tlsx
Fast TLS grabber that pulls SANs, issuers, and cert metadata - a rich, often-overlooked source of new subdomains and internal hostnames.
Tags: tls, certificates, san, projectdiscovery
- Category
- recon
- Maintenance signal
- active
Use this when: Intake. Use this on a root you are allowed to resolve. The output is a host list, not a finding.
Install
go
go install github.com/projectdiscovery/tlsx/cmd/tlsx@latestCommand templates
Pull SAN names
tlsx -l {input} -san -silent -o tls-hosts.txt