Arguments: ```bash python3 vhost-enum.py -h usage: vhost-enum.py [-h] [-w WORDLIST] [-s] -i IP [-p PORT] -d DOMAIN [-b BASELINE] [-t THREADS] optional arguments: -h, --help show this help message and exit -w WORDLIST, --wordlist WORDLIST The wordlist to use -s, --tls Use HTTPs -i IP, --ip IP The ip of the host -p PORT, --port PORT A custom port to use -d DOMAIN, --domain DOMAIN The domain to use -b BASELINE, --baseline BASELINE The baseline subdomain to use -t THREADS, --threads THREADS Number of threads to use -v, --verbose Set loglevel to DEBUG ``` Example: ```bash python3 vhost-enum.py -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-5000.txt -d trick.htb -i 10.10.11.166 ``` Example output: ```bash [+] Generating wordlist queue... [+] Loaded 4990 words. [+] Established baseline: www.trick.htb returns a page of 5480 bytes and with hash 8eaa1485dc75203f81c1c3663812b7572be5904cb200b3640e0113e9a78fd152. [+] Spawning 10 thread(s)... [+] preprod-payroll.trick.htb returns 200 and seems a different site [+] Job completed in 26.494487285614014 seconds. [+] The following virtualhost were discovered: * preprod-payroll.trick.htb ```