https://github.com/gwen001/vhost-brute

A PHP tool to brute force vhost configured on a server.
https://github.com/gwen001/vhost-brute

bugbounty pentesting php security-tools subdomain vhost

Last synced: 6 days ago
JSON representation

A PHP tool to brute force vhost configured on a server.

• Host: GitHub
• URL: https://github.com/gwen001/vhost-brute
• Owner: gwen001
• License: mit
• Created: 2017-11-20T16:29:43.000Z (almost 7 years ago)
• Default Branch: master
• Last Pushed: 2022-12-02T08:18:30.000Z (almost 2 years ago)
• Last Synced: 2024-05-01T15:58:13.086Z (7 months ago)
• Topics: bugbounty, pentesting, php, security-tools, subdomain, vhost
• Language: PHP
• Homepage:
• Size: 142 KB
• Stars: 82
• Watchers: 8
• Forks: 34
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE.md

Awesome Lists containing this project

README

        
vhost-brute


A PHP tool to brute force vhost configured on a server.




    

    

    



---

## Install

```

git clone https://github.com/gwen001/vhost-brute

```

## Usage

```

Usage: php vhost-brute.php [OPTIONS]

Options:

	--domain	set domain

	--fail		max fail (http code=0) before exiting, default=-1, unlimited

	-h, --help	print this help

	--ip		set server ip address

	--port		set port

	--ssl		force ssl

	--st		percentage of similarity of the content to NOT confirm, default=90 

			so under 90 it's considered different than the reference

	--threads	set maximum threads, default=1

	--wordlist	set plain text file that contains subdomains to test

Examples:

	php vhost-brute.php --ip xxx.xxx.xxx.xxx --domain example.com --wordlist sub.txt --threads 5

```

---



---

Feel free to [open an issue](/../../issues/) if you have any problem with the script.