The following 2 questions have been useful for finding hosts on a target network:
- http://superuser.com/q/311019/45927 - http://security.stackexchange.com/q/36198/35859
However, answers in both questions assume I know the network address and mask (subnet, I guess?) in advance (192.168.0.0/24, 172.18.72.0/24, etc).
How can I find hosts on any/all connected networks without specifying the subnet in advance?
I know I can list the network devices using
ip address show (Arch Linux),
ifconfig (*nix, OS X), or
ipconfig (Windows) depending on the operating system.
Furthermore, Is there a reliable way to do it across operating systems? From Linux to OS X to Windows?