scanner/http/vhost_scanner | Misleading name

[Jacky Jack <jacksonsmth698 () gmail com>]

Hi all

scanner/http/vhost_scanner should be scanner/http/subdomain_scanner
as it digs for subdomains.


msf auxiliary(vhost_scanner) > run

[*] [69.65.3.194] Sending request with random domain RhZPl.test.net
[*] [69.65.3.194] Sending request with random domain tAcDV.test.net
[*] NOT Found admin.test.net
[*] NOT Found services.test.net
[*] [69.65.3.194] Vhost found  webmail.test.net
[*] NOT Found console.test.net
[*] NOT Found apps.test.net
[*] NOT Found mail.test.net
[*] NOT Found intranet.test.net
[*] NOT Found intra.test.net
[*] NOT Found spool.test.net
[*] NOT Found corporate.test.net
[*] [69.65.3.194] Vhost found  www.test.net
[*] NOT Found web.test.net
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(vhost_scanner) >


I also suggest an option that use wordlists for digging:

set FILE /msf3/data/wordlists/subdomains.txt
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework