Skip to main content

Questions tagged [virtualhost]

A method to host multiple domain names on a single server.

Filter by
Sorted by
Tagged with
0 votes
1 answer
90 views

Understanding the attack on IIS virtual hosting

I'm reading https://drive.google.com/file/d/1aeNq_5wVwHRR1np1jIRQM1hocrgcZ6Qu/view?pli=1 On page 44 it mentions about a way to exploit IIS servers, I tried to reproduce it but it didn’t work. I ...
daisy's user avatar
  • 2,077
0 votes
1 answer
115 views

In case of multiple websites using a single IP, and we have been asked to perform vulnerability assessment to ensure its security, how many to target

When doing black-box vulnerability assessment (with permission of course) of a subdomain of a website, the first step is enumeration; and the first step of that is finding IP of the subdomain. If you ...
Shy's user avatar
  • 121
2 votes
2 answers
355 views

Web application discovery: Can there be virtual hosts configured even when there is a response without host header?

I'm currently learning how to discover web applications running on a machine using port scanning, vhost bruteforcing and directory fuzzing. When it comes to port scanning, there is one thing I can't ...
Sven's user avatar
  • 125
0 votes
2 answers
1k views

How one can find I am using virtual box Virtual Machine linux through Anydesk remote application?

I recently created a virtualbox virtual machine of Ubuntu 18.04 and installed Anydesk remote desktop app in it. An IT guy accessed my computers desktop via Anydesk app, but he is actually inside the ...
Electro Voyager's user avatar
1 vote
1 answer
207 views

Does a searchable public database exist of (hostname; ip) mappings?

This question is not about the trivial usage of the forward/reverse DNS. Getting the IP of a hostname is trivial (DNS), and using reverse DNS, also we can get (typically) a single hostname of an IP. ...
peterh's user avatar
  • 3,030
1 vote
1 answer
3k views

X-Frame-Options header on redirect

I have several web applications running on my server (Debian 8 running Apache). One of my customers wants to improve the security of his app, after having some security audits carried out by a third-...
bomba's user avatar
  • 13
4 votes
1 answer
9k views

Metasploit. Is always replacing domain names with resolved ips on RHOST/RHOSTS?

There is a website which I want to audit. That site must have a concrete Virtualhost configuration because if you access to it using the domain name the website is shown, but if you use the ip address ...
OscarAkaElvis's user avatar