How it works...
In this recipe, we used multiple tools to gather different pieces of information about our target. We started running whois, this Linux command queries the domain registration details, and with it we can obtain the addresses of nameservers and owner details such as company, email address, phone number, and others. whois can also query information about IP addresses, showing information about the company owning the network segment the address belongs to. Next, we used dig to get information about the domain servers and then to perform a zone transfer and obtain the complete list of hosts resolved by the queried server; this works only on servers that are not correctly configured.
By using theharvester, we obtained email addresses, ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access