Kali滲透(一)----資訊收集之網域名稱(WHOIS)

一、資訊收集分類

資訊收集的方法可歸為兩類:

1.主動式收集:主動式收集是通過直接發起與被測目標網路之間的互動來擷取相關資訊,例如,ICMP ping或者TCP連接埠掃描。

2.被動式收集:被動式收集則是通過第三方服務來擷取目標網路的相關資訊,例如使用Google搜尋引擎等。

二、網域名稱資訊收集 

whios是個標準的互連網協議,可用於收集網路註冊,註冊網域名稱,IP地址和自治系統的資訊,whios資料庫記錄有該網域名稱的DNS伺服器資訊和註冊人的聯絡資訊。

三、樣本

預設安裝的kali中帶有whois的用戶端,如需查詢某一網域名稱的whois資訊,可在終端中使用下述whois命令：

root@kali:~# whois baidu.comWhois Server Version 2.0Domain names in the .com and .net domains can now be registeredwith many different competing registrars. Go to http://www.internic.netfor detailed information.   Domain Name: BAIDU.COM   Registrar: MARKMONITOR INC.   Sponsoring Registrar IANA ID: 292   Whois Server: whois.markmonitor.com   Referral URL: http://www.markmonitor.com   Name Server: DNS.BAIDU.COM   Name Server: NS2.BAIDU.COM   Name Server: NS3.BAIDU.COM   Name Server: NS4.BAIDU.COM   Name Server: NS7.BAIDU.COM   Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited   Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited   Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited   Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited   Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited   Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited   Updated Date: 10-sep-2015   Creation Date: 11-oct-1999   Expiration Date: 11-oct-2017>>> Last update of whois database: Wed, 05 Apr 2017 02:56:21 GMT <<<For more information on Whois status codes, please visit https://icann.org/eppNOTICE: The expiration date displayed in this record is the date theregistrar's sponsorship of the domain name registration in the registry iscurrently set to expire. This date does not necessarily reflect the expirationdate of the domain name registrant's agreement with the sponsoringregistrar.  Users may consult the sponsoring registrar's Whois database toview the registrar's reported date of expiration for this registration.TERMS OF USE: You are not authorized to access or query our Whoisdatabase through the use of electronic processes that are high-volume andautomated except as reasonably necessary to register domain names ormodify existing registrations; the Data in VeriSign Global RegistryServices' ("VeriSign") Whois database is provided by VeriSign forinformation purposes only, and to assist persons in obtaining informationabout or related to a domain name registration record. VeriSign does notguarantee its accuracy. By submitting a Whois query, you agree to abideby the following terms of use: You agree that you may use this Data onlyfor lawful purposes and that under no circumstances will you use this Datato: (1) allow, enable, or otherwise support the transmission of massunsolicited, commercial advertising or solicitations via e-mail, telephone,or facsimile; or (2) enable high volume, automated, electronic processesthat apply to VeriSign (or its computer systems). The compilation,repackaging, dissemination or other use of this Data is expresslyprohibited without the prior written consent of VeriSign. You agree not touse electronic processes that are automated and high-volume to access orquery the Whois database except as reasonably necessary to registerdomain names or modify existing registrations. VeriSign reserves the rightto restrict your access to the Whois database in its sole discretion to ensureoperational stability.  VeriSign may restrict or terminate your access to theWhois database for failure to abide by these terms of use. VeriSignreserves the right to modify these terms at any time.The Registry database contains ONLY .COM, .NET, .EDU domains andRegistrars.Domain Name: baidu.comRegistry Domain ID: 11181110_DOMAIN_COM-VRSNRegistrar WHOIS Server: whois.markmonitor.comRegistrar URL: http://www.markmonitor.comUpdated Date: 2017-02-13T01:04:21-0800Creation Date: 1999-10-11T04:05:17-0700Registrar Registration Expiration Date: 2017-10-11T00:00:00-0700Registrar: MarkMonitor, Inc.Registrar IANA ID: 292Registrar Abuse Contact Email: abusecomplaints@markmonitor.comRegistrar Abuse Contact Phone: +1.2083895740Domain Status: clientUpdateProhibited (https://www.icann.org/epp#clientUpdateProhibited)Domain Status: clientTransferProhibited (https://www.icann.org/epp#clientTransferProhibited)Domain Status: clientDeleteProhibited (https://www.icann.org/epp#clientDeleteProhibited)Domain Status: serverUpdateProhibited (https://www.icann.org/epp#serverUpdateProhibited)Domain Status: serverTransferProhibited (https://www.icann.org/epp#serverTransferProhibited)Domain Status: serverDeleteProhibited (https://www.icann.org/epp#serverDeleteProhibited)Registry Registrant ID: Registrant Name: Domain AdminRegistrant Organization: Beijing Baidu Netcom Science Technology Co., Ltd.Registrant Street: 3F Baidu Campus No.10, Shangdi 10th Street Haidian DistrictRegistrant City: BeijingRegistrant State/Province: BeijingRegistrant Postal Code: 100085Registrant Country: CNRegistrant Phone: +86.1059928888Registrant Phone Ext: Registrant Fax: +86.1059928888Registrant Fax Ext: Registrant Email: domainmaster@baidu.comRegistry Admin ID: Admin Name: Domain AdminAdmin Organization: Beijing Baidu Netcom Science Technology Co., Ltd.Admin Street: 3F Baidu Campus No.10, Shangdi 10th Street Haidian DistrictAdmin City: BeijingAdmin State/Province: BeijingAdmin Postal Code: 100085Admin Country: CNAdmin Phone: +86.1059928888Admin Phone Ext: Admin Fax: +86.1059928888Admin Fax Ext: Admin Email: domainmaster@baidu.comRegistry Tech ID: Tech Name: Domain AdminTech Organization: Beijing Baidu Netcom Science Technology Co., Ltd.Tech Street: 3F Baidu Campus No.10, Shangdi 10th Street Haidian DistrictTech City: BeijingTech State/Province: BeijingTech Postal Code: 100085Tech Country: CNTech Phone: +86.1059928888Tech Phone Ext: Tech Fax: +86.1059928888Tech Fax Ext: Tech Email: domainmaster@baidu.comName Server: ns4.baidu.comName Server: ns3.baidu.comName Server: dns.baidu.comName Server: ns7.baidu.comName Server: ns2.baidu.comDNSSEC: unsignedURL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/>>> Last update of WHOIS database: 2017-04-04T19:54:32-0700 <<<The Data in MarkMonitor.com's WHOIS database is provided by MarkMonitor.com forinformation purposes, and to assist persons in obtaining information about orrelated to a domain name registration record.  MarkMonitor.com does not guaranteeits accuracy.  By submitting a WHOIS query, you agree that you will use this Dataonly for lawful purposes and that, under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited,     commercial advertising or solicitations via e-mail (spam); or (2) enable high volume, automated, electronic processes that apply to     MarkMonitor.com (or its systems).MarkMonitor.com reserves the right to modify these terms at any time.By submitting this query, you agree to abide by this policy.MarkMonitor is the Global Leader in Online Brand Protection.MarkMonitor Domain Management(TM)MarkMonitor Brand Protection(TM)MarkMonitor AntiPiracy(TM)MarkMonitor AntiFraud(TM)Professional and Managed ServicesVisit MarkMonitor at http://www.markmonitor.comContact us at +1.8007459229In Europe, at +44.02032062220For more information on Whois status codes, please visit https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en--

可以從這返回的結果中擷取DNS伺服器的資訊以及網域名稱的註冊人的連絡方式,這些資訊會在滲透測試的後續階段發揮作用,當然也可以通過一些線上的工具進行查詢:

站長之家: http://whois.chinaz.com/

全球WHOIS查詢:https://www.whois365.com/cn/

愛站:http://www.aizhan.com/

阿里雲:https://whois.aliyun.com/whois/domain/