|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|||
|
|
X |
|
|
|
|
|
|||
|
- |
|
|
|
|
|
d |
|
||
|
F |
|
|
|
|
|
|
t |
|
|
|
D |
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
|
r |
||
P |
|
|
|
|
|
NOW! |
o |
|||
|
|
|
|
|
|
|
||||
|
|
|
|
|
BUY |
|
|
|||
|
|
|
|
to |
|
|
|
|
|
|
w Click |
|
|
|
|
|
m |
||||
|
|
|
|
|
|
|||||
w |
|
|
|
|
|
|
|
|
|
|
|
w |
|
|
|
|
|
|
|
o |
|
|
. |
|
|
|
|
|
.c |
|
||
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
df |
|
|
n |
e |
|
||
|
|
|
|
-xcha |
|
|
|
|
||
|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|||
|
|
X |
|
|
|
|
|
|||
|
- |
|
|
|
|
|
d |
|
||
|
F |
|
|
|
|
|
|
t |
|
|
|
D |
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
|
r |
||
P |
|
|
|
|
|
NOW! |
o |
|||
|
|
|
|
|
|
|
||||
|
|
|
|
|
BUY |
|
|
|||
|
|
|
|
to |
|
|
|
|
|
|
w Click |
|
|
|
|
|
m |
||||
|
|
|
|
|
|
|||||
w |
|
|
|
|
|
|
|
|
|
|
|
w |
|
|
|
|
|
|
|
o |
|
|
. |
|
|
|
|
|
.c |
|
||
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
df |
|
|
n |
e |
|
||
|
|
|
|
-x cha |
|
|
|
|
||
6.3. Команда host
host
host exarnple.corn
exarnple.corn has address 93.184.216.34
exarnple.corn has IPvб address 2606:2800:220:1:248:1893:25с8:1946 exarnple.corn rnail is handled Ьу О
host -а example.com Trying "example.com" Trying "example.com"
,,->>HEADER<<- opcode: QUERY, status: NOERROR, id: 12056
,,flags: qr rd ra; QUERY: 1, ANSWER: 9, AUTHORITY: О, ADDITIONAL: О
,,QUESTION SECTION:
;example.com. |
|
IN |
ANY |
|
;; ANSWER SECTION: |
|
|
|
|
example.com. |
86331 |
IN |
А |
93.184.216.34 |
example.com. |
86331 |
IN |
RRSIG |
А 8 2 86400 |
20220310025721 20220217095840 |
1618 |
example.com. Dc91yHLOiR3oRE/9tcd |
||
+nzh8teUU9TSqQmejF6GYcljTtxXcq88zxpH8 GvaYgOFfEYOzmzmxt9ck83HAtCO/ |
||||
Ic+b0boR4IL351ilVp3pTxQgfLBM wQCxrTRPEs2+GOrvdvjGUWNjkPLzEineOWet0Wu9I |
||||
TJq+cNdNtDQR5vS OvQ= |
|
|
|
|
example.com. |
86332 |
IN |
АААА |
2606:2800:220:1:248:1 |
893:25с8:1946 |
|
|
|
|
example.com. |
86332 |
IN |
RRSIG |
АААА 8 2 86400 |
20220309052808 20220216115840 1618 |
example.com. JlODulmkXKTi5EvxUJDcVh |
|||
2pDZY8CovFWykPS9HhjbicMQJyCs gkHeR |
WVzndGU9nTYKiBGRJY2cMPzV5S4Lxh3Aoj |
|||
M42xsuTOkQh7dDWOgfuZEe aLbSsZgLA1Xy2WnrxH1Hv965cOMDcylqXHi7WEgBhiFTBM |
||||
P6w6R5vgKx p5w= |
|
|
|
|
•example.com. |
86332 |
IN |
мх |
о • |
······························································-·················-·-ID
|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
|
|
|
hang |
e |
|
|
|
|
|
||
|
|
|
C |
|
E |
|
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|
|||||
|
|
X |
|
|
|
|
|
|
|
|
|
|
|
X |
|
|
|
|
|
|
|||||
|
- |
|
|
|
|
d |
|
|
|
|
|
|
- |
|
|
|
|
|
d |
|
|||||
|
F |
|
|
|
|
|
t |
|
|
|
|
|
|
F |
|
|
|
|
|
|
|
t |
|
||
|
D |
|
|
|
|
|
|
i |
|
|
|
|
|
|
D |
|
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
r |
|
|
|
|
|
|
|
|
|
|
|
|
|
r |
||||
P |
|
|
|
|
|
NOW! |
o |
|
|
|
|
P |
|
|
|
|
|
NOW! |
o |
||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||||||||
|
|
|
|
|
BUY |
|
|
|
|
|
|
|
|
|
|
|
BUY |
|
|
||||||
|
|
|
|
to |
|
|
|
|
|
|
|
|
|
|
|
|
to |
|
|
|
|
|
|
||
w Click |
|
|
|
|
|
|
|
|
|
w Click |
|
|
|
|
|
|
|
||||||||
|
|
|
example.com. |
86332 |
IN |
RRSIG |
МХ 8 2 86400 |
|
|
|
|
|
|
|
m |
||||||||||
|
|
|
|
|
m |
|
|
|
|
|
|
|
|
|
|
|
|||||||||
w |
|
|
|
|
|
|
|
|
|
|
|
|
w |
|
|
|
|
|
|
|
|
|
|
||
|
w |
|
df |
|
|
|
|
o |
|
|
|
|
|
|
w |
|
|
|
|
n |
|
|
o |
|
|
|
. |
|
|
n20220310043845 20220216195840 1618 example.com. EFPin9kTDJIDpPfYtmU2xcdf |
|
|
|
.c |
|
||||||||||||||||
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
|
|
-xcha |
e |
|
|
|
|
|
|
|
|
|
-x cha |
|
e |
|
|||||||
|
|
|
|
tOPcZscNaVЬhpH/YPaknrSNnGMHe8iRrXW wJ7vv12Kh8ms3JNKpdyDxJmAW4xH+Z4Df4 |
|
|
|
|
|
|
|||||||||||||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||||||||||
|
|
|
|
|
|
|
EFLIC7iefWwUdLwsmNVdcX dLNVhCnkdAN2rmSZzUka00nj6eultqkIOGqd7h3RDpBsjm |
|
|
|
|
|
|
|
|
|
|||||||||
|
|
|
|
|
|
|
oktUeUsk4m Су8= |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||
|
|
|
|
|
|
|
example.com. |
86331 |
IN |
NS |
a.iana-servers.net. |
|
|
|
|
|
|
|
|
|
|
|
|
||
|
|
|
|
|
|
|
example.com. |
86331 |
IN |
NS |
b.iana-servers.net. |
|
|
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
|
|
example.com. |
86331 |
IN |
RRSIG |
NS 8 2 |
|
|
|
|
|
|
|
|
|
|
|
|
||
|
|
|
|
|
|
|
86400 20220311001759 20220217115840 1618 example.com. |
|
|
|
|
|
|
|
|
|
|
|
|
||||||
|
|
|
|
|
|
|
hcLW6VKTD2x3qQwikNApn781ppG7/zUxjOFVeVO8EagNIZ9SZKnCnEGu tdOcz49Cbt8+a |
|
|
|
|
|
|
|
|
||||||||||
|
|
|
|
|
|
|
fc42qev8AkVw9k97684WLyRiZ2IvcXcjlG2js3Hn9AX Qgl3RXJNudQhaWpD15d87SUXjc |
|
|
|
|
|
|
|
|
||||||||||
|
|
|
|
|
|
|
IlCPnH+MOILfD6QiWiTE8NWiE2StmZ MJc= |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
||||
|
|
|
|
|
|
|
Received 820 bytes from 127.0.0.53#53 in 3 ms |
|
|
|
|
|
|
|
|
|
|
|
|
|
|||||
|
|
|
|
|
|
|
|
|
host, |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
- это |
|
- |
|
|
|
|
|
|
|
|
|
|
|
|
host -а.
•SOAначало записи полномочий
•NS - здесь содержится имя сервера имен
•А- здесь хранится IР-адрес
•МХ - запись обмена почтой (здесь хранится инфа о почтовом сервере для домена)
•PTR - запись указателей
•АААА - запись 1Рv6-адреса
•СNАМЕ - аббревиатура канонического имени
6.4. :Команда dig
Кроме команды host ты можешь использовать команду dig. Ее вывод более лаконичен и понятен, а также она позволяет обработать список доменных•
имен из файла (см. тап dig). Пример вывода команды:
•
.....................................................................................
|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|||
|
|
X |
|
|
|
|
|
|||
|
- |
|
|
|
|
|
d |
|
||
|
F |
|
|
|
|
|
|
t |
|
|
|
D |
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
|
r |
||
P |
|
|
|
|
|
NOW! |
o |
|||
|
|
|
|
|
|
|
||||
|
|
|
|
|
BUY |
|
|
|||
|
|
|
|
to |
|
|
|
|
|
|
w Click |
|
|
|
|
|
m |
||||
|
|
|
|
|
|
|||||
w |
|
|
|
|
|
|
|
|
|
|
|
w |
|
|
|
|
|
|
|
o |
|
|
. |
|
|
|
|
|
.c |
|
||
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
df |
|
|
|
|
e |
|
|
|
|
|
|
|
|
dig example.com |
||||
|
|
|
|
|
n |
|
|
|
||
|
|
|
|
-xcha |
|
|
|
|
||
|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|||
|
|
X |
|
|
|
|
|
|||
|
- |
|
|
|
|
|
d |
|
||
|
F |
|
|
|
|
|
|
t |
|
|
|
D |
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
|
r |
||
P |
|
|
|
|
|
NOW! |
o |
|||
|
|
|
|
|
|
|
||||
|
|
|
|
|
BUY |
|
|
|||
|
|
|
|
to |
|
|
|
|
|
|
w Click |
|
|
|
|
|
m |
||||
|
|
|
|
|
|
|||||
w |
|
|
|
|
|
|
|
|
|
|
|
w |
|
|
|
|
|
|
|
o |
|
|
. |
|
|
|
|
|
.c |
|
||
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
df |
|
|
n |
e |
|
||
|
|
|
|
-x cha |
|
|
|
|
||
;<<>> DiG 9.11.3-lubuntul.16-Ubuntu <<>> example.com
;;global options: +cmd
;;Got answer:
;;->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23027
;;flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: О, ADDITIONAL: 1
;;ОРТ PSEUDOSECTION:
;EDNS: version: О, flags:; udp: 65494
;;QUESTION SECTION:
;example.com. |
|
IN |
А |
|
;; ANSWER SECTION: |
|
|
|
|
example.com. |
6852 |
IN |
А |
93.184.216.34 |
,,Query time: 4 msec
;;SERVER: 127.0.0.53#53(127.О.О.53)
;;WHEN: Mon Feb 28 08:18:42 ЕЕТ 2022
,,MSG SIZE rcvd: 56
6.5.Очень полезный инструмент - Deepmagic Information Gathering Tool (DMitry)
dmitry
• |
111 |
·---------------------------------------------------------------------------------- |
|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|||
|
|
X |
|
|
|
|
|
|||
|
- |
|
|
|
|
|
d |
|
||
|
F |
|
|
|
|
|
|
t |
|
|
|
D |
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
|
r |
||
P |
|
|
|
|
|
NOW! |
o |
|||
|
|
|
|
|
|
|
||||
|
|
|
|
|
BUY |
|
|
|||
|
|
|
|
to |
|
|
|
|
|
|
w Click |
|
|
|
|
|
|
||||
|
|
|
|
|
|
m |
||||
w |
|
|
|
|
|
Пример: |
||||
|
w |
|
|
|
|
|
|
|
o |
|
|
. |
|
|
|
|
|
.c |
|
||
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
df |
|
|
n |
e |
|
||
|
|
|
|
-xcha |
|
|
|
|
||
$ drnitry -iwnse example.com
Deepmagic Information Gathering Tool "There Ье some deep magic going on"
HostIP:93.184.216.34
HostName:example.com
Gathered Inet-whois information for 93.184.216.34
|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|||
|
|
X |
|
|
|
|
|
|||
|
- |
|
|
|
|
|
d |
|
||
|
F |
|
|
|
|
|
|
t |
|
|
|
D |
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
|
r |
||
P |
|
|
|
|
|
NOW! |
o |
|||
|
|
|
|
|
|
|
||||
|
|
|
|
|
BUY |
|
|
|||
|
|
|
|
to |
|
|
|
|
|
|
w Click |
|
|
|
|
|
m |
||||
|
|
|
|
|
|
|||||
w |
|
|
|
|
|
|
|
|
|
|
|
w |
|
|
|
|
|
|
|
o |
|
|
. |
|
|
|
|
|
.c |
|
||
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
df |
|
|
n |
e |
|
||
|
|
|
|
-x cha |
|
|
|
|
||
inetnum: |
93.184.216.0 - 93.184.216.255 |
netname: |
EDGECAST-NETBLK-03 |
descr: |
NETBLK-03-EU-93-184-216-0-24 |
country: |
EU |
adrnin-c: |
0S7892-RIPE |
tech-c: |
DS7892-RIPE |
status: |
ASSIGNED РА |
mnt-by: |
МNT-EDGECAST |
created: |
2012-06-22T21:48:41Z |
last-modified: 2012-06-22T21:48:41Z |
|
source: |
RIPE Jt Filtered |
person: |
Derrick Sawyer |
address: |
13031 W Jefferson Blvd Jt900, Los Angeles, СА 90094 |
phone: |
+18773343236 |
nic-hdl: |
0S7892-RIPE |
created: |
2010-08-25Tl8:44:19Z |
last-modified: 2017-03-03T09:06:18Z |
|
source: |
RIPE |
mnt-by: |
МNT-EDGECAST |
% Тhis query was served Ьу the RIPE DataЬase Query Service version 1.102.2 (WAGYU)
Gathered Inic-whois information for example.com
Domain Name: ЕХАМРLЕ.СОМ |
|
||
Registry Domain ID: 2336799 DOМAIN_COM-VRSN |
|
||
Registrar WHOIS Server: whois.iana.org |
|
||
Registrar URL: http://res-dom.iana.org |
|
||
Updated Date: 2021-08-14T07:01:44Z |
|
||
Creation Date: 1995-08-14T04:00:00Z |
|
||
Registry Expiry Date: 2022-08-13T04:00:00Z |
|
||
Registrar: RESERVED-Internet Assigned NumЬers Authority |
• |
||
Registrar IANA |
ID: 376 |
||
|
|||
Registrar AЬuse Contact Email: |
|
||
ID--------------------------------------------------------------- |
------------------ |
. |
|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
hang |
e |
|
|
|
|
||
|
|
C |
|
E |
|
|
|
|
|
C |
|
E |
|
|
||||||
|
X |
|
|
|
|
|
|
|
X |
|
|
|
|
|
||||||
|
- |
|
|
|
|
|
d |
|
|
- |
|
|
|
|
|
d |
||||
|
F |
|
|
|
|
|
|
|
t |
|
|
F |
|
|
|
|
|
|
|
t |
|
D |
|
|
|
|
|
|
|
i |
|
|
D |
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
r |
|
|
|
|
|
|
|
|
|
r |
||
P |
|
|
|
|
NOW! |
o |
|
P |
|
|
|
|
NOW! |
o |
||||||
|
|
|
|
|
|
|
|
|
|
|
||||||||||
|
|
|
|
BUY |
|
|
|
|
|
|
BUY |
|
||||||||
|
|
|
to |
|
|
|
|
|
Registrar AЬuse Contact Phone: |
|
|
|
to |
|
|
|
|
|
||
|
wClick |
|
|
|
|
|
o m |
|
wClick |
|
|
|
|
|
o m |
|||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|||||||
w |
|
|
|
|
|
|
|
|
|
w |
|
|
|
|
|
|
|
|
||
w |
df-xchan |
|
.c |
Domain Status: clientDeleteProhibited https://jcann.org/ |
w |
df-x chan |
|
.c |
||||||||||||
|
. |
|
|
. |
|
|||||||||||||||
|
|
|
|
|
g |
|
|
|
|
|
|
g |
||||||||
|
p |
|
|
|
|
|
|
|
|
p |
|
|
|
|
|
|
||||
|
|
|
|
|
|
|
e |
|
|
|
|
|
|
|
|
e |
||||
epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/ epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/ epp#clientUpdateProhibited
Name Server: A.IANA-SERVERS.NET
Name Server: B.IANA-SERVERS.NET DNSSEC: signedDelegation
DNSSEC DS Data: 31589 8 1 3490A6806D47Fl7A34C29E2CE80E8A999FFBE4BE DNSSEC DS Data: 31589 8 2 CDE0D742D6998AA554A92D890F8184C698CFAC8A2
6FA59875A990C03E576343C
DNSSEC DS Data: 43547 8 1 B6225AB2C.C613E0DCA7962BDC2342EA4FlB56083 DNSSEC DS Data: 43547 8 2 615A64233543F66F44D68933625Bl7497C89A70E8
58ED76A2145997EDF96A918
DNSSEC DS Data: 31406 8 1 189968811E6EBA862DD6C209F75623D8D9ED9142 DNSSEC DS Data: 31406 8 2 F78CF3344F72137235098ECBBD08947C2C9001C7F
6A085Al7F518B5D8F6B916D
URL of the ICANN Whois Inaccuracy Complaint Form: https://www. icann.org/wicf/
>>> Last update of whois database: 2022-02-28T06:23:03Z <<<
For more information on Whois status codes, please visit https://icann.org/epp
Gathered Subdomain information for example.com
Searching Google.com:80...
HostName:www.example.com
HostIP:93.184.216.34 Searching Altavista.com:80...
Found 1 possiЫe suЬdomain{s) for host example.com, Searched О pages containing О results
Gathered E-Mail information for example.com
Searching Google.com:80...
abc@example.com adres se@example.com someone@example.com example@example.com user@example.com
user@example.example.com
info@example.com
support@example.com
email@example.com
email2@example.com
inf@example.com
xyz@example.com
test@example.com |
|
|
|
Searching Altavista.com:80... |
|
|
|
•ound 13 E-мail{s) for host example.com, |
Searched О |
pages containing О results |
|
........................... -- ... ---- ....... |
- - .... |
······· ...... |
-...................... |
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|
|
|||
|
X |
|
|
|
|
|
|
|
|||
|
- |
|
|
|
|
|
d |
|
|
|
|
|
F |
|
|
|
|
|
|
t |
|
|
|
|
D |
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
|
|
|
r |
|
||
P |
|
|
|
|
NOW! |
o |
|
||||
|
|
|
|
|
|
|
|||||
|
|
|
|
BUY |
|
'\al,11111 11а I illll\ |
|||||
|
|
|
to |
|
|
|
|
|
|
|
|
|
wClick |
|
|
Теперьo |
разберемся, что это мы получили. Параметры -iwnse позволяют: |
||||||
|
|
|
|
||||||||
w |
|
|
|
|
|
|
|
|
m |
|
|
w |
|
|
|
|
|
|
|
|
|
|
|
|
. |
|
|
|
|
|
|
.c |
|
|
|
|
p |
|
|
|
|
g |
|
|
|
||
|
|
df |
|
|
n |
e |
|
|
|
||
|
|
|
-xcha |
|
|
|
|
|
|
||
|
|
|
|
hang |
e |
|
|
|
|
|
|
|
|
C |
|
E |
|
|
|||
|
|
X |
|
|
|
|
|
|||
|
- |
|
|
|
|
|
d |
|
||
|
F |
|
|
|
|
|
|
t |
|
|
|
D |
|
|
|
|
|
|
|
i |
|
|
|
|
|
|
|
|
|
r |
||
P |
|
|
|
|
|
NOW! |
o |
|||
|
|
|
|
|
|
|
||||
|
|
|
|
|
BUY |
|
|
|||
|
|
|
|
to |
|
|
|
|
|
|
w Click |
|
|
|
|
|
m |
||||
|
|
|
|
|
|
|||||
w |
|
|
|
|
|
|
|
|
|
|
|
w |
|
|
|
|
|
|
|
o |
|
|
. |
|
|
|
|
|
.c |
|
||
|
|
p |
|
|
|
|
g |
|
|
|
|
|
|
df |
|
|
n |
e |
|
||
|
|
|
|
-x cha |
|
|
|
|
||
•Выполнить поиск whois
•Получить информацию от netcraft.com
•Выполнить поиск всех возможных поддоменов
•Выполнить поиск всех возможных адресов электронной почты
Обратите внимание на вывод: в отличие от предыдущих команд, данная команда выводит подробную информацию о владельце домена. Также она выполняет поиск всех возможных адресов e-mail, которые когда-либо ука зывались для этого домена в Интернете и были проиндексированы поиско виками. Вывод программы сокращен, поскольку он бы занял еще несколько страниц книги.
При желании можно использовать dmitry для сканирования портов. Пример:
drnitry -р сайт -f -Ь
Вывод:
Deepmagic Information Gathering Tool "There Ье some deep magic going on" HostIP:198.148.81.135 HostName:hackthissite.org
Gathered ТСР Port information for 198.148.81.135
Port State
14/tcp filtered 15/tcp filtered 16/tcp filtered 17/tcp filtered 18/tcp filtered 19/tcp filtered
20/tcp |
filtered |
21/tcp |
filtered |
22/tcp open |
|
....- |
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - -- - - -- - - - - - - - - - - - - - - - - - - - - - - - - - -- - - --- -- - __ , |
>> SSH-2.0-OpenSSH_5.8pl_hpn13v10 FreeBSD-20110102 23/tcp filtered
24/tcp filtered