WEBDIENSTE/theHarvester
1
0
Fork 0
mirror of https://github.com/laramies/theHarvester.git synced 2026-08-17 19:35:40 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix: call Censys Platform API directly (#2537)

Browse Source 
* fix: call Censys Platform API directly (#295)

(cherry picked from commit 7ce361413ad35471ab0b6878382f3548b0918dbe)

* docs: clarify Censys global search entitlement
This commit is contained in:
Matt
2026-08-14 22:44:45 -04:00
committed by GitHub
parent 3e864d3984
commit bb77613a05
12 changed files with 358 additions and 192 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/wiki/Configuration-and-API-Keys.md
+4 -2
View File
@@ -22,8 +22,8 @@ Keep the complete generated template and fill only the providers you intend to u
```yaml
apikeys:
censys:
id: your-censys-id
secret: your-censys-secret
token: your-censys-personal-access-token
organization_id: your-censys-organization-id
github:
key: your-github-token
@@ -45,6 +45,8 @@ The [README source matrix](https://github.com/laramies/theHarvester/blob/dev/REA
Provider pricing, quotas, and terms change frequently. Check the provider's current documentation for these details.
`censys.token` is a Censys Platform Personal Access Token. Set `organization_id` when searches should use an entitled organization. This source uses the Global Search API, which is unavailable to Free accounts because they are limited to asset lookups. The retired Search API ID and secret fields are not accepted.
`hibpverified` queries [HIBP's authenticated verified-domain endpoint](https://haveibeenpwned.com/API/v3#BreachedDomain). It is selected by its name, the `breaches` capability, and `all`. Without a configured HIBP API key it is skipped like other unavailable keyed sources. Live use requires a user-owned paid HIBP API key and a user-owned domain verified in that account. The keyless `haveibeenpwned` source continues to query only the public breach catalogue.
`routeviews.key` is optional. RouteViews provides authenticated API keys to verified PeeringDB users. `--routeviews` uses the authenticated endpoint and documented 10-request-per-second allowance when the key is configured; otherwise it uses guest access at one request per second. If RouteViews rejects a configured key, the action fails without retrying as a guest; remove the key to select guest access. RouteViews does not document this as a paid subscription.