Re: Virtual IP addresses

[thomas springer <tuevsec () gmx net>]

Joshua,

If you mean to find virtual hosts for an ip:

You might want to try http://www.serversniff.net/get-hostonip.php.
Enter a hostname, e.g. www.hostname.com or an ip like 64.15.205.244 to
find other hostnames and domains living on this ip.

You might also stop by at whois.sc - but their scope used to be limited
to a few tlds.

Another bet is to try https://<ipnum> - If there is a https-server living on this host, your browser will present you 
the domainname of the certificate.

You should also try to query your favorite searcheninge for the owner of the corresponding netblock - maybe you find 
any customer's domains living in this netblock this way.

Maybe you should try all of the above for the neighbouring IPs as well.

tom


> If you browse to the IP then you get an error message from ISA saying a
> correct URL must be used..
> Guessing it has multiple domains hosted.....
>
> Already tried Google and MSNPawn API searches +  IP:IPADDRESS in search
> engines..
>
> No luck.
>
> Joshua Perrymon, C.E.H.
>
>
>
>  


-------------------------------------------------------------------------
This List Sponsored by: SpiDynamics

ALERT: "How A Hacker Launches A Web Application Attack!" 
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks with real-world 
examples of recent hacking methods such as: SQL Injection, Cross Site 
Scripting and Parameter Manipulation

https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gRl
--------------------------------------------------------------------------