Re: Finding other websites for pen-testing...

["Meritt James" <meritt_james () bah com>]

You may wish to check the archives at security focus for the mailing
list pen-test () securityfocus com, which is specifically concerned with
penetration testing.

David Burt wrote:
> Say you know that name of the company you have been
> hired by to perform a pen-test.  You know their main
> website.
>
> You want to find out what other website that they may
> have on different webservers that maybe in house
> rather than being outsourced like their main website
> or maybe they run a website that isn't as high profile
> so they are pretty lax on keeping it updated.
>
> If you go to netsol.com and do a whois on their main
> website you can find out their address and all the
> main contacts.  Is there a way to search this
> information to find all the domains that have the same
> contacts in them or maybe the same address?
>
> __________________________________
> Do you Yahoo!?
> The New Yahoo! Shopping - with improved product search
> http://shopping.yahoo.com
>
> ---------------------------------------------------------------------------
> ----------------------------------------------------------------------------

-- 
James W. Meritt CISSP, CISA
Booz | Allen | Hamilton
phone: (410) 684-6566

---------------------------------------------------------------------------
----------------------------------------------------------------------------