kali資訊搜集工具之bing-ip2hosts

Bing.com is a search engine owned by Microsoft formerly known as MSN Search and Live Search. It has a unique feature to search for websites hosted on a specific IP address. Bing-ip2hosts uses this feature to enumerate all hostnames which Bing has indexed for a specific IP address. This technique is considered best practice during the reconnaissance phase of a penetration test in order to discover a larger potential attack surface. Bing-ip2hosts is written in the Bash scripting language for Linux. This uses the mobile interface and no API key is required.

一款基于bing搜尋引擎的子域名檢索工具，有利于擴大攻擊面，在這裡圖我同時推薦一款工具SubBrute，和此工具有一曲同工之妙，不過前者采用的是搜尋引擎檢索，後這采用的是DNS域名窮舉，至于你喜歡那個，蘿蔔白菜各有所愛

Tools included in the bing-ip2hosts package

bing-ip2hosts – Enumerate hostnames for an IP using bing.com

[email protected]:~# bing-ip2hosts

bing-ip2hosts (o.4) by Andrew Horton aka urbanadventurer

Homepage: http://www.morningstarsecurity.com/research/bing-ip2hosts

Useful for web intelligence and attack surface mapping of vhosts during

penetration tests. Find hostnames that share an IP address with your target

which can be a hostname or an IP address. This makes use of Microsoft

Bing.com ability to seach by IP address, e.g. “IP:210.48.71.196”.

Usage: /usr/bin/bing-ip2hosts [OPTIONS] <IP|hostname>

OPTIONS are:

-n Turn off the progress indicator animation

-t

Use this directory instead of /tmp. The directory must exist.

-i Optional CSV output. Outputs the IP and hostname on each line, separated by a comma.

-p Optional http:// prefix output. Useful for right-clicking in the shell.

bing-ip2hosts Usage Examples

[email protected]:~# bing-ip2hosts -p microsoft.com

[ 65.55.58.201 | Scraping 1 | Found 0 | / ]

http://microsoft.com

http://research.microsoft.com

http://www.answers.microsoft.com

http://www.microsoft.com

http://www.msdn.microsoft.com

[email protected]:~# bing-ip2hosts -p 173.194.33.80

[ 173.194.33.80 | Scraping 60-69 of 73 | Found 41 | | ]| / ]

http://asia.google.com

http://desktop.google.com

http://ejabat.google.com

http://google.netscape.com

http://partner-client.google.com

http://picasa.google.com

WEB攻擊工具庫-資訊收集工具集-域名資訊收集工具-bing-ip2hosts，SubBrute