VHostScan – HTTP Virtual Host Scanner

A virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages. First presented at SecTalks BNE in September 2017

Key Benefits

• Quickly highlight unique content in catch-all scenarios
• Locate the outliers in catch-all scenarios where results have dynamic content on the page (such as the time)
• Identify aliases by tweaking the unique depth of matches
• Wordlist supports standard words and a variable to input a base hostname (for e.g. dev.%s from the wordlist would be run as dev.BASE_HOST)
• Work over HTTP and HTTPS
• Ability to set the real port of the webserver to use in headers when pivoting through ssh/nc
• Add simple response headers to bypass some WAF products

Install Requirements

Using pip install via:

$ pip install -r requirements.txt

Download