loading
Loading content
loading
Recon
Get WHOIS data through ripe.net.
overview
whois-with-ripe takes a hostname and queries the RIPE.net WHOIS database for the registration and network-ownership records behind it. RIPE is the regional internet registry for Europe, the Middle East, and parts of Central Asia, so routing a lookup through it returns the authoritative allocation data for ranges that registry manages instead of a generic WHOIS mirror.
The script is deliberately narrow. You hand it one hostname and it returns the WHOIS response as structured output, with no flags to tune. That makes it a clean building block: it runs one query and writes the result where the next stage can read it.
On Trickest, whois-with-ripe is a Recon node that takes a hostname and writes a file and a folder of results. Run it early to attribute an asset to an organization or a netblock, then feed the ownership data into scoping, ASN expansion, or reverse-WHOIS pivots.
source github.com/trickest
use cases
Query a hostname through RIPE to recover the registered netblock owner and contact handles, confirming an asset belongs to the target before you scope further work.
Resolve the inetnum record that contains a hostname so you can read the netname, org, and country for the allocation and pivot from one asset to the surrounding range.
Pull the org and maintainer fields, then feed them into a reverse-WHOIS tool to find sibling domains and networks registered under the same entity.
Run the lookup across discovered hosts to attach registry ownership records to each one, turning a flat host list into an attributed inventory for OSINT triage.
reference
| Name | Type | Flag | Description |
|---|---|---|---|
| hostname | STRING | · | Hostname to look up WHOIS and network-ownership records for through RIPE.net. |
Showing key inputs. whois-with-ripe exposes 1 inputs in total.
example
# look up a host's WHOIS and network-ownership record through RIPE.netwhois-with-ripe example.cominetnum: 198.51.100.0 - 198.51.100.255netname: EXAMPLE-DOC-NETdescr: Example Documentation Networkcountry: NLorg: ORG-EX1-RIPEadmin-c: EXA7-RIPEstatus: ASSIGNED PAmnt-by: EXAMPLE-MNTcreated: 2018-11-06T13:42:00Zsource: RIPE # Filteredguidance
Use whois-with-ripe when a target sits in RIPE's region and you want registry-authoritative ownership data for a single hostname. For bulk reverse lookups by org or email, reach for whoisninja instead.
Reverse WHOIS by org, email, phone, or domain. Use it to pivot from owner to assets, not to read one host.
Maps a target to its ASN and CIDR ranges. Pair it with RIPE WHOIS for full network attribution.
faq
related
Asynchronous DNS brute-force tool for fast subdomain enumeration.
OWASP Amass: network mapping and external asset discovery.
OWASP Amass intel: find an organization's root domains and ranges.
OWASP Amass enumeration that produces structured JSON output.
Find related domains and subdomains via shared Google Analytics IDs.
Find domains and subdomains potentially related to a given domain.
A hostname feeds whois-with-ripe, which queries the RIPE database and writes the registration records as a file the next stage can pivot on.
Facts on this page come from the live Trickest tool library.