Penetration Testing mailing list archives
Re: IP Range
From: David Douthitt <ssrat () mailbag com>
Date: Fri, 30 Aug 2002 09:33:27 -0500
On Thu, Aug 29, 2002 at 01:43:05PM -0700, John Madden wrote:
Where just about to begin a pentest engagement and the client wants us to know if we can find out how many IP blocks they have. Is there a way to find out all the IP blocks of a company ? You've got the usual e-mail domain name to find at least one but what if they have 2,3 + IP blocks ?
If you use jwhois, you can find this information out by jwhois -h whois.arin.net "CompanyName" However, this only reports the blocks that the company itself has registered; if they let their ISP do that, then the ISP will be in the registry, not the company. Of course, if they used private IPs, then you won't find that anywhere anyway. ---------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service. For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
Current thread:
- IP Range John Madden (Aug 30)
- Re: IP Range David Douthitt (Aug 30)
- Re: IP Range Brian O'Berry (Aug 30)
- Re: IP Range Jason (Aug 30)
- <Possible follow-ups>
- RE: IP Range Matthew L. McGuirl (Aug 30)