RE: searching any possible pre and postfixes for a given domain

[Bénoni MARTIN <Benoni.MARTIN () libertis ga>]

Huh, just a clue TO CHECK: with Nessus, www.nessus.org, I know you can ask it to scan also networks with '*'. The 
trouble is that you are scanning, which is not really inlaw :). So, what you can do, is download Nessus, tell him to 
"scan" (but just do a ping) what you need with '*'...then you will have what you want.

Tell me if I am wrong, Nessus' lovers :) !

 

-----Message d'origine-----
De : Robert Hajime Lanning [mailto:robert.lanning () gmail com] 
Envoyé : jeudi 26 août 2004 04:17
À : webappsec () securityfocus com
Objet : Re: searching any possible pre and postfixes for a given domain

There really is not a tool for this.  The reason for this, is the way DNS was designed.
There is no way to query for partial addresses, so you must make a complete address and query for it to see if it 
returns valid data.

The other way, is to get a copy of the "com." zone file (I believe it is a few gig.) and grep through it.

On Wed, 25 Aug 2004 16:44:01 -0300, Mads Rasmussen <mads () opencs com br> wrote:
> Is there a tool for this?
>
> Let's say I have a site www.bank.com, I want to search for sites with 
> similar names like mine, this could be clone site or just someone 
> riding off my sites popularity.
>
> How can I learn of sites with prefixes: *.bank and sites with postfixes:
> bank.*
>
> I tried the google "site:" function but you have to insert the pre or 
> postfixes yourself, google doesn't like wildcards :-) I thought that 
> maybe some spider could do that, someone has knowledge of any or how 
> to do it with other tools?
>
> Regards,
>
> --
> Mads Rasmussen
> Open Communications Security
> +55 11 3345 2525
> http://www.opencs.com.br


--
END OF LINE
       -MCP