DNS侦查工具

NS简介
访问某网站的时候,我们只需要打开浏览器输入例如:www.baidu.com就可以解析到该网站.为了便于记住不需要输入长长的IP地址去访问,这时DNS把相对应的域名解析成IP地址,这就是DNS域名解析.
关于域名
域名的层次划分用点来分割,最低在左边,高的在右边.例如:www.baidu.com.域名服务是基于UDP实现端口号为53.子域名还划分国家,地区,组织.

DNS侦查工具

文章插图
 
域名还需要由遍及世界的域名服务器去解析,也进行划分高低层次,由高到低:根域名服务器,顶级域名服务器,权限域名服务器,本地域名服务器.实际上DNS系统是一种分布式地址信息数据库系统.
查询过程:主机先向本地域名服务器进行递归查询->本地域名服务器迭代查询,向根域名服务器查询->根域名服务器告诉本地域名服务器,下次该查询的顶级域名服务器dns.com的IP地址->本地域名服务器向顶级域名服务器dns.com进行查询->顶级域名服务器com告诉本地域名服务器,下一步查询权限服务器dns.baidu.com的IP地址->本地域名服务器向权限服务器dns.baidu.com进行查询->权限服务器dns.baidu.com告诉本地域名服务器所查询的主机的IP地址->本地域名服务器最后把查询结果告诉主机.
DNS侦查
DNS侦查关心的是:识别谁拥有一个特定域或一系列IP地址,定义实际域名的DNS信息和标识目标的IP地址以及目标之间的路由.
whois查询
whois是识别分配给网站的地址,相关信息数据包括注册用户的域名或IP地址等等.
 
root@zhaji:~# whois baidu.com
Domain Name: BAIDU.COM
Registry Domain ID: 11181110_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.markmonitor.com
Registrar URL: http://www.markmonitor.com
Updated Date: 2017-07-28T02:36:28Z
Creation Date: 1999-10-11T11:05:17Z
Registry Expiry Date: 2026-10-11T11:05:17Z
Registrar: MarkMonitor Inc.
Registrar IANA ID: 292
Registrar Abuse Contact Email: abusecomplaints@markmonitor.com
Registrar Abuse Contact Phone: +1.2083895740
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited
Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited
Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited
Name Server: DNS.BAIDU.COM
Name Server: NS2.BAIDU.COM
Name Server: NS3.BAIDU.COM
Name Server: NS4.BAIDU.COM
Name Server: NS7.BAIDU.COM
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-10-16T09:18:57Z <<<
 
For more information on Whois status codes, please visit https://icann.org/epp
 
NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.
 
TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that Apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to


推荐阅读