3 ms·
How do you guys go about doing this? Is there some techy/reverse engineering way or you manually asking each department which domains they have?
by chirau 2y ago
How do you guys go about doing this? Is there some techy/reverse engineering way or you manually asking each department which domains they have?
- TechRemarker 2y agoDid you open the link? The the very top says Data Source: https://manage.get.gov/api/v1/get-report/current-full https://manage.get.gov/api/v1/get-report/current-full. Public API provides them all, this is just a website to more easily view that data.
- rayhaanj 2y agoYou can download a list from here too: https://github.com/cisagov/dotgov-data/blob/main/current-full.csv https://github.com/cisagov/dotgov-data/blob/main/current-ful...
- chippiewill 2y agoEven if there weren't official records, you'd probably be able to get a list of most of them out of the certificate transparency logs (Obviously that would just miss out the non-https enabled ones - less of those these days).
- MediumOwl 2y agoThere are also Whois DB services, that will provide you with all domains on a given TLD.
- bdavbdav 2y agoIt’s probably the non SSL ones that nefarious actors would find really interesting in the list, as who knows what else is up with them. I suspect the non ssl ones aren’t holding anything particularly useful at this stage though.
- astura 2y agoThis info is provided by the registrar https://get.gov/about/data/ https://get.gov/about/data/
- tephra 2y agoThere are a variety of ways! Some TLDs gives you open access to just query the DNS and do an AXFR (download the whole zone), for example the .se and .nu ccTLDs (which I happen to work for the foundation managing those): dig @zonedata.iis.se se AXFR > se.zone.txt For some zones you could use NSEC traversal https://linux.die.net/man/1/walker https://linux.die.net/man/1/walker For the new gTLDs (.app, .dev, .xyz, etc, etc) there is the Centralized Zone Data Service provided by icann: https://czds.icann.org/home https://czds.icann.org/home where you can request access to zones.
- chirau 2y agoI would want to do .gov.zw How would I know if they have open access?
- TZubiri 2y agoSo there's the possibility of some .gov TLDs being missed, like secret CIA stuff. Or the guy that commented on here that he uses a custom .gov for his home servers.
- BenjiWiebe 2y agoThe custom .gov for his home servers doesn't exist except in his home network. You can put absolutely any domain in your home network that you want.
- TZubiri 2y agoAnd the TLD .gov doesn't exist except on the internet. Similarly if there's a .gov in some CIA intranet, does it exist or not exist? That's a metaphysical question
- a12k 2y agoThey’re all listed in a csv at cisa, or at least a lot of them. https://github.com/cisagov/dotgov-data https://github.com/cisagov/dotgov-data