nikto - all -h www.cinepolis.com
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          216.75.50.101
+ Target Hostname:    www.cinepolis.com
+ Target Port:        80
+ Start Time:         2015-05-24 00:57:33 (GMT-4)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ Retrieved x-aspnet-version header:
+ The anti-clickjacking X-Frame-Options header is not present.
+ Uncommon header 'access-control-allow-origin' found, with contents: *
+ Uncommon header 'x-permitted-cross-domain-policies' found, with contents: master-only
+ Cookie Ciudad created without the httponly flag
+ OSVDB-68127: Server is vulnerable to http://www.microsoft.com/technet/security/bulletin/MS10-070.asp allowing a cryptographic padding oracle.
+ Server leaks inodes via ETags, header found with file /oQTBmMJ5.chl+, fields: 0xef55782b304d01:0
+ Uncommon header 'x-cacheable' found, with contents: NO: Images aren't cached
+ Multiple index files found (note, these may not all be unique): /index.php3, /default.htm, /index.htm, /index.html, /index.asp, /index.shtml, /index.jhtml, /index.cfm, /index.do, /index.pl, /index.php, /index.cgi, /default.asp, /index.aspx, /index.xml
+ Retrieved x-powered-by header: ASP.NET