> For the complete documentation index, see [llms.txt](https://davidtancredi.gitbook.io/pentesting-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://davidtancredi.gitbook.io/pentesting-notes/r3dcl1ff/webapp-pentest/attack-surface-recon/hakluke/hakip2host.md).

# hakip2host

hakip2host takes a list of IP addresses via stdin, then does a series of checks to return associated domain names.

```
sudo git clone https://github.com/hakluke/hakip2host.git
cd hakip2host
sudo go build
sudo cp hakip2host /usr/local/bin

#OR

go install github.com/hakluke/hakip2host@latest

#Usage

cat targets.txt | hakip2host 

#Scenario

1)check target IP blocknet on Shodan,Fofa etc.(nasa.gov in example below)

2)create unique list with bash 

for i in $(seq 0 255); do echo 129.164.142.$i; done > ips.txt

3)Run hakip2host 

cat ips.txt | hakip2host

(sample output)

[DNS-PTR] 129.164.142.16 aeronet-pz.gsfc.nasa.gov
[SSL-SAN] 129.164.142.26 trmm.gsfc.nasa.gov
[SSL-CN] 129.164.142.26 trmm.gsfc.nasa.gov
[SSL-SAN] 129.164.142.22 gpm-gv.gsfc.nasa.gov
[SSL-CN] 129.164.142.22 gpm-gv.gsfc.nasa.gov
[SSL-SAN] 129.164.142.8 bluemarble.nasa.gov
[SSL-SAN] 129.164.142.8 earthobservatory.nasa.gov
[SSL-SAN] 129.164.142.8 eob.gsfc.nasa.gov
[SSL-SAN] 129.164.142.8 landsat.visibleearth.nasa.gov
[SSL-SAN] 129.164.142.8 m.earthobservatory.nasa.gov
[SSL-SAN] 129.164.142.8 naturalhazards.nasa.gov
[SSL-SAN] 129.164.142.8 visibleearth.nasa.gov
[SSL-SAN] 129.164.142.8 www.bluemarble.nasa.gov
[SSL-SAN] 129.164.142.8 www.earthobservatory.nasa.gov
[SSL-SAN] 129.164.142.8 www.naturalhazards.nasa.gov
[SSL-SAN] 129.164.142.8 www.visibleearth.nasa.gov
.......

4)Sort for unique hosts

cat ips.txt | hakip2host | awk '{print $3}' | sort -u > hosts.txt

```