Hands-On Web Penetration Testing with Metasploit

Scanning virtual hosts

Metasploit also allows us to scan for virtual hosts configured on the same IP. Virtual hosting is the hosting of multiple domains on a single server and each domain name is configured with a different service. It allows a single server to share resources:

1. We will use the Metasploit console for this module. To search for the vhost module, we can use the vhost_scanner keyword:

2. We set rhosts and domain. In our case, we have used the packtpub.com domain and the 151.101.21.124 IP:

3. We run the module by typing run. The ...