https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.issuer.organization%3D%22cobaltstrike%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.issuer.organizational_unit%3D%22AdvancedPenTesting%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.subject.province%3D%22Cyberspace%22+and+services.tls.certificates.leaf_data.subject.country%3D%22Earth%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.subject.common_name%3A+%22Quasar+Server+CA%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.subject.common_name%3A%22Laplas.app%22+or+services.tls.certificates.leaf_data.issuer.common_name%3A%22Laplas.app%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services%3A%28tls.certificates.leaf_data.subject.common_name%3Amultiplayer+and+tls.certificates.leaf_data.issuer.common_name%3Aoperators%29

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=%28services.http.response.html_title%3D%22Mythic%22%29+or+services.http.response.favicons.md5_hash%3D%226be63470c32ef458926abb198356006c%22+or+services.tls.certificates.leaf_data.subject.common_name%3D%22Mythic%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=labels%3A+%60remote-access%60+and+services.http.response.body%3A%22This+program+cannot+be+run+in+DOS+mode%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services%3A%28http.response.body%3D%22404+Not+Found%22+and+port%3A443+and+tls.certificates.leaf_data.subject.common_name%3D%22*.*.com%22+and+tls.certificates.leaf_data.issuer.organization%3D%22Let%27s+Encrypt%22+and+not+tls.certificates.leaf_data.subject.common_name%3D%22www.*.com%22+and+http.response.headers%3A+%28key%3A+%60Server%60+and+value.headers%3A+%60nginx%60%29+%29+and+services%3A%28port%3A80+and+http.response.headers%3A+%28key%3A+%60Server%60+and+value.headers%3A+%60nginx%60%29%29+and+not+services.port%3A%5B1000+to+65000%5D+and+services.port%3A22+and+not+services.http.response.html_title%3A*++and+not+dns.reverse_dns.names%3A*+and+dns.names%3A*.*.com

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=service_count%3A%5B200+to+2000%5D+and+dns.names%3A*.ngrok.*+and+services.banner%3AGstreamer

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.dns.server_type%3D%22FORWARDING%22+and+dns.reverse_dns.names%3A*.ru+and+services.extended_service_name%3D%22VALVE%22+and+service_count%3A3

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.banner_hashes%3D%22sha256%3A22adaf058a2cb668b15cb4c1f30e7cc720bbe38c146544169db35fbf630389c4%22+and+services.port%3A10001

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.http.response.html_title%3A%22Supershell%22+or+services.http.response.favicons.md5_hash%3D%22cb183a53ebfc2b61b3968c9d4aa4b14a%22

https://openhunting.io/threat-library

https://openhunting.io/threat-library-detail?data=vbrevshell

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.http.response.html_title%3D%22Vshell+-+%E7%99%BB%E5%BD%95%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.subject_dn%3D%22CN%3DDcRat*%22

https://search.censys.io/search/language?resource=hosts&q=service_count%3A%5B200+to+2000%5D+and+dns.names%3A*.ngrok.*+and+services.banner%3D%22SSH-2.0-OpenSSH_7.4p1+Debian-10%2Bdeb9u7%22&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=%28services.banner_hashes%3D%22sha256%3Aadbb6e5879d006b5aa2b6f047ed00b7e38d87055cfc9a0f2274e77a25e1edfb0%22%29

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=%28services.banner%3D%22HTTP%2F1.1+404+Not+Found%5Cr%5CnAccept-Ranges%3A+bytes%5Cr%5CnContent-Type%3A+text%2Fhtml%5Cr%5CnContent-Length%3A+80%5Cr%5CnConnection%3A+close%5Cr%5CnCache%3A+no-cache%5Cr%5CnServer%3A+Apache+1.3.27%5Cr%5Cn%22+and+%28services.port%3D%60443%60+and+services.port%3D%6080%60+and+services.port%3D%6053%60%29%29

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.subject_dn%3A%22CN%3DOrcus*%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.subject_dn%3A%22O%3DMythic*%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.http.response.html_tags%3D%22%3Ctitle%3ESupershell+-+%E7%99%BB%E5%BD%95%3C%2Ftitle%3E%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.subject_dn%3A%22CN%3DVenomRAT%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.tls.certificates.leaf_data.subject_dn%3A%22CN%3DCovenant%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.http.response.html_tags%3D%22%3Ctitle%3EHOOKBOT+PANEL%3C%2Ftitle%3E%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=%28services.http.response.html_title%3D%22VIPER%22%29+and+services.port%3D%6060000%60

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=services.banner%3D%22HTTP%2F1.1+404+Not+Found%5Cr%5CnContent-Type%3A+text%2Fhtml%5Cr%5CnServer%3A+nginx%5Cr%5CnX-Havoc%3A+true%5Cr%5CnDate%3A++%3CREDACTED%3E%5Cr%5CnContent-Length%3A+146%5Cr%5Cn%22

https://search.censys.io/search?resource=hosts&sort=RELEVANCE&per_page=25&virtual_hosts=EXCLUDE&q=service_count%3A%5B10+to+20%5D++and+services.tls.certificates.leaf_data.subject_dn%3D%22C%3DCN%2C+ST%3Dmyprovince%2C+L%3Dmycity%2C+O%3Dmyorganization%2C+OU%3Dmygroup%2C+CN%3DmyCA%22

https://openhunting.io/threat-tools