JACKSON GOODWIN // CYBERSECURITY ANALYST info@jacksontechnology.com.ng

A hands-on VAPT lab write-up on extracting actionable intelligence from WHOIS records during the Information Gathering phase, covering domain ownership, registration history, name server mapping, and what attackers learn before touching a single system.

Tool Overview

WHOIS is one of the oldest and most fundamental tools in a penetration tester’s reconnaissance arsenal. It queries a global distributed database that stores registration information for every domain name and IP address block on the Internet. First standardised in the 1980s, WHOIS remains a cornerstone of domain intelligence — providing a rich source of organisational, technical, and infrastructural data that attackers leverage before making a single network connection.

In an authorised penetration test, WHOIS data anchors the entire information gathering phase. It answers the first critical question: Who owns this domain? Who manages their DNS? When was the domain registered? What other domains do they own? The answers shape every subsequent phase of the engagement.

What WHOIS Reveals

A single WHOIS query against a target domain returns a structured dataset covering registration details, technical contacts, name servers, and administrative information. Each field has direct intelligence value for a penetration tester.

Let’s take an example !!

Whois Lookup

It is used for querying databases that store in the internet. Such as a domain name, IP address, domain records, domain ownership, etc. Browse the given URL http://whois.domaintools.com/ and type any domain.

Done! You can see that all information related to doamin is here like : IP addresses, domain expire, egistrant Org, email, and much more. similarly you can try on more websites.

Dns Footprinting

The DNS records and type of servers in the website are checked in DNS footprinting. There are 10 type of DNS records which provide important information related to the victim.

• A/AAAA
• CNAME
• SOA
• RP
• PTR
• HINFO
• SVR
• NS
• TXT
• MX

There are many tools but we can choose Bnsdumpster which is online tool for DNS footprinting.
Open this link on your browser https://dnsdumpster.com/ and enter any domain name.

Done! you can observe we have hosts related to a domain and more information.