CIRCL

CIRCL Passive DNS is a database storing historical DNS records from various resources. CIRCL Passive SSL is a database storing historical X.509 certificates seen per IP address. The Passive SSL historical data is indexed per IP address.

Data Enrichment & Threat Intelligence · CIRCL

Configuration parameters

  • url — Server URL (e.g. https://www.circl.lu) (required)
  • credentials — Username (required)
  • proxy — Use system proxy settings
  • insecure — Trust any certificate (not secure)

Commands (4)

  • circl-dns-get

    Get DNS records for your query value from CIRCL's Passive DNS.

  • circl-ssl-get-certificate

    Get the raw certificate and related information.

  • circl-ssl-list-certificates

    Query IP address or CIDR blocks (/32 up to /23) for SSL certificates history.

  • circl-ssl-query-certificate

    Query a certificate value to get all associated addresses