Query Crtsh (crt.sh) from node.js.

Crtsh is a platform that permits you search for certificates that have been logged by CT. Many people use this to enumerate subdomains.

• node-crtsh
  • How to install
  • Usage
    • Getting all domain and subdomains certificate names
  • API
    • hostnames(pattern, [options])
  • Changelog
  • License

npm i crtsh

const { hostnames: crtshHostnames } = require('crtsh');

(async () => {
  const hostnames = await crtshHostnames('%.example.org');
  console.log(JSON.stringify(hostnames, null, 2);

  // Will print:
  // [
  //   "example.org",
  //   "www.example.org",
  //   "www.testdomain.example.org"
  // ]
})();

More examples can be found at examples.

• pattern (string, required):

  For example, if you want to list certificate names for "example.org" domain and subdomains, you can use "%.example.org".

• options (object, optional):

  • axiosConfig: optional config to pass to axios.

  • proxy: optional proxy to use, eg: "localhost:8080"

    For example, if you want to use proxy when calling crt.sh, you can use syntax like this:

    const { hostnames } = require('crtsh');
    await hostnames('%.example.org', { proxy: 'localhost:8080' });

See CHANGELOG.md.

License under MIT License.