Home page logo

pen-test logo Penetration Testing mailing list archives

Re: Scan virtual hosts
From: Gareth Davies <gareth.davies () mynetsec com>
Date: Mon, 29 Aug 2005 11:19:11 +0800

Geert VAN ACKER wrote:

Dear list,

is it possible to enumerate all virtual hosts on a given IP address ? I
prefer Linux soft.



The only sure fire way is if the NS for the domain allows zone transfers, then you drop out the zone file and you can see all the domains mapped, subdomains and usually other domains on the box.

whois.sc is an excellent tool aswell but as mentioned it's not 100% complete, but it does give you a good idea.


Gareth Davies

Manager - Security Practice

Network Security Solutions MSC Sdn. Bhd.
Suite E-07-21, Block E, Plaza Mont' Kiara, No. 2 Jalan Kiara,
Mont’ Kiara, 50480
Kuala Lumpur, Malaysia Phone: +603-6203 5303


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]