Klementinus Kennyvito Salim

Whois is another tool in kali linux to know a website’s name server, datas created and updated, registrant information and domain status.

The command is whois <website>.

In this example we use the command  : whois pentest.id

We found its domain ID, date created and last updated, expiration date, its status, server, and registrar information which is located in Yogyakarta.

Nmap is used to discover hosts and services on a computer network by sending packets and analyzing the responses. By using Nmap, the hosts of a website can be discovered along with its operating system and services it is running.

Command of Nmap in kali Linux : nmap  target

In this Example , the command is : nmap binusmaya.binus.ac.id

As a result, the IP address for binusmaya.binus.ac.id is shown, and also the ports that are open , including the service of each port.

The objective of this program is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.

The command line in kali linux is : theHarvester -d domain -l number -b searchengine

-d is for the domain to search, -l is to cap the number of results you want to know, and -b is for the search engine you want to use

For example, the command : theHarvester -d binus.ac.id -l 500 -b google

Here, the are no IPs and no emails found, but there are 22 hosts detected that have the subdomain of binus.ac.id