I know this isn't exactly full-disclosure, feel free to flame me if you feel sufficiently petty. Is there any way to remotely enumerate what VHOSTS are running on an apache server? As far as security through obscurity is concerned, false local DNS records really are quite obscure. Comments please.