Hacking Tools

Gungnir : Monitoring Certificate Transparency In Real-Time

Gungnir is a command-line tool written in Go that continuously monitors certificate transparency (CT) logs for newly issued SSL/TLS certificates.

Its primary purpose is to aid security researchers and penetration testers in discovering new domains and subdomains as soon as they are issued certificates, allowing for timely security testing.

The tool connects to multiple CT logs and actively watches for new certificate entries.

Whenever a new certificate is detected, Gungnir extracts the domains and subdomains present in the certificate’s subject alternative names (SANs) and Common Name (CN) and prints them to stdout in real-time.

By running Gungnir continuously, security professionals can stay ahead of the curve and rapidly identify potential attack surfaces as soon as new domains or subdomains become active on the web.

This proactive approach enables early reconnaissance, vulnerability scanning, and prompt remediation of any identified issues.

Key Features:

  • Real-time Monitoring: Actively monitors multiple CT logs for newly issued certificates.
  • Domain Extraction: Extracts domains and subdomains from certificate subject alternative names and common name.
  • Continuous Output: Prints discovered domains and subdomains to stdout as they are detected.
  • Customizable Filtering: Allows filtering output based a text file of root domains. Gungnir is designed to be a lightweight and efficient tool, making it suitable for running on various platforms, from local machines to cloud instances or containerized environments.

Installation

go install github.com/g0ldencybersec/gungnir/cmd/gungnir@latest

Usage

Options

Usage of gungnir:
  -debug    Debug CT logs to see if you are keeping up. Outputs to STDERR
  -r        Path to the list of root domains to filter against
  -v        Output go logs (500/429 errors) to STDERR
  -j        JSONL output cert info

To run the tool, use a text file of root domains you want to monitor: roots.txt. Then, run the gungnir module:

./gungnir -r roots.txt (filtered)
- or -
./gungnir (unfiltered)

Once the tool starts and initializes, it will print domains to stdout. So feel free to pipe the output into your favorite tool!

Varshini

Varshini is a Cyber Security expert in Threat Analysis, Vulnerability Assessment, and Research. Passionate about staying ahead of emerging Threats and Technologies.

Recent Posts

Playwright-MCP : A Powerful Tool For Browser Automation

Playwright-MCP (Model Context Protocol) is a cutting-edge tool designed to bridge the gap between AI…

2 weeks ago

JBDev : A Tool For Jailbreak And TrollStore Development

JBDev is a specialized development tool designed to streamline the creation and debugging of jailbreak…

2 weeks ago

Kereva LLM Code Scanner : A Revolutionary Tool For Python Applications Using LLMs

The Kereva LLM Code Scanner is an innovative static analysis tool tailored for Python applications…

2 weeks ago

Nuclei-Templates-Labs : A Hands-On Security Testing Playground

Nuclei-Templates-Labs is a dynamic and comprehensive repository designed for security researchers, learners, and organizations to…

2 weeks ago

SSH-Stealer : The Stealthy Threat Of Advanced Credential Theft

SSH-Stealer and RunAs-Stealer are malicious tools designed to stealthily harvest SSH credentials, enabling attackers to…

2 weeks ago

ollvm-unflattener : A Tool For Reversing Control Flow Flattening In OLLVM

Control flow flattening is a common obfuscation technique used by OLLVM (Obfuscator-LLVM) to transform executable…

2 weeks ago