Search Open Technical Databases

Technique · ATTACK:enterprise:T1596

Attributed source ↗ · Plaintext record · Complete record and assertions JSON

Inspect structured metadata and provenance

{
  "id": "ATTACK:enterprise:T1596",
  "title": "Search Open Technical Databases",
  "type": "Technique",
  "source_url": "https://attack.mitre.org/techniques/T1596",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "attack-pattern--55fc4df0-b42c-479a-b860-7a6761bcaad0",
  "external_id": "T1596",
  "domain": "enterprise",
  "created": "2020-10-02T16:56:05.810Z",
  "modified": "2025-10-24T17:48:48.734Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [
    "reconnaissance"
  ],
  "source_references": [
    {
      "source_name": "Circl Passive DNS",
      "url": "https://www.circl.lu/services/passive-dns/"
    },
    {
      "source_name": "DNS Dumpster",
      "url": "https://dnsdumpster.com/"
    },
    {
      "source_name": "Medium SSL Cert",
      "url": "https://medium.com/@menakajain/export-download-ssl-certificate-from-server-site-url-bcfc41ea46a2"
    },
    {
      "source_name": "WHOIS",
      "url": "https://who.is/"
    },
    {
      "source_name": "Shodan",
      "url": "https://shodan.io"
    },
    {
      "source_name": "SSLShopper Lookup",
      "url": "https://www.sslshopper.com/ssl-checker.html"
    },
    {
      "source_name": "DigitalShadows CDN",
      "url": "https://www.digitalshadows.com/blog-and-research/content-delivery-networks-cdns-can-leave-you-exposed-how-you-might-be-affected-and-what-you-can-do-about-it/"
    }
  ]
}

Explicit source assertions (8)

First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.