Tool Documentation:

bing-ip2hosts Usage Examples

root@kali:~# bing-ip2hosts -p microsoft.com
[ 65.55.58.201 | Scraping 1 | Found 0 | / ]
http://microsoft.com
http://research.microsoft.com
http://www.answers.microsoft.com
http://www.microsoft.com
http://www.msdn.microsoft.com
root@kali:~# bing-ip2hosts -p 173.194.33.80
[ 173.194.33.80 | Scraping 60-69 of 73 | Found 41 | | ]| / ]
http://asia.google.com
http://desktop.google.com
http://ejabat.google.com
http://google.netscape.com
http://partner-client.google.com
http://picasa.google.com


Packages and Binaries:

bing-ip2hosts

This package contains a Bing.com web scraper that discovers hostnames by IP address. Bing is the flagship Microsoft search engine formerly known as MSN Search and Live Search.

It provides a feature unique to search engines - it allows searching by IP address. Bing-ip2hosts uses this feature.

It can be used to discover subdomains and other related domains. It also helps to identify websites hosted in a shared hosting environment. This technique follows best practices during the reconnaissance phase of a penetration test or bug bounty, to expand the target’s attack surface.

Unlike other many other recon tools that web scrape Bing, this tool has smart scraping behaviour to maximize the discovery of hostnames.

Installed size: 29 KB
How to install: sudo apt install bing-ip2hosts

Dependencies:
  • bind9-dnsutils
  • wget
bing-ip2hosts
root@kali:~# bing-ip2hosts -h

  m,                   .,recon:,        ,,
  #####               ]##""^^"%##m    %##b
  ####b               ]##      `##b
  ####b               ]##       ##    i##    @#b,######m       ,######m ##b
  ####b 1mw,          ]##MMM####      i##    ]###`    %##     ###`    `@##
  ####b  1#####Nw,    ]##``    @#b    i##    ]##       ###   ###       j##
  ####i   %########[  ]##       @##   i##    ]##       ###   ##g       j##
  ####n      2#####[  ]##      @##    i##    ]##       ###   @##       {##
  ####g  ,#########b  ]##   ,,e###    j##    ]##       ###    7##m,,,s#M##
  #############M^     'WWWWWW%b^       ii    'nn       nn*      `1337` g##
  ##########"                                                          G##
    "%##"                                                     @#Gmmem###G
  ,i                ,s2e,     ##                                  ````
   `               "`   %#    ##                             T#
  ]#   ]#,#M5@#p         #b   #H#H%@#     s#M5O#o   ,#MSSM  W@##W=  s#SSW
  ]#   j#p    ^#p      ,#M    ##    @#   ##'   'O#  S#,      ]#     #b
  ]#   j#      #M    ,#M      ##    @#   #o     O#    "SXm   ]#      ^"@#
  ]#   j##,  ,##   ,#2        ##    @#   7#.   .#O  ,   ]#   ]#Q       ,#s
  ]#   j######'    #######x   ##    @#    s#####o    ####^    #Tt    ####^
       j#
       j#          bing-ip2hosts (1.0.5) by Andrew Horton @urbanadventurer
       j#          https://morningstarsecurity.com/research/bing-ip2hosts
                   https://github.com/urbanadventurer/bing-ip2hosts

bing-ip2hosts is a Bing.com web scraper that discovers websites by IP address.
Use for OSINT and discovering attack-surface of penetration test targets.

Usage: /usr/bin/bing-ip2hosts [OPTIONS] IP|hostname

OPTIONS are:
-o FILE	Output hostnames to FILE.
-i FILE	Input list of IP addresses or hostnames from FILE.
-n NUM	Stop after NUM scraped pages return no new results (Default: 5).
-l	Select the language for use in the setlang parameter (Default: en-us).
-m	Select the market for use in the setmkt parameter (Default is unset).
-u	Only display hostnames. Default is to include URL prefixes.
-c	CSV output. Outputs the IP and hostname on each line, separated by a comma.
-q	Quiet. Disable output except for final results.
-t DIR	Use this directory instead of /tmp.
-V	Display the version number of bing-ip2hosts and exit.


Updated on: 2024-Mar-11