dissabte, 12 de maig del 2012

descubriment d'objectius

Deepmagic information gathering tool, dmitry

Aporta informació de whois, dades de netcraft (netcrat.com), cerca subdominis i escaneja ports de l’objectiu

 Executar sense analitzar ports
>./dmitry –iwnse xtec.cat

Afegint l’opció –p podem escanegem els ports.

 http://packetstormsecurity.org/files/46342/DMitry-1.3a.tar.gz.html
Trobable a la backtrack i packetstormsecurity.org/UNIX/misc/DMitry-1.2a.tar.gz

./dmitry -iwnspb xtec.cat
Deepmagic Information Gathering Tool
"There be some deep magic going on"

HostIP:213.176.163.147
HostName:xtec.cat

Gathered Inet-whois information for 213.176.163.147
---------------------------------


inetnum:         213.176.160.0 - 213.176.175.255
netname:         XTEC
descr:           Xarxa Telematica Educativa de Catalunya
country:         ES
admin-c:         EC9516-RIPE
tech-c:          MG13134-RIPE
status:          ASSIGNED PA
mnt-by:          XTEC-MNT
source:          RIPE # Filtered

person:         Eduard Cercos
address:        Via Augusta 202, 1C
phone:          +34 934006900
fax-no:         +34 932002921
nic-hdl:        EC9516-RIPE
source:         RIPE # Filtered
mnt-by:         XTEC-MNT

person:         Marc Guri
address:        Via Augusta, 202 1-C
phone:          +34 934006900
fax-no:         +34 932002921
nic-hdl:        MG13134-RIPE
source:         RIPE # Filtered
mnt-by:         XTEC-MNT

% Information related to '213.176.160.0/19AS21193'

route:        213.176.160.0/19
descr:        Network for all schools of Catalonia
origin:       AS21193
mnt-by:       XTEC-MNT
source:       RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.8.13 (WHOIS1)

Gathered Inic-whois information for xtec.cat
---------------------------------
Domain Name: xtec.cat
Domain Name ACE: xtec.cat
Domain Language: ca
Registrar ID: R-2001 (Nominalia)
Created On: 2006-02-14 08:38:34 GMT
Last Updated On: 2011-09-16 07:50:25 GMT
Expiration Date: 2014-02-14 08:38:34 GMT
Status: ok
Registrant ID: AKMBBC2552-EURO
Registrant Name: Generalitat De Catalunya Departament D'Ensenyament
Registrant Organization: Generalitat De Catalunya Departament D'Ensenyament
Registrant Street: Via Augusta, 202-226
Registrant City: Barcelona
Registrant State/Province: B
Registrant Postal Code: 08021
Registrant Country: ES
Registrant Phone: +34.935516900
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: null
Admin ID: NOM_10118901
Admin Name: Orgue' i Bella Jordi
Admin Organization: Generalitat de Catalunya Departament de la Presidencia (2)
Admin Street: Via augusta, 202-226
Admin City: Barcelona
Admin State/Province: B
Admin Postal Code: 08021
Admin Country: ES
Admin Phone: +34.935516900
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: jordi.orgue@gencat.cat
Tech ID: NIC_CAT_TECH
Tech Name: Technical Department
Tech Organization: Nominalia Internet, S.L.
Tech Street: Josep Pla 2, Torres Diagonal Litoral, Edificio B3, planta 3-D
Tech City: Barcelona
Tech State/Province: Barcelona
Tech Postal Code: 08019
Tech Country: ES
Tech Phone: +34.935074360
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: tecnico@nominalia.com
Billing ID: NOM_4320802
Billing Name: Jordi Baldrich Rosello
Billing Organization: Departament Educacio Sgti
Billing Street: via augusta 202
Billing City: Barcelona
Billing State/Province: BARCELONA
Billing Postal Code: 08021
Billing Country: ES
Billing Phone: +34.934006900
Billing Phone Ext:
Billing Fax: +34.932002921
Billing Fax Ext:
Billing Email: jfgras@xtec.cat
Name Server: sn2.xtec.cat 85.192.64.252
Name Server ACE: sn2.xtec.cat 85.192.64.252
Name Server: sn1.xtec.cat 85.192.64.244
Name Server ACE: sn1.xtec.cat 85.192.64.244


Gathered Netcraft information for xtec.cat
---------------------------------

Retrieving Netcraft.com information for xtec.cat
    -      No. Samples
Netcraft.com Information gathered

Gathered Subdomain information for xtec.cat
---------------------------------
Searching Google.com:80...
HostName:proxy.xtec.cat
HostIP:213.176.161.211
HostName:lava2.xtec.cat
HostIP:213.176.161.212
HostName:www.xtec.cat
HostIP:213.176.163.147
HostName:clic.xtec.cat
HostIP:213.176.163.220
HostName:blocs.xtec.cat
HostIP:213.176.163.218
HostName:evifa.xtec.cat
HostIP:213.176.191.82
HostName:phobos.xtec.cat
HostIP:213.176.163.151
HostName:aplitic.xtec.cat
HostIP:213.176.163.141
HostName:webquest.xtec.cat
HostIP:213.176.191.81
HostName:agora-eoi.xtec.cat
HostIP:213.176.163.217
HostName:linkat.xtec.cat
HostIP:213.176.163.218
HostName:apliedu.xtec.cat
HostIP:213.176.163.218
HostName:ioc.xtec.cat
HostIP:213.176.163.218
Searching Altavista.com:80...
Found 13 possible subdomain(s) for host xtec.cat, Searched 0 pages containing 0 results