DMitry(1)

📦
version 1.3a · 2 versions
, in debian trixie, nixos 26.05, nixpkgs unstable, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💖 DMitry — Deepmagic Information Gathering Tool 💖

okay bestie, grab your iced coffee because we're about to talk about a lil tool called DMitry (aka the Deepmagic Information Gathering Tool), and it lives in the General Commands Manual section 1, so you already know it's a command-line girly. 🎀

✨ SYNOPSIS ✨

dmitry [Options] host

that's it. that's the whole vibe. options first, then the host. slay.

🌸 DESCRIPTION 🌸

so, DMitry — full name Deepmagic Information Gathering Tool — is a UNIX/(GNU)Linux command line application that is genuinely so good at gathering as much information as possible about a host. like, it's her whole personality. 💅

the basic functionality? it lets you pull info about a target host starting from a simple whois lookup on the target, all the way to uptime reports and TCP portscans. range queen. 👑

and like, the whole point of the app is that it's a tool to assist in information gathering when information is required quickly — it removes the need to type a million separate commands and it removes the timely process of digging through data from multiple sources. it's giving one-stop shop. no cap.

✨ OPTIONS ✨

first things first, bestie: options get passed to DMitry in the form of '-option'. only options that DMitry actually knows about will be used — anything else gets ignored 💀. and heads up: if you don't pass options as a group block, the trailing options will be considered a host target. so, order matters, iykyk.

  • -o filename — makes an ascii text output of the results and saves it to the filename you specified. if you don't give an output filename, it saves to "target.txt". if you don't use this option in any form at all, output goes to the standard output (STDOUT) by default. 🫶 THIS OPTION MUST TRAIL ALL OTHER OPTIONS, i.e. dmitry -winseo target. do not fight her on this one, she will not budge.
  • -i — performs an Internet Number whois lookup on the target IP address. 🦋
  • -w — performs a whois lookup on the host target. classic. iconic. 💖
  • -n — retrieves netcraft.com data concerning the host. this includes operating system, web server release, and uptime information where available. ✨
  • -s — performs a subdomain search on the specified target. this uses several search engines to try to locate subdomains in the form of sub.target. there's no set limit to the level of subdomain that can be located, however there IS a maximum string length of 40 characters (NCOL 40) to limit memory usage. possible subdomains are then reversed to an IP address, and if that comes back positive, the resulting subdomain gets listed. ⚠️ but if the host uses an asterisk in their DNS records, all resolved subdomains will come back positive. so like, read into that what you will. 🙈
  • -e — performs an e-mail address search on the specified target. this module works using the same concept as the subdomain search — it attempts to locate possible e-mail addresses for a target host. the e-mail addresses may also be for possible subdomains of the target host. there's a limit to the length of the e-mail address set to 50 characters (NCOL 50) to limit memory usage. 📧
  • -p — performs a TCP portscan on the host target. this module lists open, closed and filtered ports within a specific range. 🔥
  • -f — this one makes the TCP portscan module report/display output of filtered ports. these are usually ports that have been filtered and/or closed by a firewall at the specified host/target. requires that the '-p' option be passed as a previous option. for example, "dmitry -pf target". 🛡️
  • -b — this one makes the TCP portscan module output banners if they're received when scanning TCP ports. requires that the '-p' option be passed as a previous option. for example, "dmitry -pb target". 🎀
  • -t — this sets the Time To Live (TTL) of the portscan module when scanning individual ports. it's set to 2 seconds by default. you'll usually need this when scanning a host that has a firewall and/or has filtered ports, because those can slow a scan all the way down. 🐌

🌈 EXAMPLES 🌈

here are some example queries you can make using dmitry, bestie. let's go.

dmitry -w mydomain.com

this performs a named whois (INIC-WHOIS) lookup on the target host, displaying results to the standard output (STDOUT). 💖

dmitry -winsepo sometextfile.txt mydomain.com

this performs all the basic functions on the target host and stores all the output into "sometextfile.txt". she ate. 💅

dmitry -winsepo mydomain.com

this performs all the basic functions on the target host and stores all the output into "mydomain.txt". notice how it just... names it for you. thoughtful queen. ✨

dmitry -winsepfbo 127.0.0.1

this performs all the basic functions on the target host and stores all the output into "127.0.0.1.txt". this also displays banners and shows filtered ports. full glam, no notes. 🔥

👑 AUTHOR 👑

this manual page was written by Runa Sandvik <runa.sandvik@gmail.com>, for the Debian GNU/Linux system (but may be used by others). we love a credited author. periodt. 🫶

okay that's the whole page!! this manual page is from DMitry(1), section 1 of the General Commands Manual — go forth, gather your information, and be the main character of your own recon. mwah!! 💖✨🎀🦋🌸💅

📦 where this page comes from