Re: script for virtual host discovery

[David Fifield <david () bamsoftware com>]

On Tue, Nov 02, 2010 at 06:46:44AM -0700, Carlos Pantelides wrote:
> David:
>
> > Your script works by trying a HEAD request for / using 
> > each of the candidate hostnames. But there's no reason
> > this technique should be limited to hosts running HTTP.
> > What do you think about doing a simple DNS query for 
> > each candidate hostname instead?
>
> Well, this script is looking for unregistered, local names associated
> with virtual http hosts, it is "darknet" exploring. You can even run
> it in a host without connectivity. 

I don't understand. The names have to be in DNS, or else http.head won't
work. So they are "registered" in a sense.

I also don't know what you mean about using it in a host without
connectivity. If you can't connect to it, how will http.head work? Maybe
I'm confused about what this script does?

David Fifield
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/