Episode Details

Back to Episodes
Course 35 - Footprinting and Reconnaissance | Episode 2: Gathering Intelligence with NSlookup and WHOIS

Course 35 - Footprinting and Reconnaissance | Episode 2: Gathering Intelligence with NSlookup and WHOIS

Published 4 days, 7 hours ago
Description
In this lesson, you’ll learn about: network footprinting using NSlookup and WHOIS1. What is Network Footprinting?
  • The process of gathering technical information about a target domain
  • Focuses on:
    • DNS data
    • IP addresses
    • Domain ownership
👉 Goal:
  • Build a clear profile of the target’s infrastructure
2. Using NSlookup (DNS Intelligence)🔹 Tool Overview
  • NSlookup
  • A command-line tool used to query:
    • DNS (Domain Name System) records
🔹 What You Can Discover
  • Domain → IP address mapping
  • DNS servers
  • Network-related details
🔹 Interactive Mode
  • Allows advanced queries like:
    • MX Records (Mail Servers)
      • Identify email infrastructure
👉 Why it matters:
  • Reveals:
    • Email servers
    • Attack surface for phishing or targeting
3. Using WHOIS (Administrative Intelligence)🔹 Tool Overview
  • WHOIS
  • Often accessed via:
    • ICANN
🔹 What You Can Discover
  • Domain registrar
  • Registration & expiration dates
  • Name servers
  • Contact details:
    • Emails
    • Phone numbers
    • Addresses
4. Key Data ExtractedData TypeSourceValueIP AddressNSlookupNetwork targetingMX RecordsNSlookupEmail infrastructureRegistrar InfoWHOISDomain ownershipContact DetailsWHOISSocial engineeringName ServersBothInfrastructure mapping5. Strategic Importance
  • This data helps build:
    • A complete footprint of the target
🔹 Potential Use Cases (High-Level)
  • Identifying:
    • Entry points
    • Services to investigate
  • Supporting:
    • Security assessments
    • Risk analysis
6. Role in Footprinting Phase
  • Part of:
    • Early-stage reconnaissance
👉 It enables you to:
  • Move from:
    • Domain name → full infrastructure visibility
Key Takeaways
  • NSlookup is used for DNS-level intelligence
  • WHOIS provides administrative and ownership data
  • MX records reveal email systems
  • Public data can expose critical infrastructure details
  • Footprinting is the foundation of any security assessment
Big PictureThis stage is about:👉 Turning public data into actionable intelligence
  • Before any testing begins
  • You must understand:
    • Who owns the system
    • How it is structured
    • What services it exposes
Mental Model
  • NSlookup → “Where is the system?”
  • WHOIS → “Who owns the system?”


You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
Listen Now

Love PodBriefly?

If you like Podbriefly.com, please consider donating to support the ongoing development.

Support Us