Penetration Testing: Re: Scan virtual hosts

[Gareth Davies <gareth.davies () mynetsec com>]

Geert VAN ACKER wrote:

> Dear list,
>
> is it possible to enumerate all virtual hosts on a given IP address ? I
> prefer Linux soft.
>
> Thx,
>
> Geert
>
>  
The only sure fire way is if the NS for the domain allows zone 
transfers, then you drop out the zone file and you can see all the 
domains mapped, subdomains and usually other domains on the box.
whois.sc is an excellent tool aswell but as mentioned it's not 100% 
complete, but it does give you a good idea.
Cheers

--
Gareth Davies

Manager - Security Practice

Network Security Solutions MSC Sdn. Bhd.
Suite E-07-21, Block E, Plaza Mont' Kiara, No. 2 Jalan Kiara,
Mont’ Kiara, 50480
Kuala Lumpur, Malaysia 
Phone: +603-6203 5303
www.mynetsec.com