Footprirvting a Target Network .p10

Lab 5

Analyzing Domain and IP Address Queries Using SmartWhois

SmartWhois is a network information utility that allowsyon to look up most available information on a hostname, IP address, or domain.

Lab Scenario

111 the previous kb, you learned to determine a person 01־ an organization’s location using the Spokeo online tool. Once a penetration tester has obtained the user’s location, he or she can gather personal details and confidential information from the user by posing as a neighbor, the cable guv, or through any means of social engineering. 111 tins lab, you will learn to use the SmartWhois tool to look up all ot the available information about any IP address, hostname, 01־ domain and using these information, penetration testers gam access to the network of the particular organization for which they wish to perform a penetration test.

Lab Objectives

The objective of tins lab is to help students analyze domain and IP address quenes. Tins lab helps you to get most available information 011 a hostname, IP address, and domain.

Lab Environment

111 the lab you need:

■ A computer running any version of Windows with Internet access
■ Administrator privileges to run SmartWhois
■ The SmartWhois tool, available 111 D:\CEH-T0 0 ls\CEHv8 Module 02 Footprinting and Reconnaissance\WHOIS Lookup Tools\SmartWhois 01־ downloadable from http ://www.tamos.com
■ If you decide to download the latest version, then sc re ensh ots shown 111 the lab might differ

Lab Duration

Tune: 5 ]\ luiutes

Overview of SmartWhois

SmartWhois is network information utility diat allows you to look up most available information 011 a hostname, IP address, or domain, including country, state or province, city, name of the network provider, teclnncal support contact information, and administrator. SmartWhois helps you to search for information such as:

■ The owner ot the domain
■ The domain registration date and the owner’s contact information
■ The owner of die IP address block

Lab Tasks

Note: If you are working 111 the lLabs environment, direcdy jump to step number 13

1. Follow the wizard-driven installation steps and install SmartWhois.
2. To launch the Start menu, hover the mouse cursor 111 the lower-left corner of the desktop

FIGURE 5.1: Windows Server 2012 — Desktop view

3. To launch SmartWhois, click SmartWhois 111 apps

FIGURE 5.2: Windows Server 2012—Apps

4. The SmartWhois main window appears

FIGURE 5.3: The SmartWhois main window

5. Type an IP address, hostname, or domain name 111 the field tab. An example of a domain name query is shown as follows, ־www.google.com.

FIGURE 5.4: A SmartWhois domain search

6. Now, click the Query tab to find a drop-down list, and then click As Domain to enter domain name 111 the field.

FIGURE 5.5: The SmartWhois — Selecting Query type

7. 111 the left pane of the window, the result displays, and the right pane displays die results of your query.

FIGURE 5.6: The SmartWhois — Domain query result

8. Click the Clear icon 111 the toolbar to clear die history.

FIGURE 5.7: A SmartWhois toolbar

9. To perform a sample host name query, type www.fflcebook.com.

10. Click the Query tab, and then select As IP/Hostname and enter a hostname 111 die field.

FIGURE 5.8: A SmartWhois host name query