EH-Net

Ethical Hacking Discussions and Related Certifications => Web Applications => Topic started by: scottr on January 08, 2009, 01:15:31 PM



Title: Determine URL from IP address
Post by: scottr on January 08, 2009, 01:15:31 PM
I am really thinking out loud here and hopefully either someone can correct me in my thinking or point to a solution. I am scanning my internal corporate network for some standard ports (21,22,23,80,443 etc) to get a better idea of the applications that are running. Is there a tool that exists that will give me all URLs that are listening on port 80?  For instance, I find a server named aaaa that has port 80 open. When I browse to http://aaaa I find the default IIS page but if there are pages that exist under the default site http://aaaa/bbbb/index.html I would have to know their exact location. Is my thinking flawed? If not, is there a utility that might be able to show shared folders or pages running under IIS?


Title: Re: Determine URL from IP address
Post by: adamj on January 08, 2009, 06:09:17 PM
Hi Scott,

You may be able to use a tool to 'fuzz' the pages under the main site, or spider the site, which might work if there are references to http://aaaa/bbbb/* from http://aaaa/*


Title: Re: Determine URL from IP address
Post by: BillV on January 08, 2009, 08:04:06 PM
On that point, try Paros Proxy (http://www.parosproxy.org/index.shtml).


Title: Re: Determine URL from IP address
Post by: scottr on January 09, 2009, 08:47:37 AM
As expected, IIS or Apache is installed with no REAL sites being hosted. I cannot wait to hear the reasoning for having webserver software installed without hosting any sites. Thank you gentlemen for your help as I will now add this tool to the arsenal.

Thanks again!
Scott