mirror of
https://github.com/rfc1036/whois.git
synced 2026-08-01 07:20:13 +00:00
d849a6ee42
whois server responses are written directly to stdout without filtering terminal control characters. A malicious or compromised whois server can inject ANSI escape sequences (OSC 52 clipboard injection, terminal title manipulation, screen clearing) into the user's terminal. Filter control characters (bytes < 0x20 except tab) and DEL (0x7F) from each response line before processing.
In 1999 I wrote this Whois client from scratch because the alternatives were obsolete or bloated. This client is intelligent and can automatically select the appropriate whois server for most queries. The internal database is often more accurate than IANA's published one, but please send me any information you have regarding domains and network resources which are not correctly handled by the program. Because of historical reasons this package also contains the mkpasswd program, which can be used to encrypt a password with crypt(3). The canonical distribution point for releases of the program is https://ftp.debian.org/debian/pool/main/w/whois/ . Useful information sources: - https://www.ripe.net/ripe/docs/current-ripe-documents/ripe-database-documents - https://www.iana.org/domains/root/db/ - https://www.icann.org/en/resources/idn/fast-track/string-evaluation-completion - https://www.aftld.org/ Marco d'Itri <md@linux.it>