Metasploit mailing list archives

Re: scanner/http/vhost_scanner | Misleading name


From: Jonathan Cran <jcran () 0x0e org>
Date: Wed, 24 Mar 2010 15:27:53 -0400

scanner/http/vhost_scanner should be scanner/http/subdomain_scanner
as it digs for subdomains.

nope, it's doing queries against each host for :80 and comparing that with a
known value. not the same as a subdomain scanner, which is just going to
query for a dns record.

I also suggest an option that use wordlists for digging:
set FILE /msf3/data/wordlists/subdomains.txt

this is a good idea, it's only a few lines to make that happen. attached is
a patch.

jcran

Attachment: vhost_scanner_fileoption.patch
Description:

_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: