Advertisement
Guest User

Anonymous #OpIsrael JTSEC Full Recon #8

a guest
Sep 24th, 2018
295
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.54 KB | None | 0 0
  1. #######################################################################################################################################
  2. Nom de l'hôte www.ims.gov.il FAI Tehila Project - Prime Minister Office's
  3. Continent Asie Drapeau
  4. IL
  5. Pays Israël Code du pays IL
  6. Région Jérusalem Heure locale 24 Sep 2018 07:06 IDT
  7. Ville Jérusalem Code Postal Inconnu
  8. Adresse IP 147.237.72.157 Latitude 31.78
  9. Longitude 35.23
  10. #######################################################################################################################################
  11. HostIP:147.237.72.157
  12. HostName:ims.gov.il
  13.  
  14. Gathered Inet-whois information for 147.237.72.157
  15. ---------------------------------------------------------------------------------------------------------------------------------------
  16.  
  17.  
  18. inetnum: 147.237.0.0 - 147.237.255.255
  19. netname: IL-GOVT-NET
  20. descr: Israeli Government Network
  21. country: IL
  22. admin-c: AT979-RIPE
  23. tech-c: TT441-RIPE
  24. status: LEGACY
  25. remarks: For information on "status:" attribute read https://www.ripe.net/data-tools/db/faq/faq-status-values-legacy-resources
  26. mnt-by: GOV-IL-DNS
  27. mnt-lower: GOV-IL-DNS
  28. mnt-routes: AS8867-MNT ANY
  29. mnt-routes: AS9116-MNT { 147.237.232.0/24^24-24 }
  30. created: 1970-01-01T00:00:00Z
  31. last-modified: 2015-05-05T01:38:51Z
  32. source: RIPE # Filtered
  33.  
  34. person: Admin Tehila
  35. address: Israel Ministry Of Finance
  36. address: 1 Netanel Lorech st
  37. address: Jerusalem Israel
  38. phone: +972 2 6664666
  39. fax-no: +972 2 6664650
  40. remarks: For ABUSE and security issues please contact
  41. remarks: email: abuse@tehila.gov.il
  42. remarks: or contact CERT.gov.il at report@CERT.gov.il
  43. nic-hdl: AT979-RIPE
  44. created: 2002-06-02T08:31:21Z
  45. last-modified: 2016-04-06T03:26:29Z
  46. mnt-by: RIPE-NCC-LOCKED-MNT
  47. source: RIPE # Filtered
  48.  
  49. person: Tech Tehila
  50. address: Israeli Ministry of Finance
  51. address: 1 Netanel Lorech st. , Jerusalem 91008, Israel
  52. phone: +972 2 6664666
  53. fax-no: +972 2 6664650
  54. remarks: For ABUSE and security issues please contact
  55. remarks: email: abuse@tehila.gov.il
  56. remarks: or contact CERT.gov.il at report@CERT.gov.il
  57. nic-hdl: TT441-RIPE
  58. created: 2002-06-02T08:31:22Z
  59. last-modified: 2016-04-06T03:26:28Z
  60. mnt-by: RIPE-NCC-LOCKED-MNT
  61. source: RIPE # Filtered
  62.  
  63. % Information related to '147.237.0.0/16AS8867'
  64.  
  65. route: 147.237.0.0/16
  66. descr: IL-GOVT-BLOCK
  67. origin: AS8867
  68. mnt-by: AS8867-MNT
  69. mnt-routes: AS8867-MNT ANY
  70. mnt-routes: AS9116-MNT { 147.237.232.0/24^24-24 }
  71. created: 1970-01-01T00:00:00Z
  72. last-modified: 2013-05-29T13:30:11Z
  73. source: RIPE
  74.  
  75. % This query was served by the RIPE Database Query Service version 1.92.6 (HEREFORD)
  76.  
  77.  
  78.  
  79. Gathered Inic-whois information for ims.gov.il
  80. ---------------------------------------------------------------------------------------------------------------------------------------
  81. domain: ims.gov.il
  82.  
  83. descr: Tech Tehila
  84. descr: 1 Netanel Lorech st
  85. descr: Jerusalem
  86. descr: 91911
  87. descr: Israel
  88. e-mail: hostmaster AT tehila.gov.il
  89. admin-c: GV-TT3128-IL
  90. tech-c: GV-TT3128-IL
  91. zone-c: GV-TT3128-IL
  92. nserver: dns.gov.il
  93. nserver: dns3.gov.il
  94. validity: N/A
  95. DNSSEC: unsigned
  96. status: Transfer Allowed
  97. changed: domain-registrar AT isoc.org.il 20jV@(Assi��_��gn�ed)
  98. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  99. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  100. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  101.  
  102. person: Tech Tehila
  103. address: Prime minister office
  104. address: 1 Netanel Lorech st
  105. address: Jerusalem
  106. address: 91039
  107. address: Israel
  108. phone: +972 2 6664666
  109. fax-no: +972 2 6664650
  110. e-mail: Hostmaster AT tehila.gov.il
  111. nic-hdl: GV-TT3128-IL
  112. changed: Managing Registrar 20111027
  113. changed: Managing Registrar 20150122
  114.  
  115. registrar name: Israel Government
  116. registrar info:
  117.  
  118. % Rights to the data above are restricted by copyright.
  119.  
  120. Gathered Netcraft information for ims.gov.il
  121. ---------------------------------------------------------------------------------------------------------------------------------------
  122.  
  123. Retrieving Netcraft.com information for ims.gov.il
  124. Netcraft.com Information gathered
  125.  
  126. Gathered Subdomain information for ims.gov.il
  127. ---------------------------------------------------------------------------------------------------------------------------------------
  128. Searching Google.com:80...
  129. HostName:www.ims.gov.il
  130. HostIP:147.237.72.157
  131. Searching Altavista.com:80...
  132. Found 1 possible subdomain(s) for host ims.gov.il, Searched 0 pages containing 0 results
  133.  
  134. Gathered E-Mail information for ims.gov.il
  135. ---------------------------------------------------------------------------------------------------------------------------------------
  136. Searching Google.com:80...
  137. Searching Altavista.com:80...
  138. Found 0 E-Mail(s) for host ims.gov.il, Searched 0 pages containing 0 results
  139.  
  140. Gathered TCP Port information for 147.237.72.157
  141. ---------------------------------------------------------------------------------------------------------------------------------------
  142.  
  143. Port State
  144. #######################################################################################################################################
  145. [i] Scanning Site: http://ims.gov.il
  146.  
  147.  
  148.  
  149. B A S I C I N F O
  150. =======================================================================================================================================
  151.  
  152.  
  153. [+] Site Title:
  154. [+] IP address: 147.237.72.157
  155. [+] Web Server: Could Not Detect
  156. [+] CMS: Could Not Detect
  157. [+] Cloudflare: Not Detected
  158. [+] Robots File: Could NOT Find robots.txt!
  159.  
  160.  
  161.  
  162.  
  163. W H O I S L O O K U P
  164. =======================================================================================================================================
  165.  
  166.  
  167. % The data in the WHOIS database of the .il registry is provided
  168. % by ISOC-IL for information purposes, and to assist persons in
  169. % obtaining information about or related to a domain name
  170. % registration record. ISOC-IL does not guarantee its accuracy.
  171. % By submitting a WHOIS query, you agree that you will use this
  172. % Data only for lawful purposes and that, under no circumstances
  173. % will you use this Data to: (1) allow, enable, or otherwise
  174. % support the transmission of mass unsolicited, commercial
  175. % advertising or solicitations via e-mail (spam);
  176. % or (2) enable high volume, automated, electronic processes that
  177. % apply to ISOC-IL (or its systems).
  178. % ISOC-IL reserves the right to modify these terms at any time.
  179. % By submitting this query, you agree to abide by this policy.
  180.  
  181. query: ims.gov.il
  182.  
  183. reg-name: ims
  184. domain: ims.gov.il
  185.  
  186. descr: Tech Tehila
  187. descr: 1 Netanel Lorech st
  188. descr: Jerusalem
  189. descr: 91911
  190. descr: Israel
  191. e-mail: hostmaster AT tehila.gov.il
  192. admin-c: GV-TT3128-IL
  193. tech-c: GV-TT3128-IL
  194. zone-c: GV-TT3128-IL
  195. nserver: dns.gov.il
  196. nserver: dns3.gov.il
  197. validity: N/A
  198. DNSSEC: unsigned
  199. status: Transfer Allowed
  200. changed: domain-registrar AT isoc.org.il 20111027 (Assigned)
  201. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  202. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  203. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  204.  
  205. person: Tech Tehila
  206. address: Prime minister office
  207. address: 1 Netanel Lorech st
  208. address: Jerusalem
  209. address: 91039
  210. address: Israel
  211. phone: +972 2 6664666
  212. fax-no: +972 2 6664650
  213. e-mail: Hostmaster AT tehila.gov.il
  214. nic-hdl: GV-TT3128-IL
  215. changed: Managing Registrar 20111027
  216. changed: Managing Registrar 20150122
  217.  
  218. registrar name: Israel Government
  219. registrar info:
  220.  
  221. % Rights to the data above are restricted by copyright.
  222.  
  223.  
  224.  
  225.  
  226. G E O I P L O O K U P
  227. =======================================================================================================================================
  228.  
  229. [i] IP Address: 147.237.72.157
  230. [i] Country: IL
  231. [i] State: N/A
  232. [i] City: N/A
  233. [i] Latitude: 31.500000
  234. [i] Longitude: 34.750000
  235.  
  236.  
  237.  
  238.  
  239. H T T P H E A D E R S
  240. =======================================================================================================================================
  241.  
  242.  
  243. [i] HTTP/1.1 200 OK
  244. [i] Cache-Control: no-cache, must-revalidate, max-age=0
  245. [i] Pragma: no-cache
  246. [i] Expires: -1
  247. [i] Content-Type: text/html; charset=utf-8
  248. [i] Connection: Keep-Alive
  249. [i] Content-Length: 1862
  250.  
  251.  
  252.  
  253.  
  254. D N S L O O K U P
  255. =======================================================================================================================================
  256.  
  257. ;; Truncated, retrying in TCP mode.
  258. ims.gov.il. 3600 IN NS ns1-69.akam.net.
  259. ims.gov.il. 3600 IN NS eur6.akam.net.
  260. ims.gov.il. 3600 IN NS asia3.akam.net.
  261. ims.gov.il. 3600 IN NS usw2.akam.net.
  262. ims.gov.il. 3600 IN NS use4.akam.net.
  263. ims.gov.il. 3600 IN SOA dns.gov.il. hostmaster.tehila.gov.il. 2018090201 21600 7200 3628800 86400
  264. ims.gov.il. 3600 IN NS ns1-111.akam.net.
  265. ims.gov.il. 3600 IN A 147.237.72.157
  266. ims.gov.il. 3600 IN NS dns.gov.il.
  267. ims.gov.il. 3600 IN NS eur2.akam.net.
  268. ims.gov.il. 3600 IN NS dns3.gov.il.
  269. ims.gov.il. 3600 IN MX 5 relayn.ims.gov.il.
  270. ims.gov.il. 3600 IN MX 5 relayz.ims.gov.il.
  271. ims.gov.il. 3600 IN NS asia4.akam.net.
  272.  
  273.  
  274.  
  275.  
  276. S U B N E T C A L C U L A T I O N
  277. ======================================================================================================================================
  278.  
  279. Address = 147.237.72.157
  280. Network = 147.237.72.157 / 32
  281. Netmask = 255.255.255.255
  282. Broadcast = not needed on Point-to-Point links
  283. Wildcard Mask = 0.0.0.0
  284. Hosts Bits = 0
  285. Max. Hosts = 1 (2^0 - 0)
  286. Host Range = { 147.237.72.157 - 147.237.72.157 }
  287.  
  288.  
  289.  
  290. N M A P P O R T S C A N
  291. ======================================================================================================================================
  292.  
  293.  
  294. Starting Nmap 7.40 ( https://nmap.org ) at 2018-09-24 04:11 UTC
  295. Nmap scan report for ims.gov.il (147.237.72.157)
  296. Host is up (0.14s latency).
  297. PORT STATE SERVICE
  298. 21/tcp filtered ftp
  299. 22/tcp filtered ssh
  300. 23/tcp filtered telnet
  301. 80/tcp open http
  302. 110/tcp filtered pop3
  303. 143/tcp filtered imap
  304. 443/tcp filtered https
  305. 3389/tcp filtered ms-wbt-server
  306.  
  307. Nmap done: 1 IP address (1 host up) scanned in 3.99 seconds
  308.  
  309.  
  310.  
  311. S U B - D O M A I N F I N D E R
  312. =======================================================================================================================================
  313.  
  314.  
  315. [i] Total Subdomains Found : 2
  316.  
  317. [+] Subdomain: tiles.ims.gov.il
  318. [-] IP: 147.237.1.25
  319.  
  320. [+] Subdomain: www.ims.gov.il
  321. [-] IP: 147.237.72.157
  322.  
  323.  
  324.  
  325.  
  326. #######################################################################################################################################
  327. [?] Enter the target: http://www.ims.gov.il
  328. [!] IP Address : 147.237.72.157
  329. [!] www.ims.gov.il doesn't seem to use a CMS
  330. [+] Honeypot Probabilty: 0%
  331. ---------------------------------------------------------------------------------------------------------------------------------------
  332. [~] Trying to gather whois information for www.ims.gov.il
  333. [+] Whois information found
  334. [-] Unable to build response, visit https://who.is/whois/www.ims.gov.il
  335. ---------------------------------------------------------------------------------------------------------------------------------------
  336. PORT STATE SERVICE
  337. 21/tcp filtered ftp
  338. 22/tcp filtered ssh
  339. 23/tcp filtered telnet
  340. 80/tcp open http
  341. 110/tcp filtered pop3
  342. 143/tcp filtered imap
  343. 443/tcp filtered https
  344. 3389/tcp filtered ms-wbt-server
  345. Nmap done: 1 IP address (1 host up) scanned in 2.62 seconds
  346. ---------------------------------------------------------------------------------------------------------------------------------------
  347. #######################################################################################################################################
  348. [+] Hosting Info for Website: ims.gov.il
  349. [+] Visitors per day: 4,450
  350. [+] IP Address: ...
  351. [+] IP Reverse DNS (Host): 147.237.72.157
  352. [+] Hosting Company IP Owner: Israel Ministry of Finance
  353. [+] Hosting IP Range: 147.237.0.0 - 147.237.255.255 (65,536 ip)
  354. [+] Owner Address: Israel Ministry of Finance, 1 Netanel Lorech St, Jerusalem Israel
  355. [+] Owner Country: ISR
  356. [+] Owner Phone: +972 2 6664666
  357. [+] Owner Website: www.tehila.gov.il
  358. [+] Owner CIDR: 147.237.0.0/16
  359.  
  360. [+] NS: usw2.akam.net
  361. [+] NS: dns.gov.il
  362. [+] NS: asia4.akam.net
  363. [+] NS: eur6.akam.net
  364. [+] NS: ns1-69.akam.net
  365. [+] NS: eur2.akam.net
  366. [+] NS: asia3.akam.net
  367. [+] NS: dns3.gov.il
  368. [+] NS: use4.akam.net
  369. [+] NS: ns1-111.akam.net
  370. #######################################################################################################################################
  371. [*] URL: ims.gov.il
  372. [*] IP Range: 147.237.0.0 - 147.237.255.255
  373. [*] IP Reverse DNS: 147.237.72.157
  374. [*] IPv6: 2a01:4f8:130:2342::1
  375. [*] Host Company: Israel Ministry of Finance, Israel Ministry of Finance, 1 Netanel Lorech St, Jerusalem Israel Israel
  376. [*] Owner Address: Israel Ministry of Finance, 1 Netanel Lorech St, Jerusalem Israel
  377. [*] NS: usw2.akam.net.
  378. [*] NS: dns.gov.il.
  379. [*] NS: asia4.akam.net.
  380. [*] NS: eur6.akam.net.
  381. [*] NS: ns1-69.akam.net.
  382. [*] NS: eur2.akam.net.
  383. [*] NS: asia3.akam.net.
  384. [*] NS: dns3.gov.il.
  385. [*] NS: use4.akam.net.
  386. [*] NS: ns1-111.akam.net.
  387. [*] MX: 5\trelayz.ims.gov.il.
  388. [*] MX: 5\trelayn.ims.gov.il.
  389. #######################################################################################################################################
  390. [+] Email: ims@ims.gov.il (192.117.139.115)
  391.  
  392. [+] Email: ims@ims.gov.il (199.203.58.15)
  393.  
  394. #######################################################################################################################################
  395. [*] Processing domain ims.gov.il
  396. [+] Getting nameservers
  397. 95.100.173.64 - eur2.akam.net
  398. 184.85.248.64 - asia4.akam.net
  399. 184.26.161.64 - usw2.akam.net
  400. 23.211.133.65 - use4.akam.net
  401. 193.108.91.111 - ns1-111.akam.net
  402. 62.219.20.20 - dns3.gov.il
  403. 193.108.91.69 - ns1-69.akam.net
  404. 23.211.61.64 - asia3.akam.net
  405. 2.22.230.64 - eur6.akam.net
  406. 147.237.71.1 - dns.gov.il
  407. [-] Zone transfer failed
  408.  
  409. [+] MX records found, added to target list
  410. 5 relayn.ims.gov.il.
  411. 5 relayz.ims.gov.il.
  412.  
  413. [*] Scanning ims.gov.il for A records
  414. 147.237.72.157 - ims.gov.il
  415. 199.203.58.15 - relayn.ims.gov.il
  416. 192.117.139.115 - relayz.ims.gov.il
  417. 147.237.1.222 - api.ims.gov.il
  418. 147.237.2.161 - new.ims.gov.il
  419. 147.237.72.157 - www.ims.gov.il
  420. ######################################################################################################################################
  421. Ip Address Status Type Domain Name Server
  422. ---------- ------ ---- ----------- ------
  423. 147.237.1.222 host api.ims.gov.il
  424. 147.237.2.161 host new.ims.gov.il
  425. 147.237.72.157 host www.ims.gov.il
  426. #######################################################################################################################################
  427. Start: 2018-09-24T04:42:51+0000
  428. HOST: web01 Loss% Snt Last Avg Best Wrst StDev
  429. 1.|-- 45.79.12.202 0.0% 3 0.7 1.6 0.7 2.8 1.1
  430. 2.|-- 45.79.12.2 0.0% 3 7.6 3.0 0.7 7.6 3.9
  431. 3.|-- 45.79.12.9 0.0% 3 267.4 129.9 5.2 267.4 131.6
  432. 4.|-- ae8-21.cr6-dal3.ip4.gtt.net 0.0% 3 1.1 1.1 1.0 1.1 0.0
  433. 5.|-- et-0-0-59.cr11-lon2.ip4.gtt.net 0.0% 3 112.1 112.1 111.8 112.4 0.3
  434. 6.|-- stowarzyszenia-gw.ip4.gtt.net 0.0% 3 111.5 111.6 111.2 112.1 0.4
  435. 7.|-- bzq-179-124-61.cust.bezeqint.net 0.0% 3 176.2 176.3 176.1 176.6 0.3
  436. 8.|-- bzq-114-65-1.cust.bezeqint.net 0.0% 3 176.4 176.1 176.0 176.4 0.2
  437. 9.|-- bzq-179-8-82.cust.bezeqint.net 0.0% 3 203.2 183.7 173.8 203.2 16.9
  438. 10.|-- ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
  439.  
  440. #######################################################################################################################################
  441. [*] Performing General Enumeration of Domain: ims.gov.il
  442. [-] DNSSEC is not configured for ims.gov.il
  443. [*] SOA dns.gov.il 147.237.71.1
  444. [*] NS use4.akam.net 23.211.133.65
  445. [*] NS ns1-111.akam.net 193.108.91.111
  446. [*] NS ns1-111.akam.net 2600:1401:2::6f
  447. [*] NS dns.gov.il 147.237.71.1
  448. [*] NS asia4.akam.net 184.85.248.64
  449. [*] NS usw2.akam.net 184.26.161.64
  450. [*] NS ns1-69.akam.net 193.108.91.69
  451. [*] NS ns1-69.akam.net 2600:1401:2::45
  452. [*] NS asia3.akam.net 23.211.61.64
  453. [*] NS eur6.akam.net 2.22.230.64
  454. [*] NS dns3.gov.il 62.219.20.20
  455. [*] MX relayn.ims.gov.il 199.203.58.15
  456. [*] A ims.gov.il 147.237.72.157
  457. [*] Enumerating SRV Records
  458. [-] No SRV Records Found for ims.gov.il
  459. [+] 0 Records Found
  460. #######################################################################################################################################
  461. dnsenum VERSION:1.2.4
  462.  
  463. ----- ims.gov.il -----
  464.  
  465.  
  466. Host's addresses:
  467. __________________
  468.  
  469. ims.gov.il. 3521 IN A 147.237.72.157
  470.  
  471.  
  472. Name Servers:
  473. ______________
  474.  
  475. use4.akam.net. 20453 IN A 23.211.133.65
  476. usw2.akam.net. 21583 IN A 184.26.161.64
  477. dns3.gov.il. 599 IN A 62.219.20.20
  478. dns.gov.il. 599 IN A 147.237.71.1
  479. eur6.akam.net. 21056 IN A 2.22.230.64
  480. asia4.akam.net. 21175 IN A 184.85.248.64
  481. asia3.akam.net. 20561 IN A 23.211.61.64
  482. ns1-111.akam.net. 21599 IN A 193.108.91.111
  483. eur2.akam.net. 21312 IN A 95.100.173.64
  484. ns1-69.akam.net. 21599 IN A 193.108.91.69
  485.  
  486.  
  487. Mail (MX) Servers:
  488. ___________________
  489.  
  490. relayn.ims.gov.il. 3599 IN A 199.203.58.15
  491. relayz.ims.gov.il. 3599 IN A 192.117.139.115
  492.  
  493.  
  494. Trying Zone Transfers and getting Bind Versions:
  495. _________________________________________________
  496.  
  497.  
  498. Trying Zone Transfer for ims.gov.il on use4.akam.net ...
  499.  
  500. Trying Zone Transfer for ims.gov.il on usw2.akam.net ...
  501.  
  502. Trying Zone Transfer for ims.gov.il on dns3.gov.il ...
  503.  
  504. Trying Zone Transfer for ims.gov.il on dns.gov.il ...
  505.  
  506. Trying Zone Transfer for ims.gov.il on eur6.akam.net ...
  507.  
  508. Trying Zone Transfer for ims.gov.il on asia4.akam.net ...
  509.  
  510. Trying Zone Transfer for ims.gov.il on asia3.akam.net ...
  511.  
  512. Trying Zone Transfer for ims.gov.il on ns1-111.akam.net ...
  513.  
  514. Trying Zone Transfer for ims.gov.il on eur2.akam.net ...
  515.  
  516. Trying Zone Transfer for ims.gov.il on ns1-69.akam.net ...
  517.  
  518. brute force file not specified, bay.
  519. #######################################################################################################################################
  520. % The data in the WHOIS database of the .il registry is provided
  521. % by ISOC-IL for information purposes, and to assist persons in
  522. % obtaining information about or related to a domain name
  523. % registration record. ISOC-IL does not guarantee its accuracy.
  524. % By submitting a WHOIS query, you agree that you will use this
  525. % Data only for lawful purposes and that, under no circumstances
  526. % will you use this Data to: (1) allow, enable, or otherwise
  527. % support the transmission of mass unsolicited, commercial
  528. % advertising or solicitations via e-mail (spam);
  529. % or (2) enable high volume, automated, electronic processes that
  530. % apply to ISOC-IL (or its systems).
  531. % ISOC-IL reserves the right to modify these terms at any time.
  532. % By submitting this query, you agree to abide by this policy.
  533.  
  534. query: ims.gov.il
  535.  
  536. reg-name: ims
  537. domain: ims.gov.il
  538.  
  539. descr: Tech Tehila
  540. descr: 1 Netanel Lorech st
  541. descr: Jerusalem
  542. descr: 91911
  543. descr: Israel
  544. e-mail: hostmaster AT tehila.gov.il
  545. admin-c: GV-TT3128-IL
  546. tech-c: GV-TT3128-IL
  547. zone-c: GV-TT3128-IL
  548. nserver: dns.gov.il
  549. nserver: dns3.gov.il
  550. validity: N/A
  551. DNSSEC: unsigned
  552. status: Transfer Allowed
  553. changed: domain-registrar AT isoc.org.il 20111027 (Assigned)
  554. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  555. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  556. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  557.  
  558. person: Tech Tehila
  559. address: Prime minister office
  560. address: 1 Netanel Lorech st
  561. address: Jerusalem
  562. address: 91039
  563. address: Israel
  564. phone: +972 2 6664666
  565. fax-no: +972 2 6664650
  566. e-mail: Hostmaster AT tehila.gov.il
  567. nic-hdl: GV-TT3128-IL
  568. changed: Managing Registrar 20111027
  569. changed: Managing Registrar 20150122
  570.  
  571. registrar name: Israel Government
  572. registrar info:
  573. ######################################################################################################################################
  574. [-] Enumerating subdomains now for ims.gov.il
  575. [-] verbosity is enabled, will show the subdomains results in realtime
  576. [-] Searching now in Baidu..
  577. [-] Searching now in Yahoo..
  578. [-] Searching now in Google..
  579. [-] Searching now in Bing..
  580. [-] Searching now in Ask..
  581. [-] Searching now in Netcraft..
  582. [-] Searching now in DNSdumpster..
  583. [-] Searching now in Virustotal..
  584. [-] Searching now in ThreatCrowd..
  585. [-] Searching now in SSL Certificates..
  586. [-] Searching now in PassiveDNS..
  587. SSL Certificates: tiles.ims.gov.il
  588. SSL Certificates: api.ims.gov.il
  589. Virustotal: www.ims.gov.il
  590. Virustotal: tiles.ims.gov.il
  591. Virustotal: api.ims.gov.il
  592. Virustotal: relayn.ims.gov.il
  593. Virustotal: relayz.ims.gov.il
  594. Yahoo: www.ims.gov.il
  595. Netcraft: www.ims.gov.il
  596. DNSdumpster: api.ims.gov.il
  597. DNSdumpster: www.ims.gov.il
  598. DNSdumpster: tiles.ims.gov.il
  599. [-] Saving results to file: /usr/share/sniper/loot/ims.gov.il/domains/domains-ims.gov.il.txt
  600. [-] Total Unique Subdomains Found: 5
  601. www.ims.gov.il
  602. api.ims.gov.il
  603. relayn.ims.gov.il
  604. relayz.ims.gov.il
  605. tiles.ims.gov.il
  606. #######################################################################################################################################
  607.  
  608. api.ims.gov.il
  609. tiles.ims.gov.il
  610. #######################################################################################################################################
  611. [+] ims.gov.il has no SPF record!
  612. [*] No DMARC record found. Looking for organizational record
  613. [+] No organizational DMARC record
  614. [+] Spoofing possible for ims.gov.il!
  615. #######################################################################################################################################
  616. __
  617. ____ _____ ___ ______ _/ /_____ ____ ___
  618. / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
  619. / /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
  620. \__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
  621. /_/ discover v0.5.0 - by @michenriksen
  622.  
  623. Identifying nameservers for ims.gov.il... Done
  624. Using nameservers:
  625.  
  626. - 23.211.61.64
  627. - 62.219.20.20
  628. - 95.100.173.64
  629. - 147.237.71.1
  630. - 193.108.91.111
  631. - 184.26.161.64
  632. - 184.85.248.64
  633. - 2.22.230.64
  634. - 193.108.91.69
  635. - 23.211.133.65
  636.  
  637. Checking for wildcard DNS... Done
  638.  
  639. Running collector: PassiveTotal... Skipped
  640. -> Key 'passivetotal_key' has not been set
  641. Running collector: PTRArchive... Error
  642. -> PTRArchive returned unexpected response code: 404
  643. Running collector: Dictionary... Done (22 hosts)
  644. Running collector: Wayback Machine... Done (2 hosts)
  645. Running collector: Netcraft... Done (0 hosts)
  646. Running collector: Threat Crowd... Done (0 hosts)
  647. Running collector: Certificate Search... Done (2 hosts)
  648. Running collector: Google Transparency Report... Done (2 hosts)
  649. Running collector: VirusTotal... Skipped
  650. -> Key 'virustotal' has not been set
  651. Running collector: Riddler... Skipped
  652. -> Key 'riddler_username' has not been set
  653. Running collector: DNSDB... Error
  654. -> DNSDB returned unexpected response code: 503
  655. Running collector: Censys... Skipped
  656. -> Key 'censys_secret' has not been set
  657. Running collector: HackerTarget... Done (3 hosts)
  658. Running collector: PublicWWW... Done (0 hosts)
  659. Running collector: Shodan... Skipped
  660. -> Key 'shodan' has not been set
  661.  
  662. Resolving 26 unique hosts...
  663. 147.237.72.157 .ims.gov.il
  664. 147.237.1.222 api.ims.gov.il
  665. 147.237.72.157 ims.gov.il
  666. 147.237.1.25 tiles.ims.gov.il
  667. 147.237.72.157 www.ims.gov.il
  668.  
  669. Found subnets:
  670.  
  671. - 147.237.72.0-255 : 3 hosts
  672. - 147.237.1.0-255 : 2 hosts
  673.  
  674. Wrote 5 hosts to:
  675.  
  676. - file:///root/aquatone/ims.gov.il/hosts.txt
  677. - file:///root/aquatone/ims.gov.il/hosts.json
  678. __
  679. ____ _____ ___ ______ _/ /_____ ____ ___
  680. / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
  681. / /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
  682. \__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
  683. /_/ takeover v0.5.0 - by @michenriksen
  684.  
  685. Loaded 5 hosts from /root/aquatone/ims.gov.il/hosts.json
  686. Loaded 25 domain takeover detectors
  687.  
  688. Identifying nameservers for ims.gov.il... Done
  689. Using nameservers:
  690.  
  691. - 193.108.91.111
  692. - 95.100.173.64
  693. - 193.108.91.69
  694. - 184.85.248.64
  695. - 184.26.161.64
  696. - 147.237.71.1
  697. - 2.22.230.64
  698. - 23.211.133.65
  699. - 62.219.20.20
  700. - 23.211.61.64
  701.  
  702. Checking hosts for domain takeover vulnerabilities...
  703.  
  704. Finished checking hosts:
  705.  
  706. - Vulnerable : 0
  707. - Not Vulnerable : 5
  708.  
  709. Wrote 0 potential subdomain takeovers to:
  710.  
  711. - file:///root/aquatone/ims.gov.il/takeovers.json
  712.  
  713. __
  714. ____ _____ ___ ______ _/ /_____ ____ ___
  715. / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
  716. / /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
  717. \__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
  718. /_/ scan v0.5.0 - by @michenriksen
  719.  
  720. Loaded 5 hosts from /root/aquatone/ims.gov.il/hosts.json
  721.  
  722. Probing 6 ports...
  723.  
  724. Wrote open ports to file:///root/aquatone/ims.gov.il/open_ports.txt
  725. Wrote URLs to file:///root/aquatone/ims.gov.il/urls.txt
  726. __
  727. ____ _____ ___ ______ _/ /_____ ____ ___
  728. / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
  729. / /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
  730. \__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
  731. /_/ gather v0.5.0 - by @michenriksen
  732.  
  733. Processing 0 pages...
  734.  
  735. Finished processing pages:
  736.  
  737. - Successful : 0
  738. - Failed : 0
  739.  
  740. Generating report...done
  741. Report pages generated:
  742. #######################################################################################################################################
  743. ---------------------------------------------------------------------------------------------------------------------------------------
  744.  
  745. Total hosts: 14
  746.  
  747. [-] Resolving hostnames IPs...
  748.  
  749. .ims.gov.il : empty
  750. 253DWww.ims.gov.il : empty
  751. Www.ims.gov.il : 147.237.72.157
  752. api.ims.gov.il : 147.237.1.222
  753. ip...ims.gov.il : empty
  754. relayn.ims.gov.il : 199.203.58.15
  755. relayz.ims.gov.il : 192.117.139.115
  756. tiles.ims.gov.il : 147.237.1.25
  757. www.ims.gov.il : 147.237.72.157
  758.  
  759. [+] Virtual hosts:
  760. ---------------------------------------------------------------------------------------------------------------------------------------
  761. #######################################################################################################################################
  762. [2/25] http://www.ims.gov.il/ims/publicpdf/daily_rainfall.pdf
  763. [3/25] http://www.ims.gov.il/ims/publicpdf/sonde.pdf
  764. [4/25] http://www.ims.gov.il/ims/publicpdf/tephig.pdf
  765. [5/25] http://www.ims.gov.il/ims/PublicPDF/PGX57_18.pdf
  766. [6/25] http://www.ims.gov.il/ims/PublicPDF/PGX57_06.pdf
  767. [7/25] http://www.ims.gov.il/ims/PublicPDF/PWX50_06.pdf
  768. [8/25] http://www.ims.gov.il/ims/PublicPDF/PGX57_00.pdf
  769. [9/25] http://www.ims.gov.il/ims/PublicPDF/PWX85_18.pdf
  770. [10/25] http://www.ims.gov.il/ims/PublicPDF/PWX85_00.pdf
  771. [11/25] http://www.ims.gov.il/ims/PublicPDF/PWX70_12.pdf
  772. [12/25] http://www.ims.gov.il/ims/PublicPDF/PWX50_00.pdf
  773. [13/25] http://www.ims.gov.il/ims/PublicPDF/PWX90_00.pdf
  774. [14/25] http://www.ims.gov.il/ims/PublicPDF/PWX70_06.pdf
  775. [15/25] http://www.ims.gov.il/ims/PublicPDF/PWX70_00.pdf
  776. [16/25] http://www.ims.gov.il/ims/PublicPDF/PWX85_12.pdf
  777. [17/25] http://www.ims.gov.il/ims/PublicPDF/PWX90_12.pdf
  778. [18/25] http://ims.gov.il/ims/publicpdf/tephig.pdf%3Fhc_location%3Dufi
  779. [x] Error in the parsing process
  780. [19/25] http://www.ims.gov.il/ims/PublicPDF/PWX85_06.pdf
  781. [20/25] http://www.ims.gov.il/ims/PublicPDF/PWX50_12.pdf
  782. [21/25] http://www.ims.gov.il/ims/PublicPDF/PWX90_18.pdf
  783. [22/25] http://www.ims.gov.il/NR/rdonlyres/66FE2FF6-3270-43B4-98B0-CEF64484E70E/0/appendixE.pdf
  784. [23/25] http://www.ims.gov.il/NR/rdonlyres/846619D9-5A81-4ED5-A0B3-94DBB978A924/0/mar17.pdf
  785. [x] Error downloading http://www.ims.gov.il/NR/rdonlyres/846619D9-5A81-4ED5-A0B3-94DBB978A924/0/mar17.pdf
  786. [24/25] http://www.ims.gov.il/NR/rdonlyres/21D4E0DE-6240-4C0A-80B8-D2F2C0AAB3EC/0/ClimateresearchinIsraelAbstracts20072015.pdf
  787. [25/25] http://www.ims.gov.il/NR/rdonlyres/6B72D90C-449C-442E-8006-0C3A1CC8227D/0/%25D7%25A2%25D7%259E%25D7%2595%25D7%25A1%25D7%25A4%25D7%2595%25D7%25A8%25D7%25AA.pdf
  788. #######################################################################################################################################
  789.  
  790. [+] List of users found:
  791. ---------------------------------------------------------------------------------------------------------------------------------------
  792. Rain user
  793. Autojob User
  794.  
  795. ��user
  796. Shimon Krichak
  797. Acer
  798.  
  799. [+] List of software found:
  800. ---------------------------------------------------------------------------------------------------------------------------------------
  801. GPL Ghostscript 9.07
  802. a2ps version 4.14
  803. hp2xx 3.4.4 (c) 1991-1994 by H. Werntges, 1999-2003 by M. Kroeker
  804. html2ps version 1.0 beta7
  805. ��novaPDF Ver 7.3 Build 355 (Windows 7 Business Edition (SP 1) - Version: 6.1.7601 (x64))
  806. �������� - ���� �����
  807. Adobe PDF Library 11.0
  808. Acrobat PDFMaker 11 for Word
  809. ��Microsoft� Office PowerPoint� 2007
  810. #######################################################################################################################################
  811. Starting Nmap 7.70 ( https://nmap.org ) at 2018-09-24 00:25 EDT
  812. Nmap scan report for ims.gov.il (147.237.72.157)
  813. Host is up.
  814.  
  815. PORT STATE SERVICE
  816. 53/udp open|filtered domain
  817. 67/udp open|filtered dhcps
  818. 68/udp open|filtered dhcpc
  819. 69/udp open|filtered tftp
  820. 88/udp open|filtered kerberos-sec
  821. 123/udp open|filtered ntp
  822. 137/udp open|filtered netbios-ns
  823. 138/udp open|filtered netbios-dgm
  824. 139/udp open|filtered netbios-ssn
  825. 161/udp open|filtered snmp
  826. 162/udp open|filtered snmptrap
  827. 389/udp open|filtered ldap
  828. 520/udp open|filtered route
  829. 2049/udp open|filtered nfs
  830. ---------------------------------------------------------------------------------------------------------------------------------------
  831. =======================================================================================================================================
  832. #######################################################################################################################################
  833. Anonymous #OpIsrael JTSEC Full Recon #8
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement