Certscan is a command-line tool written in Go that fetches SSL/TLS certificates from "crt.sh" and performs enumeration on the URLs found in those certificates. This tool is useful for discovering subdomains and identifying potential attack vectors.

Certscan can be installed using the go get command:

go get github.com/rottaj/certscan

Alternatively, you can clone the repository and build the binary manually:

git clone https://github.com/yourusername/certscan.git
cd certscan
go build

certscan [OPTIONS] DOMAIN

-h, --help: Show the help message and exit -o, --output FILE: Write output to a file instead of STDOUT -d, --depth DEPTH: Set the depth of enumeration (default: 2) -t, --timeout TIMEOUT: Set the timeout for HTTP requests (default: 5s) -v, --verbose: Enable verbose output

certscan -u example.com -v -o output.txt

This command will fetch SSL/TLS certificates for example.com and enumerate URLs found within those certificates. The output will be written to output.txt.

Contributions are welcome! Please create a pull request with your changes.