Re: Jeremiah Grossmans “How to find your websites”

This piece highlights the importance of considering name-based virtual hosts during web footprinting and vulnerability scanning, explaining how the HTTP/1.1 Host header determines which site is reached on a shared IP. It warns that scanning only an IP can miss host-specific vulnerabilities and recommends enumerating co-hosted domains (e.g., via domaintools/iptoolbox) and ensuring scanners target the correct hostnames (e.g., with nikto/wikto), while also advising hosted organizations to understand co-tenancy risks.