Exploring Domain Information Leakage

Even after implementing careful security controls, some information remains difficult or impossible to hide. A public organization that wants to attract customers must walk a fine line because some information by necessity will have to be made public, whereas other information can be kept private. An example of information that should be kept private by any company is domain information, or the information that is associated with the registration of an Internet domain. Currently, many tools are available that can be used to obtain lots of basic information, including the following:

  • Whois can provide information about registered users or their assigned agents, domains, IP addresses, or systems.

  • Nslookup ...

Get Ethical Hacking: Techniques, Tools, and Countermeasures, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.