finding dyndns names for existing IP

From: Thomas Kerbl (t.kerbl_at_weigl.de)
Date: 11/26/03

  • Next message: Prashant: "Re: Enumarating a Proxy server...................." 
    Date: Wed, 26 Nov 2003 11:06:28 +0100
To: pen-test@securityfocus.com

    Hello,

    I'm searching for a way to find DynDns names to existing IPs. We are
    working on a pen-test for a customer, who has a dynamic IP that changes
    every day, and it is hard for us to keep track of their Gateway. We
    simulate an attacker without intern knowledge, so we cannot simple ask
    for a dyndns name. Social Engineering would be easy, but I'm locking for
    a technical way to do it. We already tried obvious names like
    companyname.dyndns.org and similar DNS names.

    To try to summarize the problem:

    1) We assume the company uses the DynDns service (or a similar service).
    2) We got the actual valid IP through social engineering.
    3) We want to find the dyndns name of this IP to keep track.

    Is there a Database hostet by dyndns (or similar service) we can
    consult? Or is there a way to do a reverse lookup on the IP?

    thanks a lot for any pointers,
    Thomas Kerbl 

    -- 
~ weigl interservice
~ www.weigl.de
---------------------------------------------------------------------------
----------------------------------------------------------------------------
  • Next message: Prashant: "Re: Enumarating a Proxy server...................."