Skip to main content

Recently active topics

12 Topics
S
SusmitaNew Participant
asked in Search findings, use cases, and queries
How do we export search results from Censys Search in windows?

How do we export search results from Censys Search in windows?

172
S
2 hours ago
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for November 18, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.Censys ASMRestored the ability to add comments to risks after accepting them or changing the default severity level on risk instance pages for non-CVE risks in the ASM console.Rapid ResponseThe Censys Rapid Response team published information about and queries for the following issues and vulnerabilities:Critical Missing Authentication Bug in PAN Expedition could lead to Stolen Network Secrets [CVE-2024-5910] Cross-Site Scripting Vulnerability in pfSense [CVE-2024-46538] The following queries will return exposed pfSense Web Portal instances, though not all are necessarily vulnerable. Censys Search query Censys ASM query Windows KDC Proxy Remote Code Execution Vulnerability [CVE-2024-43639] Note that displayed devices are only vulnerable when configured as a Kerberos KDC Proxy Protocol server. Censys Search query Censys ASM query Active Exploitation of Critical RCE in Palo Alto Network

270
MattK_Censys
2 days ago
S
SusmitaNew Participant
asked in ASM use cases and queries
Custom risks in ASM

Can we suggest custom risks in ASM?

131
MattK_Censys
2 days ago
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for November 11, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.Censys ASMFixed several bugs impacting the displayed risk count in the ASM console. The Overview dashboard, Trends & Benchmarks dashboard widgets, and Asset Inventory now display the correct risk count. You may see a drop in active risks on the Trends & Benchmarks dashboard. This is expected, as Censys is changing how this dashboard is calculating risks. On the Risk Instances page in the ASM console, the port, service name, and risk change history are now displayed in the expanded risk display.Updates to end-of-life software versions in ASMThe end-of-life (EOL) versions for existing risks associated with the following software in ASM have been updated to reflect their most up-to-date EOL versions. The following table provides a complete list of affected software.  Software EOL Versions MySQL Versions 5.7 and below, between 8.1 and 8.3, and between 9.0.0 and

240
MattK_Censys
9 days ago
J
janeNew Participant
asked in Search Q&A
I need global domain name database

我需要全球域名数据库

130
J
12 days ago
MattK_Censys
MattK_CensysCensys Community Manager
posted in Search Q&A
Cool Query of the Week for November 7, 2024: Find services likely running malware based on a suspicious certificate component

Howdy! This week I’m sharing a query that searches for hosts running services presenting a certificate with a particular string in the subject DN, in this case “AsyncRAT Server”, which could indicate that that host and service are running malware.services.tls.certificates.leaf_data.subject_dn=`AsyncRAT Server`This is part of a regular series of posts in which we’ll highlight useful, interesting, and otherwise cool queries for use with Censys Search and ASM. If you have any questions, similar queries, or custom versions of this week’s highlight, let us know!

160
MattK_Censys
13 days ago
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for November 4, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.Censys ASMSend Censys-discovered assets and their risks to Google Security Operations (SecOps) using our new integration.  Conduct logging, reporting, and correlation on your Censys data from a central location to simplify your security workflows. Rapid ResponseThe Censys Rapid Response team published information about and queries for the following issues and vulnerabilities:CyberPanel RCE Leveraged for Ransomware [CVE-2024-51378] Censys Search query Censys ASM query New FingerprintsAdded the following fingerprints: Type Name Description Query software Reverse_SSH Server This is a reverse_ssh server. Search Query  

340
MattK_Censys
16 days ago
T
TalklessNew Participant
asked in Search Q&A
Couldn't download universal data with API

I have been set the right value for $CENSYS_API_ID and $CENSYS_API_SECRETHowever, the server sends me “error message” so I seek for help to download data with my api.curl -X "GET" "https://search.censys.io/api/v1/data/universal-internet-dataset-v2-ipv4" -H "Accept: application/json" --user "$CENSYS_API_ID:$CENSYS_API_SECRET"{"status": "error", "error": "This server could not verify that you are authorized to access the document you requested.  Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.", "error_type": "unknown"}

402
T
17 days ago
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for October 28, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.Rapid ResponseThe Censys Rapid Response team published information about and queries for the following issues and vulnerabilities:Zero day in Fortinet FortiManager seeing Active Exploitation [CVE-2024-47575] To identify all exposed FortiManager instances regardless of version, the following Censys queries can be used: Censys Search Query: services.software: (vendor="Fortinet" and product="FortiManager") Censys ASM Query: host.services.software: (vendor="Fortinet" and product="FortiManager") or web_entity.instances.software: (vendor="Fortinet" and product="FortiManager") New FingerprintsAdded the following fingerprints: Type Name Description Query software ScienceLogic SL1 This is a ScienceLogic SL1 Server. Search Query  

310
MattK_Censys
23 days ago
MattK_Censys
MattK_CensysCensys Community Manager
posted in Search findings, use cases, and queries
Cool Query of the Week for October 25, 2024: Intro to using historical data in Search

For this week’s cool query I’m deviating again from sharing a formal query and instead diving into another component of Search: accessing and using historical data.I recently published this lesson in the Censys Academy that walks through how to find and use historical data in Search. It uses both the web interface and the API. Check it out here.This is part of a regular series of posts in which we’ll highlight useful, interesting, and otherwise cool queries for use with Censys Search and ASM. If you have any questions, similar queries, or custom versions of this week’s highlight, let us know!

350
MattK_Censys
26 days ago
john
johnNew Participant
asked in Search Q&A
IPv6 Coverage

What scanning strategy does Censys use to provide coverage over the IPv6 address space?

704
john
28 days ago
MattK_Censys
MattK_CensysCensys Community Manager
Censys Release Notes for October 21, 2024

The following enhancements and improvements are now available to Censys ASM and Search customers.New FingerprintsAdded the following fingerprints: Type Name Description Query software Linear eMerge This is a Linear eMerge Device. Search Query software PolarSSL This is a PolarSSL Server. Search Query software PTZOptics Camera This is a PTZOptics Camera Device. Search Query  

150
MattK_Censys
30 days ago

Badge winners

Show all badges
Terms & ConditionsCookie settings
Censys logo

censys.com | Knowledge Base | Censys Search | Contact Us