● Covered by 1 source · 1 reportMedium impact
New OSINT Tool Monitors Exposed Files on Domains Using Certificate Transparency Logs
Key points
- Monitors certificate transparency logs for newly-seen domains.
- Detects exposed items like .env files and .git directories.
- Features a searchable database for findings.
Overview of the New Tool
A new open-source intelligence (OSINT) tool has been introduced for use by penetration testers and bug bounty hunters. This tool continuously monitors certificate transparency logs to detect newly-seen domains and exposes potential security flaws such as configuration files and database dumps.
Functionality and Features
The tool compiles the findings into a searchable database, allowing users to query specific domains or domain parts. Currently operating in a read-only manner, it is freely accessible to users.
Future Enhancements
The creator is considering adding alert features that notify users of new findings based on specific search keywords. Suggestions for additional functionalities and methods to mitigate data abuse are welcomed from the community.
Community Feedback
The tool is being shared on platforms like Hacker News, where developers often provide feedback and suggest potential features. This interaction aims to improve the tool and address concerns regarding data security.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
A new OSINT tool has been launched that monitors certificate transparency logs to identify exposed files on newly-seen domains. This tool allows penetration testers and bug bounty hunters to search for sensitive data like configuration files and database dumps easily.