OSINT Command Line Tools

Question 1

What does … do?

whois

Answer 1

Discover information about a specific domain

Free database for whois responsible for each domains

Question 2

What does … do?

nslookup

Answer 2

Fetch the mappings of IP address for a given domain name

Question 3

What does … do?

dig

Answer 3

Queries the DNS of a given server

DIG stands for Domain Information Grouper

Question 4

What does … do?

host

Answer 4

Fetch all public IP addresses of a given domain

Question 5

What does … do?

fierce

Answer 5

Runs scans against target DNS

Pre-installed on Kali

Question 6

What does … do?

dnsrecon

Answer 6

Scans a DNS for NS records to indicate a zone transfer

Pre-installed on Kali