Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have an IP address with a webpage on it, reachable from the Internet.

I do not have any other information about it.
How can I find other URL endpoints associated with it?

Examplehttp://999.99.99.999/

It displays a default page, it is a windows server, but FTP times out, SSH times out, and I don't know any of the directory names.

How can I find out other things, such as other publicly accessible directories, without asking the system administrator who may be unavailable or incompetent?

share|improve this question

closed as not a real question by Dave M, Canadian Luke, Ƭᴇcʜιᴇ007, Mokubai, Simon Sheehan Dec 28 '12 at 0:53

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

1  
Usually, you cannot. –  grawity Dec 27 '12 at 16:54

1 Answer 1

up vote 1 down vote accepted

Not necessarily... but there are tools that might help. For example, a reverse DNS lookup may give you one hostname associated with the machine. Also, http://robtex.com is a helpful tool that may be able to find out more based on the IP address (i.e. what network it's on, what other machines are on the same network that robtex knows about), etc. But in short, the only definitive way to determine all the associate URLs is to have administrative access to the machine and look at the server configuration. For example, since you know you're on a Windows machine, you would probably want to try Remote Desktop (RDP) or a CIFS file share.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.