Skip to main content

Hey!

I want to understand a little bit more about how Censys scan works. I was testing the following query: “host.services.endpoints.http.body : "CNPJ: 06.626.253/0001-51" and no results are given. Otherside, on FOFA, with the following query “body="CNPJ: 06.626.253/0001-51" i can see a few hosts.

 

So how does the body query on Censys works? Does FOFA scan deeper than Censys or just a limitation on body attribute?

Hi fmush96, where are you seeing that CNPJ: 06.626.253/0001-51 value in records on FOFA? I’m not familiar with FOFA’s data schema, but host.services.endpoints.http.body may not be the right field to target in Censys--you may want to look at banner data or elsewhere.

For what it’s worth, if I remove the CNPJ prefix and just do a full-text search in Censys for "06.626.253/0001-51", I find one certificate.


Reply