Official Maltego Documentation » Transform Guide » PATERVA CTAS » To Domains [Sharing this NS] << (NSrecord)

To Domains [Sharing this NS]


 

Transform Meta Info

Display Name To Domains [Sharing this NS]
Transform Name NSrecordToDomain_SharedNS
Short Description This transform determines which other domains share this NS record by looking at historical/passive DNS.
Owner Paterva
Author Roelof Temmingh (roelof@paterva.com)
Input NSRecord
Output DNSName

Description

This transform uses a special type of DNS Name - a NS record. It determines which other domains use this DNS Name as an name server.

This is very useful in the infrastructure footprint of an organisation as it can reveal other domains that the organisation uses. If company X's Domain all have NS records pointing to a single DNS name this transform can find all (or most) of these domains. A word of caution - if the target is hosting it's name servers at an ISP then you will end up with a list of domains that hosted by the ISP - normally not the most exciting result.

Typical uses

Domain --> NS Record ==> Related Domains

==> To Domains [Sharing this NS]
--> Related Transform

Example

Starting with the domain "microsoft" we can fetch the related NS records. From the NS records we can find domains using those NS records. This returns hundereds of domains owned by Microsoft and it's subsidiaries.

 

 

 

Continue to the To Email address [From whois info] << (Domain) page.


Official Maltego Documentation
-»
Transform Guide
-»
PATERVA CTAS
-»
To Domains [Sharing this NS] << (NSrecord)

© Copyright 2017, Paterva PTY Limited