Paid Advertising
SLA.CKERS.ORG
HA.CKERS SLACKING
This group should mostly be dealing with how web applications enable networking security issues that are otherwise not there. Everything is being tunneled over port 80 now so what does that enable and how do we fix it?
emulating WikiScanner's functionality
Posted by: yawnmoth (IP Logged)
Date: June 02, 2008 11:19AM
According to wikipedia.org, "[the author of WikiScanner] said he used the ip2location database that has "2,668,095 different organizations … which I am using to connect IP#'s to organization names. Within the IP2Location database, there are 187,529 different organizations with at least one anonymous Wikipedia edit."".
My question is, how does ip2location [www.ip2location.com] do it?
whois.arin.net lets me perform searches by OrgName by doing ".OrgName". Is there a way to conduct similar searches on whois.ripe.net? "-i descr OrgName" doesn't seem to work...
And speaking of searching by OrgName, whois.arin.net's searching seems to be limited. +143.231.0.0 yields an OrgName of "Information Systems, U.S. House of Representatives", even though a search for ".House of Representatives" only yields one result - "House of Representatives Computer Center". I don't suppose there's a better way to search it?
Also, say I wanted to lookup the IP addresses associated with a particular organization. I do a search for their name and get their OrgID (say ISUHR). How might I correlate that to their IP addresses? One would think that typing in "!ISUHR" might work, but it doesn't. In fact, it seems to give the same output that you'd get if you did a search for OrgName and only got one result back. (And it doesn't seem that you can get multiple results back with this query, either - "!ISU" yeilds one result, as well).
My question is, how does ip2location [www.ip2location.com] do it?
whois.arin.net lets me perform searches by OrgName by doing ".OrgName". Is there a way to conduct similar searches on whois.ripe.net? "-i descr OrgName" doesn't seem to work...
And speaking of searching by OrgName, whois.arin.net's searching seems to be limited. +143.231.0.0 yields an OrgName of "Information Systems, U.S. House of Representatives", even though a search for ".House of Representatives" only yields one result - "House of Representatives Computer Center". I don't suppose there's a better way to search it?
Also, say I wanted to lookup the IP addresses associated with a particular organization. I do a search for their name and get their OrgID (say ISUHR). How might I correlate that to their IP addresses? One would think that typing in "!ISUHR" might work, but it doesn't. In fact, it seems to give the same output that you'd get if you did a search for OrgName and only got one result back. (And it doesn't seem that you can get multiple results back with this query, either - "!ISU" yeilds one result, as well).
Re: emulating WikiScanner's functionality
Posted by: rsnake (IP Logged)
Date: June 09, 2008 09:49AM
There are a whole bunch of IP2Geo websites out there that sell this information. I used to have one lying around somewhere, but I can't seem to locate it at the moment.
- RSnake
Gotta love it. http://ha.ckers.org
- RSnake
Gotta love it. http://ha.ckers.org
Re: emulating WikiScanner's functionality
Posted by: Awesome AnDrEw (IP Logged)
Date: June 09, 2008 05:55PM
There's a free one written in Java by Johann Burkard available at [johannburkard.de].
Awesome AnDrEw - That's The Sound Of Your Brain Crackin'
[www.awesomeandrew.net]
Awesome AnDrEw - That's The Sound Of Your Brain Crackin'
[www.awesomeandrew.net]
Re: emulating WikiScanner's functionality
Posted by: ntp (IP Logged)
Date: June 18, 2008 07:51PM
rsnake Wrote:
-------------------------------------------------------
> There are a whole bunch of IP2Geo websites out
> there that sell this information. I used to have
> one lying around somewhere, but I can't seem to
> locate it at the moment.
The original, and still master is Quova.
Also see [en.wikipedia.org]
-------------------------------------------------------
> There are a whole bunch of IP2Geo websites out
> there that sell this information. I used to have
> one lying around somewhere, but I can't seem to
> locate it at the moment.
The original, and still master is Quova.
Also see [en.wikipedia.org]
Sorry, only registered users may post in this forum.
sla.ckers.org RSS feed
Board haX0r3d together by ha.ckers.org, forshizzle.
SecTheory Security Consulting *