Alguna vez leí ya ni me acuerdo dónde:

Esto es linux, no se trata de preguntar “¿Se puede?” si no de preguntar “¿Cómo se hace?”. En linux todo se puede.

Dicho y hecho; Como consultar un servidor de DNS específico sin modificar el archivo /etc/resolv.conf con dig:

dig @208.67.222.222 midominio.com

Y para nslookup:

~ $ nslookup

> server 208.67.222.222

Default server: 208.67.222.222
Address: 208.67.222.222#53

midominio.com

Util para saber como anda eso de la propagación de DNS cuando acabamos de hacer algún tipo de modificación.

208.67.222.222 es el primer DNS de OpenDNS, ambos comandos son parte del paquete bind-tools.

While working through some DNS lookup inconsistency today, I was reminded of this tip that allows you to trace an entire DNS lookup.  Normally I just do an NSlookup, but I wanted more information.   DIG is a command that’s built into Linux (and therefore MAC) So I hopped on my Mac and ran the command like this:

>Dig +trace www.yourdomain.com

results look like this:

————————————————————————–

; <> DiG 9.4.1-P1 <> +trace www.yourdomain.com
;; global options:  printcmd
.                       505277  IN      NS      A.ROOT-SERVERS.NET.
.                       505277  IN      NS      B.ROOT-SERVERS.NET.
.                       505277  IN      NS      C.ROOT-SERVERS.NET.
.                       505277  IN      NS      D.ROOT-SERVERS.NET.
.                       505277  IN      NS      E.ROOT-SERVERS.NET.
.                       505277  IN      NS      F.ROOT-SERVERS.NET.
.                       505277  IN      NS      G.ROOT-SERVERS.NET.
.                       505277  IN      NS      H.ROOT-SERVERS.NET.
.                       505277  IN      NS      I.ROOT-SERVERS.NET.
.                       505277  IN      NS      J.ROOT-SERVERS.NET.
.                       505277  IN      NS      K.ROOT-SERVERS.NET.
.                       505277  IN      NS      L.ROOT-SERVERS.NET.
.                       505277  IN      NS      M.ROOT-SERVERS.NET.
;; Received 372 bytes from 172.18.33.1#53(172.18.33.1) in 1 ms

com.                    172800  IN      NS      I.GTLD-SERVERS.NET.
com.                    172800  IN      NS      H.GTLD-SERVERS.NET.
com.                    172800  IN      NS      A.GTLD-SERVERS.NET.
com.                    172800  IN      NS      B.GTLD-SERVERS.NET.
com.                    172800  IN      NS      F.GTLD-SERVERS.NET.
com.                    172800  IN      NS      G.GTLD-SERVERS.NET.
com.                    172800  IN      NS      M.GTLD-SERVERS.NET.
com.                    172800  IN      NS      K.GTLD-SERVERS.NET.
com.                    172800  IN      NS      D.GTLD-SERVERS.NET.
com.                    172800  IN      NS      E.GTLD-SERVERS.NET.
com.                    172800  IN      NS      J.GTLD-SERVERS.NET.
com.                    172800  IN      NS      C.GTLD-SERVERS.NET.
com.                    172800  IN      NS      L.GTLD-SERVERS.NET.
;; Received 511 bytes from 192.33.4.12#53(C.ROOT-SERVERS.NET) in 333 ms

www.yourdomain.com         172800  IN      NS      ns1.wordpress.com.
www.yourdomain.com        172800  IN      NS      ns2.wordpress.com.
www.yourdomain.com          172800  IN      NS      ns3.wordpress.com.
;; Received 141 bytes from 192.5.6.30#53(A.GTLD-SERVERS.NET) in 931 ms

www.yourdomain.com  300     IN      CNAME   www.yourdomain.com edgekey.net.
www.yourdomain.com.          14400   IN      NS      NS1.yourdomain.com
www.yourdomain.com.          14400   IN      NS      NS2.yourdomain.com
www.yourdomain.com          14400   IN      NS      NS3.yourdomain.com
;; Received 180 bytes from 123.456.234.123#53(ns1.yourdomain.com) in 1021 ms

Definição:
nslookup é uma ferramenta, comum ao Windows e ao Linux, utilizada para se obter informações sobre registros de DNS de um determinado domínio, host ou IP.

Uso:

c:>nslookup

Exemplo:

NSLOOKUP

Análise:
O comando nslookup chama o prompt “>” da aplicação e informa o servidor de DNS que está usando pelo computador. O comando server permite que se use outro servidor de DNS para fazer a consulta. Depois, basta digitar endereço e verificar se o servidor está retornando os seus endereços IPs.

Notas:

1. No exemplo, a mensagem: “Não éresposta de autorização“, Não indica problema, apenas que o servidor não é responsável pelo dominio consultado. O importante é o endereço IP retornado.

2. A seguinte mensagem: “***<servidor> não é possível encontrar www.terraa.com.br: timed out“, indica que o servidor não conseguiu resolver o nome do domínio.

Dicas para a resolução de problemas

1. O computador pode ficar sem navegação se o servidor de DNS não estiver funcionando. Para testar isso, verifique se é possível fazer ping em algum IP qualquer, caso seja, existe conectividade, se a resolução de nomes não estiver funcionando, tentar usar outro servidor de DNS, através do comando:

>server [nome ou IP do servidor]

nmap

He realizado un script muy básico en Perl para escanear una red y obtener los hostnames y puertos abiertos en cada host.

Este script es útil en sistemas GNU/Linux y Mac OS X, donde la única herramienta externa necesaria es nmap la cual pueden descargar desde el sitio oficial de insecure.

Dado que el comando nmap con la opción -sS requiere que se ejecute como root, este script deberá ser ejecutado utilizando este usuario todopoderoso.

#!/usr/bin/perl
for ($i=1; $i<=254; $i++) {
 $hostname = qx(nslookup 192.168.1.$i | grep name);
 if ($hostname ne "") {
 $ports = qx(nmap -sS 192.168.1.$i | grep \"^[0-9]");
 open (scanner, '>>scanner');
 print scanner $hostname;
 print scanner $ports;
 print scanner "\n";
 close (scanner);
 }
}

NOTA: No me responsabilizo por el mal uso de este script. No ha sido creado con otro fin mas que el de ser didáctico.

Bytes.

Th3 G33km4n.

Open command prompt then type

Nslookup

set q=Mx and enter the domain name which you wante to find the MX records or your can use web based www.mxtoolbox.com to find the MX Records.

MX Preferences will give the priority option to which mail has to be deliverd

Open a Command Prompt

Nslookup

(then domain e.g.: australia.com.au)

DNSDataView is a GUI alternative to the NSLookup tool that comes with Windows operating system. It allows you to easily retrieve the DNS records (MX, NS, A, SOA) of the specified domains. You can use the default DNS server of your Internet connection, or use any other DNS server that you specify.

DNSDataView: NSLookup with a GUI

After retrieving the DNS records for the desired domains, you can save them into text/xml/html/csv file.

For those of you who are not aware of NSLookup, it is the name of a program that lets an Internet server administrator or any computer user enter a host name (for example, “technofriends.in”) and find out the corresponding IP address. It will also do reverse name lookup and find the host name for an IP address you specify.

Download DNSDataView.

Also read: [How-To] Extract images and other resources from an application

[How-To] Recover lost Outlook PST Password

Recover lost wireless network key using WirelessKeyView

Top 10 Password Crackers .. REVEALED.

Well since I wrote me little comments here on just what I thought of dickhead webhosts, we gets hit with 181 spam comments all from “Fake” hosting URLS and companies. The common denominator was the spammers IP address, which Akismet listed as 38.96.198.113 so watch for that bastard.

A bit of snooping and a bit of a “lookup” reveals this -> 38.96.198.113 is from United States(US) in region North America

Really, I thought the Us was very anti-spam and even had laws to deal with spammers, oh well lets do a whois on the IP and see who owns it. ->

whois query for 38.96.198.113…

Results returned from whois.arin.net:

OrgName:    Performance Systems International Inc.
OrgID:      PSI
Address:    1015 31st St NW
City:       Washington
StateProv:  DC
PostalCode: 20007
Country:    US

NetRange:   38.0.0.0 - 38.255.255.255
CIDR:       38.0.0.0/8
NetName:    PSINETA
NetHandle:  NET-38-0-0-0-1
Parent:
NetType:    Direct Allocation
NameServer: NS.PSI.NET
NameServer: NS2.PSI.NET
Comment:    Reassignment information for this block can be found at
Comment:    rwhois.cogentco.com 4321
RegDate:    1991-04-16
Updated:    2005-10-05

RTechHandle: PSI-NISC-ARIN
RTechName:   IP Allocation
RTechPhone:  +1-877-875-4311
RTechEmail:  ipalloc@cogentco.com 

OrgAbuseHandle: COGEN-ARIN
OrgAbuseName:   Cogent Abuse
OrgAbusePhone:  +1-877-875-4311
OrgAbuseEmail:  abuse@cogentco.com

OrgNOCHandle: ZC108-ARIN
OrgNOCName:   Cogent Communications
OrgNOCPhone:  +1-877-875-4311
OrgNOCEmail:  noc@cogentco.com

OrgTechHandle: IPALL-ARIN
OrgTechName:   IP Allocation

OrgTechPhone: +1-877-875-4311

OrgTechEmail:  ipalloc@cogentco.com

# ARIN WHOIS database, last updated 2008-10-29 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.
-------------------------------------------------------------------------------------

Will ya look at that now! Seems that Performance Systems International Inc. own the block of IP’s that this baddie falls into!
Now from here we usually check a few business registers, see who cogentco have assigned the IP to,
check if its a dynamic assignment etc , but I am sick and tired of tracking down spammers, so now I just does the first bit,
and proudly lists the results above for good ole Google to find.

This way it might send a bit of negative feedie back to some-one who cares, and they might get off their arse and fix the
scammer themselves, as they should be doing.

Now you see why I am sticking like glue with my hosties auStores from http://www.austores.com.au

They hate spammmers and scammers just like me, so they suits me very well.

You can Use www.samspade.org for Footprinting Purpose, here is example using samspade.org

Tools : www.samspade.org

Sample Results (Target : www.indoskripsi.com)

www.indoskripsi.com = [ 76.74.146.46 ]

(Asked whois.enom.com:43 about indoskripsi.com)

=-=-=-=
Visit AboutUs.org for more information about indoskripsi.com
http://www.aboutus.org/indoskripsi.com”AboutUs: indoskripsi.com
Registration Service Provided By: IdeBagus.com
Contact: idebagus@gmail.com

Visit: http://www.idebagus.com
Domain name: indoskripsi.com
Registrant Contact:
Bambang Riadi
Jl gajayana no 50 Dinoyo
Malang  Jawa timur 65144
ID
Administrative Contact:
IdeBagus Group info@idebagus.com

62.2164717409
Fax: 62.217372033
Ruko Sunter Paradise Tahap II
Blok F No.23
Jakarta  JAKARTA 14350
ID
Technical Contact:
IdeBagus Group info@idebagus.com

62.2164717409
Fax: 62.217372033
Ruko Sunter Paradise Tahap II
Blok F No.23
Jakarta  JAKARTA 14350
ID
Status: Locked
Name Servers:
ns3.idebagus.com
ns4.idebagus.com
Creation date: 26 Oct 2007 08: 22: 44
Expiration date: 26 Oct 2008 08: 22: 44
=-=-=-=
Version 6.3 4/3/2002

Tools : www.allwhois.com

Sample Results (Target : www.indoskripsi.com)

Registrant:
Registration Service Provided By: IdeBagus.com
Contact: idebagus@gmail.com
Visit: http://www.idebagus.com

Domain name: indoskripsi.com

Registrant Contact:

Bambang Riadi

Jl gajayana no 50 Dinoyo
Malang, Jawa timur 65144
ID

Administrative Contact:

IdeBagus Group (info@idebagus.com)
+62.2164717409
Fax: +62.217372033
Ruko Sunter Paradise Tahap II
Blok F No.23
Jakarta, JAKARTA 14350
ID

Technical Contact:

IdeBagus Group (info@idebagus.com)
+62.2164717409
Fax: +62.217372033
Ruko Sunter Paradise Tahap II
Blok F No.23
Jakarta, JAKARTA 14350
ID

Status: Locked

Name Servers:
ns3.idebagus.com
ns4.idebagus.com

Creation date: 26 Oct 2007 08:22:44
Expiration date: 26 Oct 2008 08:22:44

daripada nganggur ne…

format nya

nslookup host_tujuan dns_server_yg_dipakai

pake opendns

nslookup yahoo.com 208.67.222.222
Server:         208.67.222.222
Address:        208.67.222.222#53

Non-authoritative answer:
Name:   yahoo.com
Address: 216.109.112.135
Name:   yahoo.com
Address: 66.94.234.13

nslookup yahoo.com 208.67.220.220
Server:         208.67.220.220
Address:        208.67.220.220#53

Non-authoritative answer:
Name:   yahoo.com
Address: 216.109.112.135
Name:   yahoo.com
Address: 66.94.234.13

pake telkom

nslookup yahoo.com 203.130.196.155
Server:         203.130.196.155
Address:        203.130.196.155#53

Non-authoritative answer:
Name:   yahoo.com
Address: 216.109.112.135
Name:   yahoo.com
Address: 66.94.234.13

nslookup yahoo.com 202.134.1.10
Server:         202.134.1.10
Address:        202.134.1.10#53

Non-authoritative answer:
Name:   yahoo.com
Address: 66.94.234.13
Name:   yahoo.com
Address: 216.109.112.135

Si vous êtes aussi curieux que moi, il doit vous arriver des fois où vous aimeriez bien avoir la liste des sites qu’héberge un serveur donné.  La connaissance d’un tel paramètre peut par exemple servir à faire un choix pour le hosting de son site.

Le site myIPneighbors vous propose justement cela en donnant, depuis une simple URL ou adresse IP, la liste des sites installés sur le serveur correspondant.