Re: [WEB SECURITY] way to determine virtual hosts?

["Andy Steingruebl" <steingra@xxxxxxxxx>]

There are only two ways I know to do this reliably.

1. Get the relevant DNS zones and go through them matching up A and
CNAME records that point at the same name/IP underneath.  Those are
likely virtual host candidates.

2. Get the webserver configs

short of that, there aren't great ways of doing this unless you can
somehow force-browse the webserver and the directory tree can tell you
about the virtual hosts.

On Tue, Apr 15, 2008 at 5:11 AM, Travis Altman <travisaltman@xxxxxxxxx> wrote:
> i'm specifically looking for a way to do this on an INTERNAL network, any
> suggestions?
>



-- 
Andy Steingruebl
steingra@xxxxxxxxx

----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]