lookup-censys

Query Censys for host data, TLS certificates, and ASN details.

15|5|Updated Apr 6, 2026
One-click install
npx skills add https://github.com/Liberty91LTD/cti-skills --skill lookup-censys
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: lookup-censys
Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/lookup-censys
Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill lookup-censys

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Retrieve deep host data and TLS certificate information for an IP or targeted search using Censys, enabling deeper threat intelligence.

Core Features & Use Cases

  • Query Censys for host data, TLS certificates, and ASN information.
  • Perform Censys Search queries to identify related hosts or certificate-sharing networks.
  • Use-case: pivot investigations by linking IPs to certificates and ASN owners to map threat infrastructure.

Quick Start

Query Censys for host data, TLS certificates, and ASN information for a given IP or search query.

Frequently Asked Questions about lookup-censys

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve TLS certificates and ASN details for a specific IP address?

To retrieve TLS certificates and ASN details for an IP address, query Censys host reconnaissance data to return a structured payload containing services, certificates, ASN ownership, and geographical location for threat intelligence investigations.

Can I use Censys search queries to map related hosts sharing the same certificate?

You can use Censys search queries to map related hosts by performing certificate pivoting, linking IPs to specific TLS certificates and ASN owners to identify certificate-sharing networks and map threat infrastructure.

What is Censys host reconnaissance for threat intelligence investigations?

Censys host reconnaissance is the process of querying Censys to retrieve deep host data, TLS certificates, and ASN information, enabling deeper threat intelligence visibility and infrastructure mapping for targeted IP addresses or search queries.

Do I need API credentials and quota awareness to query Censys network data?

You need valid Censys API credentials and quota awareness to query Censys network data, as the host and certificate reconnaissance operates with quota limitations to return structured payloads containing services, certificates, ASN, and location details.

What's the best way to pivot investigations by linking IPs to certificates and ASN owners?

The best way to pivot investigations by linking IPs to certificates and ASN owners is querying Censys for host data and TLS certificates, allowing you to map related hosts and certificate-sharing networks for deeper threat intelligence visibility.