KnockKnock runs a simple reverse whois lookup which returns a list of domains owned by people or companies.
This tool is often used for reconnaissance or OSINT (Open Source Intelligence) purposes.
Please note that the results can also contain domains that are not owned by the particular target, whereas the target represents a whois guard.
go install github.com/harleo/[email protected]
This tool requires golang
Usage: -n string Registrant name, email or domain name of the target (Required) -p Print results
$ knockknock -n google.com -p [:] Sending query... 028-hty.com 0512zc.cn --- snip --- [:] Writing 1000 domain(s) to file... [:] Done.
This tool must use an external API such as ReverseWhois (which is subject to rate limiting and a maximum of 1000 domains per query) to retrieve relevant data.