Queries crt.sh and pycrtsh Certificate Transparency logs to detect phishing domains, unauthorized certs, shadow IT, and brand impersonations via Levenshtein distance. For proactive security monitoring.
How this skill is triggered — by the user, by Claude, or both
Slash command
/cybersecurity-skills-zh:analyzing-tls-certificate-transparency-logsThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
通过查询 crt.sh 证书透明度数据库,查找针对您组织品牌相似域名签发的证书,检测钓鱼基础设施。
通过查询 crt.sh 证书透明度数据库,查找针对您组织品牌相似域名签发的证书,检测钓鱼基础设施。
from pycrtsh import Crtsh
c = Crtsh()
# 搜索与域名匹配的证书
certs = c.search("example.com")
for cert in certs:
print(cert["id"], cert["name_value"])
# 获取完整证书详情
details = c.get(certs[0]["id"], type="id")
关键分析步骤:
from pycrtsh import Crtsh
c = Crtsh()
certs = c.search("%.example.com")
for cert in certs:
print(f"签发者: {cert.get('issuer_name')}, 域名: {cert.get('name_value')}")
npx claudepluginhub killvxk/cybersecurity-skills-zhQueries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, typosquatting via Levenshtein distance, unauthorized certs, and shadow IT. For proactive security monitoring and threat hunting.
Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate issuance, and shadow IT. Monitors newly issued certificates for typosquatting and brand impersonation using Levenshtein distance.
Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate issuance, and shadow IT. Monitors newly issued certificates for typosquatting and brand impersonation using Levenshtein distance.