Given an ip address that you know is running a webserver i.e port 80 or 443 is open. (nothing else)
Then is their anyway to determine how many websites are hosted on that ip address and the website url address's for each of the different websites hosted at that particular ip address?
Given an apache webserver is their anyway remotely to list all the levels of the sub-folder names under the www folder with just using ports 80 and 443 open for remote connecting to it ?
This would be a really nice thing to have so people could use some type of restful service , UDDI to look up what types of websites are where... But I guess we have that from search engines except it could be worth it to advertise new sites .... (or for no other reason to allow the user to know what web urls are out their and where)
Well people may say it is a security risk but if it was done for only public available websites you would not be breaking any security issues. I.E just add a command to the http protocals to list websites and urls for them available on the hosting server. The webserver could just create a textfile of all the websites and urls associated on that server and on request send the text file to the requestor.
For example instead of put get ,...etc I have a list http query which the server just sends the websites and their urls that are hosted on this site. One could have a cron job or a process scanning for new websites being host on the server and adding them to the textfile list.
If you do it this way you are not creating any security issues since no zone transfer is being done. And obviously the person could have a program to verify if the web urls /textfile downloaded from the hosting server correspond to that server by doing a dns lookup for the ip of each of the urls in the text file before going their.
Sort of like a validations of integrity
So it is protected both ways.
you could also have a feature that allows the host server when its cron job/process is scanning to skip over private or hidden urls. And update the textfile when a virtual hostname is changed to a different one or the website is deleted.