Welcome back.
In this video, we want to check out how we can get an IP address from a certain website as well as
some additional information about it.
So since we can't really do this with our own eyes, because this is a virtual machine that's hosting
a website inside of our local network, so it doesn't really have a domain name or should I say a link.
We already have its IP address right here.
So we're just going to take a look at how we can get an IP address from some random website online to
do that.
Let's first open up our terminal and there are a couple comments that you will lose a lot.
First comment, which we already performed in a previous lecture, is called Pink.
Now, pink comment allows us to determine whether a host is online or offline.
For example, if I type pink and then the IP address of my wesp virtual machine and press enter, it
will continue pinging the virtual machine, which we can determine that this machine is up and running.
Now, to stop this, let's press control.
See, and besides using pink and then the IP address, we can also use Pink with our website name,
for example, we can type in Google dot com and it will perform the same thing.
And as we can see, we are also getting the response from Google dot com and in the brackets we're also
getting an IP address.
So with this comment, we did manage to get an IP address of Google dot com.
Now, one thing to take in is that this comment or the comment doesn't necessarily always tell us the
truth.
Some websites might block ping probes and we might not be able to ping them.
However, they could still be online.
And we're going to take a look at that later on.
But just keep it in mind for now that if the pinging doesn't work, it doesn't necessarily mean that
the website is offline.
OK, now another comment that you can use to determine the IP address of a website is called Post if
you type post.
And let's right now use, for example, Tesla.
So Tesla dot com.
It will tell us Tesla dot com has an address or one ninety nine, sixty six, eleven and then sixty
two, it also gives us some additional information such as Tesla dot com mail is handled by this.
OK, so this is additional information, but we are mostly interested in this.
Don't worry, if you get the different IP address for these bigger websites, it's normal because they
are not hosted only on one IP address.
And the third way that we can determine is with the help of a command called NSA lookup.
See, if I type NSA lookup dot com, it will give me a response of my server or my DNS server, or in
this case, my router, which is hosted at the IP address of to the 168 that want one.
And the answer to our question will be down here.
The name that we searched is Tesla dot com and we got an IP address of one ninety nine six six eleven
and then sixty two, which is the same IP address as we got right here.
But besides getting an IP address, we can also extract some additional information that is publicly
available, we can do that by using a tool called Who Is Now Who is a Tool, is used for gathering information
about details of websites, registration that the owner of website provides.
This usually provides us with some additional context, such as emails, phone numbers and also some
physical addresses.
Let's give it a try.
So let's type who is Tesla dot com?
Can we get bunch of reply right here, we can already see that we're getting some phone numbers right
here.
If you scroll a little bit up, we are getting name servers.
We're getting some postal code street city, basically the physical address, including some phone numbers
as well.
We get information about Admon so we can see the admin name, the organization, Street, City and phone
number, some other information as well, domain status if we go up.
OK, so here is even more information, we get name servers right here, I believe these are the same
as the ones that we passed below.
We get more phone numbers, some email address as well.
So we do get some information right here about the website.
Usually these large outputs will be given for larger websites.
For example, if you were to try who is command on some not that known website, it probably wouldn't
give as much information as we got right here, as always, besides of using command line tools.
Oops, what happened here?
Let's clear the terminal.
And besides using the command line tools that we will always use, you can also take a look at some
website that will also give you information about a different website that is also called Passive Information
Gathering.
Why passive?
Once we pinged our website and we used host and then look up and who is from our command line, we performed
active information gathering because we pretty much interacted with the website the whole time.
But once you do the same thing through a different website, it's called passive information gathering,
because our Target website won't be able to see who searched that information for them because we never
interacted with that website.
We went through a third party website that did all of that for us.
So, for example, we can type websites, IP and find some Web site that will determine the IP of our
target.
Let's visit this first one.
Which is at Lync site twenty four x seven dot com.
And it's pretty much does what it says, it finds an IP address.
So if we were typed, for example, W w w Google dot com.
Find IP, it would give us the IP address of w w w Google dot com and we can also get some other information
if we go to DNS analysis right here.
So we do get something right here.
Here are the name servers.
We got four of them as we should get.
We also get the reverse lookup so we can also perform DNS analysis right here and gather information
from this third party website as well.
OK, awesome, but these are all basic things, so we're pretty much just getting the IP address of
the website for now and we also performed some Google talking in order to find some useful information
that we might need.
We did perform Who is command that gave us some additional information, such as phone numbers, email
addresses and physical location.
But these are all basic stuff.
We want to get to the technical side, our website.
And in the next lecture, we are going to check out a tool called WhatsApp.
That is the tool that you will also use a lot.
And it's pretty useful in discovering technologies that are behind the website.
Nonetheless, thank you for watching and I will see you in the next lecture.