What is Dmitry?

Dmitry, or Deepmagic Information Gathering Tool, is a command line utility included in Kali Linux. It is designed to allow a user to collect public information about a target host. It can be used to gather a number of valuable pieces of information, such as:

1. The whois details of a target host. This will provide information about a registered domain, such as the name, address, and contact information of the person who registered it.
2. The netcraft data for a target host. This can include details such as the operating system, web server release, and uptime information of a web host.
3. A subdomain search of a target, which will locate any subdomains that exist on the main domain.
4. A search of email addresses that exist on the domain.
5. A TCP scan of the target to reveal any open ports and services running on the server

Why is Dmitry Used?

Dmitry is part of a subset of information gathering tools included in Kali Linux. The purpose of these tools is to help attackers identify information about a target, to assist with locating potential attack vectors that may work on the system.

Dmitry is great for revealing information that exists through search engines about the owner, and the host of a web page. This information can be really valuable for social engineering attacks, as it provides the attacker with potential points of contact. It can also help the attacker seem more credible if they are able to give information about the web page or domain that the owner is using.

How do you use Dmitry?

To start, you can navigate to Dmitry through the main menu of Kali Linux.

Alternatively, you can also type “Dmitry” into the command line of Kali Linux to see the available options and help for the application. Once Dmitry is launched, you will be able to execute a command against a target, in the following format.

Dmitry [flags] [-t 0–9] [-o] target

Let’s break down the command and discuss each of the options. Parameters that are in square brackets are optional, and only need to be included if the user wishes to have them. Dmitry has the following flags available:

• -o: Allows the user to specify a location to write the output of the application to. If this parameter is not specified, the output is written to the command line window. This parameter must be the last one given, and must be followed by a file path.
• -i: Performs a whois lookup on the IP address of the target. Use this option when you want to do a whois lookup, and want to use the IP instead of a domain name.
• -w: Performs a whois lookup on the domain name of the host. Use this option when you want to do a whois lookup, and want to use the domain name of a target instead of the IP.
• -n: Retrieves all available Netcraft information for a given target.
• -s: Does a search for all subdomains of a target.
• -e: Does a search for all emails of a target domain.
• -p: Performs a TCP port scan of the target.

Examples of using Dmitry

1. Domain Name Scanning

Let’s try doing a basic scan of a public web page, www.nmap.org. Suppose we first want to do a whois to find out information about the site owner. We would run the Dmitry command:

Dmitry -w www.nmap.org

If we wanted to save the information to a text file, we could slightly modify the query as follows:

Dmitry -wo out.txt www.nmap.org

This will give us a file in our root directory with the results of the scan.

From here we could continue adding flags to get more information about the domain we are scanning. It is important to note that the -o flag should always come last in our list of flags, followed by the output file name if it is being used.

2. Find Possible Subdomains

In this step, we’ll try to get all possible subdomains of a website. The syntax:

# without saving data
dmitry -s DOMAIN_NAME

# with saving data
dmitry -s -o info.txt DOMAIN_NAME

3. Port Scan

We’re going to see the way to scan ports using DMitry. The syntax:

# without saving data
dmitry -pb DOMAIN_NAME

# with saving data
dmitry -pb -o info.txt DOMAIN_NAME

4. All Possible Info
In this step, we’ll try to get all possible info using DMitry. The syntax:

# without saving data
dmitry -winsepo DOMAIN_NAME

# with saving data
dmitry -winsepo -o info.txt DOMAIN_NAME

The winsepo means domain whois lookup (w), an IP whois lookup (i), retrieve Netcraft info (n), search for subdomains (s), search for email addresses (e), do a TCP port scan (p), and save the output to info.txt (o) of the targeted website.

Dmitry is a tool that can be used to gather information about web pages. Other information gathering tools in Kali Linux provide enhanced versions of what Dmitry offers, but Dmitry can still be valuable as a lightweight alternative to the more intensive tools.
Dmitry can also help you scan your own domains to better understand what information attackers may have about you. This will help you better harden your security, and prevent attacks through social engineering methods.

Hope this article helpful for you. Thank You

---

If You Appreciate What We Do Here On Hackonology, You Should Consider:

Hackonology is the fastest growing and most trusted community site where you can find lots of courses, articles about Technology/Hacking/Cracking. Millions of people visit Hackonology! to search or browse the thousands of published articles available FREELY to all.

Let's be a part of Hacker's Community! Join our Hacking Team

We Are Indian We Are Great

---