Penetration Testing mailing list archives

Re: Scan virtual hosts


From: Gareth Davies <gareth.davies () mynetsec com>
Date: Mon, 29 Aug 2005 11:19:11 +0800

Geert VAN ACKER wrote:

Dear list,

is it possible to enumerate all virtual hosts on a given IP address ? I
prefer Linux soft.

Thx,

Geert

The only sure fire way is if the NS for the domain allows zone transfers, then you drop out the zone file and you can see all the domains mapped, subdomains and usually other domains on the box.

whois.sc is an excellent tool aswell but as mentioned it's not 100% complete, but it does give you a good idea.

Cheers

--
Gareth Davies

Manager - Security Practice

Network Security Solutions MSC Sdn. Bhd.
Suite E-07-21, Block E, Plaza Mont' Kiara, No. 2 Jalan Kiara,
Mont’ Kiara, 50480
Kuala Lumpur, Malaysia Phone: +603-6203 5303

www.mynetsec.com


Current thread: