I worry from your request since you mention that you don't have a server to run this on and are intending to put it on a virtual host that you may not have authorization to do what you are considering.

One would assume if you are responsible for maintaining the security of client sites on a large network that you would also have access to the necessary hardware to host any tools you might need to do this. I would also expect these tools to be on-net, not run from a remote location as well.

I may be out of line and completely misunderstanding your intent but it sounds like you may be wanting to poke around where you haven't been invited.

If so, before you do so I would recommend reading about Merlyn's bad experience in this area.