Whois: Difference between revisions

From HackOps
Jump to navigation Jump to search
Created page with "= Whois = '''Whois''' is a passive reconnaissance tool used to gather public registration data about domain names, IP addresses, and ASNs. It queries public WHOIS databases to retrieve ownership, administrative contacts, creation/expiry dates, and registrar details — all without touching the target server directly. Whois is essential in early recon phases for identifying ownership chains, domain infrastructure, and legal responsibility. == <span id="options"></span>..."
 
No edit summary
Line 8: Line 8:
== <span id="options"></span>Common Options ==
== <span id="options"></span>Common Options ==


=== Query Control ===
=== Query Types ===
{| class="wikitable"
{| class="wikitable"
! Option !! Description
! Option !! Description
<code>-h [HOST]</code>
[[#ex-domain
-
-
<code>-p [PORT]</code>
[[#ex-ip
-
-
<code>--verbose</code>
[[#ex-asn
}
}


=== Input Types ===
=== Server & Control ===
{| class="wikitable"
{| class="wikitable"
! Option !! Description
! Option !! Description
<code>[DOMAIN]</code>
[[#ex-customserver
-
-
<code>[IP]</code>
<code>-p [PORT]</code>
-
-
<code>[ASN]</code>
[[#ex-recursion
}
}


=== Output Control ===
=== Output Handling ===
{| class="wikitable"
{| class="wikitable"
! Option !! Description
! Option !! Description
<code>-B</code>
[[#ex-nowarnings
-
<code>--verbose</code>
-
-
<code>--raw</code>
<code>--raw</code>
-
<code>--no-recursion</code>
}
}



Revision as of 18:01, 13 May 2025

Whois

Whois is a passive reconnaissance tool used to gather public registration data about domain names, IP addresses, and ASNs. It queries public WHOIS databases to retrieve ownership, administrative contacts, creation/expiry dates, and registrar details — all without touching the target server directly.

Whois is essential in early recon phases for identifying ownership chains, domain infrastructure, and legal responsibility.

Common Options

Query Types

Option Description

[[#ex-domain - [[#ex-ip - [[#ex-asn }

Server & Control

Option Description

[[#ex-customserver - -p [PORT] - [[#ex-recursion }

Output Handling

Option Description

[[#ex-nowarnings - --verbose - --raw }

Examples

Basic Domain Lookup

whois example.com

# Shows registrar, contact info, creation/expiry dates, etc.

IP Address Lookup

whois 1.1.1.1

# Shows IP range owner (e.g. Cloudflare), ASN, and network details

Autonomous System Lookup

whois AS13335

# Displays info about the AS number, usually held by ISPs or CDNs

Query Specific WHOIS Server

whois -h whois.arin.net 8.8.8.8

# Directs the query to ARIN for North American IP info

Suppress Legal Info

whois -B example.com

# Suppresses legal disclaimers in output (Debian variant)

Disable Referral Recursion

whois --no-recursion example.com

# Prevents follow-up lookups to second-level registrars

See Also

   dig
   nslookup
   theHarvester
   recon-ng
   Nmap