[SOLVED] nmap scanning domain names

smithy2010 · 05-31-2012, 07:16 AM

Hi all,

I was wondering if someone can advise please. I want to run scan against 10 web servers using nmap, my aim is to discover which server is hosting which web site.
For example I have webserv1 that’s host 3 websites and about 5 subdomains against each domain name.
Is there an nmap command that can discover and report all web website and their sub-domains per server?

It does not have to be nmap, and I would appreciate if you could suggest any other open source software to use.

Thank you in advance.

D

acid_kewpie · 05-31-2012, 07:25 AM

no, you can't find out what domains exist on Apache from the outside. If you don't ask for the right hostname yourself, you won't be told what your options are.

smithy2010 · 05-31-2012, 11:09 AM

Thanks for reply. I will try some other method.

Cheers

D.