set TARGET promises2kids.org #OpExposeCPS

Scan date: 5-3-2015
=========================================================================
| Domain: http://promises2kids.org/
| Server: Apache/2.2.22
| IP: 72.47.224.85
=========================================================================
 Timthumb < 1.33 vulnerability:


Initiating SYN Stealth Scan at 23:48
Scanning agaacqmame.c03.gridserver.com (72.47.224.85) [65535 ports]
Discovered open port 143/tcp on 72.47.224.85
Discovered open port 21/tcp on 72.47.224.85
Discovered open port 587/tcp on 72.47.224.85
Discovered open port 110/tcp on 72.47.224.85
Discovered open port 995/tcp on 72.47.224.85
Discovered open port 80/tcp on 72.47.224.85
Discovered open port 443/tcp on 72.47.224.85
Discovered open port 993/tcp on 72.47.224.85
Discovered open port 22/tcp on 72.47.224.85
Discovered open port 465/tcp on 72.47.224.85
Completed SYN Stealth Scan at 23:55, 435.77s elapsed
=========================================================================
PORT    STATE SERVICE  VERSION
21/tcp  open  ftp      		Pure-FTPd
22/tcp  open  ssh     	 	OpenSSH 5.5p1 Debian 6+squeeze5 (protocol 2.0)
80/tcp  open  http   	  	Apache httpd 2.2.22
110/tcp open  pop3    	 	Dovecot pop3d
143/tcp open  imap   	  	Dovecot imapd
443/tcp open  http   	  	nginx 1.2.7
465/tcp open  ssl/smtp 		Exim smtpd 4.80.1
587/tcp open  smtp     		Exim smtpd 4.80.1
993/tcp open  ssl/imap 		Dovecot imapd
995/tcp open  ssl/pop3 		Dovecot pop3d
3971/tcp closed lanrevserver
=========================================================================
TRACEROUTE (using proto 1/icmp)
HOP RTT       ADDRESS
1   124.04 ms dns.air (10.30.0.1)
2   124.05 ms vlan5.ngn-ams1-cs2-new.leaseweb.net (37.48.77.253)
3   124.82 ms bundle-ether4.ngn-ams1-cr2-new.leaseweb.net (37.48.95.202)
4   124.81 ms te0-0-0-30.ccr21.ams06.atlas.cogentco.com (149.6.0.241)
5   125.35 ms be2298.ccr42.ams03.atlas.cogentco.com (154.54.60.177)
6   125.44 ms be2312.ccr21.ams04.atlas.cogentco.com (154.54.74.94)
7   124.85 ms verio.fra03.atlas.cogentco.com (130.117.14.178)
8   125.02 ms ae14.cr1.ams10.nl.zip.zayo.com (64.125.21.77)
9   206.57 ms ae7.cr2.dca2.us.zip.zayo.com (64.125.27.33)
10  230.24 ms ae14.cr2.iah1.us.zip.zayo.com (64.125.21.54)
11  262.05 ms ae3.cr2.lax112.us.zip.zayo.com (64.125.21.86)
12  261.84 ms ae1.mpr1.lax5.us.zip.zayo.com (64.125.32.86)
13  280.57 ms 64.125.186.182
14  280.55 ms mt-cr02.mediatemple.net (64.93.75.18)
15  280.54 ms e1.1.as02.lax01.mtsvc.net (72.10.63.198)
16  287.05 ms e1.3.as06.lax02.mtsvc.net (72.10.63.250)
17  280.53 ms agaacqmame.c03.gridserver.com (72.47.224.85)
=========================================================================

Aggressive OS guesses: HP P2000 G3 NAS device (93%), Android 4.1.1 (89%), Crestron XPanel control system (87%), Netgear DG834G WAP or Western Digital WD TV media player (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: n29.c03.server-system.net, n10.c03.server-system.net; OS: Linux; CPE: cpe:/o:linux:linux_kernel
=========================================================================
| Crawler Started:
| Plugin name: Timthumb <= 1.32 vulnerability v.1 Loaded.
| Plugin name: Code Disclosure v.1.1 Loaded.
| Plugin name: E-mail Detection v.1.1 Loaded.
| Plugin name: Web Backdoor Disclosure v.1.1 Loaded.
| Plugin name: FCKeditor upload test v.1 Loaded.
| Plugin name: External Host Detect v.1.2 Loaded.
| Plugin name: phpinfo() Disclosure v.1 Loaded.
| Plugin name: Upload Form Detect v.1.1 Loaded.
| [+] Crawling finished, 595 URL's found!
|
| Timthumb:
|
| Source Code Disclosure:
| [+] Source Code Found: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/fckconfig.js
|
| E-mails:
| [+] E-mail Found: info@promises2kids.org
| [+] E-mail Found: m@tidakada.com
| [+] E-mail Found: tonya@promises2kids.org
| [+] E-mail Found: andrea@promises2kids.org
=========================================================================
| Directory check:
| [+] CODE: 200 URL: http://promises2kids.org/Help/
| [+] CODE: 200 URL: http://promises2kids.org/about/
| [+] CODE: 200 URL: http://promises2kids.org/ad/
| [+] CODE: 200 URL: http://promises2kids.org/admin/
| [+] CODE: 200 URL: http://promises2kids.org/advance/
| [+] CODE: 200 URL: http://promises2kids.org/adv/
| [+] CODE: 200 URL: http://promises2kids.org/advanced/
| [+] CODE: 200 URL: http://promises2kids.org/app/
| [+] CODE: 200 URL: http://promises2kids.org/back/
| [+] CODE: 200 URL: http://promises2kids.org/blog/
| [+] CODE: 200 URL: http://promises2kids.org/box/
| [+] CODE: 200 URL: http://promises2kids.org/ca/
| [+] CODE: 200 URL: http://promises2kids.org/camp/
| [+] CODE: 200 URL: http://promises2kids.org/class/
| [+] CODE: 200 URL: http://promises2kids.org/community/
| [+] CODE: 200 URL: http://promises2kids.org/contact/
| [+] CODE: 200 URL: http://promises2kids.org/conta/
| [+] CODE: 200 URL: http://promises2kids.org/cont/
| [+] CODE: 200 URL: http://promises2kids.org/cust/
| [+] CODE: 200 URL: http://promises2kids.org/custom/
| [+] CODE: 200 URL: http://promises2kids.org/di/
| [+] CODE: 200 URL: http://promises2kids.org/donate/
| [+] CODE: 200 URL: http://promises2kids.org/elements/
| [+] CODE: 200 URL: http://promises2kids.org/events/
| [+] CODE: 200 URL: http://promises2kids.org/event/
| [+] CODE: 200 URL: http://promises2kids.org/faq/
| [+] CODE: 200 URL: http://promises2kids.org/feed/
| [+] CODE: 200 URL: http://promises2kids.org/financial/
| [+] CODE: 200 URL: http://promises2kids.org/flex/
| [+] CODE: 200 URL: http://promises2kids.org/for/
| [+] CODE: 200 URL: http://promises2kids.org/gallery/
| [+] CODE: 200 URL: http://promises2kids.org/go/
| [+] CODE: 200 URL: http://promises2kids.org/good/
| [+] CODE: 200 URL: http://promises2kids.org/google/
| [+] CODE: 200 URL: http://promises2kids.org/great/
| [+] CODE: 200 URL: http://promises2kids.org/guardian/
| [+] CODE: 200 URL: http://promises2kids.org/guard/
| [+] CODE: 200 URL: http://promises2kids.org/head/
| [+] CODE: 200 URL: http://promises2kids.org/help/
| [+] CODE: 200 URL: http://promises2kids.org/helping/
| [+] CODE: 200 URL: http://promises2kids.org/history/
| [+] CODE: 200 URL: http://promises2kids.org/home/
| [+] CODE: 200 URL: http://promises2kids.org/hist/
| [+] CODE: 200 URL: http://promises2kids.org/imag/
| [+] CODE: 200 URL: http://promises2kids.org/login/
| [+] CODE: 200 URL: http://promises2kids.org/media/
| [+] CODE: 200 URL: http://promises2kids.org/med/
| [+] CODE: 200 URL: http://promises2kids.org/mission/
| [+] CODE: 200 URL: http://promises2kids.org/news/
| [+] CODE: 200 URL: http://promises2kids.org/newsletters/
| [+] CODE: 200 URL: http://promises2kids.org/newsletter/
| [+] CODE: 200 URL: http://promises2kids.org/new/
| [+] CODE: 200 URL: http://promises2kids.org/ph/
| [+] CODE: 200 URL: http://promises2kids.org/photo/
| [+] CODE: 200 URL: http://promises2kids.org/pricing/
| [+] CODE: 200 URL: http://promises2kids.org/publications/
| [+] CODE: 200 URL: http://promises2kids.org/res/
| [+] CODE: 200 URL: http://promises2kids.org/rss/
| [+] CODE: 200 URL: http://promises2kids.org/sample/
| [+] CODE: 200 URL: http://promises2kids.org/services/
| [+] CODE: 200 URL: http://promises2kids.org/serv/
| [+] CODE: 200 URL: http://promises2kids.org/service/
| [+] CODE: 200 URL: http://promises2kids.org/shop/
| [+] CODE: 200 URL: http://promises2kids.org/side/
| [+] CODE: 200 URL: http://promises2kids.org/som/
| [+] CODE: 200 URL: http://promises2kids.org/sp/
| [+] CODE: 200 URL: http://promises2kids.org/staff/
| [+] CODE: 200 URL: http://promises2kids.org/st/
| [+] CODE: 200 URL: http://promises2kids.org/stat/
| [+] CODE: 200 URL: http://promises2kids.org/supp/
| [+] CODE: 200 URL: http://promises2kids.org/support/
| [+] CODE: 200 URL: http://promises2kids.org/the/
| [+] CODE: 200 URL: http://promises2kids.org/typography/
| [+] CODE: 200 URL: http://promises2kids.org/video/
| [+] CODE: 200 URL: http://promises2kids.org/wp-admin/
=========================================================================
| BANNER GRABBING:
| X-Meta-Generator: WordPress 4.0.1
| Looking for Wordpress plugins:
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/hello.php
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/community/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/contact/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/custom-background/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/custom-widget/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/events/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/gallery/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/nextgen-gallery/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/newsletter/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/pa/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/privacy-policy/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/shop/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/stat/

| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/typography/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/upcoming/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/upcoming-events/
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/video/
=========================================================================
| File check:
| [+] CODE: 200 URL: http://promises2kids.org/admin/index.php
| [+] CODE: 200 URL: http://promises2kids.org/board/index.php
| [+] CODE: 200 URL: http://promises2kids.org/community/index.php
| [+] CODE: 200 URL: http://promises2kids.org/favicon.ico
| [+] CODE: 200 URL: http://promises2kids.org/.history
| [+] CODE: 200 URL: http://promises2kids.org/index.php
| [+] CODE: 200 URL: http://promises2kids.org/license.txt
| [+] CODE: 200 URL: http://promises2kids.org/readme.html
| [+] CODE: 200 URL: http://promises2kids.org/robots.txt
| [+] CODE: 200 URL: http://promises2kids.org/search/htx/sqlqhit.asp
| [+] CODE: 200 URL: http://promises2kids.org/search/htx/SQLQHit.asp
| [+] CODE: 200 URL: http://promises2kids.org/search/sqlqhit.asp
| [+] CODE: 200 URL: http://promises2kids.org/search/SQLQHit.asp
| [+] CODE: 200 URL: http://promises2kids.org/services
| [+] CODE: 200 URL: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/dialog/fck_image.html
| [+] CODE: 200 URL: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/dialog/fck_flash.html
| [+] CODE: 200 URL: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/dialog/fck_link.html
| [+] CODE: 200 URL: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/filemanager/browser/default/browser.html
| [+] CODE: 200 URL: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/filemanager/browser/default/frmupload.html
| [+] CODE: 200 URL: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/fckconfig.js
| [+] CODE: 200 URL: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/license.txt
| [+] CODE: 200 URL: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/_whatsnew.html
| [+] CODE: 200 URL: http://promises2kids.org/sites/default/settings.php
| [+] CODE: 200 URL: http://promises2kids.org/wp-content/plugins/hello.php
| [+] CODE: 200 URL: http://promises2kids.org/xmlrpc.php
=========================================================================
|
| Check robots.txt:
| [+] User-agent: *
| [+] Disallow: /wp-admin/
|
| Check sitemap.xml:
=========================================================================
| INTERESTING STRINGS IN HTML
|
| script type="text/javascript"> var _gaq = _gaq || []; _gaq.push(['_setAccount', 'UA-43179108-1']); _gaq.push(['_gat._forceSSL']); _gaq.push(['_trackPageview']); (function () { var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true; ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'; var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s); })();
| a href="https://twitter.com/Promises2Kids">Twitter
| a href="https://www.facebook.com/Promises2Kids">Facebook
| a style="float: right;" href="/board">Board Login
| a href="mailto:info@promises2kids.org">info@promises2kids.org
=========================================================================
whois promises2kids.org

Domain Name:PROMISES2KIDS.ORG
Domain ID: D153058630-LROR
Creation Date: 2008-06-23T20:07:08Z
Updated Date: 2014-06-26T15:36:45Z
Registry Expiry Date: 2019-06-23T20:07:08Z
Sponsoring Registrar:Network Solutions, LLC (R63-LROR)
Sponsoring Registrar IANA ID: 2
WHOIS Server:
Referral URL:
Domain Status: clientTransferProhibited -- http://www.icann.org/epp#clientTransferProhibited
Registrant ID:42889966-NSIV
Registrant Name:Perfect Privacy, LLC
Registrant Organization:Child Abuse Prevention Foundation
Registrant Street: 12808 Gran Bay Parkway West
Registrant Street: care of Network Solutions
Registrant City:Jacksonville
Registrant State/Province:FL
Registrant Postal Code:32258
Registrant Country:US
Registrant Phone:+1.5707088780
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email:tn2692as97w@networksolutionsprivateregistration.com
Admin ID:42889967-NSIV
Admin Name:Perfect Privacy, LLC
Admin Organization:Promises2Kids Foundation
Admin Street: 12808 Gran Bay Parkway West
Admin Street: care of Network Solutions
Admin City:Jacksonville
Admin State/Province:FL
Admin Postal Code:32258
Admin Country:US
Admin Phone:+1.5707088780
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email:gh7wv2ax49g@networksolutionsprivateregistration.com
Tech ID:44154229-NSIV
Tech Name:Perfect Privacy, LLC
Tech Organization:Zephyr Networks Inc.
Tech Street: 12808 Gran Bay Parkway West
Tech Street: care of Network Solutions
Tech City:Jacksonville
Tech State/Province:FL
Tech Postal Code:32258
Tech Country:US
Tech Phone:+1.5707088780
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email:wq8c86hq63t@networksolutionsprivateregistration.com
Name Server:NS51.WORLDNIC.COM
Name Server:NS52.WORLDNIC.COM
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
Name Server:
DNSSEC:Unsigned

| | ssl-cert: Subject: commonName=*.gridserver.com
| | Issuer: commonName=Go Daddy Secure Certificate Authority - G2/organizationName=GoDaddy.com, Inc./stateOrProvinceName=Arizona/countryName=US
| | Public Key type: rsa
| | Public Key bits: 4096
| | Not valid before: 2014-04-11T15:34:49+00:00
| | Not valid after:  2017-04-11T15:34:49+00:00
| | MD5:   dc7b e5c9 686e 56c6 642c 9945 6cc5 e99a
| |_SHA-1: 1570 adaa d828 71ea d516 82a2 6d06 9c0a e29f 5556
| |_ssl-date: 2015-03-05T07:27:09+00:00; 0s from local time.
| 22/tcp   open   ssh          OpenSSH 5.5p1 Debian 6+squeeze5 (protocol 2.0)
| | ssh-hostkey: 1024 9c:da:ae:2d:9e:11:a9:b2:91:a0:08:ef:04:d0:05:1a (DSA)
| |_1024 3c:6d:5c:99:5d:b5:c6:25:5a:d3:78:8e:d2:f5:7a:01 (RSA)
| 25/tcp   closed smtp
| 80/tcp   open   http         Apache httpd 2.2.22
| |_http-favicon: Unknown favicon MD5: 6F666E394FB8B90EA5A74A9DFE619F9D
| |_http-generator: WordPress 4.0.1
| |_http-methods: No Allow or Public header in OPTIONS response (status code 200)
| | http-robots.txt: 1 disallowed entry
| |_/wp-admin/
| |_http-title: Promises2Kids | Creating a brighter future for foster children...
| 110/tcp  open   pop3         Dovecot pop3d
| |_pop3-capabilities: RESP-CODES TOP SASL(PLAIN LOGIN) USER PIPELINING CAPA UIDL STLS
| 143/tcp  open   imap         Dovecot imapd
| |_imap-capabilities: LITERAL+ SASL-IR completed OK Capability IDLE ID AUTH=PLAIN ENABLE IMAP4rev1 LOGIN-REFERRALS STARTTLS AUTH=LOGINA0001
| 443/tcp  open   http         nginx 1.2.7
| |_http-methods: No Allow or Public header in OPTIONS response (status code 400)
| |_http-title: 400 The plain HTTP request was sent to HTTPS port
| | ssl-cert: Subject: commonName=*.gridserver.com
| | Issuer: commonName=Go Daddy Secure Certificate Authority - G2/organizationName=GoDaddy.com, Inc./stateOrProvinceName=Arizona/countryName=US
| | Public Key type: rsa
| | Public Key bits: 4096
| | Not valid before: 2014-04-11T15:34:49+00:00
| | Not valid after:  2017-04-11T15:34:49+00:00
| | MD5:   dc7b e5c9 686e 56c6 642c 9945 6cc5 e99a
| |_SHA-1: 1570 adaa d828 71ea d516 82a2 6d06 9c0a e29f 5556
| |_ssl-date: 2015-03-05T07:27:08+00:00; 0s from local time.
| 465/tcp  open   ssl/smtp     Exim smtpd 4.80.1
| | smtp-commands: n29.c03.server-system.net Hello promises2kids.org [37.48.77.227], SIZE 52428800, 8BITMIME, PIPELINING, AUTH LOGIN PLAIN, HELP,
| |_ Commands supported:
| | ssl-cert: Subject: commonName=*.gridserver.com
| | Issuer: commonName=Go Daddy Secure Certificate Authority - G2/organizationName=GoDaddy.com, Inc./stateOrProvinceName=Arizona/countryName=US
| | Public Key type: rsa
| | Public Key bits: 4096
| | Not valid before: 2014-04-11T15:34:49+00:00
| | Not valid after:  2017-04-11T15:34:49+00:00
| | MD5:   dc7b e5c9 686e 56c6 642c 9945 6cc5 e99a
| |_SHA-1: 1570 adaa d828 71ea d516 82a2 6d06 9c0a e29f 5556
| |_ssl-date: 2015-03-05T07:27:08+00:00; 0s from local time.
| 587/tcp  open   smtp         Exim smtpd 4.80.1
| | smtp-commands: n10.c03.server-system.net Hello promises2kids.org [37.48.77.227], SIZE 52428800, 8BITMIME, PIPELINING, AUTH LOGIN PLAIN, STARTTLS, HELP,
| |_ Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
| | ssl-cert: Subject: commonName=*.gridserver.com
| | Issuer: commonName=Go Daddy Secure Certificate Authority - G2/organizationName=GoDaddy.com, Inc./stateOrProvinceName=Arizona/countryName=US
| | Public Key type: rsa
| | Public Key bits: 4096
| | Not valid before: 2014-04-11T15:34:49+00:00
| | Not valid after:  2017-04-11T15:34:49+00:00
| | MD5:   dc7b e5c9 686e 56c6 642c 9945 6cc5 e99a
| |_SHA-1: 1570 adaa d828 71ea d516 82a2 6d06 9c0a e29f 5556
| |_ssl-date: 2015-03-05T07:27:10+00:00; 0s from local time.
| 993/tcp  open   ssl/imap     Dovecot imapd
| |_imap-capabilities: LITERAL+ SASL-IR OK completed Capability ID LOGIN-REFERRALS ENABLE IMAP4rev1 IDLE AUTH=PLAIN AUTH=LOGINA0001
| | ssl-cert: Subject: commonName=*.gridserver.com
| | Issuer: commonName=Go Daddy Secure Certificate Authority - G2/organizationName=GoDaddy.com, Inc./stateOrProvinceName=Arizona/countryName=US
| | Public Key type: rsa
| | Public Key bits: 4096
| | Not valid before: 2014-04-11T15:34:49+00:00
| | Not valid after:  2017-04-11T15:34:49+00:00
| | MD5:   dc7b e5c9 686e 56c6 642c 9945 6cc5 e99a
| |_SHA-1: 1570 adaa d828 71ea d516 82a2 6d06 9c0a e29f 5556
| |_ssl-date: 2015-03-05T07:27:10+00:00; 0s from local time.
| 995/tcp  open   ssl/pop3     Dovecot pop3d
| |_pop3-capabilities: RESP-CODES TOP SASL(PLAIN LOGIN) PIPELINING CAPA UIDL USER
| | ssl-cert: Subject: commonName=*.gridserver.com
| | Issuer: commonName=Go Daddy Secure Certificate Authority - G2/organizationName=GoDaddy.com, Inc./stateOrProvinceName=Arizona/countryName=US
| | Public Key type: rsa
| | Public Key bits: 4096
| | Not valid before: 2014-04-11T15:34:49+00:00
| | Not valid after:  2017-04-11T15:34:49+00:00
| | MD5:   dc7b e5c9 686e 56c6 642c 9945 6cc5 e99a
| |_SHA-1: 1570 adaa d828 71ea d516 82a2 6d06 9c0a e29f 5556
| |_ssl-date: 2015-03-05T07:27:08+00:00; 0s from local time.
| 3971/tcp closed lanrevserver
| Service Info: Hosts: n29.c03.server-system.net, n10.c03.server-system.net; OS: Linux; CPE: cpe:/o:linux:linux_kernel
|
| NSE: Script Post-scanning.
| Initiating NSE at 01:27
| Completed NSE at 01:27, 0.00s elapsed
| Read data files from: /usr/bin/../share/nmap
| Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
| Nmap done: 1 IP address (1 host up) scanned in 50.71 seconds
=========================================================================
| PHPinfo() Disclosure:
|
| File Upload Forms:
| [+] Upload Form Found: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/dialog/fck_flash.html
| [+] Upload Form Found: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/filemanager/browser/default/frmupload.html
| [+] Upload Form Found: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/dialog/fck_image.html
| [+] Upload Form Found: http://promises2kids.org/sites/all/modules/fckeditor/fckeditor/editor/dialog/fck_link.html
|
| Ignored Files:
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/revslider/rs-plugin/css/captions.css?ver=4.0.1
| http://promises2kids.org/wp-content/ngg_styles/nggallery.css?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-nivoslider/themes/default/default.css?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/persist.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/social-media-widget/social_widget.css?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/tf-flexslider/assets/css/flexslider.css?ver=1.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-nivoslider/script/jquery.jj_ngg_shuffle.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/tf-flexslider/assets/css/style.css?ver=1.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/ajax.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/store.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/lightbox/static/shutter/shutter.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-scrollgallery/scrollGallery/css/scrollGallery.css?ver=1.8.2
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/LayerSlider/css/layerslider.css?ver=3.6.2
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_gallery_display/static/common.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.cycle.lite.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-scrollgallery/scrollGallery/js/mootools-core-1.3.2-full-compat.js?ver=1.3.2
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.hoverIntent.minified.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/gmap.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.flexslider-min.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-scrollgallery/scrollGallery/css/scrollGallery_shadowDesign.css?ver=1.8.2
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_basic_album/static/nextgen_basic_album.css?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/testimonial-rotator/testimonial-rotator-style.css?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_gallery_display/static/fontawesome/font-awesome.css?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.prettyPhoto.js?ver=4.0.1
| http://promises2kids.org/wp-includes/css/buttons.min.css?ver=4.0.1
| http://promises2kids.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.2.1
| http://promises2kids.org/wp-admin/css/ie.min.css?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.elastislide.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-nivoslider/script/jquery.nivo.slider.js?ver=2.4
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_gallery_display/static/nextgen_gallery_related_images.css?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.isotope.min.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/main.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/revslider/rs-plugin/js/jquery.themepunch.revolution.min.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-scrollgallery/scrollGallery/js/scrollGallery.js?ver=1.12
| http://promises2kids.org/wp-content/plugins/nextgen-download-gallery/js/download-form.min.js?ver=1.4.2
| http://promises2kids.org/wp-content/themes/Avada/js/jtwt.js?ver=4.0.1
| http://promises2kids.org/wp-includes/wlwmanifest.xml
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/LayerSlider/js/jquery-easing-1.3.js?ver=1.3.0
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/LayerSlider/js/layerslider.kreaturamedia.jquery.js?ver=3.6.2
| http://promises2kids.org/wp-admin/css/install.css?ver=20100228
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.eislideshow.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/revslider/rs-plugin/css/settings.css?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/lightbox/static/shutter/shutter.css?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/testimonial-rotator/jquery.cycle.all.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/lightbox/static/lightbox_context.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.easing.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-nivoslider/stylesheets/nivo-slider.css?ver=4.0.1
| http://promises2kids.org/wp-includes/css/dashicons.min.css?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/modernizr.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-download-gallery/css/style.css?ver=1.4.2
| http://promises2kids.org/wp-content/plugins/simple-mail-address-encoder/smae.js?ver=1.0.0
| http://promises2kids.org/wp-content/plugins/nextgen-scrollgallery/scrollGallery/js/powertools-mobile-1.1.1.js?ver=1.1.1
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/revslider/rs-plugin/js/jquery.themepunch.plugins.min.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_basic_gallery/static/thumbnails/nextgen_basic_thumbnails.css?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/lightbox/static/shutter/nextgen_shutter.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/ajax/static/ngg_store.js?ver=4.0.1
| http://promises2kids.org/wp-admin/css/login.min.css?ver=4.0.1
| http://promises2kids.org/wp-admin/css/install.min.css?ver=4.0.1
| http://promises2kids.org/wp-includes/js/jquery/jquery.js?ver=1.11.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_basic_album/static/init.js?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/js/jquery.fitvids.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_basic_gallery/static/thumbnails/nextgen_basic_thumbnails.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_gallery_display/static/trigger_buttons.css?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_basic_album/static/jquery.dotdotdot-1.5.7-packed.js?ver=4.0.1
| http://promises2kids.org/wp-content/plugins/nextgen-gallery/products/photocrati_nextgen/modules/nextgen_pagination/static/style.css?ver=4.0.1
| http://promises2kids.org/wp-content/themes/Avada/framework/plugins/tf-flexslider/assets/js/jquery.flexslider-min.js?ver=1.0.0
=========================================================================
| Web Backdoors:
|
| FCKeditor File Upload:
|
| External hosts:
| [+] External Host Found: http://creattica.com
| [+] External Host Found: http://dev.fckeditor.net
| [+] External Host Found: https://twitter.com
| [+] External Host Found: http://www.iespell.com
| [+] External Host Found: http://www.dataillusion.com
| [+] External Host Found: https://wordpress.org
| [+] External Host Found: http://www.webcrossing.com
| [+] External Host Found: http://fox5sandiego.com
| [+] External Host Found: http://planet.wordpress.org
| [+] External Host Found: http://www.kpbs.org
| [+] External Host Found: http://www.ranchosantafereview.com
| [+] External Host Found: http://www.hamilton.edu
| [+] External Host Found: http://www.cbs8.com
| [+] External Host Found: http://themeforest.net
| [+] External Host Found: http://www.fckeditor.net
| [+] External Host Found: http://sourceforge.net
| [+] External Host Found: http://maps.google.com
| [+] External Host Found: http://www.visualsoft.co.uk
| [+] External Host Found: http://www.girodisandiego.com
| [+] External Host Found: http://www.infineon.com
| [+] External Host Found: http://httpd.apache.org
| [+] External Host Found: https://bugzilla.mozilla.org
| [+] External Host Found: http://www.delmartimes.net
| [+] External Host Found: http://php.net
| [+] External Host Found: http://www.facebook.com
| [+] External Host Found: http://www.nbc.com
| [+] External Host Found: http://linkedin.com
| [+] External Host Found: http://www.kentico.com
| [+] External Host Found: http://www.coe.int
| [+] External Host Found: http://www.acttive.com.br
| [+] External Host Found: http://codex.wordpress.org
| [+] External Host Found: http://www.genuitec.com
| [+] External Host Found: http://www.footsteps.nl
| [+] External Host Found: http://google.com
| [+] External Host Found: http://media.utsandiego.com
| [+] External Host Found: https://www.facebook.com
| [+] External Host Found: http://www.alkacon.com
| [+] External Host Found: http://www.google.com
| [+] External Host Found: https://sourceforge.net
| [+] External Host Found: http://kb.mozillazine.org
| [+] External Host Found: http://www.nextide.ca
| [+] External Host Found: http://mcpuk.net
| [+] External Host Found: http://www.imedi.org
| [+] External Host Found: http://www.mysql.com
| [+] External Host Found: http://twitthis.com
| [+] External Host Found: http://www.youtube.com
| [+] External Host Found: http://www.utsandiego.com