Skip to content

vHost Enumeration

Alter hostnames while targeting the same web server (ip) to discover content.

Fuzzing techniques

FUZZ vhosts for variations of known subdomains.

Known subdomain: preprod-billing.example.com

Fuzz with: preprod-FUZZ.example.com

Brute force tools

gobuster

Burp intruder

ffuf

Example
ffuf -c -u http://<ip_address> -H "Host: FUZZ.<domain>" -w <wordlist>