bing-ip2hosts

Using Bing to enumerate Microsoft websites

Download bing-ip2hosts-0.4.tar.gz
License GPLv3
Author Andrew Horton (urbanadventurer)
Kali Linux https://tools.kali.org/information-gathering/bing-ip2hosts

Introduction

Bing.com is a search engine owned by Microsoft formerly known as MSN Search and Live Search. It offers the unique feature to search for websites by IP address. Bing-ip2hosts leverages this to enumerate all host names that Bing has indexed for any given IP address.

Bing-ip2hosts is written in the Bash scripting language for Linux. This was first published in 2009 and released at the Kiwicon conference in New Zealand.

Unlike many other subdomain enumeration tools, this does not require an API key. Originally this project used the mobile interface but now uses the regular web interface.

⚠️ bing-ip2hosts version 0.4 is not currently working. The project requires an update due to the Bing search engine interface change.

Usage

bing-ip2hosts
bing-ip2hosts (o.4) by Andrew Horton aka urbanadventurer
Homepage: http://www.morningstarsecurity.com/research/bing-ip2hosts
 
Useful for web intelligence and attack surface mapping of vhosts during
penetration tests. Find hostnames that share an IP address with your target
which can be a hostname or an IP address. This makes use of Microsoft
Bing.com ability to seach by IP address, e.g. “IP:210.48.71.196”.
 
Usage: /usr/bin/bing-ip2hosts [OPTIONS]
 
OPTIONS are:
-n Turn off the progress indicator animation
-t
 
Use this directory instead of /tmp. The directory must exist.
-i Optional CSV output. Outputs the IP and hostname on each line, separated by a comma.
-p Optional http:// prefix output. Useful for right-clicking in the shell.

Usage Examples

Enumerating an IP address

bing-ip2hosts -p 173.194.33.80
[ 173.194.33.80 | Scraping 60-69 of 73 | Found 41 | | ]| / ]
http://asia.google.com
http://desktop.google.com
http://ejabat.google.com
http://google.netscape.com
http://partner-client.google.com
http://picasa.google.com

Enumerating a hostname

bing-ip2hosts -p microsoft.com
[ 65.55.58.201 | Scraping 1 | Found 0 | / ]
http://microsoft.com
http://research.microsoft.com
http://www.answers.microsoft.com
http://www.microsoft.com
http://www.msdn.microsoft.com