CIRCL

CIRCL Passive DNS is a database storing historical DNS records from various resources. CIRCL Passive SSL is a database storing historical X.509 certificates seen per IP address. The Passive SSL historical data is indexed per IP address.

Category

Data Enrichment & Threat Intelligence

Pack

CIRCL

Configuration parameters

• url — Server URL (e.g. https://www.circl.lu) (required)
• credentials — Username (required)
• proxy — Use system proxy settings
• insecure — Trust any certificate (not secure)

Commands (4)

• circl-dns-get — Get DNS records for your query value from CIRCL's Passive DNS.
• circl-ssl-get-certificate — Get the raw certificate and related information.
• circl-ssl-list-certificates — Query IP address or CIDR blocks (/32 up to /23) for SSL certificates history.
• circl-ssl-query-certificate — Query a certificate value to get all associated addresses