https://github.com/gwen001/vhost-brute
A PHP tool to brute force vhost configured on a server.
https://github.com/gwen001/vhost-brute
bugbounty pentesting php security-tools subdomain vhost
Last synced: about 1 year ago
JSON representation
A PHP tool to brute force vhost configured on a server.
- Host: GitHub
- URL: https://github.com/gwen001/vhost-brute
- Owner: gwen001
- License: mit
- Created: 2017-11-20T16:29:43.000Z (over 8 years ago)
- Default Branch: master
- Last Pushed: 2022-12-02T08:18:30.000Z (over 3 years ago)
- Last Synced: 2025-03-31T20:12:15.160Z (about 1 year ago)
- Topics: bugbounty, pentesting, php, security-tools, subdomain, vhost
- Language: PHP
- Homepage:
- Size: 142 KB
- Stars: 87
- Watchers: 7
- Forks: 32
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Funding: .github/FUNDING.yml
- License: LICENSE.md
Awesome Lists containing this project
- awesome-csirt - vhost-brute
README
vhost-brute
A PHP tool to brute force vhost configured on a server.
---
## Install
```
git clone https://github.com/gwen001/vhost-brute
```
## Usage
```
Usage: php vhost-brute.php [OPTIONS]
Options:
--domain set domain
--fail max fail (http code=0) before exiting, default=-1, unlimited
-h, --help print this help
--ip set server ip address
--port set port
--ssl force ssl
--st percentage of similarity of the content to NOT confirm, default=90
so under 90 it's considered different than the reference
--threads set maximum threads, default=1
--wordlist set plain text file that contains subdomains to test
Examples:
php vhost-brute.php --ip xxx.xxx.xxx.xxx --domain example.com --wordlist sub.txt --threads 5
```
---
---
Feel free to [open an issue](/../../issues/) if you have any problem with the script.