Web App Footprints Discovery

This document describes a methodology for discovering all web applications running on a server hosting multiple virtual hosts. It notes that traditional assessment based only on IP address and ports may fail to find all applications. The proposed solution is to use WHOIS and DNS information databases to identify all domain names associated with the server's IP address, and then use each domain as the host field in HTTP requests to fully map out and assess each web application individually. The methodology allows for a comprehensive assessment of all applications on a server with multiple virtual hosts.