Skip to content

Latest commit

 

History

History
96 lines (75 loc) · 1.81 KB

Readme.md

File metadata and controls

96 lines (75 loc) · 1.81 KB
Raw

Organisation Info Parser

Search for Organisations, ASNs and Networks in a local Whois database.

Expand your attack surface. Useful for doing recon on big companies.

Sources (organisation, inetnum, aut-num):

  • RIPE
  • APNIC
  • AfriNIC

ARIN only provides a public "route" database - so it's not useful for us.

LACNIC only provides a public "inetnum" database, but it doesn't include anything except for CIDRs - useless.

Docker

git clone https://github.com/sttlr/org_info
cd org_info

Then run:

./bin/setup

Or if you want to preserve database files:

./download_dumps.sh
./bin/setup-dev

The container and the database remain, so you can docker stop and docker start when you need to.

Usage

ASN search

Searches for orgname in as-name or description:

./bin/query_asn orgname

Organisation search

Searches for orgname in organisation name or handle:

./bin/query_org orgname

Network (CIDR) search

Searches for orgname in netname or description:

./bin/query_intenum orgname

Spawn interactive PSQL prompt

./bin/psql

Examples

Get CIDRs that belong to Hilton:

$ ./bin/query_inetnum hilton
202.123.21.64/29
196.1.237.136/29
212.0.147.16/29
41.208.5.252/32
212.0.143.88/29
...(SKIPPED)
2a0e:b107:19cf::/48
2001:920:1847:6b00::/56

Get ASNs that belong to Hilton:

$ ./bin/query_asn hilton    
AS135157
AS35748
AS57483

Get Organisation handles that belong to Hilton:

$ ./bin/query_org hilton
ORG-HHL4-AP
ORG-HCA14-RIPE
ORG-IANC2-RIPE
ORG-CJ203-RIPE

Note

Because query scripts use wildcards (ILIKE '%orgname%'), you should double-check the results.

For example, organisation ORG-IANC2-RIPE has a name of Ian Chilton, but it doesn't belong to Hilton. It just so happens that there is "hilton" in a name.