January 21, 2021

Tools to enumerate subdomains or URLs on a known IP

What tools do folk use to map domains and URLs on an IP? (Preferably open source)

For example, you have a web host with 443 open. How to you work out what websites and URLs are live on the host?

PTR lookup is too limited as it only returns the 1 hostname and won’t cover all the potential websites on the host.

Been struggling to find a non PTR answer on Google and thought the folk here would have a couple tricks up their sleeve

In this use case, you have the IP. You want to see what is pointed at the IP.



Do you mean a tool like dirbuster or gobuster?

Leave a Reply

Your email address will not be published. Required fields are marked *

Note: By filling this form and submitting your commen, you acknowledge, agree and comply with our terms of service. In addition you acknowledge that you are willingly sharing your email address with AiOWikis and you might receive notification emails from AiOWikis for comment notifications. AiOWiksi guarantees that your email address WILL NOT be used for advertisement or email marketting purposes.

This site uses Akismet to reduce spam. Learn how your comment data is processed.