Module Name: Host Name Lookups
Module path: recon/hosts-hosts/ssltools


Name: Host Name Lookups
Path: modules/recon/hosts-hosts/
Author: Tim Maletic (borrowing from the ssl_san module by Zach Graces)

Uses the site to obtain host names from a site's SSL certificate metadata to update the 'hosts' table. Security issues with the certificate trust are pushed to the 'vulnerabilities' table.

Name Current Value Required Description
RESTRICT True yes restrict added hosts to current domains
SOURCE default yes source of input (see 'show info' for details)

Source Options:
default SELECT DISTINCT ip_address FROM hosts WHERE ip_address IS NOT NULL
<string> string representing a single input
<path> path to a file containing a list of inputs
query <sql> database query returning one column of inputs

* This module only stores hosts whose domain matches an entry in the domains table.