GO KALI FREE

DMitry

Information Gathering

Beginnermedium risk

DMitry (Deepmagic Information Gathering Tool) is a command-line application that can gather as much information as possible about a host, including subdomains, email addresses, uptime information, and TCP port scans.

Installation

sudo apt install dmitry

Basic Syntax

dmitry [options] <target>

Quick Facts

Full Name
DMitry (Deepmagic Information Gathering Tool)
License
GPLv2
Author
Deepmagic
Written In
C
Platforms
Linux, macOS
Category
OSINT
First Release
2001
Root Required
No (port scan requires root)

Tool Overview

DMitry (Deepmagic Information Gathering Tool) is a command-line application designed to gather as much information as possible about a host. It combines multiple reconnaissance tasks into a single tool, including WHOIS lookups, subdomain enumeration, email discovery, and basic port scanning.

Created in 2001, DMitry was one of the first all-in-one OSINT tools. While newer tools have surpassed it in features and data sources, DMitry remains useful for quick, simple domain reconnaissance without complex configuration.

The tool works by querying WHOIS databases, search engines, and DNS servers to compile information about a target domain. Its simplicity makes it accessible to beginners while still providing useful data for experienced security professionals.

Common Commands

dmitry -winse example.comAll-in-one check - Perform whois, look up subdomains, search for emails, and scan basic ports in a single command
dmitry -winse target.comFull info gathering
dmitry -w target.comWHOIS lookup
dmitry -s target.comSubdomain search
dmitry -e target.comEmail search
dmitry -p target.comPort scan
dmitry -winse example.comFull info gathering
dmitry -w target.comWHOIS lookup
dmitry -i target.comIP address lookup
dmitry -s target.comSubdomain search
dmitry -e target.comEmail harvesting
dmitry -p target.comTCP port scan
dmitry -f target.comDefault port scan
dmitry -wi target.comWHOIS and IP combined
dmitry -ws target.comWHOIS and subdomains

Step-by-Step Guide

  1. 1Select the primary domain name for your investigation
  2. 2Execute the tool using the combined parameter flags for maximum output
  3. 3Examine the retrieved WHOIS registration details
  4. 4Log the discovered employee emails and domain prefixes
  5. 5Review the basic TCP port sweep to identify active host services

Use Cases

Quick Domain Recon

Gather basic information about a target domain in a single command.

WHOIS Lookups

Retrieve domain registration details including registrar, creation date, and contact info.

Subdomain Discovery

Find subdomains of a target domain using search engine queries.

Email Harvesting

Discover email addresses associated with a target domain.

Basic Port Scanning

Perform simple TCP port scans to identify open services.

Key Features

Related Tools

Whois

Information Gathering

Domain registration information lookup.

theHarvester

Information Gathering

Email and subdomain discovery from public sources.

Frequently Asked Questions

What is DMitry used for?

DMitry (Deepmagic Information Gathering Tool) is an all-in-one information gathering tool that performs WHOIS lookups, subdomain enumeration, email address discovery, and basic TCP port scanning against a target domain.

Is DMitry still useful?

While DMitry is an older tool with limited features compared to modern alternatives, it remains useful for quick, all-in-one domain reconnaissance when you need basic information without configuring multiple tools.

What information can DMitry gather?

DMitry can gather WHOIS registration data, subdomains, email addresses, uptime information, and perform basic TCP port scans on target domains.

How do I install DMitry on Kali Linux?

Install DMitry using: sudo apt install dmitry. On other Linux distributions, you may need to compile from source using the GitHub repository. On macOS, use Homebrew: brew install dmitry.

How do I use DMitry for a full domain scan?

Run dmitry -winse target.com to perform a comprehensive scan. The -w flag runs WHOIS lookup, -i performs IP lookup, -n discovers subdomains, -e harvests emails, and -s scans common ports.

What are the most common DMitry commands?

Common commands include: dmitry -winse target.com (full scan), dmitry -w target.com (WHOIS only), dmitry -s target.com (subdomains only), dmitry -e target.com (emails only), and dmitry -p target.com (port scan).

Does DMitry require root privileges?

The port scanning feature (-p) requires root privileges. Other features like WHOIS, subdomain search, and email harvesting run without root. Use sudo dmitry -winsep output.txt target.com when you need port scanning.

How does DMitry compare to theHarvester?

DMitry is an all-in-one tool combining WHOIS, subdomains, emails, and port scanning. theHarvester focuses specifically on email and subdomain discovery with more data sources. Use DMitry for quick reconnaissance; theHarvester for deeper email harvesting.

How does DMitry compare to Amass?

Amass is a comprehensive attack surface mapping tool with 20+ data sources and active/passive modes. DMitry is simpler and faster but with fewer data sources. Use DMitry for quick scans; Amass for thorough reconnaissance.

Is DMitry legal to use?

DMitry itself is legal software. However, scanning networks or domains without permission from the owner may violate laws like the CFAA. Always obtain written authorization before performing reconnaissance on targets you don't own.

What output formats does DMitry support?

DMitry saves results to text files using the -o flag. Run dmitry -winsep output.txt target.com to save all results to a file. The output includes WHOIS data, subdomains, emails, and port scan results in plain text format.

How do I save DMitry results to a file?

Use the -o flag followed by a filename: dmitry -winsep output.txt target.com. This saves all scan results including WHOIS, subdomains, emails, and port scan data to the specified file for later analysis.

Why is DMitry not finding subdomains?

DMitry uses search engine queries for subdomain discovery, which may miss many subdomains. Modern tools like Amass, Subfinder, and Sublist3r use more data sources and provide better coverage. Consider supplementing DMitry with these tools.

What is DMitry -i flag for?

The -i flag performs IP lookup for the target domain, resolving the domain name to its IP address. This is useful for identifying the hosting infrastructure before port scanning.

How do I run DMitry with output to file?

Use dmitry -winsep output.txt target.com to run a full scan and save results. The -o flag enables file output, and the filename is specified after the target domain.

Does DMitry support HTTPS targets?

DMitry performs WHOIS lookups, DNS queries, and port scanning, which work with any domain regardless of the web server protocol. However, it does not analyze web content or HTTPS certificates directly.

What wordlists does DMitry use for subdomain discovery?

DMitry has a built-in list of common subdomains. Unlike dedicated subdomain tools, DMitry does not support custom wordlists for its subdomain discovery feature. For custom wordlists, consider using Amass or Subfinder.

How long does a DMitry scan take?

A basic DMitry scan (-winse) typically completes in 30-60 seconds. Port scanning (-p) adds more time depending on the target. Full scans with all features usually complete in under 2 minutes.

Tags

#reconnaissance#osint#all-in-one#domain-lookup

Ethical Usage Notice

This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.