VHostScan
A virtual host scanner for penetration testing that performs reverse lookups, detects catch-all scenarios, and works around wildcards and aliases.
What is VHostScan?
VHostScan is a virtual host scanner designed for security professionals to discover hidden subdomains and aliases on web servers. It solves the problem of identifying attack surfaces in catch-all scenarios, where default pages return dynamic content, and works around wildcards and aliases. The tool is particularly useful for penetration testing, bug bounty hunting, and CTF challenges.
Penetration testers, bug bounty hunters, red teamers, and security researchers conducting web application reconnaissance and subdomain enumeration.
Developers choose VHostScan for its specialized features like fuzzy logic matching to handle dynamic default pages, reverse lookup capabilities to discover new targets, and seamless integration with pivot tools like SSH tunnels. Its enhanced wordlists for modern cloud infrastructure and performance optimizations make it a robust choice for real-world security assessments.
Overview
A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.
Use Cases
Best For
- Identifying hidden subdomains during penetration testing engagements
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
