July 21, 2025

Platform MCP Server for AI agents, Platform web service screenshots, and more enhancements.

Platform

• Use the Platform Model Context Protocol (MCP) Server to give your AI agents and workflows secure, governed, and direct access to the entire Censys Internet Map and Platform APIs, empowering you to hunt, triage, and respond at machine speed.
• Visually investigate exposed assets on the Censys Platform with recurring and on-demand web service screenshots.
• Added HTML titles (host.services.endpoints.http.html_title and web.endpoints.http.html_title) to the default pivot fields for CensEye to quickly discover related infrastructure.
• Use the filter_by_query parameter on Platform API aggregate endpoints to limit aggregation results to those that match your query. This functionality is equivalent to the filter checkbox in the Report Builder UI.

Rapid Response

The Censys Rapid Response team published information about and queries for the following issues.

• ToolShell Exploit Enables Unauthenticated SharePoint RCE [CVE-2025-53770]
  • Use the following queries to find SharePoint servers. Not all of these are necessarily vulnerable.
    • Platform query
    • Legacy Search query
    • ASM query
• Pre-Auth SQL Injection Leads to RCE in Fortinet FortiWeb [CVE-2025-25257]
  • Use the following queries to find FortiWeb devices. Not all of these are necessarily vulnerable.
    • Platform query
    • Legacy Search query
    • ASM query