mirror of
https://github.com/HackTricks-wiki/hacktricks.git
synced 2025-10-10 18:36:50 +00:00
52 lines
2.1 KiB
Markdown
52 lines
2.1 KiB
Markdown
# 43 - Pentesting WHOIS
|
|
|
|
{{#include ../banners/hacktricks-training.md}}
|
|
|
|
## Basic Information
|
|
|
|
Protokali ya **WHOIS** inatumika kama njia ya kawaida ya **kuuliza kuhusu wamiliki au wenyeji wa rasilimali mbalimbali za Mtandao** kupitia hifadhidata maalum. Rasilimali hizi zinajumuisha majina ya domain, vizuizi vya anwani za IP, na mifumo huru, miongoni mwa mengine. Zaidi ya haya, protokali hii inatumika katika kupata habari pana zaidi.
|
|
|
|
**Default port:** 43
|
|
```
|
|
PORT STATE SERVICE
|
|
43/tcp open whois?
|
|
```
|
|
## Enumerate
|
|
|
|
Pata taarifa zote ambazo huduma ya whois ina kuhusu kikoa:
|
|
```bash
|
|
whois -h <HOST> -p <PORT> "domain.tld"
|
|
echo "domain.ltd" | nc -vn <HOST> <PORT>
|
|
```
|
|
Kumbuka kwamba wakati mwingine unapofanya ombi la taarifa kwa huduma ya WHOIS, hifadhidata inayotumika inaonekana katika jibu:
|
|
|
|
.png>)
|
|
|
|
Pia, huduma ya WHOIS kila wakati inahitaji kutumia **hifadhidata** kuhifadhi na kutoa taarifa. Hivyo, **SQLInjection** inaweza kuwepo wakati wa **kuuliza** hifadhidata kutoka kwa taarifa zinazotolewa na mtumiaji. Kwa mfano, ukifanya: `whois -h 10.10.10.155 -p 43 "a') or 1=1#"` unaweza kuwa na uwezo wa **kutoa** **taarifa** zote zilizohifadhiwa katika hifadhidata.
|
|
|
|
## Shodan
|
|
|
|
- `port:43 whois`
|
|
|
|
## HackTricks Automatic Commands
|
|
```
|
|
Protocol_Name: WHOIS #Protocol Abbreviation if there is one.
|
|
Port_Number: 43 #Comma separated if there is more than one.
|
|
Protocol_Description: WHOIS #Protocol Abbreviation Spelled out
|
|
|
|
Entry_1:
|
|
Name: Notes
|
|
Description: Notes for WHOIS
|
|
Note: |
|
|
The WHOIS protocol serves as a standard method for inquiring about the registrants or holders of various Internet resources through specific databases. These resources encompass domain names, blocks of IP addresses, and autonomous systems, among others. Beyond these, the protocol finds application in accessing a broader spectrum of information.
|
|
|
|
|
|
https://book.hacktricks.wiki/en/network-services-pentesting/pentesting-smtp/index.html
|
|
|
|
Entry_2:
|
|
Name: Banner Grab
|
|
Description: Grab WHOIS Banner
|
|
Command: whois -h {IP} -p 43 {Domain_Name} && echo {Domain_Name} | nc -vn {IP} 43
|
|
```
|
|
{{#include ../banners/hacktricks-training.md}}
|