# codingo/VHostScan

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

Repository: https://github.com/codingo/VHostScan
Canonical: https://ross.abutalabs.com/products/vhostscan
Language: Python
License: GPL-3.0
License Family: copyleft
Topics: security-audit, penetration-testing, penetration-test, virtual-hosts, web-application-security, discovery-service, hacking, hacking-tool, virtual-host, vhost, vhosts, security-tools, security, hackthebox, oscp, ctf-tools, offensive-security, bugbounty, reverse-lookups, scanner
Last push: 2025-08-18T07:42:58+00:00

## Health v2 (maintenance only)
Score: 39/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 37, release rhythm 8, longevity 100
- inputs: {"age_days": 3286, "days_push": 380, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1309, forks 238 (observed 2026-08-28T04:04:19.448140+00:00)

## What it is
VHostScan is a Python-based virtual host scanner that discovers hidden vhosts on a web server using wordlists, reverse lookups, and catch-all/wildcard detection. It supports pivoting through SSH/nc, WAF-bypass headers, and HTTP/HTTPS scanning.

## Use cases
- discover hidden virtual hosts on a web server
- find vhosts behind a catch-all wildcard response
- enumerate subdomains via reverse lookups during a pentest
- scan for virtual hosts through an SSH pivot
- bypass WAFs while scanning vhosts
- prepare for OSCP or HackTheBox recon

## When to choose
- you need vhost discovery that handles catch-all and dynamic default pages
- you want a lightweight Python CLI for web app recon
- you're pivoting through ssh/nc and need correct Host headers

## When to avoid
- you need full subdomain enumeration with DNS brute-forcing across nameservers
- you want a GUI or automated web vulnerability scanner
- the target is not a web server with virtual hosting

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, web-scraping, http-client
- domain: security, penetration-testing, web-development, developer-tools
- platform: windows, python, cli
- tags: vhost-scanner, virtual-hosts, recon, bugbounty, ctf-tools, offensive-security, reverse-lookup, wordlists, linux, macos, docker

## Member repositories
- codingo/VHostScan (main) score 39

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:19.448140+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:49:59.046650+00:00, confidence not recorded.
  - readme: https://github.com/codingo/VHostScan (fetched 2026-08-28T04:04:19.448140+00:00, sha 8c28e8314f1a)
- Data as of 2026-08-30T08:39:29.467469+00:00.