selam beyler
SALDIRI Modellemesi:
1- Ana domain'de açık bul.
1.A - Subdomain'de açık bul.
şimdi subdomain bulucu 2 yöntem ve 3 tool kullanımı göstereceğim.
Yöntem-1: Deneme-Yanılma Yoluyla
1- dnsmap
kullanımı : dnsmap site.com
2- dnsdict6
kullanımı : atk6-dnsdict6 site.com
3- fierce
kullanımı : fierce -dns site.com
Yöntem-2: Dork Yoluyla
Dork: site:*.metu.edu.tr
Kaynak: Kodlab - Kali Linux
SALDIRI Modellemesi:
1- Ana domain'de açık bul.
1.A - Subdomain'de açık bul.
şimdi subdomain bulucu 2 yöntem ve 3 tool kullanımı göstereceğim.
Yöntem-1: Deneme-Yanılma Yoluyla
1- dnsmap
kullanımı : dnsmap site.com
Code:
┌─[root@parrot]─[~]
└──╼ #dnsmap metu.edu.tr
dnsmap 0.30 - DNS Network Mapper by pagvac (gnucitizen.org)
[+] searching (sub)domains for metu.edu.tr using built-in wordlist
[+] using maximum random delay of 10 millisecond(s) between requests
ae.metu.edu.tr
IP address #1: 144.122.72.2
ak.metu.edu.tr
IP address #1: 144.122.145.133
ba.metu.edu.tr
IP address #1: 144.122.145.133
bi.metu.edu.tr
IP address #1: 144.122.145.145
blog.metu.edu.tr
IP address #1: 144.122.145.171
bs.metu.edu.tr
IP address #1: 144.122.145.145
ca.metu.edu.tr
IP address #1: 144.122.144.164
catalog.metu.edu.tr
IP address #1: 144.122.144.142
cc.metu.edu.tr
IP address #1: 144.122.145.146
ce.metu.edu.tr
IP address #1: 144.122.145.133
ci.metu.edu.tr
IP address #1: 144.122.145.133
cs.metu.edu.tr
IP address #1: 144.122.145.145
es.metu.edu.tr
IP address #1: 144.122.145.133
ftp.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:f101
ftp.metu.edu.tr
IP address #1: 144.122.144.177
go.metu.edu.tr
IP address #1: 144.122.144.164
gs.metu.edu.tr
IP address #1: 144.122.145.133
gt.metu.edu.tr
IP address #1: 144.122.144.164
guide.metu.edu.tr
IP address #1: 144.122.56.20
helpdesk.metu.edu.tr
IP address #1: 144.122.144.176
hi.metu.edu.tr
IP address #1: 144.122.145.145
hm.metu.edu.tr
IP address #1: 144.122.145.145
ia.metu.edu.tr
IP address #1: 144.122.144.164
id.metu.edu.tr
IP address #1: 144.122.144.169
ie.metu.edu.tr
IP address #1: 144.122.145.145
ii.metu.edu.tr
IP address #1: 144.122.145.145
im.metu.edu.tr
IP address #1: 144.122.145.174
imap.metu.edu.tr
IP address #1: 144.122.145.184
ipv6.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:5a9f
ipv6.metu.edu.tr
IP address #1: 144.122.144.190
ir.metu.edu.tr
IP address #1: 144.122.145.133
jt.metu.edu.tr
IP address #1: 144.122.145.171
library.metu.edu.tr
IP address #1: 144.122.201.150
login.metu.edu.tr
IP address #1: 144.122.144.55
mail.metu.edu.tr
IP address #1: 144.122.145.140
me.metu.edu.tr
IP address #1: 144.122.145.145
mi.metu.edu.tr
IP address #1: 144.122.145.145
mobile.metu.edu.tr
IP address #1: 144.122.144.147
mt.metu.edu.tr
IP address #1: 144.122.144.164
my.metu.edu.tr
IP address #1: 144.122.145.135
net.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:5a9f
net.metu.edu.tr
IP address #1: 144.122.144.190
ns1.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:ad01
ns1.metu.edu.tr
IP address #1: 144.122.144.171
ns2.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:ad02
ns2.metu.edu.tr
IP address #1: 144.122.144.170
pa.metu.edu.tr
IP address #1: 144.122.144.164
po.metu.edu.tr
IP address #1: 144.122.145.133
pop3.metu.edu.tr
IP address #1: 144.122.145.184
portal.metu.edu.tr
IP address #1: 144.122.144.48
rd.metu.edu.tr
IP address #1: 144.122.144.164
research.metu.edu.tr
IP address #1: 144.122.144.164
ro.metu.edu.tr
IP address #1: 144.122.144.164
sa.metu.edu.tr
IP address #1: 144.122.145.133
sb.metu.edu.tr
IP address #1: 144.122.144.169
services.metu.edu.tr
IP address #1: 144.122.144.108
sm.metu.edu.tr
IP address #1: 144.122.145.145
smtp.metu.edu.tr
IP address #1: 144.122.145.140
sp.metu.edu.tr
IP address #1: 144.122.145.145
tf.metu.edu.tr
IP address #1: 144.122.144.169
tt.metu.edu.tr
IP address #1: 144.122.144.164
vr.metu.edu.tr
IP address #1: 144.122.144.169
vw.metu.edu.tr
IP address #1: 144.122.144.164
web.metu.edu.tr
IPv6 address #1: 2001:a98:30:cc::4:8611
web.metu.edu.tr
IP address #1: 144.122.144.137
webadmin.metu.edu.tr
IP address #1: 144.122.145.133
webmail.metu.edu.tr
IP address #1: 144.122.144.156
www.metu.edu.tr
IP address #1: 144.122.145.153
[+] 68 (sub)domains and 68 IP address(es) found
[+] completion time: 781 second(s)
┌─[root@parrot]─[~]
└──╼ #
2- dnsdict6
kullanımı : atk6-dnsdict6 site.com
3- fierce
kullanımı : fierce -dns site.com
Code:
┌─[root@parrot]─[~]
└──╼ #fierce -dns metu.edu.tr
DNS Servers for metu.edu.tr:
ns2.metu.edu.tr
ns1.metu.edu.tr
Trying zone transfer first...
Testing ns2.metu.edu.tr
Request timed out or transfer not allowed.
Testing ns1.metu.edu.tr
Request timed out or transfer not allowed.
Unsuccessful in zone transfer (it was worth a shot)
Okay, trying the good old fashioned way... brute force
Checking for wildcard DNS...
Nope. Good.
Now performing 2280 test(s)...
144.122.72.2 ae.metu.edu.tr
144.122.145.130 lamus.cc.metu.edu.tr
144.122.145.131 korasion.general.services.metu.edu.tr.
144.122.145.132 korikos.general.services.metu.edu.tr.
144.122.145.133 labranda.general.services.metu.edu.tr.
144.122.145.134 hasankeyf.general.services.metu.edu.tr.
144.122.145.135 letoon.general.services.metu.edu.tr.
144.122.145.136 orfe.cc.metu.edu.tr
144.122.145.137 odtuclass2016sum.metu.edu.tr
144.122.145.138 ani-eski.general.services.metu.edu.tr.
144.122.145.139 samsat.general.services.metu.edu.tr.
144.122.145.140 frigya.general.services.metu.edu.tr.
144.122.145.141 varya.general.services.metu.edu.tr.
144.122.145.144 cordella.general.services.metu.edu.tr.
144.122.145.149 imprx03.general.services.metu.edu.tr.
144.122.145.150 martin.general.services.metu.edu.tr.
144.122.145.151 dng01.general.services.metu.edu.tr.
144.122.145.152 dng02.general.services.metu.edu.tr.
144.122.145.153 dng03.general.services.metu.edu.tr.
144.122.145.154 larissa.general.services.metu.edu.tr.
144.122.145.155 arsada.general.services.metu.edu.tr.
144.122.145.156 login2.metu.edu.tr
144.122.145.157 brussa.general.services.metu.edu.tr.
144.122.145.159 pervari.general.services.metu.edu.tr.
144.122.145.160 hattusas.general.services.metu.edu.tr.
144.122.145.161 adalia.general.services.metu.edu.tr.
144.122.145.162 bargilya.general.services.metu.edu.tr.
144.122.145.163 colossa.general.services.metu.edu.tr.
144.122.145.164 daskileon.general.services.metu.edu.tr.
144.122.145.166 odtuclass2016s.metu.edu.tr
144.122.145.167 sura20141.general.services.metu.edu.tr.
144.122.145.168 sura20161.general.services.metu.edu.tr.
144.122.145.169 sura2017s.general.services.metu.edu.tr.
144.122.145.170 sura20151.general.services.metu.edu.tr.
144.122.145.173 sura20153.general.services.metu.edu.tr.
144.122.145.174 gordion.cc.metu.edu.tr
144.122.145.175 tutkarin-cc.general.services.metu.edu.tr.
144.122.145.176 ebys.metu.edu.tr
144.122.145.177 fiskos.general.services.metu.edu.tr.
144.122.145.178 tenedos.general.services.metu.edu.tr.
144.122.145.179 tripolis.general.services.metu.edu.tr.
144.122.145.180 santos.general.services.metu.edu.tr.
144.122.145.182 kalkedon.general.services.metu.edu.tr.
144.122.145.183 nisa2.general.services.metu.edu.tr.
144.122.145.184 imap.metu.edu.tr
144.122.145.185 goknar.general.services.metu.edu.tr.
144.122.145.186 sura2017f.general.services.metu.edu.tr.
144.122.145.187 imprx01.general.services.metu.edu.tr.
144.122.145.188 imprx02.general.services.metu.edu.tr.
144.122.145.133 ak.metu.edu.tr
144.122.144.137 ankyra.general.services.metu.edu.tr.
144.122.144.132 sardis.general.services.metu.edu.tr.
144.122.144.127 prntrnx.registration.services.metu.edu.tr.
144.122.144.122 milas-yeni.cc.metu.edu.tr
144.122.144.117 milasd0.registration.services.metu.edu.tr.
144.122.144.112 terme.registration.services.metu.edu.tr.
144.122.144.107 milas.registration.services.metu.edu.tr.
144.122.144.104 lpar1.registration.services.metu.edu.tr.
144.122.144.99 kg.registration.services.metu.edu.tr.
144.122.144.94 mindosmgr.general.services.metu.edu.tr.
144.122.144.89 apollon6.registration.services.metu.edu.tr.
144.122.144.84 apollon1.registration.services.metu.edu.tr.
144.122.144.79 klaros.registration.services.metu.edu.tr.
144.122.144.77 kdng01.registration.services.metu.edu.tr.
144.122.144.80 register.metu.edu.tr
144.122.144.81 perge.registration.services.metu.edu.tr.
144.122.144.82 pisidia.registration.services.metu.edu.tr.
144.122.144.85 apollon2.registration.services.metu.edu.tr.
144.122.144.86 apollon3.registration.services.metu.edu.tr.
144.122.144.87 apollon4.registration.services.metu.edu.tr.
144.122.144.88 apollon5.registration.services.metu.edu.tr.
144.122.144.90 mindos1.registration.services.metu.edu.tr.
144.122.144.91 mindos2.registration.services.metu.edu.tr.
144.122.144.92 mindos.registration.services.metu.edu.tr.
144.122.144.93 mindos3.registration.services.metu.edu.tr.
144.122.144.97 apollon7.registration.services.metu.edu.tr.
144.122.144.98 apollon8.registration.services.metu.edu.tr.
144.122.144.105 lpar2.registration.services.metu.edu.tr.
144.122.144.106 lpar3.registration.services.metu.edu.tr.
144.122.144.108 goktepe.registration.services.metu.edu.tr.
144.122.144.109 harput.registration.services.metu.edu.tr.122.144.in-addr.arpa.
144.122.144.110 lpr2d0.registration.services.metu.edu.tr.
144.122.144.111 artemis1.registration.services.metu.edu.tr.
144.122.144.113 termed0.registration.services.metu.edu.tr.
144.122.144.114 lpr3d0.database.services.metu.edu.tr.
144.122.144.115 lpar1klon.registration.services.metu.edu.tr.
144.122.144.116 gobeklitepe.registration.services.metu.edu.tr.
144.122.144.118 artemis.registration.services.metu.edu.tr.
144.122.144.119 kayit-temp.registration.services.metu.edu.tr.122.144.in-addr.arpa.
144.122.144.121 demre.registration.services.metu.edu.tr.
144.122.144.123 lpar1eski.registration.services.metu.edu.tr.
144.122.144.124 gupi.registration.services.metu.edu.tr.
144.122.144.126 catalhoyuk.registration.services.metu.edu.tr.
144.122.144.129 gw.general.services.metu.edu.tr
144.122.144.130 didim.general.services.metu.edu.tr.
144.122.144.131 apomea.general.services.metu.edu.tr.
144.122.144.133 sia2c.cc.metu.edu.tr
144.122.144.135 abdera.general.services.metu.edu.tr.
144.122.144.138 magellan.general.services.metu.edu.tr.
144.122.144.139 abidos.general.services.metu.edu.tr.
144.122.144.140 milet-y.general.services.metu.edu.tr.
144.122.144.141 ocean.general.services.metu.edu.tr.
144.122.144.142 milet.general.services.metu.edu.tr.
144.122.144.143 alabanda.general.services.metu.edu.tr.
144.122.144.144 lagun.general.services.metu.edu.tr.
144.122.144.145 lytri.general.services.metu.edu.tr.
144.122.144.146 ftpkernel.metu.edu.tr
144.122.144.147 daphne.cc.metu.edu.tr
144.122.144.148 demreski.general.services.metu.edu.tr.
144.122.144.149 hasankeyf-test.general.services.metu.edu.tr.
144.122.144.151 cds.cc.metu.edu.tr
144.122.144.153 limyra.general.services.metu.edu.tr.
144.122.144.154 phaselis.general.services.metu.edu.tr.
144.122.144.155 balina-yeni.general.services.metu.edu.tr.
144.122.144.156 neocean.general.services.metu.edu.tr.
144.122.144.158 gergis.general.services.metu.edu.tr.
144.122.144.160 sagalasos.general.services.metu.edu.tr.
144.122.144.161 akalisus.general.services.metu.edu.tr.
144.122.144.162 amisos.general.services.metu.edu.tr.
144.122.144.163 ankyra2.general.services.metu.edu.tr.
144.122.144.165 sestos.general.services.metu.edu.tr.
144.122.144.166 ozkonak.general.services.metu.edu.tr.
144.122.144.167 imbros.general.services.metu.edu.tr.
144.122.144.168 mestos.general.services.metu.edu.tr.
144.122.144.169 elaia.general.services.metu.edu.tr.
144.122.144.170 ns2.metu.edu.tr
144.122.144.171 ns1.metu.edu.tr
144.122.144.172 iasos.general.services.metu.edu.tr.
144.122.144.173 salamis.general.services.metu.edu.tr.
144.122.144.174 hidas.general.services.metu.edu.tr.
144.122.144.175 tutkarin.general.services.metu.edu.tr.
144.122.144.176 fertek.general.services.metu.edu.tr.
144.122.144.177 kaymakli.general.services.metu.edu.tr.
144.122.144.178 aspendos.general.services.metu.edu.tr.
144.122.144.179 parion.cc.metu.edu.tr
144.122.144.180 bergama.general.services.metu.edu.tr.
144.122.144.181 mucur.general.services.metu.edu.tr.
144.122.144.182 allianoi.general.services.metu.edu.tr.
144.122.144.183 ankyraf.general.services.metu.edu.tr.
144.122.144.184 pinara.general.services.metu.edu.tr.
144.122.144.185 uzuncaburc.general.services.metu.edu.tr.
144.122.144.186 neapolis.general.services.metu.edu.tr.
144.122.144.187 doron.general.services.metu.edu.tr.
144.122.144.188 guzelyurt.cc.metu.edu.tr
144.122.144.189 nemrut.general.services.metu.edu.tr.
144.122.144.190 deimos.general.services.metu.edu.tr.
144.122.144.194 ankyram.database.services.metu.edu.tr.
144.122.144.142 application.metu.edu.tr
144.122.145.133 ars.metu.edu.tr
144.122.144.130 auth.metu.edu.tr
144.122.145.133 ba.metu.edu.tr
144.122.145.133 bbs.metu.edu.tr
144.122.145.145 bi.metu.edu.tr
144.122.145.171 blog.metu.edu.tr
144.122.1.200 cache-gw.cc.metu.edu.tr
144.122.1.199 tarator.metu.edu.tr
144.122.1.201 borda.metu.edu.tr
144.122.1.202 cache2.metu.edu.tr
144.122.1.203 cache3.metu.edu.tr
144.122.1.205 border.metu.edu.tr
144.122.145.145 bs.metu.edu.tr
144.122.144.164 ca.metu.edu.tr
144.122.1.201 cache.metu.edu.tr
144.122.144.142 catalog.metu.edu.tr
144.122.145.146 cc.metu.edu.tr
144.122.144.137 cgi.metu.edu.tr
144.122.145.133 ci.metu.edu.tr
144.122.145.133 conf.metu.edu.tr
144.122.145.145 cs.metu.edu.tr
144.122.144.164 designer.metu.edu.tr
144.122.145.133 es.metu.edu.tr
144.122.56.96 kursat.ceit.metu.edu.tr
144.122.56.92 deploy-pc.ceit.metu.edu.tr
144.122.56.87 polo.ceit.metu.edu.tr
144.122.56.84 floss.ceit.metu.edu.tr
144.122.56.86 ceit420.ceit.metu.edu.tr
144.122.56.90 gulenay.ceit.metu.edu.tr
144.122.56.97 kc.ceit.metu.edu.tr
144.122.56.99 itserver.ceit.metu.edu.tr
144.122.56.100 lab.ceit.metu.edu.tr
144.122.56.98 eta.metu.edu.tr
144.122.144.177 ftp.metu.edu.tr
144.122.144.177 ftp2.metu.edu.tr
144.122.144.164 go.metu.edu.tr
144.122.145.133 gs.metu.edu.tr
144.122.144.164 gt.metu.edu.tr
144.122.144.176 helpdesk.metu.edu.tr
144.122.145.145 hi.metu.edu.tr
144.122.145.145 hm.metu.edu.tr
144.122.144.164 ia.metu.edu.tr
144.122.144.169 id.metu.edu.tr
144.122.145.145 ie.metu.edu.tr
144.122.145.174 im.metu.edu.tr
144.122.145.133 ir.metu.edu.tr
144.122.145.146 lib.metu.edu.tr
144.122.201.150 lidya.external.servers.metu.edu.tr.
144.122.201.152 misya.external.services.metu.edu.tr.
144.122.201.150 library.metu.edu.tr
144.122.144.53 trapezos.cc.metu.edu.tr
144.122.144.48 amida.cc.metu.edu.tr
144.122.144.43 knossos.cc.metu.edu.tr
144.122.144.40 lamida.cc.metu.edu.tr
144.122.144.37 ainos.cc.metu.edu.tr
144.122.144.42 ida.cc.metu.edu.tr
144.122.144.44 phaistos.cc.metu.edu.tr
144.122.144.45 zakros.cc.metu.edu.tr
144.122.144.46 agonya.cc.metu.edu.tr
144.122.144.47 byze.cc.metu.edu.tr
144.122.144.49 dardania.cc.metu.edu.tr
144.122.144.54 troya.cc.metu.edu.tr
144.122.144.55 zelitis.cc.metu.edu.tr
144.122.144.55 login.metu.edu.tr
144.122.145.140 mail.metu.edu.tr
144.122.144.175 map.metu.edu.tr
144.122.145.145 me.metu.edu.tr
144.122.145.145 mi.metu.edu.tr
144.122.144.147 mobile.metu.edu.tr
144.122.144.190 monitor.metu.edu.tr
144.122.144.164 mt.metu.edu.tr
144.122.145.135 my.metu.edu.tr
144.122.144.190 net.metu.edu.tr
144.122.144.164 pa.metu.edu.tr
^C
┌─[✗]─[root@parrot]─[~]
└──╼ #
Yöntem-2: Dork Yoluyla
Dork: site:*.metu.edu.tr
Kaynak: Kodlab - Kali Linux