DNS is great. Who wants to remember numbers when you can remember something easier?
\nhttp:\/\/it.thelibrarie.com or http:\/\/208.113.245.198? Well technically that’s a bad example as this site is running as an apache virtual host (the header file tells the server which site you’re actually look for). But you get the idea.<\/p>\n
So, how many sites are actually on this same IP address? As of this writing: 71. Now that includes www.*.tld and *.tld, so it’s slightly inflated. How about if you just want to see sub domains of a system? I found a decent way (although it doesn’t find all of them) to check: \nlocaladmin@external:~\/dnsmap-0.30$ dnsmap thelibrarie.com [+] searching (sub)domains for thelibrarie.com using built-in wordlist ftp.thelibrarie.com it.thelibrarie.com kj.thelibrarie.com mail.thelibrarie.com media.thelibrarie.com news.thelibrarie.com webmail.thelibrarie.com www.thelibrarie.com [+] 11 (sub)domains and 11 IP address(es) found I cut out a couple even though you can easily see which ones. Just to make it slightly more difficult for bots…<\/p>\n","protected":false},"excerpt":{"rendered":" DNS is great. Who wants to remember numbers when you can remember something easier? http:\/\/it.thelibrarie.com or http:\/\/208.113.245.198? Well technically that’s a bad example as this site is running as an apache virtual host (the header file tells the server which site you’re actually look for). But you get the idea. So, how many sites are … Continue reading Useful DNS Stuff<\/span>
\nHow do we know? I use a tool called YouGetSignal (http:\/\/www.yougetsignal.com\/tools\/web-sites-on-web-server\/<\/a>) to look it up. Pretty nice interface.<\/p>\n
\nDownload DNSMap (http:\/\/code.google.com\/p\/dnsmap\/downloads\/list)
\nwget http:\/\/dnsmap.googlecode.com\/files\/dnsmap-0.30.tar.gz<\/code>
\ntar zxvf dnsmap-0.30.tar.gz<\/code>
\ncd dnsmap-0.30<\/code>
\nmake<\/code>
\ncp .\/dnsmap \/usr\/local\/bin\/dnsmap<\/code>
\ndnsmap domain.tld -r \/var\/log\/dnsmap_domain.tld_log.txt<\/code><\/p>\n
\ndnsmap 0.30 – DNS Network Mapper by pagvac (gnucitizen.org)<\/p>\n
\n[+] using maximum random delay of 10 millisecond(s) between requests<\/p>\n
\nIP address #1: 208.113.246.229<\/p>\n
\nIP address #1: 208.113.245.198<\/p>\n
\nIP address #1: 208.113.246.229<\/p>\n
\nIP address #1: 208.97.132.24<\/p>\n
\nIP address #1: 208.113.228.62<\/p>\n
\nIP address #1: 208.113.232.193<\/p>\n
\nIP address #1: 208.97.187.139<\/p>\n
\nIP address #1: 208.113.246.229<\/p>\n
\n[+] completion time: 164 second(s)\n<\/p><\/blockquote>\n