# HEDnsExtractor | Raw Html Extractor From Hurricane Electric Portal

**URL:** <https://onehack.st/t/hednsextractor-raw-html-extractor-from-hurricane-electric-portal/254518>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking\
**Created:** [August 25, 2023, 9:38pm UTC](https://onehack.st/t/hednsextractor-raw-html-extractor-from-hurricane-electric-portal/254518 "2023-08-25T21:38:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![WhiteHat](https://onehack.st/user_avatar/onehack.st/whitehat/32/162514_2.png) [@WhiteHat](https://onehack.st/u/WhiteHat)\
**Post date:** [August 25, 2023, 9:38pm UTC](https://onehack.st/t/hednsextractor-raw-html-extractor-from-hurricane-electric-portal/254518/1 "2023-08-25T21:38:03Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/9/c/9cfbf3d6d3392fa4c2220278f2bd8cd33aeedd04.png)

# HEDnsExtractor

Raw html extractor from Hurricane Electric portal

[![](https://camo.githubusercontent.com/e9e8db2fe3c8f31bd1cf3688ec7d27a4609dbe7de73bd2c0c7949f8004c319f5/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f676f2d6d6f642f676f2d76657273696f6e2f48756e74446f776e50726f6a6563742f6865646e73657874726163746f72) ](https://python.org/)[![](https://camo.githubusercontent.com/3e8d8a25134a949f31538b71a9178d4a0946249cefc06c5eaa7a50f235a0c11a/68747470733a2f2f696d672e736869656c64732e696f2f62616467652f4f70656e253230536f757263652d2545322539442541342d627269676874677265656e2e737667)](https://opensource.org/)

## Features

- Automatically identify IPAddr ou Networks through command line parameter or stdin
- Extract networks based on IPAddr.
- Extract domains from networks.

## Installation

```auto
go install -v github.com/HuntDownProject/hednsextractor/cmd/hednsextractor@latest

```

## Usage

`usage -h`

```auto
HEDnsExtractor - Raw html extractor from Hurricane Electric portal!

Usage:
  hednsextractor [flags]

Flags:
CONFIGURATION:
   -vt-api-key string Virustotal API Key

OTHER OPTIONS:
   -only-domains show only domains
   -only-networks show only networks
   -vt show Virustotal score
   -vt-score string Minimum Virustotal score to show (default "0")
   -target string IP Address or Network to query
   -silent show silent output
   -verbose show verbose output

```

## Running

Getting the IP Addresses used for [hackerone.com](http://hackerone.com), and enumerating only the networks.

```auto
nslookup hackerone.com | awk '/Address: / {print $2}' | hednsextractor -silent -only-networks

[INF] [104.16.99.52] 104.16.0.0/12
[INF] [104.16.99.52] 104.16.96.0/20

```

Getting the IP Addresses used for [hackerone.com](http://hackerone.com), and enumerating only the domains (using tail to show the first 10 results).

```auto
nslookup hackerone.com | awk '/Address: / {print $2}' | hednsextractor -silent -only-domains | tail -n 10

herllus.com
hezzy.store
hilariostore.com
hiperdrop.com
hippratas.online
hitsstory.com
hobbyshop.site
holyangelstore.com
holzfallerstore.fun
homedescontoo.com

```

### Running with Virustotal

Edit the config file and add the Virustotal API Key

`cat $HOME/.config/hednsextractor/config.yaml`

```auto
# hednsextractor config file
# generated by https://github.com/projectdiscovery/goflags

# show only domains
#only-domains: false

# show only networks
#only-networks: false

# show virustotal score
#vt: false

# minimum virustotal score to show
#vt-score: 0

# ip address or network to query
#target: 

# show silent output
#silent: false

# show verbose output
#verbose: false

# virustotal api key
vt-api-key: Your API Key goes here

```

So, run the `hednsextractor` with `-vt` parameter.

`nslookup hackerone.com | awk '/Address: / {print $2}' | hednsextractor -only-domains -vt`

And the output will be as below

```auto
          _____________ _ ______________  ________________  ______________  ________________  _______ 
|\ /|( ____\(__ \ ( ( /|( ____\(____ \|\ /|\ ____ /( ____)(___ )( ____\\__ __/(___ )( ____ )
| ) ( || ( \/| ( \ )| \ ( || ( \/| ( \/( \ / ) ) ( | ( )|| ( ) || ( \/ ) ( | ( ) || ( )|
| (___) || (__ | | ) || \ | || (_____| (__ \ (_) / | | | (____)|| (___) || | | | | | | || ( ____ )|
| ___||__ ) | | | || (\ \) |(_____)|__) ) _ ( | | | __)|___ || | | | | | | || __)
| ( ) || ( | | ) || | \ | ) || ( / ( ) \ | | | (\ ( | ( ) || | | | | | | || (\ (   
| ) ( || (____/\| (__/ )| ) \ |/\____) || (____/\( / \ ) | | | ) \ \__| ) ( || (____/\ | | | (___) || ) \ \__
|/ \|(_______/(______/ |/ )_)\_______)(_______/|/ \| )_( |/ \__/|/ \|(_______/ )_( (_______)|/ \__/

[INF] Current hednsextractor version v1.0.0
[INF] [104.16.0.0/12] domain: ohst.ltd VT Score: 0
[INF] [104.16.0.0/12] domain: jxcraft.net VT Score: 0
[INF] [104.16.0.0/12] domain: teatimegm.com VT Score: 2
[INF] [104.16.0.0/12] domain: debugcheat.com VT Score: 0

```

## GitHub:

> **[GitHub - HuntDownProject/HEDnsExtractor: A suite for hunting suspicious targets, expose...](https://github.com/HuntDownProject/HEDnsExtractor)**
>
> A suite for hunting suspicious targets, expose domains and phishing discovery