Hasere is a tool that can discovery the virtual hosts and related filetype using google and bing search engines. Optionally, it uses the nmap to determine the ip addresses which have 80 or 443 opened port. After that it uses the bing search engine to determine which domains were hosted or have been hosted on this ip address. Finally, it search the filetype which was confiured via filetype_path parameters for this domain. So you can discovery the hole for your web pentesting easily. Install the needed libraries:
# apt-get install python-setuptools
# wget https://github.com/pkrumins/xgoogle/archive/master.zip
# cd xgoogle-master
# python setup.py install
# wget https://github.com/galkan/hasere/archive/master.zip
# unzip master.zip
# cd hasere-master
# ./hasere.py -h
# cat data/filetype
php
asp
# ./hasere.py -s 209.92.24.80/28 -t 3 -f data/filetype -n
Ip Address: Host_Name: Google_Output:
----------- ---------- --------------
209.92.24.80 www.linux.org ---
209.92.24.80 www.linux.org ---
209.92.24.90 www.fobusholster.com ---
209.92.24.90 www.fobusholster.com ---
209.92.24.86 www.couturecreations.net www.couturecreations.net/site/cart.php
209.92.24.86 www.couturecreations.net www.couturecreations.net/site/cart.php,
www.couturecreations.net/site/cart.php
209.92.24.95 www.mccaffreys.com www.couturecreations.net/site/cart.php,
www.couturecreations.net/site/cart.php, www.couturecreations.net/site/cart.php