Penetration Testing mailing list archives
Re: Scan virtual hosts
From: Gareth Davies <gareth.davies () mynetsec com>
Date: Mon, 29 Aug 2005 11:19:11 +0800
Geert VAN ACKER wrote:
The only sure fire way is if the NS for the domain allows zone transfers, then you drop out the zone file and you can see all the domains mapped, subdomains and usually other domains on the box.Dear list, is it possible to enumerate all virtual hosts on a given IP address ? I prefer Linux soft. Thx, Geert
whois.sc is an excellent tool aswell but as mentioned it's not 100% complete, but it does give you a good idea.
Cheers -- Gareth Davies Manager - Security Practice Network Security Solutions MSC Sdn. Bhd. Suite E-07-21, Block E, Plaza Mont' Kiara, No. 2 Jalan Kiara, Mont’ Kiara, 50480Kuala Lumpur, Malaysia Phone: +603-6203 5303
www.mynetsec.com
Current thread:
- Scan virtual hosts Geert VAN ACKER (Aug 24)
- Re: Scan virtual hosts Jayson Anderson (Aug 24)
- Re: Scan virtual hosts Stefano Zanero (Aug 24)
- Re: Scan virtual hosts Geert VAN ACKER (Aug 26)
- Re: Scan virtual hosts Michael Boman (Aug 24)
- Re: Scan virtual hosts matt (Aug 26)
- Re: Scan virtual hosts Pete Herzog (Aug 27)
- Re: Scan virtual hosts matt (Aug 26)
- RE: Scan virtual hosts Bojan Zdrnja (Aug 24)
- Re: Scan virtual hosts bugtraq (Aug 26)
- Re: Scan virtual hosts Gareth Davies (Aug 29)
- <Possible follow-ups>
- RE: Scan virtual hosts Bob Auger (Aug 24)