Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Web-App-Sec
[Top] [All Lists]

RE: searching any possible pre and postfixes for a given domain

Subject: RE: searching any possible pre and postfixes for a given domain
Date: Fri, 27 Aug 2004 11:54:31 +0100
Huh, just a clue TO CHECK: with Nessus, www.nessus.org, I know you can ask it 
to scan also networks with '*'. The trouble is that you are scanning, which is 
not really inlaw :). So, what you can do, is download Nessus, tell him to 
"scan" (but just do a ping) what you need with '*'...then you will have what 
you want.

Tell me if I am wrong, Nessus' lovers :) !

 

-----Message d'origine-----
De : Robert Hajime Lanning [mailto:robert.lanning@gmail.com] 
Envoyé : jeudi 26 août 2004 04:17
À : webappsec@securityfocus.com
Objet : Re: searching any possible pre and postfixes for a given domain

There really is not a tool for this.  The reason for this, is the way DNS was 
designed.
There is no way to query for partial addresses, so you must make a complete 
address and query for it to see if it returns valid data.

The other way, is to get a copy of the "com." zone file (I believe it is a few 
gig.) and grep through it.

On Wed, 25 Aug 2004 16:44:01 -0300, Mads Rasmussen <mads@opencs.com.br> wrote:

Is there a tool for this?

Let's say I have a site www.bank.com, I want to search for sites with 
similar names like mine, this could be clone site or just someone 
riding off my sites popularity.

How can I learn of sites with prefixes: *.bank and sites with postfixes:
bank.*

I tried the google "site:" function but you have to insert the pre or 
postfixes yourself, google doesn't like wildcards :-) I thought that 
maybe some spider could do that, someone has knowledge of any or how 
to do it with other tools?

Regards,

--
Mads Rasmussen
Open Communications Security
+55 11 3345 2525
http://www.opencs.com.br



--
END OF LINE
       -MCP



<Prev in Thread] Current Thread [Next in Thread>