WHOIS the boss? Building Your Own WHOIS Dataset for Reconnaissance

Ground Floor, Tue, Aug 6, 17:30 - Tue, Aug 6, 17:50 CDT When it comes to OSINT and penetration testing, WHOIS data is among the prime resources for uncovering and examining apex domains. Unfortunately that data is typically locked up behind rate lim...

Ground Floor, Tue, Aug 6, 17:30 - Tue, Aug 6, 17:50 CDT

When it comes to OSINT and penetration testing, WHOIS data is among the prime resources for uncovering and examining apex domains. Unfortunately that data is typically locked up behind rate limited systems, third party APIs, and expensive bulk purchases. In this 20 minute technical presentation we give our experience building a 15MM+ WHOIS dataset for recon, setting up notifications on newly acquired domains by companies, the intricacies of WHOIS and RDAP, and hunting for archival WHOIS data. Finally, we will cover open source tools that currently fill in the gaps of this process.

People
Will Vandevanter