Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My domain got massively hacked, so I'm doing some penetration testing with it using WMAP and NMAP etc.

However, I believe it's on shared hosting, so running tests on (the IP address for my site, will also impact ALL sites sharing that IP address.

WMAP and NMAP seem to require an IP address and do not deal with hostnames ''.

I have discovered that leads to my site though.

I just want to make sure I am running tests on my OWN site, and none of the others.

I'm using Ubuntu, nmap, wmap and syn.

share|improve this question
Nmap will accept a hostname, no problem. But make sure you get permission from your hosting provider for your test, or they may suspend your account. – bonsaiviking May 20 '13 at 15:01
I don’t know about WMAP, but I’m pretty sure NMAP doesn’t do tests that are relevant to a web site or server. I believe NMAP primarily tests (attacks) the whole host, so there’s no way you can use it without impacting “ALL sites sharing that IP address.” – Scott May 21 '13 at 15:54

You could set up a local lighttpd or Apache proxy that redirects to the appropriate directory on your host, and then point WMAP/NMAP to localhost. You may wish to verify that other sites are totally inaccessible through the proxy before running the tests, though.

Here's an example for lighttpd:

url.rewrite-once = (
      "^(.*)" => "/~username$1"
proxy.server = (
  "" => (
      "host" => "",
      "port" => 80
share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .