API tools faq
paste
marys

WESTERN DIGITAL /MILD EXPLOITATION

marys
Feb 18th, 2015
631
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 18.95 KB | None | 0 0
raw download clone embed print report
  1. WE ARE ANONYMOUS
  2. WE ARE LEGION
  3. WE OWN THE MATRIX
  4.  
  5. http://www.wdc.com/en/ WESTERN DIGITAL WEBSITE ) a huge System on a mega Scale>> EXPLOITATION @ 30%
  6.  
  7. IP Address 173.223.205.35 << a173-223-205-35.deploy.static.akamaitechnologies.com )
  8. PORT STATE SERVICE
  9. 80/tcp open http
  10. 443/tcp open https << ssl Cert
  11. ----
  12. Server Type Microsoft-IIS/6.0
  13. ----
  14. [ .NET Configuration Analysis ] << ASP-AUDIT)
  15.  
  16. ADNVersion -> 2.0.50727.3658
  17. ----
  18. Name Server IP Location
  19. wdcns01.wdc.com 129.253.55.20 Irvine, CA, US
  20. PORT STATE SERVICE
  21. 53/tcp open domain
  22. 80/tcp open http
  23. ----
  24. wdcns02.wdc.com 129.253.55.21 Irvine, CA, US
  25. PORT STATE SERVICE
  26. 53/tcp open domain
  27. 80/tcp open http
  28. ---
  29. EXPLOITS:
  30. The URL: "http://www.wdc.com" sent the cookie: "TS01cfd401=01c2bc90a1ada0f6e8dc23a230c607134cfcceadeb07bd5a63693e10c994d237c5e68382a0cee84570c216a654871bd0eed243340792e51478a7d5a7fef6dca349b29478b4ceec23ea3ca3ef113b72fc31027e6214e8adad8a0f193897d5822cef767c2199748894b3480826ef3dd0143dd29e31f0; Path=/"
  31.  
  32. GET http://www.wdc.com/en/ HTTP/1.1
  33. Host: www.wdc.com
  34. Cookie: userlang=en; BIGipServerwww_wdc_com_http.app~www_wdc_com_http_pool=1460667402.20480.0000; ASP.NET_SessionId=igfumiiuh4ejosej4ygtvzmq; ASPSESSIONIDACCABTRD=ICKBIICCEPELDDGOKHGOLEBI; TS01cfd401=01c2bc90a152db6574da69bd4cc265ce7975c169ef07bd5a63693e10c994d237c5e68382a04edb7d6c60be5b757f9563c3620001838639cbf7ede1ff507e5f4fb374a31c17f183b30cfca67feb2cea197705013e0287a6633894949cd234ceb9652790ec0a18a6bbde4dc74bbce8586b9f36acb963
  35. Accept-Encoding: gzip
  36. --
  37. The whole target has no protection (X-Frame-Options header) against ClickJacking attack
  38. --
  39. The remote HTTP Server omitted the "server" header in its response
  40.  
  41. GET http://www.wdc.com/en/ HTTP/1.1
  42. Host: www.wdc.com
  43. Cookie: userlang=en; TS01cfd401=01c2bc90a1caf0065ecf613f91d1c62db8035cd2f830f8bdb00ea6d3fca0c4917296732bd4e9a3772aa816c9e012a23a7c5a0c2bef253bc824a7354627e49e65ca6216bb4ca833a776c76da38338284aeac681b8ef06eb933f7191d33027999a5ec81f535cb17dbab4099dc9faf1363df0cc5655e6; ASPSESSIONIDCCQCBSCT=AGMLELCCNLNAPFMBCHNEIBJA; ASPSESSIONIDQASBBQBQ=FLJJGICCJBILDKGEELALNIOA; ASP.NET_SessionId=resgiaqfupwodt45ibfqu4yd; BIGipServerwww_wdc_com_http.app~www_wdc_com_http_pool=1443890186.20480.0000
  44. ---
  45. X-AspNet-Version" header for this HTTP server is: "2.0.50727"
  46. ---
  47. A robots.txt file was found at: "http://www.wdc.com/robots.txt"
  48.  
  49. # robots.txt for http://www.westerndigital.com/ and http://www.wdc.com/
  50. User-agent: gsa-crawler
  51. Disallow:
  52. Allow: /WDProducts/Library
  53. Disallow: /WDProducts/Library/RSS
  54. User-agent: *
  55. Disallow: /global/
  56. Disallow: /eDM/
  57. Disallow: /errorPages/
  58. Disallow: /css
  59. Disallow: /ch/images/
  60. Disallow: /cn/images/
  61. Disallow: /de/images/
  62. Disallow: /fr/images/
  63. Disallow: /jp/images/
  64. Disallow: /kr/images/
  65. Disallow: /pt/images/
  66. Disallow: /ru/images/
  67. Disallow: /sp/images/
  68. Disallow: /includes/
  69. Disallow: /Seminars/
  70. Disallow: /rydercup/
  71. Disallow: /survey/
  72. Disallow: /W3C/
  73. Disallow: /WDCaviar320/
  74. Disallow: /WDPassport/
  75. Disallow: /WDScorpio/
  76. Disallow: /WDSEARCH/
  77. Disallow: /webapps/
  78. Disallow: /advformat/
  79. Disallow: /en/products/advancedformat/
  80. Disallow: /en/library/
  81. Disallow: /promotions/
  82. Disallow: /WDProducts/Library/RSS
  83. Disallow: /en/products/productpicker/
  84. Disallow: /ventito/us/terms-of-service
  85.  
  86. # Rover Email list compiler
  87. User-agent: Roverbot
  88. Disallow: /
  89. # ActiveAgent email list compiler
  90. User-agent: ActiveAgent
  91. Disallow: /
  92. ---
  93. Cookie: userlang=en-US; TS01cfd401=01c2bc90a1d6973d8e363abfda87bb2b97f0fd3a9830f8bdb00ea6d3fca0c4917296732bd47e73cb7ab59c2e2ecd99e019caf59655dbd655730660ed5f12bd0ddaa8dcd73458c65daed5745942c92cea0def5b7210f5ef907b92cd84b3575ce9b5a4b8f4e1b296753104e2b323de5a8a277c48c5754d6a084686fd7936856280535ec8bdd88ef8c45f4490f0cf2c4b03b390c01f5bf1295d007e03a88e0e1c03d939acf62d; ASPSESSIONIDCCQCBSCT=AGMLELCCNLNAPFMBCHNEIBJA; ASPSESSIONIDCATADTCS=NKJJFNCCPCOGPFIMMJJPCGNM; ASPSESSIONIDQASBBQBQ=FLJJGICCJBILDKGEELALNIOA; ASPSESSIONIDCARBDRCS=NGALOLCCFFHLNLHMCKNDMMKL; ASP.NET_SessionId=resgiaqfupwodt45ibfqu4yd; ASPSESSIONIDCCSCCSCS=EBCFLJCCAPIHLACOIIEFPOCN; ASPSESSIONIDACSACSDS=FPNPAJCCOGLIPILPBEDENEHN; BIGipServerwww_wdc_com_http.app~www_wdc_com_http_pool=1443890186.20480.0000; ASPSESSIONIDCCSACTDT=ILGLGKCCOFBBGCPGMIBFBNBE; ASPSESSIONIDCCTDBSCT=AKAPPGCCHCFHJNDENNLLICGI
  94. ---
  95. The target site has no DNS wildcard, and the contents of http://wdc.com differ from the contents of http://www.wdc.com
  96. ---
  97. The contents of http://203.97.86.203 differ from the contents of http://www.wdc.com
  98. ---
  99. The URL "http://www.wdc.com/en/" has the following allowed methods: *, BASELINE_CONTROL, CHECKIN, CHECKOUT, CONNECT, DEBUG, GET, HEAD, INDEX, INVALID, INVOKE, LABEL, LINK, MERGE, MKACTIVITY, MKDIR, MKWORKSPACE, NOTIFY, PIN, POLL, POST, REPLY, RMDIR, SEARCH, SHOWMETHOD, SPACEJUMP, SUBSCRIBE, SUBSCRIPTIONS, TEXTSEARCH, TRACK, UNCHECKOUT, UNLINK, UNSUBSCRIBE, VERSION_CONTROL.
  100. ---------------------------------------------------------------------------
  101.  
  102. MD5 sum of host name: 703d2d2373a273e8b548b265814fda9d
  103. SHA1 sum of host name: 6b4279cb289efb41a850cac8fbcdc6a60d3a4144
  104. SHA256 sum of host name: c77790dae91b106d954f4985c58cf5e3a82fda8a6e660fbe2f54b85c84c02d7b
  105. ------------------------------------------------------------
  106.  
  107. MX 10 WDMAIL01.WDC.COM 129.253.55.43 WDMAIL01.WDC.COM
  108. WDMAIL02.WDC.COM 129.253.55.42 WDMAIL02.WDC.COM
  109. ---------------------------------------------------------------------------------------------------
  110. ---------------------------------------------------------------------------------------------------
  111. SSL CERT CHECK EXPLOITATION:WWW.WDC.COM / GRADE F.
  112.  
  113. www.wdc.com (23.61.194.186) << a23-61-194-186.deploy.static.akamaitechnologies.com
  114. PORT STATE SERVICE
  115. 80/tcp open http
  116. 443/tcp open https
  117.  
  118. Server:Microsoft-IIS/6.0
  119. IP Address:23.61.194.186
  120. Port:443
  121. Hostname:www.wdc.com
  122. ---
  123. domain:
  124. a248.e.akamai.net
  125. *.akamaihd.net
  126. *.akamaihd-staging.net
  127. *.akamaized.net
  128. *.akamaized-staging.net
  129. ---
  130. Testing SSL server 23.61.194.186 on port 443
  131. -
  132. Accepted TLSv1 128 bits RC4-SHA
  133. Accepted TLSv1 128 bits RC4-MD5
  134. Accepted TLSv1 168 bits DES-CBC3-SHA
  135. Accepted TLSv1 128 bits AES128-SHA
  136. Accepted TLSv1 256 bits AES256-SHA
  137.  
  138. Prefered Server Cipher(s):
  139. TLSv1 128 bits RC4-SHA
  140. SSL Certificate:
  141. Version: 2
  142. Serial Number: -4294967295
  143. Signature Algorithm: sha1WithRSAEncryption
  144. Issuer: /O=Cybertrust Inc/CN=Cybertrust Public SureServer SV CA
  145. Not valid before: Jun 12 20:35:45 2014 GMT
  146. Not valid after: Jun 12 20:35:45 2015 GMT
  147. Subject: /C=US/ST=MA/L=Cambridge/O=Akamai Technologies, Inc./CN=a248.e.akamai.net
  148. Public Key Algorithm: rsaEncryption
  149. RSA Public Key: (2048 bit)
  150. Modulus (2048 bit):
  151. 00:b1:50:be:18:42:78:da:59:48:15:14:be:23:84:
  152. d5:9b:b5:7c:d6:fa:5d:62:c3:1a:00:ec:d0:70:03:
  153. 0e:74:00:1e:cf:73:ed:21:c6:af:90:d8:7f:d0:b0:
  154. dc:99:55:c8:e1:e8:a9:28:83:79:ee:89:9c:e5:72:
  155. 16:40:45:90:ca:0f:a7:a6:b1:39:f2:c3:34:83:86:
  156. de:74:c6:48:10:d3:e8:8d:81:0c:88:b7:40:0a:b5:
  157. 1b:30:77:72:45:8b:ee:69:57:99:eb:90:c2:76:4b:
  158. f9:e0:ee:eb:b8:4f:1d:d8:2c:aa:f5:49:08:e7:5a:
  159. 09:ff:a3:39:96:be:44:e2:0a:ce:4b:6a:f7:02:c1:
  160. ae:00:03:aa:e5:b2:aa:be:07:a7:25:30:c5:4e:01:
  161. d5:e0:df:c8:7d:d0:db:35:2b:5e:d9:08:27:75:0b:
  162. 41:36:83:b0:bd:e1:a4:d0:1f:8e:2e:57:d5:13:9d:
  163. d3:1b:5b:f0:22:e9:1d:58:df:f2:8d:7e:90:ee:90:
  164. 3a:4c:13:40:99:b1:a2:e2:26:f4:86:cd:96:7c:9c:
  165. 21:ca:73:7e:40:2e:b4:f0:9e:90:9d:26:44:86:9d:
  166. fe:60:fa:f0:1f:eb:96:70:aa:d3:1c:cd:3b:da:e8:
  167. d9:95:4c:8c:b5:df:df:85:b3:5f:60:b2:67:c1:b0:
  168. 04:1b
  169. Exponent: 65537 (0x10001)
  170. X509v3 Extensions:
  171. X509v3 Authority Key Identifier:
  172. keyid:04:98:60:DF:80:1B:96:49:5D:65:56:2D:A5:2C:09:24:0A:EC:DC:B9
  173.  
  174. X509v3 CRL Distribution Points:
  175. URI:http://crl.omniroot.com/PublicSureServerSV.crl
  176.  
  177. X509v3 Subject Key Identifier:
  178. 70:14:DB:83:91:FF:BC:43:DF:68:99:38:06:D6:5C:C7:14:47:AE:C2
  179. X509v3 Basic Constraints:
  180. CA:FALSE
  181. X509v3 Key Usage: critical
  182. Digital Signature, Key Encipherment
  183. X509v3 Extended Key Usage:
  184. TLS Web Server Authentication, TLS Web Client Authentication
  185. Netscape Cert Type:
  186. SSL Client, SSL Server
  187. X509v3 Subject Alternative Name:
  188. DNS:*.akamaihd.net, DNS:*.akamaihd-staging.net, DNS:a248.e.akamai.net, DNS:*.akamaized.net, DNS:*.akamaized-staging.net
  189. ===================
  190. EXPLOITS:
  191. Hostname in certificate and DNS name do not match
  192. Users will receive strong browser warnings
  193.  
  194. Server does not use secure renegotiation settings
  195. Site is more vulnerable to Denial of Service (DOS) attack
  196.  
  197. Server has not enabled HTTP Strict-Transport-Security
  198. Users may be exposed to man-in-the-middle attacks
  199.  
  200. Server doesn’t prefer ciphers that enable forward secrecy.
  201. Encrypted communications captured today are at risk of being decrypted by an attacker in the future.
  202.  
  203. Server configuration does not meet PCI/DSS guidelines
  204. This is a problem if you process credit card information
  205.  
  206. Server is using RC4-based ciphersuites which have known vulnerabilities
  207. Evaluate your client compatibility requirements to determine if you can disable RC4-based ciphersuites
  208.  
  209. SSL 2.0 Disabled:Pass
  210. SSL 3.0 Disabled:Pass
  211. TLS 1.0 Enabled:Pass
  212. TLS 1.1 Enabled:Pass
  213. TLS 1.2 Enabled:Pass
  214. Weak ciphersuites disabled:Pass
  215. Certificates configured correctly:Fail
  216. Secure renegotiation configured:Fail
  217. Session resumption configured:Pass
  218. BEAST Vulnerability:Pass
  219. OCSP Stapling:Fail
  220. PCI Compliant:Fail
  221. FIPS Compliant:Fail
  222. Forward Secrecy Supported:Fail
  223. Heartbleed Vulnerability:Pass
  224.  
  225. Strict Transport Security:Fail
  226. Mixed Content (HTTP and HTTPS):Timed Out
  227. Domain name resolves to IPv4 address:Pass
  228. Domain name resolves to IPv6 address:Fail
  229. --------------------------------------------------------------------------------------------------------
  230.  
  231. www.wdc.com (129.253.55.56) << www.wdc.by)
  232. PORT STATE SERVICE
  233. 80/tcp open http
  234. 443/tcp open https
  235. --
  236. Server:Microsoft-IIS/6.0
  237. IP Address:129.253.55.56
  238. Port:443
  239. Hostname:www.wdc.com
  240. ----
  241. domain:
  242. *.wdc.com
  243. wdc.com
  244. ---
  245. Testing SSL server 129.253.55.56 on port 443
  246. --
  247. Accepted TLSv1 256 bits AES256-SHA
  248. Accepted TLSv1 128 bits AES128-SHA
  249. Accepted TLSv1 168 bits DES-CBC3-SHA
  250. Accepted TLSv1 128 bits RC4-SHA
  251. --
  252. Prefered Server Cipher(s):
  253. TLSv1 256 bits AES256-SHA
  254.  
  255. SSL Certificate:
  256. Version: 2
  257. Serial Number: -4294967295
  258. Signature Algorithm: sha256WithRSAEncryption
  259. Issuer: /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
  260. Not valid before: Apr 30 00:00:00 2014 GMT
  261. Not valid after: Apr 29 23:59:59 2019 GMT
  262. Subject: /OU=Domain Control Validated/OU=COMODO SSL Wildcard/CN=*.wdc.com
  263. Public Key Algorithm: rsaEncryption
  264. RSA Public Key: (2048 bit)
  265. Modulus (2048 bit):
  266. 00:f0:82:c7:88:05:9d:a8:e7:24:b7:a1:cc:43:c4:
  267. 1f:3c:e5:de:42:58:ad:df:2c:0b:60:bb:41:82:71:
  268. 63:ea:21:a2:46:79:63:39:2a:b9:0b:71:2c:78:f0:
  269. ae:d4:c8:f4:d2:10:e7:aa:81:1c:5f:55:7f:91:9b:
  270. 2b:e7:5c:2c:a0:fd:21:c7:10:45:76:50:26:1c:10:
  271. 8f:f2:dd:a0:56:ba:55:b4:3c:af:09:38:9b:2a:13:
  272. b5:cc:de:2d:aa:d9:f5:00:48:58:5c:56:5e:bb:a8:
  273. e6:c6:51:05:84:3b:35:2f:fd:4a:a6:98:e1:19:49:
  274. bc:55:26:1d:54:a9:51:6a:cf:f2:9e:73:95:2d:f0:
  275. 9e:15:c2:87:39:d2:37:d1:99:0e:cc:71:99:49:70:
  276. 16:f6:1f:cc:13:17:89:ec:0b:9b:df:5b:02:5d:6e:
  277. 7b:6f:64:8b:73:ae:8d:18:5d:30:4f:5c:cf:0d:f4:
  278. f2:99:98:b0:0e:c9:e5:d4:95:70:b2:9c:55:b9:46:
  279. 57:95:c2:0f:1c:0a:e8:6c:a6:78:da:c3:3d:72:40:
  280. c4:2f:58:81:29:86:a9:f6:21:69:75:78:4c:91:97:
  281. b8:f0:2a:31:02:1a:78:cb:10:5f:7a:2e:67:ca:d9:
  282. 9c:40:d0:58:a5:ce:c3:a0:43:70:1d:1e:ec:f9:bb:
  283. 81:2d
  284. Exponent: 65537 (0x10001)
  285. X509v3 Extensions:
  286. X509v3 Authority Key Identifier:
  287. keyid:90:AF:6A:3A:94:5A:0B:D8:90:EA:12:56:73:DF:43:B4:3A:28:DA:E7
  288.  
  289. X509v3 Subject Key Identifier:
  290. BA:98:11:77:6C:55:3C:BB:F1:B8:97:D0:1E:99:04:70:23:41:86:63
  291. X509v3 Key Usage: critical
  292. Digital Signature, Key Encipherment
  293. X509v3 Basic Constraints: critical
  294. CA:FALSE
  295. X509v3 Extended Key Usage:
  296. TLS Web Server Authentication, TLS Web Client Authentication
  297. X509v3 Certificate Policies:
  298. Policy: 1.3.6.1.4.1.6449.1.2.2.7
  299. CPS: https://secure.comodo.com/CPS
  300. Policy: 2.23.140.1.2.1
  301.  
  302. X509v3 CRL Distribution Points:
  303. URI:http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl
  304.  
  305. Authority Information Access:
  306. CA Issuers - URI:http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt
  307. OCSP - URI:http://ocsp.comodoca.com
  308.  
  309. X509v3 Subject Alternative Name:
  310. DNS:*.wdc.com, DNS:wdc.com
  311. ====================
  312. EXPLOITS:
  313.  
  314. Server does not use secure renegotiation settings
  315. Site is more vulnerable to Denial of Service (DOS) attacks
  316.  
  317. Sessions may be vulnerable to BEAST attack
  318. Attackers may be able to decrypt the encrypted SSL traffic
  319.  
  320. Server has not enabled HTTP Strict-Transport-Security
  321. Users may be exposed to man-in-the-middle attacks
  322.  
  323. Server may have sent unnecessary certificates in the SSL/TLS negotiation
  324. Users may experience slower performance
  325.  
  326. Server doesn’t prefer ciphers that enable forward secrecy.
  327. Encrypted communications captured today are at risk of being decrypted by an attacker in the future.
  328.  
  329. Server is using RC4-based ciphersuites which have known vulnerabilities
  330. Evaluate your client compatibility requirements to determine if you can disable RC4-based ciphersuites
  331.  
  332. SSL 2.0 Disabled:Pass
  333. SSL 3.0 Disabled:Pass
  334. TLS 1.0 Enabled:Pass
  335. TLS 1.1 Enabled:Pass
  336. TLS 1.2 Enabled:Pass
  337. Weak ciphersuites disabled:Pass
  338. Certificates configured correctly:Pass
  339. Secure renegotiation configured:Fail
  340. Session resumption configured:Pass
  341. BEAST Vulnerability:Fail
  342. OCSP Stapling:Fail
  343. PCI Compliant:Pass
  344. FIPS Compliant:Fail
  345. Forward Secrecy Supported:Fail
  346. Heartbleed Vulnerability:Pass
  347.  
  348. Strict Transport Security:Fail
  349. Mixed Content (HTTP and HTTPS):Timed Out
  350. Domain name resolves to IPv4 address:Pass
  351. Domain name resolves to IPv6 address:Fail
  352. ------------------------------------------------------------------------------------------------------------
  353.  
  354. www.wdc.com (23.61.194.177) << a23-61-194-177.deploy.static.akamaitechnologies.com
  355. PORT STATE SERVICE
  356. 443/tcp open https
  357. 80/tcp open http
  358. ---
  359. Server:Microsoft-IIS/6.0
  360. IP Address:23.61.194.177
  361. Port:443
  362. Hostname:www.wdc.com
  363. ---
  364. domain:
  365. a248.e.akamai.net
  366. *.akamaihd.net
  367. *.akamaihd-staging.net
  368. *.akamaized.net
  369. *.akamaized-staging.net
  370. ---
  371. Testing SSL server 23.61.194.177 on port 443
  372.  
  373. Accepted TLSv1 256 bits AES256-SHA
  374. Accepted TLSv1 128 bits AES128-SHA
  375. Accepted TLSv1 168 bits DES-CBC3-SHA
  376. Accepted TLSv1 128 bits RC4-SHA
  377. Accepted TLSv1 128 bits RC4-MD5
  378. --
  379. Prefered Server Cipher(s):
  380. TLSv1 128 bits RC4-SHA
  381.  
  382. SSL Certificate:
  383. Version: 2
  384. Serial Number: -4294967295
  385. Signature Algorithm: sha1WithRSAEncryption
  386. Issuer: /O=Cybertrust Inc/CN=Cybertrust Public SureServer SV CA
  387. Not valid before: Jun 12 20:35:45 2014 GMT
  388. Not valid after: Jun 12 20:35:45 2015 GMT
  389. Subject: /C=US/ST=MA/L=Cambridge/O=Akamai Technologies, Inc./CN=a248.e.akamai.net
  390. Public Key Algorithm: rsaEncryption
  391. RSA Public Key: (2048 bit)
  392. Modulus (2048 bit):
  393. 00:b1:50:be:18:42:78:da:59:48:15:14:be:23:84:
  394. d5:9b:b5:7c:d6:fa:5d:62:c3:1a:00:ec:d0:70:03:
  395. 0e:74:00:1e:cf:73:ed:21:c6:af:90:d8:7f:d0:b0:
  396. dc:99:55:c8:e1:e8:a9:28:83:79:ee:89:9c:e5:72:
  397. 16:40:45:90:ca:0f:a7:a6:b1:39:f2:c3:34:83:86:
  398. de:74:c6:48:10:d3:e8:8d:81:0c:88:b7:40:0a:b5:
  399. 1b:30:77:72:45:8b:ee:69:57:99:eb:90:c2:76:4b:
  400. f9:e0:ee:eb:b8:4f:1d:d8:2c:aa:f5:49:08:e7:5a:
  401. 09:ff:a3:39:96:be:44:e2:0a:ce:4b:6a:f7:02:c1:
  402. ae:00:03:aa:e5:b2:aa:be:07:a7:25:30:c5:4e:01:
  403. d5:e0:df:c8:7d:d0:db:35:2b:5e:d9:08:27:75:0b:
  404. 41:36:83:b0:bd:e1:a4:d0:1f:8e:2e:57:d5:13:9d:
  405. d3:1b:5b:f0:22:e9:1d:58:df:f2:8d:7e:90:ee:90:
  406. 3a:4c:13:40:99:b1:a2:e2:26:f4:86:cd:96:7c:9c:
  407. 21:ca:73:7e:40:2e:b4:f0:9e:90:9d:26:44:86:9d:
  408. fe:60:fa:f0:1f:eb:96:70:aa:d3:1c:cd:3b:da:e8:
  409. d9:95:4c:8c:b5:df:df:85:b3:5f:60:b2:67:c1:b0:
  410. 04:1b
  411. Exponent: 65537 (0x10001)
  412. X509v3 Extensions:
  413. X509v3 Authority Key Identifier:
  414. keyid:04:98:60:DF:80:1B:96:49:5D:65:56:2D:A5:2C:09:24:0A:EC:DC:B9
  415.  
  416. X509v3 CRL Distribution Points:
  417. URI:http://crl.omniroot.com/PublicSureServerSV.crl
  418.  
  419. X509v3 Subject Key Identifier:
  420. 70:14:DB:83:91:FF:BC:43:DF:68:99:38:06:D6:5C:C7:14:47:AE:C2
  421. X509v3 Basic Constraints:
  422. CA:FALSE
  423. X509v3 Key Usage: critical
  424. Digital Signature, Key Encipherment
  425. X509v3 Extended Key Usage:
  426. TLS Web Server Authentication, TLS Web Client Authentication
  427. Netscape Cert Type:
  428. SSL Client, SSL Server
  429. X509v3 Subject Alternative Name:
  430. DNS:*.akamaihd.net, DNS:*.akamaihd-staging.net, DNS:a248.e.akamai.net, DNS:*.akamaized.net, DNS:*.akamaized-staging.net
  431. ============
  432. EXPLOITS:
  433.  
  434. Hostname in certificate and DNS name do not match
  435. Users will receive strong browser warnings
  436.  
  437. Server does not use secure renegotiation settings
  438. Site is more vulnerable to Denial of Service (DOS) attacks
  439.  
  440. Server has not enabled HTTP Strict-Transport-Security
  441. Users may be exposed to man-in-the-middle attacks
  442.  
  443. Site is using certificate from CA that doesn’t support IPv4
  444. IPv4-only users may experience errors when visiting your site
  445.  
  446. Server doesn’t prefer ciphers that enable forward secrecy.
  447. Encrypted communications captured today are at risk of being decrypted by an attacker in the future
  448.  
  449. Server uses RC4 cipher with modern browsers
  450. More secure ciphers are available for TLS 1.1 and newer
  451.  
  452. Server is using RC4-based ciphersuites which have known vulnerabilities
  453. Evaluate your client compatibility requirements to determine if you can disable RC4-based ciphersuites
  454.  
  455. SSL 2.0 Disabled:Pass
  456. SSL 3.0 Disabled:Pass
  457. TLS 1.0 Enabled:Pass
  458. TLS 1.1 Enabled:Pass
  459. TLS 1.2 Enabled:Pass
  460. Weak ciphersuites disabled:Pass
  461. Certificates configured correctly:Fail
  462. Secure renegotiation configured:Fail
  463. Session resumption configured:Pass
  464. BEAST Vulnerability:Pass
  465. OCSP Stapling:Fail
  466. PCI Compliant:Fail
  467. FIPS Compliant:Fail
  468. Forward Secrecy Supported:Fail
  469. Heartbleed Vulnerability:Pass
  470.  
  471. Strict Transport Security:Fail
  472. Mixed Content (HTTP and HTTPS):Timed Out
  473. Domain name resolves to IPv4 address:Pass
  474. Domain name resolves to IPv6 address:Fail
  475. -----------------------------------------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!