I’m doing a module called “Information gathering - web edition” and I’m confused on what input to give etc/hosts. In this example I’m able to spawn a target IP and given
“vHosts needed for these questions:
app.inlanefreight.local
dev.inlanefreight.local”
When im adding these domains to hosts should do I need to do this?
target-ip app.inlanefreight.local
target-ip dev.inlanefreight.local
And then change the IP manually every time a new target IP spawns? I just get confused on how i am supposed to enumerate other subdomains if I dont know what they are if I cant connect to them. Thanks for any help in advance! : )
Hey man add the subdoamins to /etc/hosts
I found the answers emuerating the ip target using nmap and using the extension Wappalyzer
If you need any help, just let me know
Good luck
I added:
Target-ip app.inlanefreight.local
Target-ip dev.inlanefreight.local
to /etc/hosts
… still get error in the browser. >>> This is the inlanefreight.local default vhost
and reading the headers does not provide the CMS info when I use:
curl -I Target-ip -H " Host: <inserted respective host here>"
Am I missing something?
I ended up just exploring the web page and found the CMS in use but if there is a way to get the same info thru some other means let me know
Don’t forget to add the port to the end of the url, but don’t add the port to the url and to the ip in the hosts
Hey guys, Just in case if anyone is stuck with this module and doesn’t find any step by step guide.
Enjoy!