Overview
Censys is a platform that helps information security practitioners discover, monitor, and analyze devices that are accessible from the Internet.
Censys regularly probes every public IP address and popular domain names, curates and enriches the resulting data, and makes it intelligible through an interactive search engine and API.
Backed by Censys trusted data, threat hunters can easily pivot off key pieces of information to discover hidden infrastructure services in order to:
- Map IP addresses to domains and domains back to IP addresses
- Quickly find server misconfigurations
- Scan attack surfaces for vulnerabilities
You can read more about Censys Transforms for Maltego on our website here.
Pricing and Access
Users with Maltego Community Edition have the following access option:
Click-and-Run
Simply install the Hub item and start using it with a data allowance of 25 Transform runs per month.
Commercial Hub
Users with a Maltego One license have the following access or purchase options:
Click-and-Run
Simply install the Hub item and start using it with the following data allowances:
- Maltego Pro: 100 Transform runs / Month
- Maltego Enterprise: 500 Transform runs / Month
Bring Your Own Key (Purchase Separately)
For access to the full solution, plug in your existing API key or reach out to us using the form below for purchase inquiry.
To Operating System [Censys]
Description
This Transform returns the Operating System of the host identified by the input IP address
| APP ID | string | | false | true | true |
| Secret | string | | false | true | true |
| Display Name | To Operating System [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.ipv4AddressToOperatingSystem |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.Censys.Software |
| Short Description | This Transform returns the Operating System of the host identified by the input IP address |
To IP Addresses [Censys]
| APP ID | string | | false | true | true |
Determine how to query Virtual Hosts.
Possible values: EXCLUDE, INCLUDE, or ONLY | string | ONLY | true | false | false |
| Secret | string | | false | true | true |
| Display Name | To IP Addresses [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
Variants
| censys.domainToIpAddresses | maltego.Domain | This Transform returns all the IP addresses related to the input domain name |
| censys.asToIpAddresses | maltego.AS | This Transform returns all the IP addresses found in the input AS number |
| censys.cpeToIpAddresses | maltego.CPE | This Transform returns all the IP addresses that are found to be running the software identified by the input CPE |
| censys.locationToIpAddresses | maltego.Location | This Transform returns all the IP addresses found on the input location by considering all of the properties of the Location Entity |
| censys.dnsNameToIpAddresses | maltego.DNSName | This Transform returns all the IP addresses related to the input DNS name |
To IP Addresses Using Service [Censys]
Description
This Transform returns all the IP addresses that are found to be running the service identified by the Base64 input hash
| APP ID | string | false | true | true |
| ASN (E.g., 118) | string | true | true | false |
| ASN CIDR (E.g., 1.10.224.0/20) | string | true | true | false |
| ASN Country ISO 3166-1 alpha-2 Code (E.g., US) | string | true | true | false |
Combine custom query. Start query with ‘and’, ‘or’ or ‘not’.
For better results, wrap the search field value in double
quotes (escape any nested double quotes). E.g: and
autonomous_system.asn: “118” | string | true | true | false |
| Continent (E.g., North America) | string | true | true | false |
| DNS Names(E.g., *.cloudflare-dns.com) | string | true | true | false |
| Host Country ISO 3166-1 alpha-2 Code (E.g., US) | string | true | true | false |
| Host OS CPE (E.g., cpe:2.3:o:fortinet:fortios::::::::) | string | true | true | false |
| Host OS Product (E.g., FortiOS) | string | true | true | false |
| Host OS Vendor (E.g., Fortinet) | string | true | true | false |
| Reverse DNS Names(E.g., one.one.one.one) | string | true | true | false |
| Secret | string | false | true | true |
| Service Banner Hex | string | true | true | false |
| Service Name (E.g., DNS) | string | true | true | false |
| Service Port (E.g., 53) | string | true | true | false |
| Software CPE (E.g., cpe:2.3:a:cloudflare:cloudflare_load_balancer::::::::) | string | true | true | false |
| Software Product (E.g., CloudFlare Load Balancer) | string | true | true | false |
| Software Vendor (E.g., CloudFlare) | string | true | true | false |
TLS Certificate SHA256 Fingerprint (E.g., c93386adf01223e637a3aca7c68988bb
8240c4afd5d204c206bc35d7a4358dd1) | string | true | true | false |
| Display Name | To IP Addresses Using Service [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.hashToIpAddressesUsingService |
| Input Entities | maltego.Hash |
| Output Entities | maltego.IPv4Address |
| Short Description | This Transform returns all the IP addresses that are found to be running the service identified by the Base64 input hash |
Description
This Transform extracts the product CPE from the input Entity properties
| Display Name | Extract CPE [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.censysSoftwareExtractCpe |
| Input Entities | maltego.censys.Software |
| Output Entities | maltego.CPE |
| Short Description | This Transform extracts the product CPE from the input Entity properties |
To Running Software [Censys]
| APP ID | string | | false | true | true |
| Secret | string | | false | true | true |
| Display Name | To Running Software [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Output Entities | maltego.censys.Software |
Variants
| censys.ipv4AddressToRunningSoftware | maltego.IPv4Address | This Transform returns all the software used by the host that can be reached from the input IP address |
| censys.censysServiceDetailsToRunningSoftware | maltego.censys.ServiceDetails | This Transform extracts the list of software from the input Entity properties |
Description
This Transform extracts the banner hex from the input Entity properties
| Display Name | Extract Hash [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.censysServiceDetailsExtractHash |
| Input Entities | maltego.censys.ServiceDetails |
| Output Entities | maltego.Hash |
| Short Description | This Transform extracts the banner hex from the input Entity properties |
To IP Address Exposing Port [Censys]
Description
This Transform returns the IP addresses which is exposing the same port as the input port
| APP ID | string | | false | true | true |
| ASN (E.g., 118) | string | | true | true | false |
| ASN CIDR (E.g., 1.10.224.0/20) | string | | true | true | false |
| ASN Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Combine custom query. Start query with ‘and’, ‘or’ or ‘not’. For better results, wrap the search field value in double quotes (escape any nested double quotes). E.g: and autonomous_system.asn: “118” | string | | true | true | false |
| Continent (E.g., North America) | string | | true | true | false |
| DNS Names(E.g., *.cloudflare-dns.com) | string | | true | true | false |
| Host Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Host OS CPE (E.g., cpe:2.3:o:fortinet:fortios::::::::) | string | | true | true | false |
| Host OS Product (E.g., FortiOS) | string | | true | true | false |
| Host OS Vendor (E.g., Fortinet) | string | | true | true | false |
| Reverse DNS Names(E.g., one.one.one.one) | string | | true | true | false |
| Secret | string | | false | true | true |
| Service Banner Hex | string | | true | true | false |
| Service Name (E.g., DNS) | string | | true | true | false |
| Software CPE (E.g., cpe:2.3:a:cloudflare:cloudflare_load_balancer::::::::) | string | | true | true | false |
| Software Product (E.g., CloudFlare Load Balancer) | string | | true | true | false |
| Software Vendor (E.g., CloudFlare) | string | | true | true | false |
| TLS Certificate SHA256 Fingerprint (E.g., c93386adf01223e637a3aca7c68988bb8240c4afd5d204c206bc35d7a4358dd1) | string | | true | true | false |
| Display Name | To IP Address Exposing Port [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.portToIpAddressExposingPort |
| Input Entities | maltego.Port |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
| Short Description | This Transform returns the IP addresses which is exposing the same port as the input port |
To Other Hosts Running Software [Censys]
Description
This Transform returns all the IP addresses that are running the input software
| APP ID | string | | false | true | true |
| ASN (E.g., 118) | string | | true | true | false |
| ASN CIDR (E.g., 1.10.224.0/20) | string | | true | true | false |
| ASN Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Combine custom query. Start query with ‘and’, ‘or’ or ‘not’. For better results, wrap the search field value in double quotes (escape any nested double quotes). E.g: and autonomous_system.asn: “118” | string | | true | true | false |
| Continent (E.g., North America) | string | | true | true | false |
| DNS Names(E.g., *.cloudflare-dns.com) | string | | true | true | false |
| Host Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Reverse DNS Names(E.g., one.one.one.one) | string | | true | true | false |
| Secret | string | | false | true | true |
| Service Banner Hex | string | | true | true | false |
| Service Name (E.g., DNS) | string | | true | true | false |
| Service Port (E.g., 53) | string | | true | true | false |
| TLS Certificate SHA256 Fingerprint (E.g., c93386adf01223e637a3aca7c68988bb8240c4afd5d204c206bc35d7a4358dd1) | string | | true | true | false |
| Display Name | To Other Hosts Running Software [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.censysSoftwareToOtherHostsRunningSoftware |
| Input Entities | maltego.censys.Software |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
| Short Description | This Transform returns all the IP addresses that are running the input software |
Description
This Transform extracts the IP address from the input Entity properties
| Display Name | Extract Service IP Address [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.censysServiceDetailsExtractIpAddress |
| Input Entities | maltego.censys.ServiceDetails |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
| Short Description | This Transform extracts the IP address from the input Entity properties |
Search IP Addresses [Censys]
Description
This Transform returns all the IP addresses that resulted from the Censys query
| APP ID | string | | false | true | true |
| ASN (E.g., 118) | string | | true | true | false |
| ASN CIDR (E.g., 1.10.224.0/20) | string | | true | true | false |
| ASN Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Continent (E.g., North America) | string | | true | true | false |
| DNS Names(E.g., *.cloudflare-dns.com) | string | | true | true | false |
| Host Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Host OS CPE (E.g., cpe:2.3:o:fortinet:fortios::::::::) | string | | true | true | false |
| Host OS Product (E.g., FortiOS) | string | | true | true | false |
| Host OS Vendor (E.g., Fortinet) | string | | true | true | false |
| Reverse DNS Names(E.g., one.one.one.one) | string | | true | true | false |
| Secret | string | | false | true | true |
| Service Banner Hex | string | | true | true | false |
| Service Name (E.g., DNS) | string | | true | true | false |
| Service Port (E.g., 53) | string | | true | true | false |
| Software CPE (E.g., cpe:2.3:a:cloudflare:cloudflare_load_balancer::::::::) | string | | true | true | false |
| Software Product (E.g., CloudFlare Load Balancer) | string | | true | true | false |
| Software Vendor (E.g., CloudFlare) | string | | true | true | false |
| TLS Certificate SHA256 Fingerprint (E.g., c93386adf01223e637a3aca7c68988bb8240c4afd5d204c206bc35d7a4358dd1) | string | | true | true | false |
| Wrap search query with double quotes | boolean | true | false | true | true |
| Display Name | Search IP Addresses [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.phraseSearchIpAddresses |
| Input Entities | maltego.Phrase |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
| Short Description | This Transform returns all the IP addresses that resulted from the Censys query |
To IP Addresses Exposing Service [Censys]
Description
This Transform returns the IP addresses which is exposing the same service as the input service
| APP ID | string | | false | true | true |
| ASN (E.g., 118) | string | | true | true | false |
| ASN CIDR (E.g., 1.10.224.0/20) | string | | true | true | false |
| ASN Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Combine custom query. Start query with ‘and’, ‘or’ or ‘not’. For better results, wrap the search field value in double quotes (escape any nested double quotes). E.g: and autonomous_system.asn: “118” | string | | true | true | false |
| Continent (E.g., North America) | string | | true | true | false |
| DNS Names(E.g., *.cloudflare-dns.com) | string | | true | true | false |
| Host Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Host OS CPE (E.g., cpe:2.3:o:fortinet:fortios::::::::) | string | | true | true | false |
| Host OS Product (E.g., FortiOS) | string | | true | true | false |
| Host OS Vendor (E.g., Fortinet) | string | | true | true | false |
| Reverse DNS Names(E.g., one.one.one.one) | string | | true | true | false |
| Secret | string | | false | true | true |
| Service Port (E.g., 53) | string | | true | true | false |
| Software CPE (E.g., cpe:2.3:a:cloudflare:cloudflare_load_balancer::::::::) | string | | true | true | false |
| Software Product (E.g., CloudFlare Load Balancer) | string | | true | true | false |
| Software Vendor (E.g., CloudFlare) | string | | true | true | false |
| TLS Certificate SHA256 Fingerprint (E.g., c93386adf01223e637a3aca7c68988bb8240c4afd5d204c206bc35d7a4358dd1) | string | | true | true | false |
| Display Name | To IP Addresses Exposing Service [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.serviceToIpAddressesExposingService |
| Input Entities | maltego.Service |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
| Short Description | This Transform returns the IP addresses which is exposing the same service as the input service |
Description
This Transform extracts the port from the input Entity properties
| Display Name | Extract Port [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.censysServiceDetailsExtractPort |
| Input Entities | maltego.censys.ServiceDetails |
| Output Entities | maltego.Port |
| Short Description | This Transform extracts the port from the input Entity properties |
To Domains [Censys]
Description
This Transform returns the domains that have any of their DNS records pointing to the input IP address
| APP ID | string | | false | true | true |
| Secret | string | | false | true | true |
| Display Name | To Domains [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.ipv4AddressToDomains |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.Domain |
| Short Description | This Transform returns the domains that have any of their DNS records pointing to the input IP address |
To AS Number [Censys]
Description
This Transform returns the AS number in which the input IP address belongs to
| APP ID | string | | false | true | true |
| Secret | string | | false | true | true |
| Display Name | To AS Number [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.ipv4AddressToAsNumber |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.AS |
| Short Description | This Transform returns the AS number in which the input IP address belongs to |
To Location [Censys]
Description
This Transform returns the location of the host identified by the input IP address
| APP ID | string | | false | true | true |
| Secret | string | | false | true | true |
| Display Name | To Location [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.ipv4AddressToLocation |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.Location |
| Short Description | This Transform returns the location of the host identified by the input IP address |
To IP Addresses With Banner [Censys]
Description
This Transform returns all the IP addresses that have the input Banner
| APP ID | string | | false | true | true |
| ASN (E.g., 118) | string | | true | true | false |
| ASN CIDR (E.g., 1.10.224.0/20) | string | | true | true | false |
| ASN Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Combine custom query. Start query with ‘and’, ‘or’ or ‘not’. For better results, wrap the search field value in double quotes (escape any nested double quotes). E.g: and autonomous_system.asn: “118” | string | | true | true | false |
| Continent (E.g., North America) | string | | true | true | false |
| DNS Names(E.g., *.cloudflare-dns.com) | string | | true | true | false |
| Host Country ISO 3166-1 alpha-2 Code (E.g., US) | string | | true | true | false |
| Host OS CPE (E.g., cpe:2.3:o:fortinet:fortios::::::::) | string | | true | true | false |
| Host OS Product (E.g., FortiOS) | string | | true | true | false |
| Host OS Vendor (E.g., Fortinet) | string | | true | true | false |
| Reverse DNS Names(E.g., one.one.one.one) | string | | true | true | false |
| Secret | string | | false | true | true |
| Service Banner Hex | string | | true | true | false |
| Service Name (E.g., DNS) | string | | true | true | false |
| Service Port (E.g., 53) | string | | true | true | false |
| Software CPE (E.g., cpe:2.3:a:cloudflare:cloudflare_load_balancer::::::::) | string | | true | true | false |
| Software Product (E.g., CloudFlare Load Balancer) | string | | true | true | false |
| Software Vendor (E.g., CloudFlare) | string | | true | true | false |
| TLS Certificate SHA256 Fingerprint (E.g., c93386adf01223e637a3aca7c68988bb8240c4afd5d204c206bc35d7a4358dd1) | string | | true | true | false |
| Display Name | To IP Addresses With Banner [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.bannerToIpAddressesWithBanner |
| Input Entities | maltego.Banner |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
| Short Description | This Transform returns all the IP addresses that have the input Banner |
To Services [Censys]
Description
This Transform returns the services running on the host that can be reached from the input IP address
| APP ID | string | | false | true | true |
| Secret | string | | false | true | true |
| Display Name | To Services [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.ipv4AddressToServices |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.censys.ServiceDetails |
| Short Description | This Transform returns the services running on the host that can be reached from the input IP address |
To Hostnames [Censys]
Description
This Transform returns reverse DNS lookup (RARP) of the input IP address
| APP ID | string | | false | true | true |
| Secret | string | | false | true | true |
| Display Name | To Hostnames [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.ipv4AddressToHostnames |
| Input Entities | maltego.IPv4Address |
| Output Entities | maltego.DNSName |
| Short Description | This Transform returns reverse DNS lookup (RARP) of the input IP address |
Description
This Transform extracts the banner from the input Entity properties
| Display Name | Extract Banner [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.censysServiceDetailsToBanner |
| Input Entities | maltego.censys.ServiceDetails |
| Output Entities | maltego.Banner |
| Short Description | This Transform extracts the banner from the input Entity properties |
To IP Addresses Using Certificate [Censys]
Description
This Transform returns all the IP addresses that are found to be using the certificate identified by the input SHA256
| APP ID | string | | false | true | true |
| Secret | string | | false | true | true |
| Display Name | To IP Addresses Using Certificate [Censys] |
| Owner | |
| Author | Maltego |
| Data Source | Censys |
| Transform Name | censys.hashToIpAddressesUsingCertificate |
| Input Entities | maltego.Hash |
| Output Entities | maltego.IPv4Address, maltego.IPv6Address |
| Short Description | This Transform returns all the IP addresses that are found to be using the certificate identified by the input SHA256 |