OK, so the next tool that we're going to use for passive reconnaissance is called Who Is and will I
call it who is enumeration?
Because we are using who is to enumerate information, which is me, which means pretty much is gathering
information.
So this comes with this helpful tool called Who Is and lets you gather all kinds of information about
information.
And that includes things like, you know, who is registries for what their name servers are, information
on, you know, if they have DNS security in place, you can figure out who the owner is, registration
information.
And, you know, just more things.
And it's very useful.
It's definitely something that you want to do.
Like if you're on an external assessment, you just in your information gathering stage.
So let's go check it out.
OK, so when we're in college, Lennix, the first thing that you want to do is open up a terminal and
then just type in who is you can hit, enter and see all the different options.
We're not going to use, you know, a lot of these we're really just going to use it to get a little
bit of information.
But you can go ahead and read over these yourself and, you know, figure out some more of the power
behind this tool because you really gather a lot of information.
But all we're going to be using it for is just to get information about a domain.
So let's say we want to do it.
Who is on, you know, Google dot com?
So let's see what comes up.
So you do that, you type, you just type in who is the domain and then you hit enter.
So let's see what we got about Google dot com.
So we had the domain name domain already.
All kinds of information.
Last time this information was updated, we see the registrar is Mark Monitor and we have an email address
for that.
Let's see, we have their name servers right here, which is pretty common when you see on the Internet.
You'll see this a lot and just a lot more information.
So who is a decent tool just to gather some like just based on information about a domain that you might
be, you know, conducting a penetration test against?
It's very, very useful.
So I really recommend that you use it.