Whois Enumeration
Whois is a TCP service, tool, and type of database that can provide
information about a domain name, such as the name server and registrar.
This information is often public,
since registrars charge a fee for private registration.
We can gather basic information about a domain name
by executing a standard forward search
and passing the domain name, megacorpone.com, into whois,
and providing the IP address of our Ubuntu WHOIS server
as an argument of the host with the -h parameter.
Not all of this data is useful, but we did discover some valuable information.
First, the output reveals that Alan Grofield registered the domain name.
According to the Megacorp One Contact page,
Alan is the “IT and Security Director”.
We also found the name servers for MegaCorp One.
Assuming we have an IP address,
we can also use the whois client to perform a reverse lookup
and gather more information.
The results of the reverse lookup give us information
about who is hosting the IP address.
This information could be useful later,
and as with all the information we gather, we will add this to our notes.