Metasploit mailing list archives
Re: scanner/http/vhost_scanner | Misleading name
From: Jonathan Cran <jcran () 0x0e org>
Date: Wed, 24 Mar 2010 15:27:53 -0400
scanner/http/vhost_scanner should be scanner/http/subdomain_scanner as it digs for subdomains.
nope, it's doing queries against each host for :80 and comparing that with a known value. not the same as a subdomain scanner, which is just going to query for a dns record.
I also suggest an option that use wordlists for digging: set FILE /msf3/data/wordlists/subdomains.txt
this is a good idea, it's only a few lines to make that happen. attached is a patch. jcran
Attachment:
vhost_scanner_fileoption.patch
Description:
_______________________________________________ https://mail.metasploit.com/mailman/listinfo/framework
Current thread:
- scanner/http/vhost_scanner | Misleading name Jacky Jack (Mar 24)
- Re: scanner/http/vhost_scanner | Misleading name Jonathan Cran (Mar 24)
- Re: scanner/http/vhost_scanner | Misleading name Jonathan Cran (Mar 24)
- Re: scanner/http/vhost_scanner | Misleading name Jacky Jack (Mar 24)
- Re: scanner/http/vhost_scanner | Misleading name egypt (Mar 24)
- Message not available
- Message not available
- Re: scanner/http/vhost_scanner | Misleading name Jacky Jack (Mar 24)
- Re: scanner/http/vhost_scanner | Misleading name HD Moore (Mar 24)
- Re: scanner/http/vhost_scanner | Misleading name Jonathan Cran (Mar 24)
- Re: scanner/http/vhost_scanner | Misleading name Jonathan Cran (Mar 24)