|
[/url]
Dmitry是一个由C语言编写的UNIX/(GNU)Linux命令行工具，它可用于收集主机相关信息，比如子域名、Email地址、系统运行时间信息。 同时，它也可以进行TCP端口扫描和whois查询等等，下面是它收集信息的方式： 执行whois查询； 检索系统运行时间数据、系统和服务器的相关数据； 针对目标主机执行子域名查询； 针对目标主机进行Email地址搜索； 针对目标主机进行TCP端口扫描（Portscan）； 可让用户指定的模块程序。
Dmitry可以通过下面的方式进行下载：
$ cd /data/src/ $ wget http://pkgs.fedoraproject.org/repo/pkgs/DMitry/DMitry-1.3a.tar.gz/8d578ba16de34b5cbebf6b767181b00d/DMitry-1.3a.tar.gz
安装命令如下：
$ tar xzvf DMitry-1.3a.tar.gz $ cd DMitry-1.3a/ $ ./configure $ make $ sudo make install
接着根据实际情况，选择性地创建对/pentest/目录的符号链接（软链接）：
$ mkdir -p /pentest/enumeration/dmitry/ $ ln -s /usr/local/bin/dmitry/pentest/enumeration/dmitry/Dmitry
使用方法列出帮助信息：
$ dmitry –help
查看更完整的文档:
$ man Dmitry
选项详解：
-o filename
创建ascii文本输出，到指定的文件名里。如果没有指定输出文件名，则会保存为“target.txt”。如果未以任何格式指定该选项，默认将执行标准输出。该选项必须位于其它选项之后，例如”./dmitry -winseo target”。
-i
whois查询，后跟IPv4地址，如：./dmitry -i 255.255.255.255。
-w
whois查询，后跟字符串形式的主机名，如：./dmitry-w target。
-n
获取相关主机的netcraft.com信息，包括主机操作系统、web服务上线和运行时间信息。
-s
执行子域名查询。
-e
针对目标主机执行Email地址查询。
-p 在目标主机上执行TCP端口扫描，这是个相对基础简单的模块。
-f
让TCP扫描器输出过滤的端口信息。
-b
让TCP扫描器输出端口banner。
-t
设置端口扫描的TTL，默认是2秒。 实例
$ dmitry -iwns -o example.out google.com
这个案例中，dmitry会创建名为example.out的报告，报告内容的形式如下：
HostIP:209.85.227.99 HostName:google.com
Gathered Inet-whois information for209.85.227.99 ---------------------------------
OrgName: Google Inc. OrgID: GOGL Address: 1600 Amphitheatre Parkway City: Mountain View StateProv: CA PostalCode: 94043 Country: US
NetRange: 209.85.128.0 - 209.85.255.255 CIDR: 209.85.128.0/17 NetName: GOOGLE NetHandle: NET-209-85-128-0-1 Parent: NET-209-0-0-0-0 NetType: Direct Allocation NameServer: NS1.GOOGLE.COM NameServer: NS2.GOOGLE.COM NameServer: NS3.GOOGLE.COM NameServer: NS4.GOOGLE.COM Comment: RegDate: 2006-01-13 Updated: 2006-06-01
OrgTechHandle: ZG39-ARIN OrgTechName: Google Inc. OrgTechPhone: +1-650-318-0200 OrgTechEmail: arin-contact@google.com
# ARIN WHOIS database, last updated 2010-02-0620:00 # Enter ? for additional hints on searchingARIN's WHOIS database. # # ARIN WHOIS data and services are subjectto the Terms of Use # available at[url]https://www.arin.net/whois_tou.html Gathered Inic-whois information forgoogle.com --------------------------------- Domain Name: GOOGLE.COM Registrar: MARKMONITOR INC. Whois Server: whois.markmonitor.com Referral URL: http://www.markmonitor.com Name Server: NS1.GOOGLE.COM Name Server: NS2.GOOGLE.COM Name Server: NS3.GOOGLE.COM Name Server: NS4.GOOGLE.COM Status: clientDeleteProhibited Status: clientTransferProhibited Status: clientUpdateProhibited Status: serverDeleteProhibited Status: serverTransferProhibited Status: serverUpdateProhibited Updated Date: 18-nov-2008 Creation Date: 15-sep-1997 Expiration Date: 14-sep-2011 >>> Last update of whois database:Sun, 07 Feb 2010 08:06:53 UTC <<< NOTICE: The expiration date displayed inthis record is the date the registrar's sponsorship of the domain nameregistration in the registry is currently set to expire. This date does notnecessarily reflect the expiration date of the domain name registrant'sagreement with the sponsoring registrar. Users may consult the sponsoring registrar's Whois database to view the registrar's reported date ofexpiration for this registration. TERMS OF USE: You are not authorized toaccess or query our Whois database through the use of electronicprocesses that are high-volume and automated except as reasonably necessary toregister domain names or modify existing registrations; the Data inVeriSign Global Registry Services' ("VeriSign") Whoisdatabase is provided by VeriSign for information purposes only, and to assistpersons in obtaining information about or related to a domain nameregistration record. VeriSign does not guarantee its accuracy. By submitting aWhois query, you agree to abide by the following terms of use: You agreethat you may use this Data only for lawful purposes and that under nocircumstances will you use this Data to: (1) allow, enable, or otherwise supportthe transmission of mass unsolicited, commercial advertising orsolicitations via e-mail, telephone, or facsimile; or (2) enable high volume, automated,electronic processes that apply to VeriSign (or its computersystems). The compilation, repackaging, dissemination or other use ofthis Data is expressly prohibited without the prior writtenconsent of VeriSign. You agree not to use electronic processes that are automatedand high-volume to access or query the Whois database except asreasonably necessary to register domain names or modify existingregistrations. VeriSign reserves the right to restrict your access to the Whoisdatabase in its sole discretion to ensure operational stability. VeriSign may restrict or terminate youraccess to the Whois database for failure to abide bythese terms of use. VeriSign reserves the right to modify these terms atany time. The Registry database contains ONLY .COM,.NET, .EDU domains and Gathered Netcraft information forgoogle.com --------------------------------- Retrieving Netcraft.com information forgoogle.com Netcraft.com Information gathered Gathered Subdomain information forgoogle.com --------------------------------- Searching Google.com:80... HostName:www.google.com HostIP:209.85.227.99 Searching Altavista.com:80... Found 1 possible subdomain(s) for hostgoogle.com, Searched 0 pages containing 0 results
DMitry-1.3a下载地址在这里。
| 
|小黑屋|手机版|中国白客联盟-BUC
( 赣ICP备15007148号-6 ) 
窥视卡
雷达卡
发表于 2016-7-27 21:06:52
提升卡
置顶卡
沉默卡
喧嚣卡
变色卡
千斤顶
显身卡