full-disclosure - metasploit vhost

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Mon, 20 Dec 2010 12:27:36 +0800
From: YGN Ethical Hacker Group <lists@...g.net>
To: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: metasploit vhost_scanner updated

## added support wordlist to load from file
## added more built-in words commonly used in subdomain naming
## added TLD support
## added title/header display


## Background Info
## when dns is not available in controlled environment, vhost gives us
probably exploitable entries and recon points
##  - development host name (test app)
##  - virtual hosts that point/belong to other IPs


Download:
http://yehg.net/lab/pr0js/tools/plugins/metasploit/msf/modules/auxiliary/scanner/http/vhost_scannery.rb

Download attachment "vhost_scannery.rb" of type "application/octet-stream" (9139 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/