跳到正文
cccskills
免费在 GitHub 公开

censys-api

Censys API v2 reference. Host reconnaissance and certificate data.

中文简介正在准备中。当前显示原文说明。

实测评分 未实测

查看安装方法

包含的文件(1)

  • SKILL.md2.3 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Censys API v2

Base URL

https://search.censys.io/api/v2

Authentication

Basic Auth: $CENSYS_API_ID:$CENSYS_API_SECRET

curl -s "https://search.censys.io/api/v2/hosts/{ip}" \
  -u "$CENSYS_API_ID:$CENSYS_API_SECRET"

Rate Limits

  • Free: 250 queries/month, 5 results/query
  • Paid: Higher limits based on plan

Important: Free tier is very limited. Use selectively — prioritise high-value lookups.

Key Endpoints

View Host

curl -s "https://search.censys.io/api/v2/hosts/{ip}" \
  -u "$CENSYS_API_ID:$CENSYS_API_SECRET"

Useful fields:

  • result.services[] — port, service_name, transport_protocol, banner
  • result.services[].tls.certificates — TLS certificate chain
  • result.autonomous_system — ASN info
  • result.location — geographic location
  • result.operating_system — OS detection
  • result.last_updated_at — scan freshness

Search Hosts

curl -s "https://search.censys.io/api/v2/hosts/search?q={query}" \
  -u "$CENSYS_API_ID:$CENSYS_API_SECRET"

Search syntax: services.port: 443 AND services.tls.certificates.leaf_data.subject.common_name: example.com

View Certificate

curl -s "https://search.censys.io/api/v2/certificates/{fingerprint}" \
  -u "$CENSYS_API_ID:$CENSYS_API_SECRET"

Common Search Queries

  • ip: {ip} — specific host
  • services.tls.certificates.leaf_data.subject.common_name: {domain} — hosts with cert for domain
  • services.http.response.body_hash: {hash} — hosts serving same content
  • services.jarm.fingerprint: {jarm} — hosts with same JARM fingerprint (C2 detection)
  • labels: {label} — Censys-labeled hosts

CTI Value

Censys excels at:

  • Certificate transparency analysis (finding related infrastructure)
  • JARM fingerprinting (identifying C2 frameworks)
  • Service banner analysis
  • Historical infrastructure changes

Response Summary Format

ip: <IP>
services:
  - port: <port>
    service: <name>
    banner: <truncated>
certificates:
  - subject_cn: <common name>
    issuer: <issuer>
    valid_from: <date>
    valid_to: <date>
autonomous_system:
  asn: <number>
  name: <name>
location:
  country: <country>
  city: <city>
last_updated: <date>

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

AbuseIPDB API reference. IP reputation and abuse report lookups.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

ach

免费

Analysis of Competing Hypotheses — structured technique for evaluating multiple explanations against evidence. Use when facing ambiguous attribution or multiple plausible scenarios. Prefers graded evidence items from /quality-of-information-check and runs that skill first when handed raw URLs or text. Runs on ungraded evidence when asked, labelled as such, unweighted, and capped at Moderate confidence.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

Use when documenting a named campaign across time and victims, the user asks to start or update a campaign record, or another skill identified a multi-incident cluster that warrants formal tracking. Provides the template (timeline, attribution, victimology, attack chain, Diamond Model mapping, IOC clusters) and the lifecycle from active to historical.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

Use when the user asks about carding, BIN attacks, payment-card breach markets, fullz/CVV2 trade, autoshops (BidenCash, Brian's Club, Russianmarket, B1ack's Stash), or financial-fraud TTPs. Self-updating knowledge cell.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

Use when the user asks about Chinese state-sponsored cyber operations or specific PRC-aligned actors (APT41, Volt Typhoon, Mustang Panda, APT10, APT31, Salt Typhoon, etc.), MSS/PLA-attributed campaigns, or PRC sector targeting. Self-updating knowledge cell.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

Use when a report or article needs to be split into individual claims before it is graded, cited or used as evidence — the user asks "what does this report actually claim?", "split this into claims", "separate the facts from the judgements", or another skill needs a claim list. Turns one document into five to twelve atomic claims, each typed (observation, attribution, assessment, actor claim, victim disclosure) and anchored to the verbatim sentence it rests on, so every extraction can be checked against the source. Preserves the source's own hedging. Does not grade. Invoked by /quality-of-information-check; its output feeds /ach, /key-assumptions-check, /intelligence-writing, /writing-assessments and /threat-actor-profiling.

中文简介正在准备中。当前显示原文说明。

Liberty91LTD/cti-skills272026年9月30日 更新

查看 Liberty91LTD 的全部技能

报告此技能的问题