Passive reconnaissance is a crucial phase in cybersecurity where information about a target is gathered without directly interacting with it.
This minimises the risk of detection while providing valuable intelligence.
This blog, explores essential tools and techniques used for passive reconnaissance.
We will cover the following topics:
- whois - Retrieves domain registration information.
- nslookup - Queries DNS records.
- dig - Performs detailed DNS lookups.
- DNSDumpster - Online tool for domain intelligence.
- Shodan.io - A search engine for internet-connected devices.
Prerequisites: A basic understanding of networking and command-line tools is recommended. If needed, refer to introductory networking modules before proceeding.
whois is a protocol used to query domain registration databases. It provides details such as:
- Registrar Information
- The entity managing the domain.
- Registrant Details
- Owner information (if not hidden by privacy services).
- Domain Status - Creation, expiration, and update dates.
- Name Servers - DNS servers handling domain resolution.
Running a Whois Query
To perform a lookup, use the following command:
whois DOMAIN_NAME
Example:
whois tryhackme.com
Sample Output:
Domain name: tryhackme.com
Registrar: NAMECHEAP INC
Creation Date: 2018-07-05
Expiration Date: 2027-07-05
Name Server: ns1.tryhackme.com
Why is this useful?Sub-AUA: How Does It Work?
-Identifies potential social engineering targets.
- Reveals domain expiration details for security monitoring.
- Helps find email servers or DNS misconfigurations.
Note: Many registrars use privacy protection services, limiting visibility into owner details.
CIDR: What is CIDR?
The Central Identities Data Repository (CIDR) is the backbone of the Aadhaar system, storing and managing all Aadhaar-related demographic and biometric data.
Key Responsibilities of CIDR
- Data Verification: Authenticating Aadhaar credentials during service requests.
- Data Security: Ensuring encryption and restricted access to sensitive information.
Security Features of CIDR
- Encryption: Multi-layered encryption protects user data.
- Access Control: Only authorized entities can access CIDR under strict guidelines outlined in the Aadhaar Act.
Importance of CIDR
- CIDR is the central hub that ensures accurate, secure, and efficient identity verification, supporting billions of transactions every day.
- User Interaction: Users provide Aadhaar details and consent for authentication.
- Request Generation: AUAs/KUAs collect data and forward it to the ASA.
- Secure Routing: ASA securely transmits requests to the CIDR.
- Verification: CIDR authenticates the user’s data and returns the result.
- Service Delivery: AUAs/KUAs utilize the verified data for service delivery.
- Sub-AUA/Sub-KUA Integration: Smaller entities leverage their parent AUA/KUA infrastructure for seamless operations.
The Aadhaar ecosystem is a meticulously designed network of components—AUA, Sub-AUA, KUA, Sub-KUA, ASA, KSA, and CIDR. Together, they ensure secure and efficient identity verification, enabling Aadhaar to power India’s digital transformation. With its seamless integration and robust security measures, Aadhaar is paving the way for transparent and inclusive access to services across sectors.
References & Additional Resources
- UIDAI Official Website
- Aadhaar Data Vault Guidelines
- National Payments Corporation of India (NPCI)
- GDPR Compliance
- ISO 27001 Standards
.png)
