hakip2host

hakip2host takes a list of IP addresses via stdin, file, or command line arguments, then does a series of checks to return associated domain names.

Current supported checks are:

• DNS PTR lookups
• Subject Alternative Names (SANs) on SSL certificates
• Common Names (CNs) on SSL certificates

Installation

Install golang, then:

go install github.com/szybnev/hakip2host@latest

Help

./hakip2host --help

Usage

Input via stdin (original method)

hakluke$ prips 173.0.84.0/24 | ./hakip2host

Input via file (-l/--list)

hakluke$ ./hakip2host -l ips.txt
hakluke$ ./hakip2host --list ips.txt

File format (ips.txt):

192.168.1.1
10.0.0.0/24
# Comments are ignored
172.16.0.1

Input via CLI argument (-i/--input)

hakluke$ ./hakip2host -i 192.168.1.1
hakluke$ ./hakip2host --input 10.0.0.0/24

Flags

• -h, --help - Help menu
• -l, --list - File containing list of IP addresses/CIDR blocks
• -i, --input - Single IP address or CIDR block
• -o, --output - Save stdout to file

Example output

$ print 173.0.84.0/24 | ./hakip2host
[DNS-PTR] 173.0.84.23 new-creditcenter.paypal.com.
[DNS-PTR] 173.0.84.11 slc-a-origin-www-1.paypal.com.
[DNS-PTR] 173.0.84.10 admin.paypal.com.
[DNS-PTR] 173.0.84.30 ss-www.paypal.com.
[DNS-PTR] 173.0.84.5 www.gejscript-paypal.com.
[DNS-PTR] 173.0.84.24 slc-a-origin-demo.paypal.com.
[DNS-PTR] 173.0.84.20 origin-merchantweb.paypal.com.
[SSL-SAN] 173.0.84.67 uptycspay.paypal.com
[SSL-SAN] 173.0.84.67 a.paypal.com
[SSL-CN] 173.0.84.67 api.paypal.com
[SSL-SAN] 173.0.84.76 svcs.paypal.com
[SSL-SAN] 173.0.84.76 uptycshon.paypal.com
[SSL-SAN] 173.0.84.76 uptycshap.paypal.com
[SSL-SAN] 173.0.84.76 uptycsven.paypal.com
[SSL-SAN] 173.0.84.76 uptycsize.paypal.com
[SSL-SAN] 173.0.84.76 uptycspay.paypal.com
[SSL-CN] 173.0.84.76 svcs.paypal.com