🧰 Censys

The items that name it 25

• Long-Hidden Flaws Patched in EPICS Research Facility Control Software
  articleas classification.technologies2026-10-28
• PHP2Shell: What This Week Tells Us About the Web We Built
  articleas tools2026-10-23It is written here as Censys: internet scanning source for exposure counts and an advisory.
• Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge
  articleas classification.key entities2026-10-23
• PHP2Shell Exploitation Started Days Before Patches
  articleas tools2026-10-22It is written here as Censys: internet-wide host scanning used to count PHP hosts and versions.
• [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
  articleas classification.key entities2026-10-22
• [AINews] OpenAI’s Patch the Planet program is 1 of 2 parties to discover PHP2Shell vulnerabilities in core PHP affecting 70% of the web, using GPT-5.6 Sol; coordinated response over 2 months
  articleas tools2026-10-22It is written here as Censys (source cited for the 1.5 million unpatched server figure).

  source cited for the 1.5 million unpatched server figure

• Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
  articleas classification.key entities2026-10-15
• IP Camera Hacking: Hacking IP Cameras with Cameradar
  articleas tools2026-10-08

  Used to identify unprotected/exposed IP cameras

• CITRIX 0-DAY EXPLOITS: CVE-2026–88771 & CVE-2026–88772 IN THE WILD
  writeupas tools2026-10-06

  Scanner service noted as used by both researchers/analysts and attackers to assess unpatched/vulnerable services.

• DarkMe RAT: A VB6 APT Trojan Turned Conventional Infostealer
  writeupas tools2026-09-22

  Used to analyze the C2 IP 67.43.50.11, revealing exposed RDP/WinRM/DCERPC ports and the leaked hostname

• MITRE ATLAS Adds 11 AI Agent Attack Techniques (Zenity Labs collab)
  articleas tools2026-09-16

  Third-party internet scanning service recognized in the new Scan Databases subtechnique as a discovery channel for exposed AI infrastructure

• ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
  writeupas tools2026-09-08

  Cited report documenting the same Windows/macOS EtherHiding contracts in a related blockchain-backed ClickFix chain

• From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS
  writeupas tools2026-08-07

  Used to search for exposed Screen Sharing hosts by ASN and non-standard ports

• OpenOSINT
  repoas tools2026-07-31

  IPv4 host view (open ports, services, ASN) or domain certificate search (SANs, issuer); requires CENSYS_API_ID and CENSYS_SECRET

• awesome-osint-arsenal
  repoas tools2026-07-31It is written here as Censys (internet-wide scan search).

  internet-wide scan search

• Master Urlscan.io Dorking for Bug Bounty Hunting
  videoas classification.key entities2026-07-23
• Cybercrime Breaches Klue: Salesforce Data Impacted for Many Victims, including Huntress
  writeupas tools2026-06-18

  used to identify the hosting IP's BULLETPROOF designation for AS200593 (PROSPERO OOO, Russian Federation)

• One Fake Bug Report Hijacked a $250B Company’s AI Agent
  articleas tools2026-06-17

  Used by Tenet for passive reconnaissance to find exposed Sentry DSNs via searches for ingest.sentry.io in HTTP bodies.

• Orca: CVE-2026-5027 Langflow Path Traversal RCE
  advisoryas tools2026-06-12

  Internet scanning used to identify approximately 7,000 publicly exposed Langflow instances.

• musana/CF-Hero
  repoas tools2026-05-21

  Search engine integration used by CF-Hero for third-party intelligence; now uses the Censys Platform API with Personal Access Token (PAT) and optional Organization ID, as legacy search.censys.io API is being sunset in 2026

• i8void/cybersleuth
  repoas tools2026-05-14

  secondary source for certificate intelligence

• n8n Cybersecurity Workflows
  repoas tools2026-05-06

  Internet-wide host/certificate discovery

• BishopFox/aimap
  repoas tools2026-05-06

  Optional additional discovery source alongside Shodan

• CVE-2026-20079 - Cisco FMC Authentication Bypass RCE Analysis
  writeupas tools

  Internet-wide scanning used by VulnCheck to find exposed Cisco FMC instances (~300 found)

• 0x4m4/hexstrike-ai
  repoas tools

  Internet asset discovery with certificate analysis