CertSniff is a python based keyword sniffer, using the certstream certificate transparency log data stream, that monitors for domain certificate events containing a string of interest.
git clone https://github.com/A-poc/certSniff;cd certSniff/;pip install -r requirements.txtpython3 certSniff.py -f monitor.txtYou can monitor live certificate transparency logs that contain any string within a keyword file.
monitor.txt ├── admin ├── test └── dev python3 certSniff.py -f monitor.txt
╔═╗┌─┐┬─┐┌┬┐╔═╗┌┐┌┬┌─┐┌─┐ ║ ├┤ ├┬┘ │ ╚═╗││││├┤ ├┤ ╚═╝└─┘┴└─ ┴ ╚═╝┘└┘┴└ └ Certificate Transparency Log Sniffer ----------------------------------------------------------------------------------------- Using sniff words from [monitor.txt] [03/03/23 14:16:45]:[aonecnameg.goce.workers.dev] [03/03/23 14:16:45]:[csbzvbzoompezxyu.southcentralus.atlas-test.cloudapp.azure.com] [03/03/23 14:16:45]:[admin-test.crystal.io] [03/03/23 14:16:45]:[dev-chompy.qmo.io] [03/03/23 14:16:45]:[backuptest.blacklightsupport.co.za] ... 