32 Open Source Certificate Transparency Software Projects

A transparent, highly scalable and cryptographically verifiable data store.

Find interesting Amazon S3 Buckets by watching certificate transparency logs.

Abusing Certificate Transparency logs for getting HTTPS websites subdomains.

Phishing catcher using Certstream

Semi-automatic OSINT framework and package manager

Sublert is a security and reconnaissance tool which leverages certificate transparency to automatically monitor new subdomains deployed by specific organizations and issued TLS/SSL certificate.

This repository contains all the material from the talk "Esoteric sub-domain enumeration techniques" given at Bugcrowd LevelUp 2017 virtual conference

Certificate Transparency Log Monitor

Highly scalable and high-performance open source PKI (CA and OCSP responder). Minimal dependencies.

Python-based utility that uses supervised machine learning to detect phishing domains from the Certificate Transparency log network.

Don't Just Search OSINT. Sweep It.

Certificate transparency for Android and Java

Certificate Transparency module for nginx.

Axeman is a utility to retrieve certificates from Certificate Transparency Lists (CTLs)

Monitor certificates generated for specific domain strings and associated, store data into sqlite3 database, alert you when sites come online.

A toolkit for Security Researchers

A tool to monitor a certificate transparency log for operational problems

A program for submitting X.509 certificate chains to Certificate Transparency log servers.

Generation and validation of certificates using ethereum blockchain

Random tools to perform Certificate Transparency-related stuff

Lightweight program that pollinates STHs between Certificate Transparency logs and auditors

:lock:Check your site's SSL status using curl & bash

CTjs is a full set of classes necessary to work with any kind of Certificate Transparency log (V1 as from RFC6962, or V2 as from RFC6962-bis). In CTjs you could find all necessary validation/verification functions for all related data shipped with full-featured examples showning how to validate/verify. Also in scope of CTjs I made code showing example from RFC6962 item 2.1.3 on a real data from real Certificate Transparency log.

Monitor issued certificates in real-time and send alerts to Slack when a domain matches.

Detect Phishing fetching Certificate Transparency Logs

Watcher - Open Source Cybersecurity Threat Hunting Platform. Developed with Django & React JS.

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

Subcert is an subdomain enumeration tool, that finds all the subdomains from certificate transparency logs.

Certificate transparency for Android and JVM

Fully-featured tool that combines state-of-the-art TLS analyzers with a report system that suggests appropriate mitigations and shows the full set of viable attacks.

A DID method implementation that extends the Sidetree protocol into a Fediverse of interconnected nodes and witnessed using certificate transparency. Spec: https://trustbloc.github.io/did-method-orb/

Blockchain Based Certificate Validation