Whois: Difference between revisions

From HackOps
Jump to navigation Jump to search
← Older edit
VisualWikitext
No edit summary
No edit summary
 
Line 12: Line 12:
! Option !! Description
! Option !! Description
|-
|-
| [[#ex-domain|<code>[DOMAIN]</code>]] || Lookup WHOIS data for a domain name (e.g. <code>example.com</code>)
| [[#ex-domain|<code>[DOMAIN]</code>]] || Lookup WHOIS data for a domain name
|-
|-
| [[#ex-ip|<code>[IP]</code>]] || Retrieve WHOIS info for an IPv4/IPv6 address (e.g. <code>8.8.8.8</code>)
| [[#ex-ip|<code>[IP]</code>]] || Retrieve WHOIS information for an IPv4/IPv6 address
|-
|-
| [[#ex-asn|<code>[ASN]</code>]] || Query information for an Autonomous System Number (e.g. <code>AS13335</code>)
| [[#ex-asn|<code>[ASN]</code>]] || Query registration data for an Autonomous System Number
|}
|}


Line 23: Line 23:
! Option !! Description
! Option !! Description
|-
|-
| [[#ex-customserver|<code>-h&nbsp;[HOST]</code>]] || Use a specific WHOIS server (e.g. <code>whois.arin.net</code>)
| [[#ex-customserver|<code>-h&nbsp;[HOST]</code>]] || Use a specific WHOIS server
|-
|-
| <code>-p&nbsp;[PORT]</code> || Connect to a custom port on the WHOIS server
| <code>-p&nbsp;[PORT]</code> || Connect to a custom port on the WHOIS server
Line 34: Line 34:
! Option !! Description
! Option !! Description
|-
|-
| [[#ex-nowarnings|<code>-B</code>]] || Suppress legal disclaimers (Debian/Ubuntu variant)
| [[#ex-nowarnings|<code>-B</code>]] || Suppress legal disclaimers
|-
|-
| <code>--verbose</code> || Print additional debugging and parsing information
| <code>--verbose</code> || Print additional debugging and parsing information
|-
|-
| <code>--raw</code> || Output the unprocessed server response exactly as received
| <code>--raw</code> || Output the unprocessed server response
|}
|}


Line 47: Line 47:
whois example.com
whois example.com
</syntaxhighlight>
</syntaxhighlight>
<code># Shows registrar, contact info, creation/expiry dates, etc.</code>


=== <span id="ex-ip"></span>IP Address Lookup ===
=== <span id="ex-ip"></span>IP Address Lookup ===
Line 53: Line 52:
whois 1.1.1.1
whois 1.1.1.1
</syntaxhighlight>
</syntaxhighlight>
<code># Displays the allocation owner (e.g. Cloudflare), network range, and ASN</code>


=== <span id="ex-asn"></span>Autonomous System Lookup ===
=== <span id="ex-asn"></span>Autonomous System Lookup ===
Line 59: Line 57:
whois AS13335
whois AS13335
</syntaxhighlight>
</syntaxhighlight>
<code># Shows info about the AS number, typically held by an ISP or CDN</code>


=== <span id="ex-customserver"></span>Query Specific WHOIS Server ===
=== <span id="ex-customserver"></span>Query Specific WHOIS Server ===
Line 65: Line 62:
whois -h whois.arin.net 8.8.8.8
whois -h whois.arin.net 8.8.8.8
</syntaxhighlight>
</syntaxhighlight>
<code># Sends the query directly to ARIN for North American IP information</code>


=== <span id="ex-nowarnings"></span>Suppress Legal Info ===
=== <span id="ex-nowarnings"></span>Suppress Legal Info ===
Line 71: Line 67:
whois -B example.com
whois -B example.com
</syntaxhighlight>
</syntaxhighlight>
<code># Removes long legal disclaimers from the output (where supported)</code>


=== <span id="ex-recursion"></span>Disable Referral Recursion ===
=== <span id="ex-recursion"></span>Disable Referral Recursion ===
Line 77: Line 72:
whois --no-recursion example.com
whois --no-recursion example.com
</syntaxhighlight>
</syntaxhighlight>
<code># Prevents follow‑up lookups to secondary registrar servers</code>


== See Also ==
== See Also ==

Latest revision as of 18:13, 13 May 2025

Whois

Whois is a passive reconnaissance tool used to gather public registration data about domain names, IP addresses, and ASNs. It queries public WHOIS databases to retrieve ownership, administrative contacts, creation/expiry dates, and registrar details — all without touching the target server directly.

Whois is essential in early recon phases for identifying ownership chains, domain infrastructure, and legal responsibility.

Common Options

Query Types

Option Description
[DOMAIN] Lookup WHOIS data for a domain name
[IP] Retrieve WHOIS information for an IPv4/IPv6 address
[ASN] Query registration data for an Autonomous System Number

Server & Control

Option Description
-h [HOST] Use a specific WHOIS server
-p [PORT] Connect to a custom port on the WHOIS server
--no-recursion Disable automatic follow‑up queries to referral servers

Output Handling

Option Description
-B Suppress legal disclaimers
--verbose Print additional debugging and parsing information
--raw Output the unprocessed server response

Examples

Basic Domain Lookup

whois example.com

IP Address Lookup

whois 1.1.1.1

Autonomous System Lookup

whois AS13335

Query Specific WHOIS Server

whois -h whois.arin.net 8.8.8.8

Suppress Legal Info

whois -B example.com

Disable Referral Recursion

whois --no-recursion example.com

See Also

Retrieved from "https://hackops.wiki/index.php?title=Whois&oldid=58"