Bing.com is a search engine owned by Microsoft formerly known as MSN Search and Live Search. It has a unique feature to search for websites hosted on a specific IP address. Bing-ip2hosts uses this feature to enumerate all hostnames which Bing has indexed for a specific IP address. This technique is considered best practice during the reconnaissance phase of a penetration test in order to discover a larger potential attack surface. Bing-ip2hosts is written in the Bash scripting language for Linux. This uses the mobile interface and no API key is required.
Author: Andrew Horton
bing-ip2hosts (o.4) by Andrew Horton aka urbanadventurer
Useful for web intelligence and attack surface mapping of vhosts during
penetration tests. Find hostnames that share an IP address with your target
which can be a hostname or an IP address. This makes use of Microsoft
Bing.com ability to seach by IP address, e.g. “IP:188.8.131.52”.
Usage: /usr/bin/bing-ip2hosts [OPTIONS] <IP|hostname>
-n Turn off the progress indicator animation
-i Optional CSV output. Outputs the IP and hostname on each line, separated by a comma.
-p Optional http:// prefix output. Useful for right-clicking in the shell.
bing-ip2hosts Usage Examples
root@kali:~# bing-ip2hosts -p microsoft.com
[ 184.108.40.206 | Scraping 1 | Found 0 | / ]
root@kali:~# bing-ip2hosts -p 220.127.116.11
[ 18.104.22.168 | Scraping 60-69 of 73 | Found 41 | | ]| / ]