KnockKnock

KnockKnock runs a simple reverse whois lookup which returns a list of domains owned by people or companies.

This tool is often used for reconnaissance or OSINT (Open Source Intelligence) purposes.

Please note that the results can also contain domains that are not owned by the particular target, whereas the target represents a whois guard.

Installation

go install github.com/harleo/[email protected]

This tool requires golang

Options

Usage:
  -n string
        Registrant name, email or domain name of the target (Required)
  -p    Print results

Example

$ knockknock -n google.com -p

[:] Sending query...
028-hty.com
0512zc.cn
--- snip ---
[:] Writing 1000 domain(s) to file...
[:] Done.

Disclaimer

This tool must use an external API such as ReverseWhois (which is subject to rate limiting and a maximum of 1000 domains per query) to retrieve relevant data.