Skip to content

Latest commit

 

History

History
41 lines (30 loc) · 1.08 KB

ASNs-CIDRs-IPs.md

File metadata and controls

41 lines (30 loc) · 1.08 KB

Autonomous System Numbers (ASN)

ASN's

AS Numbers belonging to an organization the below search engines can be used. I do this manually as automated tools often throw false positive results.

CIDR/IP Ranges

CIDR/IP Ranges associated with ASN's.

  • Returns IPv4 and IPv6 prefixes
curl -s "https://stat.ripe.net/data/announced-prefixes/data.json?resource=AS12345" | jq '.data.prefixes[].prefix'
  • Returns only IPv4 prefixes
curl -s "https://stat.ripe.net/data/announced-prefixes/data.json?resource=AS31004" | jq -r '.data.prefixes[] | select(.prefix | contains(":") | not) | .prefix'

IP's

Expand the CIDR/IP Ranges to IP addresses.

cat cidrs.txt | xargs -n 1 prips > expanded_ips.txt

Subdomains

Do reverse DNS loopups to find domains and subdomains belonging to a company from their IP addresses.

cat expanded_ips.txt | hakrevdns -R trusted_resolvers.txt -d | reverse_dns.txt