CertMon

Monitor Censys Data

Monitor SSL certificates by hash and IP addresses via Censys data. Keep a record of findings and alert on new items.

Setup

Install Mongo and make sure it is running

pip install

requests
flask
pymongo

Start web server

cd CertMon/
flask run 

OR

python -m flask run

Visit http://localhost:5000/config and set Censys creds

Monitor

Run monitor.py on desired interval to start querying Censys data

FYI

• debug.log - Log of behaviour
• alert.log - Ingest into something like splunk
• API quota will display at the bottom of the main page
• SSL certs need to be SHA1

ScreenShots

Set creds

List current items being monitored

Add a new item with a note

View findings

Show active alerts

Alert findings