0PricingLogin▼
Cyber Security Academy · Lesson

WHOIS, DNS Enumeration, and Certificates

Query WHOIS records, enumerate DNS, and use certificate transparency logs to map attack surfaces.

WHOIS Lookup

WHOIS queries databases for domain registration information: registrant name, email, registrar, creation/expiry dates, and nameservers. While GDPR has anonymized much WHOIS data in EU, historical records and non-EU registrations remain valuable for recon.

whois example.com
whois 93.184.216.34   # reverse WHOIS on IP

DNS Enumeration Basics

DNS enumeration discovers a target's infrastructure by querying DNS records:

dig example.com A      # IPv4 address
dig example.com AAAA   # IPv6 address
dig example.com MX     # mail servers
dig example.com TXT    # SPF, DKIM, verification records
dig example.com NS     # nameservers

All lessons in this course

  1. Google Dorking for Information Gathering
  2. WHOIS, DNS Enumeration, and Certificates
  3. Shodan: The Search Engine for Internet Devices
  4. Social Media and People-Search OSINT
← Back to Cyber Security Academy