VHostScan - a scanner can be used with pivot tools, detect catch-all scenarios, aliases & dynamic default pages.

VHostScan – a scanner can be used with pivot tools, detect catch-all scenarios, aliases & dynamic default pages.

VHostScan is An virtual host scanner that can be used with pivot tools, detect catch-all scenarios, aliases and dynamic default pages.
Features:
+ Quickly highlight unique content in catch-all scenarios
+ Locate the outliers in catch-all scenarios where results have dynamic content on the page (such as the time)
+ Identify aliases by tweaking the unique depth of matches
+ Wordlist supports standard words and a variable to input a base hostname (for e.g. dev.%s from the wordlist would be run as dev.BASE_HOST)
+ Work over HTTP and HTTPS
+ Ability to set the real port of the webserver to use in headers when pivoting through ssh/nc
+ Add simple response headers to bypass some WAF products

VHostScan v1.0

Dependencies:
+ Python 2.7.x
+ Pip and git

Usage:

Source: https://github.com/codingo