Tag
Google reported a series of third-party ccTLD registry hijacks affecting .gh, .sl, and .as domains, where attackers modified DNS records and obtained unauthorized HTTPS certificates. Chrome blocked these certificates via CRLSets, revoked them with the issuing CAs, and Google urged domain owners to monitor Certificate Transparency logs and publish restrictive CAA records.
The article explains how certgrep.sh, a free certificate transparency search engine with regex support, was built to address limitations in querying CT logs at scale for security applications, detailing its technical design and public release.
A simple URL using public certificate data can list all subdomains of a primary domain without any installation or setup.