Osint Tool Finds Exposed Files on Domains

A cybersecurity researcher has launched a free, read-only OSINT (open-source intelligence) tool designed to assist penetration testers and bug bounty hunters in identifying exposed sensitive data across domains. The platform, available at https://search.cerast-intelligence.com/, leverages certificate transparency logs to monitor newly registered domains and scans them for vulnerabilities such as exposed environment files (.env), open Git directories, configuration files, and database dumps. These findings are aggregated into a searchable database, enabling users to query specific domains or domain fragments to uncover potential security risks.

The tool’s creator is seeking community feedback on potential enhancements, including a notification system that would allow users to register keywords and receive alerts when new exposures match their criteria. Additionally, the researcher expressed concerns about mitigating data abuse, highlighting the need for strategies to prevent misuse of the tool’s findings. The platform, which currently requires no authentication, is hosted on a public-facing URL and is open to suggestions for improving its functionality and security safeguards. The project has sparked discussion on Hacker News, with users invited to share ideas for balancing accessibility with ethical use.