Cert scan - Revision history

Busk at 17:34, 25 January 2024

2024-01-25T17:34:38Z

2024-01-23T21:39:14Z

2024-01-22T16:32:50Z

2024-01-19T17:09:17Z

2024-01-19T16:56:19Z

2024-01-19T16:52:49Z

2024-01-19T16:47:47Z

@@ Line 99: / Line 99: @@
 ```
 cert -f json www.uvoo.me www.uvoo.io  uvoo.io | jq -r '(. | map(leaf_paths) | unique) as $cols | map (. as $row | ($cols | map(. as $col | $row | getpath($col)))) as $rows | ([($cols | map(. | map(tostring) | join(".")))] + $rows) | map(@csv) | .[]'
 ```

@@ Line 94: / Line 94: @@
 ```
 zoneName=example.com; cat $zoneName.json | jq -r '.[] | "\(.domainName), \(.ip), \(.issuer), \(.commonName), \(.sans), \(.notBefore), \(.notAfter), \(.error)"' > $zoneName.json.lines
 ```

@@ Line 93: / Line 93: @@
 ## Convert JSON to greppable one liner
 ```
-cat $zoneName.json | jq -r '.[] | "\(.domainName), \(.ip), \(.issuer), \(.commonName), \(.sans), \(.notBefore), \(.notAfter), \(.error)"'
+zoneName=example.com; cat $zoneName.json | jq -r '.[] | "\(.domainName), \(.ip), \(.issuer), \(.commonName), \(.sans), \(.notBefore), \(.notAfter), \(.error)"' > $zoneName.json.lines
 ```

← Older revision		Revision as of 16:56, 19 January 2024
Line 1:		Line 1:
−	# ~~Steps~~	+	# Certificate HTTPS Scanning
		+
		+	This can be used for quick checking of https endpoints. Default is 443.
		+
		+
		+	## Prerequisites
		+	```
		+	apt install jq
		+	```
		+	Download latest release for your platform from https://github.com/genkiroid/cert

	## get-dnsRecords.ps1		## get-dnsRecords.ps1

@@ Line 89: / Line 89: @@
 # cert.exe -f json -skip-verify $hosts | ConvertFrom-Json | ConvertTo-Json -Depth 10 > .\$($zoneName).json
 write-host "Check $($zoneName).json for scan results."
 ```

@@ Line 34: / Line 34: @@
 ## cert-scan.sh
 ```
 #!/bin/bash
@@ Line 57: / Line 56: @@
 ```
-## Powershell scan
+## cert-scan.ps1
 This only works if $hosts var array is smaller

@@ Line 17: / Line 17: @@
 # exit
-$rsp = Invoke-Command -ComputerName wjp1-dc -ScriptBlock {
+$rsp = Invoke-Command -ComputerName $dnsHost -ScriptBlock {
    param($zoneName, $dnsHost)
    $dnsRecords = Get-DnsServerResourceRecord -ZoneName $zoneName -RRType A