Identifying more targets

[James Gomount <jgomount () yahoo com>]

Given that a name server allows zone transfers is
there any way to find all domains for which the name
server is authoritative?

Also, having found a web server is there any tricks to
find the sites it hosts (virtual host)?  Someone
mentioned to use a browser to point to https:// and
look at the cert, this gives one domain name for the
ip, any other ways?



__________________________________
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

---------------------------------------------------------------------------
----------------------------------------------------------------------------