VHostScan is An virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.
Features:
+ Quickly highlight unique content in catch-all scenarios
+ Locate the outliers in catch-all scenarios where results have dynamic content on the page (such as the time)
+ Identify aliases by tweaking the unique depth of matches
+ Wordlist supports standard words and a variable to input a base hostname (for e.g. dev.%s from the wordlist would be run as dev.BASE_HOST)
+ Work over HTTP and HTTPS
+ Ability to set the real port of the webserver to use in headers when pivoting through ssh/nc
+ Add simple response headers to bypass some WAF products
VHostScan v1.0
Dependencies:
+ Python 2.7.x
+ Pip and git
Usage:
git clone https://github.com/codingo/VHostScan && cd VHostScan pip install -r requirements.txt python VHostScan.py -t example.com python VHostScan.py -t localhost -b example.com -p 4444 -r 80
Source: https://github.com/codingo