Reconnaissance:

kali@kali:~$ **cat /etc/resolv.conf**

We need to add a new nameserver line at the beginning of the file so that our DNS queries first go to our lab DNS server. We'll use nano to modify the file, as shown below:

kali@kali:~$sudo nano /etc/resolv.conf
[sudo] password for kali:

kali@kali:~$cat /etc/resolv.conf
# Generated by NetworkManager
nameserver 44.205.254.229
nameserver 1.1.1.1

└─$ cat /etc/resolv.conf

search localdomain nameserver 192.168.184.2 offseclab.io 18.234.113.142

┌──(kali㉿kali)-[~] └─$ host www.offseclab.io

www.offseclab.io is an alias for webredir.vip.gandi.net. webredir.vip.gandi.net has address 217.70.184.50

┌──(kali㉿kali)-[~] └─$ host -t ns offseclab.iooffseclab.io name server ns-202-b.gandi.net. offseclab.io name server ns-30-c.gandi.net. offseclab.io name server ns-196-a.gandi.net.

└─$ whois gandi.net |grep "Registrant Organization" Registrant Organization: Gandi SAS

dnsenum [offseclab.io](<http://offseclab.io/>) --threads 100

host 18.234.113.142

┌──(kali㉿kali)-[~] └─$ whois 18.234.113.142 | grep "OrgName" OrgName: Amazon Technologies Inc.