A high-performance RDAP resolver for bulk lookups and reconnaissance

Go to file

acidvegas 7da5a00b8f Added statistics on WHOIS and RDAP coverage, added a script to compile RDAP/WHOIS servers for all TLDs into a JSON file		2024-03-20 01:23:18 -04:00
LICENSE	Working proof of concept in exploring RDAP abuse	2024-03-19 22:57:13 -04:00
massrdap.py	Working proof of concept in exploring RDAP abuse	2024-03-19 22:57:13 -04:00
preview.gif	Working proof of concept in exploring RDAP abuse	2024-03-19 22:57:13 -04:00
README.md	Added statistics on WHOIS and RDAP coverage, added a script to compile RDAP/WHOIS servers for all TLDs into a JSON file	2024-03-20 01:23:18 -04:00
whodap.py	Added statistics on WHOIS and RDAP coverage, added a script to compile RDAP/WHOIS servers for all TLDs into a JSON file	2024-03-20 01:23:18 -04:00
whois_rdap.json	Added statistics on WHOIS and RDAP coverage, added a script to compile RDAP/WHOIS servers for all TLDs into a JSON file	2024-03-20 01:23:18 -04:00

README.md

MassRDAP

Information

This script will take an input list of domains and retrieve WHOIS information for them using the Registration Data Access Protocol (RDAP). Depending on the TLD the domain is under will determine which RDAP server the request is made on. We are using the Bootstrap Service Registry for Domain Name Space from IANA.

This is a work in progress still (stay tuned)

Rate Limiting

From my experience, it seems every RDAP server has their employed rate limits. While I am still benchmarking and testing these limits, proxy support has been added to circumvent this issue.

Usage

Argument	Description	Default Value
`-i`, `--input_file`	File containing list of domains (one per line).
`-p`, `--proxy`	Proxy in `user:pass@host:port` format. If not supplied, none is used.
`-c`, `--concurrency`	Number of concurrent requests to make.	25
`-o`, `--output`	Output file to write successful RDAP data to.	`output.json`
`-f`, `--failed`	Output file to write failed domains to. (optional)	`failed.txt`

WHOIS & RDAP Statistics

By comparing the root TLDS and the RDAP Bootstrap data from IANA, along with querying IANA's WHOIS server to find other TLD's WHOIS servers, we can formulate coverage statistics on WHOIS/RDAP availability across all available TLDS:

RDAP

Status	Results
RDAP	1,174 (81%)
No RDAP	275 (19%)

WHOIS

Status	Results
WHOIS	1,253 (86%)
No WHOIS	196 (14%)

Roadmap

Explore other RDAP servers from RIRs, registrars, IANA (see here)
Mass domain availability lookups
Find available 1 or 2 letter domains.