loading
Loading content
loading
Utilities
Confirm target-org owns the ranges in a whois-file.
overview
Sit this node after a WHOIS or ASN collector and before a port scanner. It takes target-org plus a whois-file and emits only the IP ranges that match the organization you named.
Reach for it when scope is noisy: a string match in WHOIS can pull hosting-provider or unrelated netblocks. Ownership checks keep scans inside authorized address space.
Unlike asnmap or a raw whois lookup, this step does not discover ranges. Feed it collected records; hand confirmed CIDRs to naabu or nmap.
use cases
Match WHOIS records to the target organization so only verified, owned IP ranges flow into the next scanning stage.
Filter out ranges that share a name but belong to a hosting provider or third party, keeping the assessment inside authorized address space.
Hand the verified ranges to a scanner such as naabu or nmap so port discovery runs against confirmed-owned hosts.
Tie found hosts back to the organization that owns the range, so external asset-discovery findings carry clear ownership for reporting.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| target-org | STRING | · | Organization name to verify ownership against. |
| whois-file | FILE | · | WHOIS data file the verification reads its ranges from. |
Showing key inputs. whois-verify-targets exposes 2 inputs in total.
example
# confirm Example Corp owns the IP ranges in the collected WHOIS datawhois-verify-targets 'Example Corp' whois.txt[+] target organization: Example Corp[+] parsed 7 netblocks from whois.txt[+] verified 4 ranges owned by Example Corp198.51.100.0/24198.51.100.0/25203.0.113.0/24203.0.113.0/25[-] skipped 3 ranges (registered to hosting providers)guidance
Use after a WHOIS or ASN collect and before scanning, when you must prove target-org owns the ranges in whois-file. Pair with asnmap or whois upstream; this node only filters ownership.
Maps org or ASN to CIDRs. Run upstream to gather ranges this tool verifies.
Forward WHOIS that produces the whois-file this node consumes.
Broader OSINT that can surface org-linked netblocks during attack-surface mapping.
faq
related
Spider a URL and return a wordlist for password crackers.
Wordlist and mined-word subdomain permutation.
Import, export, and upsert workflow data against an Airtable base.
Decode Android APK files into smali sources and resources.
Check a file's values against conditions and exit with a matching code.
Authenticated Route53 hosted-zone inventory.
An organization name and a WHOIS file feed whois-verify-targets, which returns the confirmed-owned IP ranges as a queryable output.
Facts on this page come from the live Trickest tool library.