dmitry

Overview

DMitry (Deepmagic Information Gathering Tool) is an all-in-one OSINT tool for initial target reconnaissance. It performs WHOIS lookups, retrieves Netcraft information, searches for subdomains, harvests email addresses, and optionally runs a basic port scan — all from a single command.

Basic Usage

Full information gathering

dmitry -winsepfbo output.txt example.com

WHOIS only

dmitry -w example.com

Subdomain enumeration

dmitry -s example.com

Email harvesting

dmitry -e example.com

Port scan

dmitry -p example.com

All options

dmitry -winsepo output.txt example.com

Options

# -w   WHOIS lookup for IP/domain
# -i   Retrieve Netcraft.com info
# -n   Retrieve DNS information
# -s   Search for subdomains
# -e   Search for email addresses
# -p   Perform TCP port scan
# -f   Perform full TCP port scan (all 65535 ports)
# -b   Read in banner information from port scan
# -o   Save output to file

Combine flags:

dmitry -winsepfb example.com -o results.txt

Output Example

[*] Gathering Netcraft.com information for example.com
[*] Retrieving Netcraft.com Data...

[*] Performing WHOIS query on example.com
[*] Registrar: ICANN
[*] Creation Date: 1995-08-13
[*] Updated Date: 2023-01-01

[*] Searching Google.com for subdomains of example.com
[*] HostName:mail.example.com
[*] HostName:dev.example.com
[*] HostName:api.example.com

[*] Searching Google.com for emails in example.com
[*] Found: admin@example.com
[*] Found: info@example.com

[*] Performing a TCP SYN Portscan on host example.com
[*] 22/tcp  open   ssh
[*] 80/tcp  open   http
[*] 443/tcp open   https

Port Scan Features

Basic port scan (common ports)

dmitry -p example.com

Full port scan (all 65535 ports)

dmitry -pf example.com

With banner grabbing

dmitry -pb example.com

Combine with other flags

dmitry -winsepb example.com

Tips

• dmitry is a quick first-pass tool — all functions in one command
• For deeper subdomain work, follow up with amass, subfinder, or dnsrecon
• The Google-based subdomain/email discovery is limited by Google’s anti-scraping measures
• Port scanning is basic — use nmap for more comprehensive network scanning
• The -o flag saves everything to a single text file for easy review

dmitry [options] host

-o FILE     Save output to file
-i          Query Netcraft.com for info
-w          WHOIS lookup
-n          Retrieve DNS info
-s          Search for subdomains
-e          Search for emails
-p          TCP port scan
-f          Full TCP port scan (all ports)
-b          Get banners from port scan
-t N        Set TTL for port scan (default: 2)

Vue d’ensemble

DMitry (Deepmagic Information Gathering Tool) est un outil OSINT tout-en-un pour la reconnaissance initiale d’une cible. Il effectue des requêtes WHOIS, récupère les informations Netcraft, cherche des sous-domaines, récolte des adresses e-mail, et lance optionnellement un scan de ports basique, le tout depuis une seule commande.

Utilisation de base

# Collecte d'informations complète
dmitry -winsepfbo output.txt example.com

# WHOIS uniquement
dmitry -w example.com

# Énumération de sous-domaines
dmitry -s example.com

# Récolte d'e-mails
dmitry -e example.com

# Scan de ports
dmitry -p example.com

# Toutes les options
dmitry -winsepo output.txt example.com

Options

# -w   Requête WHOIS pour IP/domaine
# -i   Récupérer les infos Netcraft.com
# -n   Récupérer les informations DNS
# -s   Chercher des sous-domaines
# -e   Chercher des adresses e-mail
# -p   Effectuer un scan de ports TCP
# -f   Effectuer un scan de ports TCP complet (tous les 65535 ports)
# -b   Lire les informations de bannière du scan de ports
# -o   Sauvegarder la sortie dans un fichier

# Combiner les flags :
dmitry -winsepfb example.com -o results.txt

Exemple de sortie

[*] Gathering Netcraft.com information for example.com
[*] Retrieving Netcraft.com Data...

[*] Performing WHOIS query on example.com
[*] Registrar: ICANN
[*] Creation Date: 1995-08-13
[*] Updated Date: 2023-01-01

[*] Searching Google.com for subdomains of example.com
[*] HostName:mail.example.com
[*] HostName:dev.example.com
[*] HostName:api.example.com

[*] Searching Google.com for emails in example.com
[*] Found: admin@example.com
[*] Found: info@example.com

[*] Performing a TCP SYN Portscan on host example.com
[*] 22/tcp  open   ssh
[*] 80/tcp  open   http
[*] 443/tcp open   https

Fonctionnalités de scan de ports

# Scan de ports basique (ports courants)
dmitry -p example.com

# Scan de ports complet (tous les 65535 ports)
dmitry -pf example.com

# Avec récupération de bannière
dmitry -pb example.com

# Combiner avec d'autres flags
dmitry -winsepb example.com

Conseils

• dmitry est un outil de premier passage rapide : toutes les fonctions en une seule commande
• Pour un travail plus poussé sur les sous-domaines, enchaînez avec amass, subfinder ou dnsrecon
• La découverte de sous-domaines/e-mails via Google est limitée par les mesures anti-scraping de Google
• Le scan de ports est basique : utilisez nmap pour un scan réseau plus complet
• Le flag -o sauvegarde tout dans un seul fichier texte pour une revue facile

dmitry [options] host

-o FILE     Save output to file
-i          Query Netcraft.com for info
-w          WHOIS lookup
-n          Retrieve DNS info
-s          Search for subdomains
-e          Search for emails
-p          TCP port scan
-f          Full TCP port scan (all ports)
-b          Get banners from port scan
-t N        Set TTL for port scan (default: 2)