full-disclosure - Question: Security through Obscurity with VHOSTS

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [month] [year] [list]

Date: Sun May  1 19:12:09 2005
From: jftucker at gmail.com (James Tucker)
Subject: Question: Security through Obscurity with VHOSTS

I know this isn't exactly full-disclosure, feel free to flame me if
you feel sufficiently petty.

Is there any way to remotely enumerate what VHOSTS are running on an
apache server?

As far as security through obscurity is concerned, false local DNS
records really are quite obscure.

Comments please.