Skip to main content
Solved

Find assets that were discovered through certificates

  • Sep 6, 2024 1:58 PM UTC
  • 2 replies
  • 194 views

Has anyone found a way to filter, using queries or API, for assets that were found through Certificates?

The only point I see in common is the source as “Censys Scan” but I need to narrow it down further.

Best answer by MattK_Censys

Hi there! I ran this by the team. They suggested using the discoveryTrail parameter with the ASM hosts API (v1/assets/hosts?discoveryTrail=true) to identify hosts that were discovered by certificates. An important thing to note is that a host may discovered via multiple paths but only one path will be shown in discoveryTrail.

The results included in the protocols array for a host will also list any certs on a host, so you could then build a script to search through protocols[].certificates[].sha256 on results.

I hope this helps - let me know.

View original

2 replies

MattK_Censys
Forum|alt.badge.img+2
  • Censys Community Manager
  • Answer
  • Sep 6, 2024 6:33 PM UTC

Hi there! I ran this by the team. They suggested using the discoveryTrail parameter with the ASM hosts API (v1/assets/hosts?discoveryTrail=true) to identify hosts that were discovered by certificates. An important thing to note is that a host may discovered via multiple paths but only one path will be shown in discoveryTrail.

The results included in the protocols array for a host will also list any certs on a host, so you could then build a script to search through protocols[].certificates[].sha256 on results.

I hope this helps - let me know.


  • Author
  • New Participant
  • Sep 9, 2024 8:07 AM UTC

Thank you! That does the trick!