HostHunter v1.5 — Discover & Extract Hostnames Providing a Large Set of Target IP Addresses
A tool to efficiently discover and extract hostnames providing a large set of target IP addresses. HostHunter utilises simple OSINT techniques to map IP addresses with virtual hostnames. It generates a CSV or TXT file containing the results of the reconnaissance.
Latest version of HostHunter also takes screenshots of the targets, it is currently a beta functionality.
Installation
- Tested with Python 3.7.2.
Linux / Mac OS
- Install python dependencies.
$ pip3 install -r requirements.txt
The next few steps are only required if you would like to use the Screen Capture feature.
- Download and install the latest version of Google Chrome.
Mac OS:
$ brew cask install google-chrome
Linux:
$ wget https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
$ dpkg -i ./google-chrome-stable_current_amd64.deb
$ sudo apt-get install -f
- Download and install the latest ChromeDriver.
Mac OS:
wget -O /tmp/chromedriver.zip https://chromedriver.storage.googleapis.com/74.0.3729.6/chromedriver_mac64.zip && sudo unzip /tmp/chromedriver.zip chromedriver -d /usr/local/bin/;
Linux:
wget -O /tmp/chromedriver.zip https://chromedriver.storage.googleapis.com/74.0.3729.6/chromedriver_linux64.zip && sudo unzip /tmp/chromedriver.zip chromedriver -d /usr/local/bin/;
Simple Usage Example
$ python3 hosthunter.py
$ cat vhosts.csv
More Examples
HostHunter Help Page
$ python3 hosthunter.py -h
usage: hosthunter.py
Run HostHunter with Bing and Screen Capture modules enabled
$ python3 hosthunter.py — bing -sc -f csv -o hosts.csv
Display Results
$ cat hosts.csv
View Screenshots
$ open ./screen_captures/
Features
Works with Python3
Extracts information from SSL/TLS certificates.
Supports Free HackerTarget API requests.
Takes Screenshots of the target applications.
Validates the targets IPv4 address.
Supports .txt and .csv output file formats
Gathers information from HTTP headers. Verifies Internet access. Finds hostnames in 80/TCP, 443/TCP and 21/TCP ports.
Coming Next
Support for Nessus target format.
Improve output (IPs, HostNames, FQDNs)
Pause and Resume Execution
Support for a Premium HackerTarget API key
Support for IPv6
Gather information from additional APIs
Actively pull SSL certificates from other TCP ports
