WebApp Sec mailing list archives

Re: Enumerate Web Virtual Site


From: thomas springer <tuevsec () gmx net>
Date: Sat, 02 Sep 2006 18:24:04 +0200

There is no way to enumerate all virtual hosts relyable and complete
(unless you have access to the webserver-config).

A good guess is the already mentioned ip-search from msn.
There are also a handful of databases on the net that know about
ip-numbers and hostnames. The best known might be http://dnstools.com
(formerly whois.sc), another option is http://webhosting.info.

Both databases focus on .com/.net/.org - domains. If you are interested
in a broader tld-range you might also try http://www.tomdns.net - the
site is currently in heavy beta. tomdns does some active researching
after you start a query - so you might get more results when you repeat
your search a few minutes later.

tom


Roger Liu wrote:
Dear all,
I'm testing the security of a computer which is used for a web site, but
I just get an IP address. Now I need to know how many virtual sites
running on this computer. How do I enumerate all the virtual site? Any
good idea/tools to do this ?
Thanks


  


Current thread: