PaulDotCom mailing list archives
Re: URL Enumeration for Web Server IP Address
From: Martín <ole () makensi es>
Date: Fri, 11 Jan 2013 09:10:32 +0100
You should also check Andrew Mohawk alternate DNS names from SSL certificates tool: https://andrewmohawk.com/SSLAssociated/ And down under IP neighbours category on http://stf.makensi.es/ you can find several already mentioned and maybe some other additional one. On Fri, Jan 11, 2013 at 2:24 AM, mitchell <mitchell () csc bg> wrote:
Here is a short script that I use: https://github.com/mukareste/utils/blob/master/pentest/findvhosts.py You will need an API key for the Bing Search API. I am not a developer, so don't laugh at the code :-). -- # m. On Fri, Jan 11, 2013 at 12:33 AM, allison nixon <elsakoo () gmail com> wrote:this is also a handy tool but has a FP rate http://www.yougetsignal.com/tools/web-sites-on-web-server/ On Thu, Jan 10, 2013 at 3:17 PM, Rob Fuller <jd.mubix () gmail com> wrote:You can also do CIDR lookups on deepmagic:https://www.deepmagic.com/ptrs/ptrs?search=cidr%3A4.23.173.0%2F24&limit=-- Rob Fuller | Mubix Certified Checkbox Unchecker Room362.com | Hak5.org On Thu, Jan 10, 2013 at 2:44 PM, TheTolik <thetolik () yahoo com> wrote:Thank you Xavier. This is fantastic, exactly what I was looking for! I'm glad there isthisoption and will certainly make use of it. But this also raises aquestion --Why isn't there some form of an RFC that natively presents URL's for standard web server applications.... I can see this being somewhat of a possible security consideration, but nonetheless.... Andy | Oxbeef ________________________________ From: Xavier Mertens <xavier () rootshell be> To: PaulDotCom Security Weekly Mailing List <pauldotcom () mail pauldotcom com> Cc: TheTolik <thetolik () yahoo com>; PaulDotCom Security Weekly Mailing List <pauldotcom () mail pauldotcom com> Sent: Thursday, January 10, 2013 12:43 PM Subject: Re: [Pauldotcom] URL Enumeration for Web Server IP Address Use bing.com with a 'ip:x.x.x.x' query? Alternative: morningstarsecurity.com/research/bing-ip2hosts /x Sent from my iPad On 10 Jan 2013, at 18:55, anthony kasza <anthony.kasza () gmail com>wrote:If it's a public site you could use passive DNS data <http://www.bfk.de/bfk_dnslogger.html> You could also try robtex <http://ip.robtex.com/> -AK On Thu, Jan 10, 2013 at 11:29 AM, TheTolik <thetolik () yahoo com> wrote: Gurus, I've run into an interesting challenge and cannot seem to figure out a solution. Does anyone know if it's possible to enumerate or query for a list of URL's hosted on a specific IP address? With dedicated web servers, hitting the IP address through http://would serve the page, but in case of shared web servers serving multiple sites/URL's, is there an effective way to find all URL's serviced? Any advice would be greatly appreciated. Andy | Oxbeef _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com_______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com-- _________________________________ Note to self: Pillage BEFORE burning. _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com_______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
_______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
Current thread:
- URL Enumeration for Web Server IP Address TheTolik (Jan 10)
- Re: URL Enumeration for Web Server IP Address Hans Kokx (Jan 10)
- Re: URL Enumeration for Web Server IP Address Ryan Dewhurst (Jan 10)
- Re: URL Enumeration for Web Server IP Address anthony kasza (Jan 10)
- Re: URL Enumeration for Web Server IP Address Xavier Mertens (Jan 10)
- Re: URL Enumeration for Web Server IP Address TheTolik (Jan 10)
- Re: URL Enumeration for Web Server IP Address Rob Fuller (Jan 10)
- Re: URL Enumeration for Web Server IP Address S. White (Jan 10)
- Re: URL Enumeration for Web Server IP Address allison nixon (Jan 10)
- Re: URL Enumeration for Web Server IP Address mitchell (Jan 10)
- Re: URL Enumeration for Web Server IP Address Martín (Jan 11)
- Re: URL Enumeration for Web Server IP Address Xavier Mertens (Jan 10)