Going for technical data
When gathering information during the reconnaissance process, you also want to try to acquire as much technical data as is possible and reasonable to collect. Fortunately, there are a lot of methods today to help us gather information; many are right at your fingertips, built into your favorite operating system, while others require different methods.
Using WHOIS
WHOIS has been around for quite some time now, but is a very useful utility.
Exercise – getting the most from WHOIS
- At the Kali NetHunter Terminal, type
whois <domainname>
, for example:
whois usatoday.com
The output will show you all the publicly-accessible information about the registration of the domain name, such as the person who did the registration, contact details for the company, the company's address, and the domain creation, renewal, and expiration date:
Results of WHOIS for verisign
Domain registrars usually provide an option for privacy to their customers. This would restrict a purchaser's information...