Linux Commands

Recon

whois

$ whois [-h whois_server] name

nslookup

$ nslookup <target>

dig

• Types of record: NS, A, HINFO, MX, TXT, CNAME, SOA, RP, PTR, SRV

$ dig [@server] >name< [type]

• Zone transfer

$ dig [@server] >domain< -t AXFR

* Iterative zone transfer
<pre>$ dig [@server] >domain< -t IXFR=>N<

BiLE.pl

$ ./BiLE >target< >result_file<
$ ./BiLE-weigh.pl >site_of_interest< >BiLE_output.mine<
$ ./tld-expand.pl
$ ./vet-IPrange.pl
$ ./qtrace.pl