Query crt.sh Certificate Transparency logs for TLS certificate and subdomain data.
npx skills add https://github.com/taracodlabs/aiden --skill crt-sh
Please help me install this Agent Skill. Skill: crt.sh Source: https://github.com/taracodlabs/aiden/tree/main/skills/crt-sh Command: npx skills add https://github.com/taracodlabs/aiden --skill crt-sh
Certificate Transparency logs provide public visibility into TLS certificates; this skill helps security researchers and domain owners discover subdomains and certificate activity for a domain by querying crt.sh.
Query crt.sh for a domain to retrieve all certificate records and extract unique subdomains.
High-intent search queries and answers about installing and using this skill.
To find subdomains using Certificate Transparency logs, you query public CT log aggregators like crt.sh to retrieve historical TLS certificate records and extract unique subdomain names. This skill automates querying crt.sh and returns structured JSON-ready results.
Yes, you can discover TLS certificates issued for an organization without an API key by querying crt.sh public endpoints. This skill uses crt.sh to find certificates by CA issuance organization and requires no authentication or external dependencies.
The best way to enumerate subdomains for security reconnaissance is querying Certificate Transparency logs to compile certificate records. This skill queries crt.sh to extract unique subdomains and domain names seen in certificates, yielding structured data for OSINT.
Yes, this approach works for identifying recently issued SSL certificates. This skill can query crt.sh to filter and identify TLS certificate activity issued within the last 30 days for a specified domain.
A limitation of using CT logs for domain-asset discovery is that results only include subdomains with issued TLS certificates, missing non-SSL assets. This skill relies on public crt.sh endpoints, so data availability depends entirely on existing Certificate Transparency log records.
woohyun212Query crt.sh Certificate Transparency logs to extract deduplicated subdomains.
hoanghn61Enumerate subdomains via certificate transparency logs and search-engine dorks.
BishopCodesEnumerate subdomains, DNS records, mail servers, and open ports.
macaughEnumerate subdomains via passive sources and active DNS techniques.
