Felderítés

A Unix/Linux szerverek üzemeltetése wikiből
A lap korábbi változatát látod, amilyen Zsombor (vitalap | szerkesztései) 2009. november 17., 13:39-kor történt szerkesztése után volt.

Passzív felderítés

Mielőtt portscannelni kezdenénk, és beindítanánk kedvenc portscannelő eszközünket, fontos lépés az, hogy megtaláljuk a célpontot az interneten.

1 DNS 

zsombor@metacortex:~$ dig -t ANY bme.hu

; <<>> DiG 9.5.1-P3 <<>> -t ANY bme.hu
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20214
;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 4

;; QUESTION SECTION:
;bme.hu.                                IN      ANY

;; ANSWER SECTION:
bme.hu.                 14400   IN      SOA     nic.bme.hu. hostmaster.bme.hu. 2009110400 43200 14400 2592000 86400
bme.hu.                 14400   IN      AFSDB   1 mono.eik.bme.hu.
bme.hu.                 14400   IN      A       152.66.115.35
bme.hu.                 14400   IN      LOC     47 28 0.000 N 19 3 0.000 E 110.00m 1m 10000m 10m
bme.hu.                 14400   IN      MX      10 nic.bme.hu.
bme.hu.                 14400   IN      NS      ns2.pantel.net.
bme.hu.                 14400   IN      NS      ns.bme.hu.
bme.hu.                 14400   IN      NS      nic.bme.hu.

;; ADDITIONAL SECTION:
nic.bme.hu.             14400   IN      A       152.66.115.1
nic.bme.hu.             14400   IN      AAAA    2001:738:2001:2001::2
ns.bme.hu.              14400   IN      A       152.66.116.1
ns.bme.hu.              14400   IN      AAAA    2001:738:2001:8001::2

;; Query time: 6 msec
;; SERVER: 195.228.240.249#53(195.228.240.249)
;; WHEN: Wed Nov  4 10:27:24 2009
;; MSG SIZE  rcvd: 313

2 Whois

Két üzemmódban használjuk. Egyrészt keresünk névre, másrészt IP-címre.

Domainnévre keresés: 

zsombor@metacortex:~$ whois bme.hu
% Whois server 1.99C

Rights restricted by copyright. Szerzői jog fenntartva.
-Legal usage of this service requires that you agree to
abide by the rules and conditions set forth at
http://www.domain.hu/domain/English/domainsearch/feltetelek.html
-A szolgaltatas csak a
http://www.domain.hu/domain/domainsearch/feltetelek.html címen
elérhető feltételek elfogadása és betartása mellett
használható legálisan.

domain:         bme.hu
org:            org_name_eng: Budapest University of Technology and Economics
org:            org_name_hun: Budapesti Muszaki és Gazdaságtudományi Egyetem
address:        Pf 91
address:        H-1521 Budapest
address:        HU
phone:          +36 1 4631111
fax-no:         +36 1 4631110
hun-id:         0930303001
admin-c:        2980924010
tech-c:         2980924009
zone-c:         2000226497
nameserver:     nic.bme.hu
nameserver:     ns.bme.hu
nameserver:     ns2.pantel.net
registered:     1993.03.03 14:24:46
changed:        2004.12.01 20:15:03
registrar:      1960215001

person:         Remzso Gabor
address:        ? ?
address:        H-1521 Budapest
address:        HU
phone:          |+36 1 4632421|
fax-no:         |+36 1 4632420|
hun-id:         2980924010

person:         Borsodi Gabor
address:        ? ?
address:        H-1521 Budapest
address:        HU
phone:          |+36 1 4631821|
fax-no:         |+36 1 4632420|
e-mail:         thulya@eik.bme.hu
hun-id:         2980924009

person:         DNS Admin HUNGARNET
address:        Pf. 498
address:        1396 Budapest 62
address:        HU
phone:          dns-admin@hungarnet.hu
fax-no:         +36 1 350-6750
hun-id:         2000226497

org:            org_name_eng: HUNGARNET Association
org:            org_name_hun: HUNGARNET Egyesület (Registrar)
address:        Victor Hugo u. 18-22.
address:        H-1132 Budapest
address:        HU
phone:          +36 1 4503070
fax-no:         +36 1 3506750
hun-id:         1960215001

Ha domainre keresünk: zsombor@metacortex:~$ whois 152.66.208.40

OrgName: RIPE Network Coordination Centre OrgID: RIPE Address: P.O. Box 10096 City: Amsterdam StateProv: PostalCode: 1001EB Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 152.66.0.0 - 152.66.255.255 CIDR: 152.66.0.0/16 NetName: RIPE-ERX-152-66-0-0 NetHandle: NET-152-66-0-0-1 Parent: NET-152-0-0-0-0 NetType: Early Registrations, Transferred to RIPE NCC Comment: These addresses have been further assigned to users in Comment: the RIPE NCC region. Contact information can be found in Comment: the RIPE database at http://www.ripe.net/whois RegDate: 2004-03-03 Updated: 2004-03-03

  1. ARIN WHOIS database, last updated 2009-11-16 20:00
  2. Enter ? for additional hints on searching ARIN's WHOIS database.


Found a referral to whois.ripe.net:43.

% This is the RIPE Database query service. % The objects are in RPSL format. % % The RIPE Database is subject to Terms and Conditions. % See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: This output has been filtered. % To receive output for a database update, use the "-B" flag.

% Information related to '152.66.0.0 - 152.66.255.255'

inetnum: 152.66.0.0 - 152.66.255.255 netname: BMENET descr: Budapest University of Technology and Economics descr: Budapesti Muszaki es Gazdasagtudomanyi Egyetem country: HU org: ORG-BME1-RIPE admin-c: GR1029-RIPE tech-c: IOS2-RIPE tech-c: GOYA-RIPE tech-c: THU-RIPE remarks: rev-srv: nic.bme.hu remarks: rev-srv: ns.bme.hu status: ASSIGNED PI mnt-by: AS2547-MNT source: RIPE # Filtered remarks: rev-srv attribute deprecated by RIPE NCC on 02/09/2009

organisation: ORG-BME1-RIPE org-name: BME remarks: Budapest University of Technology and Economics remarks: Budapesti Muszaki es Gazdasagtudomanyi Egyetem org-type: OTHER address: Muegyetem rkp. 9. 

               H-1111 Budapest
               Hungary

phone: +36 1 4632421 fax-no: +36 1 4632420 remarks: ========================================================= abuse-mailbox: abuse@bme.hu remarks: --------------------------------------------------------- remarks: Reporting guidelines can be found at 

               http://net.bme.hu/abuse/?lang=en
               Reports not conforming to these guidelines may be
               discarded silently.  Thanks for your cooperation.

remarks: --------------------------------------------------------- remarks: Bejelentest kerjuk az alabbiak szerint tegyen: 

               http://net.bme.hu/abuse/
               Az itt leirtaknak meg nem felelo bejelentesekkel nem all
               modunkban foglalkozni.  Koszonjuk szives egyuttmukodeset!

remarks: ========================================================= mnt-ref: AS2547-MNT mnt-by: AS2547-MNT source: RIPE # Filtered

person: Gabor Remzso address: Budapest University of Technology and Economics address: Center of Information Systems address: Muegyetem rkp. 9. R310 address: H-1111 Budapest address: Hungary phone: +36 1 4632421 fax-no: +36 1 4632420 nic-hdl: GR1029-RIPE org: ORG-BME1-RIPE mnt-by: AS2547-MNT source: RIPE # Filtered

person: Istvan Ostrosits address: PanTel Telecommunication Co. address: Bocskai ut 134-146. address: H-1113 Budapest address: Hungary phone: +36 1 8883583 fax-no: +36 1 8883636 nic-hdl: IOS2-RIPE source: RIPE # Filtered

person: Andras Jako address: Budapest University of Technology and Economics address: Center of Information Systems address: Muegyetem rkp. 9. R310 address: H-1111 Budapest address: Hungary phone: +36 1 4631672 fax-no: +36 1 4632420 nic-hdl: GOYA-RIPE org: ORG-BME1-RIPE source: RIPE # Filtered

person: Imre Simon address: Budapest University of Technology and Economics address: Center of Information Systems address: Muegyetem rkp. 9. R310 address: H-1111 Budapest address: Hungary phone: +36 1 4631616 fax-no: +36 1 4632420 nic-hdl: THU-RIPE source: RIPE # Filtered

% Information related to '152.66.0.0/16AS2547'

route: 152.66.0.0/16 descr: BMENET org: ORG-BME1-RIPE origin: AS2547 mnt-by: AS2547-MNT source: RIPE # Filtered

organisation: ORG-BME1-RIPE org-name: BME remarks: Budapest University of Technology and Economics remarks: Budapesti Muszaki es Gazdasagtudomanyi Egyetem org-type: OTHER address: Muegyetem rkp. 9. 

               H-1111 Budapest
               Hungary

phone: +36 1 4632421 fax-no: +36 1 4632420 remarks: ========================================================= abuse-mailbox: abuse@bme.hu remarks: --------------------------------------------------------- remarks: Reporting guidelines can be found at 

               http://net.bme.hu/abuse/?lang=en
               Reports not conforming to these guidelines may be
               discarded silently.  Thanks for your cooperation.

remarks: --------------------------------------------------------- remarks: Bejelentest kerjuk az alabbiak szerint tegyen: 

               http://net.bme.hu/abuse/
               Az itt leirtaknak meg nem felelo bejelentesekkel nem all
               modunkban foglalkozni.  Koszonjuk szives egyuttmukodeset!

remarks: ========================================================= mnt-ref: AS2547-MNT mnt-by: AS2547-MNT source: RIPE # Filtered

3 AS

Fájl:https://unixlinux.tmit.bme.hu/upload/4/43/BME AS.png

A lap eredeti címe: „http://unixlinux.tmit.bme.hu/index.php?title=Felder%C3%ADt%C3%A9s&oldid=3277”
Személyes eszközök