Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
github.com/openrdap/rdap
OpenRDAP is an command line RDAP client implementation in Go.
https://www.openrdap.org - homepage
https://www.openrdap.org/demo - live demo
This program uses Go. The Go compiler is available from https://golang.org/.
To install:
go install github.com/openrdap/rdap/cmd/rdap@master
This will install the "rdap" binary in your $GOPATH/go/bin directory. Try running:
~/go/bin/rdap google.com
Query type | Usage |
---|---|
Domain (.com) | rdap -v example.com |
Network | rdap -v 2001:db8:: |
Autnum | rdap -v AS15169 |
Nameserver | rdap -v -t nameserver -s https://rdap.verisign.com/com/v1 ns1.google.com |
Help | rdap -v -t help -s https://rdap.verisign.com/com/v1 |
Domain Search | rdap -v -t domain-search -s $SERVER_URL example*.gtld |
Domain Search (by NS) | rdap -v -t domain-search-by-nameserver -s $SERVER_URL ns1.example.gtld |
Domain Search (by NS IP) | rdap -v -t domain-search-by-nameserver-ip -s $SERVER_URL 192.0.2.0 |
Nameserver Search | rdap -v -t nameserver-search -s $SERVER_URL ns1.example.gtld |
Nameserver Search (by IP) | rdap -v -t nameserver-search-by-ip -s $SERVER_URL 192.0.2.0 |
Entity Search | rdap -v -t entity-search -s $SERVER_URL ENTITY-TAG |
Entity Search (by handle) | rdap -v -t entity-search-by-handle -s $SERVER_URL ENTITY-TAG |
See https://www.openrdap.org/docs.
Go 1.20+
Wikipedia - Registration Data Access Protocol
https://data.iana.org/rdap/ - Official IANA bootstrap information
https://test.rdap.net/rdap/ - Test alternate bootstrap service with more experimental RDAP servers
RFC 7480 HTTP Usage in the Registration Data Access Protocol (RDAP)
RFC 7481 Security Services for the Registration Data Access Protocol (RDAP)
RFC 7482 Registration Data Access Protocol (RDAP) Query Format
RFC 7483 JSON Responses for the Registration Data Access Protocol (RDAP)
RFC 7484 Finding the Authoritative Registration Data (RDAP) Service
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.