fingerprints, and one new Rapid Response bulletin.ASM Use the ability to rescan CVE risks on host risk cards in the ASM web console to verify that a CVE risk has been closed after completing your or remediation workflows. Use the View Scan Data button to see the scan data for the service.   Added the ability to copy data field names from table header rows in the ASM web console to quickly search your inventory for relevant assets.   New fingerprintsAdded the following fingerprints.Type Name Description Query software MCP Inspector MCP Inspector is a developer tool that enables inspection and debugging of Model Context Protocol workflows. Platform query software BentoML BentoML is an open-source platform designed to help developers package and deploy machine learning models. Platform query software AMI MegaRAC SP-X Firmware This is a device running AMI MegaRAC SP-X firmware, a proprietary Linux-bas

110
MattK_Censys
N
NatewNew Participant
 ASM Q&A
Excluding assets from the API

I’ve looked over the API docs https://app.censys.io/api-docs for ASM, but I am not sure what endpoint is used or if there is one to exclude assets from ASM. Is there an ability to do that from the API?I am trying to use Torq to set a quick action from their case management tool so that if we verify it no longer belongs to use, we can exclude the address or domain from Censys ASM.

224
MattK_Censys
F
flyNew Participant
 Censys Platform Q&A
Unable to research access

Hi, I could access research before, but after the platform upgrade, I lost access. How can I get it back?

252
F
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for June 30, 2025

Five new hardware and software fingerprints and three new risks for ASM.Rapid ResponseThe Censys Rapid Response team published information about and queries for the following issue.Multiple Vulnerabilities in NetScaler Gateway & ADC [CVE-2025-5777 & CVE-2025-6543 & CVE-2025-5439] Use the following queries to identify exposed NetScaler Gateway and ADC instances. Not all of these are necessarily vulnerable, as specific version information may not be available. Platform query Legacy Search query ASM query ASM risk query New fingerprintsAdded the following fingerprints.Type Name Description Query hardware Planet Router This is a Planet Technology Corporation router or network device. Platform query software Wordpress Plugin - Rank Math SEO A very popular search engine optimization plugin for Wordpress. Platform query software wordpress-plugin-wp-rocket A wordpress performance-based plugin to speed up websites with caching. Platform query sof

350
MattK_Censys
S
Senior ShadeVery Frequent Contributor
 Search Q&A
API Request

I have read all the documentation but nothing is clear, how do I and what is the right thing to use for the request, one page says need API ID and Secret, another page says Token and Organization ID, I need to submit a request to Censys Search and I have 500 credits, but how do I do submit the request?

11611
MattK_Censys
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for June 23, 2025

CVE risk exploit context in ASM, two new software fingerprints, and one risk fingerprint.ASMUse new CVE risk exploit context data to help you understand, triage, and remediate risks in your attack surface. New context data includes risk exploit maturity status, threat actor, botnet, and ransomware enrichment, EPSS scores, and CVSSv4 scores. CVE risk exploit context is available to all ASM Enterprise customers. ASM Advanced customers may purchase access to it. New fingerprintsAdded the following fingerprints.Type Name Description Query risk Vulnerable Erlang OTP Instance [CVE-2025-32433] This service is running a vulnerable version of Erlang OTP that is affected by unauthenticated remote code execution vulnerability CVE-2025-32433. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution by exploiting a flaw in SSH protocol message handling. ASM query: risks.name: `Vulnerable Erlang

270
MattK_Censys
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for June 16, 2025

Four new fingerprints and two Rapid Response bulletins.Rapid ResponseThe Censys Rapid Response team published information about and queries for the following issues and vulnerabilities.Wazuh RCE Vulnerability Exploited to Deploy Mirai Botnets Use the following queries to identify exposed Wazuh servers, but they are not necessarily vulnerable to the exploit. Platform query Legacy Search query ASM query ASM risk query This query can be used to find instances of Wazuh server that are vulnerable to the exploit. Roundcube Webmail Vulnerable to Authenticated RCE [CVE-2025-49113] Use the following queries to find Roundcube Webmail instances. Not all of these are necessarily vulnerable to the exploit described in the bulletin. Platform query Legacy Search query ASM query ASM risk query This query can be used to find instances of Roundcube Webmail that are vulnerable to the exploit. New fingerprintsAdded the following fingerprints.Type Name Description Query

290
MattK_Censys
MattK_Censys
MattK_CensysCensys Community Manager
 Censys Platform use cases, findings, and queries
Cool Query of the Week June 12, 2025: Certificates with a specific name that expire in the next month

Hello again! In this week’s Cool Query of the Week, I’m highlighting a way to search for certificates containing a specific name that expire in the next month. Swap out the example domain for your domain of interest and set up a collection to get alerts when new certificates are added to this query’s results.cert.parsed.subject.common_name: "example.com" and cert.parsed.validity_period.not_after >= "now" and cert.parsed.validity_period.not_after < "now+1M"

210
MattK_Censys
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for June 10, 2025

Platform Query Assistant beta for all users, Platform Threat Hunting module release, general availability for the Platform, two Rapid Response bulletins, several new risk fingerprints, and one new software fingerprint.PlatformQuickly generate valid search Censys Query Language (CenQL) queries using natural language input with the new Query Assistant tool in the Platform web UI. Query Assistant is a beta feature available to all Platform users. Use the Platform Threat Hunting module to detect, analyze, and track threat infrastructure with speed and precision. The module enables you to explore the threat dataset with structured tools, historical context, and workflows. These capabilities help users validate threats in real time and uncover hidden clusters of malicious assets. The Threat Hunting module includes the following: The Platform threat dataset that maps malware, threat actors, and tactics to services or endpoints running on exposed hosts and web properties. Interactive Explore

380
MattK_Censys

Badge winners

Show all badges
Terms & ConditionsCookie settings
Censys logo

censys.com | Knowledge Base | Censys Search | Contact Us