Kali Linux信息收集之DMitry

dmitry, information gathering, kali linux, portscanning, recon, 信息收集, 端口扫描

0x00 DMitry介绍

DMitry(Deepmagic Information Gathering Tools 深度信息收集工具)是一个linux下用C语言写的工具。它能够尽可能的获取指定主机目标的信息。基础功能是获取目标的子域名，Email地址，运行时间相关信息，tcp端口，whois信息等等。

特性：

1
2
3
4
5
6
7
- 软件开源
- 可以同时进行一系列的whois查询
- 获取运行时的数据，系统和服务器信息
- 对指定的机器搜索获取其子域名
- 在指定的主机上搜素Email
- 对指定的主机搜索其开启的TCP端口
- 有模块化系统可以让用户根据需要选择模块

工具来源：http://mor-pah.net/software/dmitry-deepmagic-information-gathering-tool/

DMitry主页 | Kali DMitry Repo仓库

  • 作者：James Greig
  • 证书：GPLv3

DMitry视频介绍

0x01 DMitry功能

DMitry - 深度信息收集工具

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
root@kali:~# dmitry
Deepmagic Information Gathering Tool
"There be some deep magic going on"
用法：dmitry [-winsepfb] [-t 0-9] [-o %host.txt] host
-o        将输出保存到%host.txt或由-o文件指定的文件
-i        对主机的IP地址执行whois查找
-w        对主机的域名执行whois查找
-n        在Netcraft.com上检索主机信息
-s        搜索的子域
-e        搜索可能的电子邮件地址
-p        在主机上执行TCP端口扫描
* -f      在显示输出报告过滤端口的主机上执行TCP端口扫描
* -b      读取从扫描端口接收的横幅
* -t 0-9  设置扫描TCP端口时的TTL（默认值2）
* 以上3个选项需要传递-p选项

0x02 DMitry用法示例

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
root@kali:~# dmitry -winsepo harvard.txt harvard.edu
Deepmagic Information Gathering Tool
"There be some deep magic going on"
Writing output to 'harvard.txt'
HostIP:52.87.36.185
HostName:harvard.edu
Gathered Inet-whois information for 52.87.36.185
---------------------------------
inetnum:        52.0.0.0 - 52.144.63.255
netname:        NON-RIPE-NCC-MANAGED-ADDRESS-BLOCK
descr:          IPv4 address block not managed by the RIPE NCC
remarks:        ------------------------------------------------------
remarks:
remarks:        You can find the whois server to query, or the
remarks:        IANA registry to query on this web page:
remarks:        http://www.iana.org/assignments/ipv4-address-space
remarks:
remarks:        You can access databases of other RIRs at:
remarks:
remarks:        AFRINIC (Africa)
remarks:        http://www.afrinic.net/ whois.afrinic.net
remarks:
remarks:        APNIC (Asia Pacific)
remarks:        http://www.apnic.net/ whois.apnic.net
remarks:
remarks:        ARIN (Northern America)
remarks:        http://www.arin.net/  whois.arin.net
remarks:
remarks:        LACNIC (Latin America and the Carribean)
remarks:        http://www.lacnic.net/ whois.lacnic.net
remarks:
remarks:        IANA IPV4 Recovered Address Space
remarks:        http://www.iana.org/assignments/ipv4-recovered-address-space/ipv4-recovered-address-space.xhtml
remarks:
remarks:        ------------------------------------------------------
country:        EU # Country is really world wide
admin-c:        IANA1-RIPE
tech-c:         IANA1-RIPE
status:         ALLOCATED UNSPECIFIED
mnt-by:         RIPE-NCC-HM-MNT
mnt-lower:      RIPE-NCC-HM-MNT
mnt-routes:     RIPE-NCC-RPSL-MNT
created:        2016-09-26T14:44:02Z
last-modified:  2016-09-26T14:44:02Z
source:         RIPE
role:           Internet Assigned Numbers Authority
address:        see http://www.iana.org.
admin-c:        IANA1-RIPE
tech-c:         IANA1-RIPE
nic-hdl:        IANA1-RIPE
remarks:        For more information on IANA services
remarks:        go to IANA web site at http://www.iana.org.
mnt-by:         RIPE-NCC-MNT
created:        1970-01-01T00:00:00Z
last-modified:  2001-09-22T09:31:27Z
source:         RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.87.4 (DB-1)
Gathered Inic-whois information for harvard.edu
---------------------------------
Domain Name: HARVARD.EDU
Registrant:
   Harvard University
   HUIT Network Services
   60 Oxford Street
   Cambridge, MA 02138
   UNITED STATES
Administrative Contact:
   Luke Sullivan
   Manager, Network Systems
   Harvard University
   60 Oxford Street
   Cambridge, MA 02138
   UNITED STATES
   (617) 384-6640
   [email protected]
Technical Contact:
   Network Operations
   Harvard University
   HUIT Network Services
   60 Oxford Street
   Cambridge, MA 02138
   UNITED STATES
   (617) 495-7777
   [email protected]
Name Servers: 
   EXT-DNS-1.HARVARD.EDU      128.103.200.35
   EXT-DNS-2.HARVARD.EDU      128.103.200.162
Domain record activated:    27-Jun-1985
Domain record last updated: 30-Dec-2015
Domain expires:             31-Jul-2017
Gathered Netcraft information for harvard.edu
---------------------------------
Retrieving Netcraft.com information for harvard.edu
Netcraft.com Information gathered
Gathered Subdomain information for harvard.edu
---------------------------------
Searching Google.com:80...
Unable to connect: Socket Connect Error