API tools faq
paste
JTSEC1333

Anonymous JTSEC #OpISIS Full Recon #3

JTSEC1333
Aug 26th, 2019
1,237
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 150.80 KB | None | 0 0
raw download clone embed print report
  1. ######################################################################################################################################
  2. ======================================================================================================================================
  3. Hostname www.hizb-australia.org ISP SYNERGY WHOLESALE PTY LTD
  4. Continent Oceania Flag
  5. AU
  6. Country Australia Country Code AU
  7. Region Unknown Local time 26 Aug 2019 14:53 AEST
  8. City Unknown Postal Code Unknown
  9. IP Address 103.9.171.7 Latitude -33.494
  10. Longitude 143.21
  11. ======================================================================================================================================
  12. ######################################################################################################################################
  13. > www.hizb-australia.org
  14. Server: 38.132.106.139
  15. Address: 38.132.106.139#53
  16.  
  17. Non-authoritative answer:
  18. www.hizb-australia.org canonical name = hizb-australia.org.
  19. Name: hizb-australia.org
  20. Address: 103.9.171.7
  21. >
  22. ######################################################################################################################################
  23. Domain Name: HIZB-AUSTRALIA.ORG
  24. Registry Domain ID: D150796494-LROR
  25. Registrar WHOIS Server: whois.melbourneit.com
  26. Registrar URL: http://www.melbourneit.com.au
  27. Updated Date: 2017-10-09T07:09:43Z
  28. Creation Date: 2008-01-29T04:17:29Z
  29. Registry Expiry Date: 2020-01-29T04:17:29Z
  30. Registrar Registration Expiration Date:
  31. Registrar: ARQ Group Limited DBA Melbourne IT
  32. Registrar IANA ID: 13
  33. Registrar Abuse Contact Email: [email protected]
  34. Registrar Abuse Contact Phone: +61.386242300
  35. Reseller:
  36. Domain Status: ok https://icann.org/epp#ok
  37. Registrant Organization: ExposurePDP
  38. Registrant State/Province: NSW
  39. Registrant Country: AU
  40. Name Server: NS1.MELBOURNEIT.NET
  41. Name Server: NS2.MELBOURNEIT.NET
  42. Name Server: NS3.MELBOURNEIT.NET
  43. Name Server: NS4.MELBOURNEIT.NET
  44. DNSSEC: unsigned
  45. #######################################################################################################################################
  46. [+] Target : www.hizb-australia.org
  47.  
  48. [+] IP Address : 103.9.171.7
  49.  
  50. [+] Headers :
  51.  
  52. [+] Connection : close
  53. [+] X-Powered-By : PHP/5.6.40
  54. [+] Content-Type : text/html; charset=UTF-8
  55. [+] Content-Length : 843
  56. [+] Content-Encoding : gzip
  57. [+] Vary : Accept-Encoding
  58. [+] Date : Mon, 26 Aug 2019 05:11:37 GMT
  59. [+] Server : LiteSpeed
  60.  
  61. [+] SSL Certificate Information :
  62.  
  63. [+] commonName : hizb-australia.org
  64. [+] countryName : US
  65. [+] stateOrProvinceName : TX
  66. [+] localityName : Houston
  67. [+] organizationName : cPanel, Inc.
  68. [+] commonName : cPanel, Inc. Certification Authority
  69. [+] Version : 3
  70. [+] Serial Number : 80702720F740D167BD3A182FEEE6C80D
  71. [+] Not Before : Jul 3 00:00:00 2019 GMT
  72. [+] Not After : Oct 1 23:59:59 2019 GMT
  73. [+] OCSP : ('http://ocsp.comodoca.com',)
  74. [+] subject Alt Name : (('DNS', 'hizb-australia.org'), ('DNS', 'cpanel.hizb-australia.org'), ('DNS', 'mail.hizb-australia.org'), ('DNS', 'webdisk.hizb-australia.org'), ('DNS', 'webmail.hizb-australia.org'), ('DNS', 'www.hizb-australia.org'))
  75. [+] CA Issuers : ('http://crt.comodoca.com/cPanelIncCertificationAuthority.crt',)
  76. [+] CRL Distribution Points : ('http://crl.comodoca.com/cPanelIncCertificationAuthority.crl',)
  77.  
  78. [+] Whois Lookup :
  79.  
  80. [+] NIR : None
  81. [+] ASN Registry : apnic
  82. [+] ASN : 45638
  83. [+] ASN CIDR : 103.9.170.0/23
  84. [+] ASN Country Code : AU
  85. [+] ASN Date : 2012-05-18
  86. [+] ASN Description : SYNERGYWHOLESALE-AP SYNERGY WHOLESALE PTY LTD, AU
  87. [+] cidr : 103.9.168.0/22
  88. [+] name : SYNERGYWHOLESALE-AP
  89. [+] handle : SWN3-AP
  90. [+] range : 103.9.168.0 - 103.9.171.255
  91. [+] description : SYNERGY WHOLESALE PTY LTD
  92. Suite 105
  93. 66 Victor Crescent
  94. Narre Warren VIC 3805
  95. [+] country : AU
  96. [+] state : None
  97. [+] city : None
  98. [+] address : PO Box 119
  99. Beaconsfield VIC 3807
  100. Australia
  101. [+] postal_code : None
  102. [+] emails : ['[email protected]', '[email protected]']
  103. [+] created : None
  104. [+] updated : None
  105.  
  106. [+] Crawling Target...
  107.  
  108. [+] Looking for robots.txt........[ Found ]
  109. [+] Extracting robots Links.......[ 0 ]
  110. [+] Looking for sitemap.xml.......[ Found ]
  111. [+] Extracting sitemap Links......[ 0 ]
  112. [+] Extracting CSS Links..........[ 1 ]
  113. [+] Extracting Javascript Links...[ 1 ]
  114. [+] Extracting Internal Links.....[ 0 ]
  115. [+] Extracting External Links.....[ 0 ]
  116. [+] Extracting Images.............[ 0 ]
  117.  
  118. [+] Total Links Extracted : 2
  119.  
  120. [+] Dumping Links in /opt/FinalRecon/dumps/www.hizb-australia.org.dump
  121. [+] Completed!
  122. ######################################################################################################################################
  123. [+] Starting At 2019-08-26 01:11:29.853834
  124. [+] Collecting Information On: http://www.hizb-australia.org/
  125. [#] Status: 200
  126. --------------------------------------------------
  127. [#] Web Server Detected: LiteSpeed
  128. [#] X-Powered-By: PHP/5.6.40
  129. [!] X-Frame-Options Headers not detect! target might be vulnerable Click Jacking
  130. - Connection: close
  131. - X-Powered-By: PHP/5.6.40
  132. - Content-Type: text/html; charset=UTF-8
  133. - Content-Length: 843
  134. - Content-Encoding: gzip
  135. - Vary: Accept-Encoding
  136. - Date: Mon, 26 Aug 2019 05:11:33 GMT
  137. - Server: LiteSpeed
  138. --------------------------------------------------
  139. [#] Finding Location..!
  140. [#] as: AS45638 SYNERGY WHOLESALE PTY LTD
  141. [#] city: Sydney
  142. [#] country: Australia
  143. [#] countryCode: AU
  144. [#] isp: Synergy Wholesale PTY LTD
  145. [#] lat: -33.8675
  146. [#] lon: 151.207
  147. [#] org: Synergy Wholesale PTY LTD
  148. [#] query: 103.9.171.7
  149. [#] region: NSW
  150. [#] regionName: New South Wales
  151. [#] status: success
  152. [#] timezone: Australia/Sydney
  153. [#] zip: 1001
  154. --------------------------------------------------
  155. [x] Didn't Detect WAF Presence on: http://www.hizb-australia.org/
  156. --------------------------------------------------
  157. [#] Starting Reverse DNS
  158. [-] Failed ! Fail
  159. --------------------------------------------------
  160. [!] Scanning Open Port
  161. [#] 21/tcp open ftp
  162. [#] 53/tcp open domain
  163. [#] 110/tcp open pop3
  164. [#] 143/tcp open imap
  165. [#] 443/tcp open https
  166. [#] 465/tcp open smtps
  167. [#] 587/tcp open submission
  168. [#] 993/tcp open imaps
  169. [#] 995/tcp open pop3s
  170. --------------------------------------------------
  171. [+] Collecting Information Disclosure!
  172. [#] Detecting sitemap.xml file
  173. [!] sitemap.xml File Found: http://www.hizb-australia.org//sitemap.xml
  174. [#] Detecting robots.txt file
  175. [!] robots.txt File Found: http://www.hizb-australia.org//robots.txt
  176. [#] Detecting GNU Mailman
  177. [!] GNU Mailman App Detected: http://www.hizb-australia.org//mailman/admin
  178. [!] version: 2.1.27
  179. --------------------------------------------------
  180. [+] Crawling Url Parameter On: http://www.hizb-australia.org/
  181. --------------------------------------------------
  182. [#] Searching Html Form !
  183. [+] Html Form Discovered
  184. [#] action:
  185. [#] class: None
  186. [#] id: None
  187. [#] method: POST
  188. --------------------------------------------------
  189. [-] No DOM Paramter Found!?
  190. --------------------------------------------------
  191. [-] No internal Dynamic Parameter Found!?
  192. --------------------------------------------------
  193. [-] No external Dynamic Paramter Found!?
  194. --------------------------------------------------
  195. [-] No Internal Link Found!?
  196. --------------------------------------------------
  197. [-] No External Link Found!?
  198. --------------------------------------------------
  199. [#] Mapping Subdomain..
  200. [!] Found 2 Subdomain
  201. - hizb-australia.org
  202. - mail.hizb-australia.org
  203. --------------------------------------------------
  204. [!] Done At 2019-08-26 01:11:56.304924
  205. ######################################################################################################################################
  206. [i] Scanning Site: http://www.hizb-australia.org
  207.  
  208.  
  209.  
  210. B A S I C I N F O
  211. ====================
  212.  
  213.  
  214. [+] Site Title: Unauthorized Access
  215. [+] IP address: 103.9.171.7
  216. [+] Web Server: LiteSpeed
  217. [+] CMS: Could Not Detect
  218. [+] Cloudflare: Not Detected
  219. [+] Robots File: Found
  220.  
  221. -------------[ contents ]----------------
  222. <!doctype html>
  223. <html lang="en">
  224. <head>
  225. <title>Unauthorized Access</title>
  226. <meta charset="UTF-8">
  227. <script src="https://www.google.com/recaptcha/api.js" async defer></script>
  228. <link rel='stylesheet' href='https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css'>
  229. <style>body { padding-top: 20px; }</style>
  230. </head>
  231. <body>
  232.  
  233. <div class="container-fluid">
  234. <div class="alert alert-warning"><h2>The firewall on this server is blocking your connection.</h2></div>
  235. <p>You need to contact the server owner or hosting provider for further information.</p>
  236. <p>Your blocked IP address is: <b>176.113.74.69</b></p>
  237. <p>The hostname of this server is: <b>c5s1-2e-syd.hosting-services.net.au</b></p>
  238.  
  239. <br />
  240. <p>You can try to unblock yourself using ReCAPTCHA:</p>
  241.  
  242. <form action="" method="POST">
  243. <div class="row">
  244. <div class="col-md-4">
  245. <div class="panel panel-default">
  246. <div class="panel-body">
  247. <div align="center" class="g-recaptcha" data-sitekey="6Ld18SUUAAAAAHw48BQN-lsyEKk8uXgtqSkZQk8d"></div>
  248. </div>
  249. <div class="panel-footer text-center">
  250. <button class='btn btn-primary' type="submit" name="submit">Unblock</button>
  251. </div>
  252. </div>
  253. </div>
  254. </div>
  255. </form>
  256.  
  257. <br />
  258.  
  259. <div class="alert alert-info">If the unblock fails and you are the owner of this website, you need to login to VIPControl https://vip.ventraip.com.au where you will be advised you have been blocked, and the process to unblock yourself.</div>
  260. </div>
  261. </div>
  262. </body>
  263. </html>
  264.  
  265. -----------[end of contents]-------------
  266.  
  267.  
  268.  
  269. W H O I S L O O K U P
  270. ========================
  271.  
  272. Domain Name: HIZB-AUSTRALIA.ORG
  273. Registry Domain ID: D150796494-LROR
  274. Registrar WHOIS Server: whois.melbourneit.com
  275. Registrar URL: http://www.melbourneit.com.au
  276. Updated Date: 2017-10-09T07:09:43Z
  277. Creation Date: 2008-01-29T04:17:29Z
  278. Registry Expiry Date: 2020-01-29T04:17:29Z
  279. Registrar Registration Expiration Date:
  280. Registrar: ARQ Group Limited DBA Melbourne IT
  281. Registrar IANA ID: 13
  282. Registrar Abuse Contact Email: [email protected]
  283. Registrar Abuse Contact Phone: +61.386242300
  284. Reseller:
  285. Domain Status: ok https://icann.org/epp#ok
  286. Registrant Organization: ExposurePDP
  287. Registrant State/Province: NSW
  288. Registrant Country: AU
  289. Name Server: NS1.MELBOURNEIT.NET
  290. Name Server: NS2.MELBOURNEIT.NET
  291. Name Server: NS3.MELBOURNEIT.NET
  292. Name Server: NS4.MELBOURNEIT.NET
  293. DNSSEC: unsigned
  294. URL of the ICANN Whois Inaccuracy Complaint Form https://www.icann.org/wicf/)
  295. >>> Last update of WHOIS database: 2019-08-26T05:12:55Z <<<
  296.  
  297. For more information on Whois status codes, please visit https://icann.org/epp
  298.  
  299.  
  300.  
  301.  
  302.  
  303. G E O I P L O O K U P
  304. =========================
  305.  
  306. [i] IP Address: 103.9.171.7
  307. [i] Country: Australia
  308. [i] State: Victoria
  309. [i] City: Woodend
  310. [i] Latitude: -37.3547
  311. [i] Longitude: 144.529
  312.  
  313.  
  314.  
  315.  
  316. H T T P H E A D E R S
  317. =======================
  318.  
  319.  
  320. [i] HTTP/1.0 200 OK
  321. [i] Connection: close
  322. [i] X-Powered-By: PHP/5.6.40
  323. [i] Content-Type: text/html; charset=UTF-8
  324. [i] Content-Length: 1987
  325. [i] Date: Mon, 26 Aug 2019 05:13:56 GMT
  326. [i] Server: LiteSpeed
  327.  
  328.  
  329.  
  330.  
  331. D N S L O O K U P
  332. ===================
  333.  
  334. hizb-australia.org. 3599 IN NS ns1.melbourneit.net.
  335. hizb-australia.org. 3599 IN A 103.9.171.7
  336. hizb-australia.org. 3599 IN SOA ns1.melbourneit.net. admin.melbourneit.net. 2017100118 86400 7200 3600000 172800
  337. hizb-australia.org. 3599 IN NS ns3.melbourneit.net.
  338. hizb-australia.org. 3599 IN NS ns4.melbourneit.net.
  339. hizb-australia.org. 3599 IN NS ns2.melbourneit.net.
  340. hizb-australia.org. 3599 IN TXT "google-site-verification=MnTU5iIVYwSSrMZ9y1lrLbF7CentxirkTzv0hI0_qmg"
  341. hizb-australia.org. 3599 IN MX 10 mail.hizb-australia.org.
  342.  
  343.  
  344.  
  345.  
  346. S U B N E T C A L C U L A T I O N
  347. ====================================
  348.  
  349. Address = 103.9.171.7
  350. Network = 103.9.171.7 / 32
  351. Netmask = 255.255.255.255
  352. Broadcast = not needed on Point-to-Point links
  353. Wildcard Mask = 0.0.0.0
  354. Hosts Bits = 0
  355. Max. Hosts = 1 (2^0 - 0)
  356. Host Range = { 103.9.171.7 - 103.9.171.7 }
  357.  
  358.  
  359.  
  360. N M A P P O R T S C A N
  361. ============================
  362.  
  363. Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-26 05:13 UTC
  364. Nmap scan report for hizb-australia.org (103.9.171.7)
  365. Host is up (0.21s latency).
  366. rDNS record for 103.9.171.7: c5s1-2e-syd.hosting-services.net.au
  367.  
  368. PORT STATE SERVICE
  369. 21/tcp open ftp
  370. 22/tcp filtered ssh
  371. 23/tcp filtered telnet
  372. 80/tcp open http
  373. 110/tcp open pop3
  374. 143/tcp open imap
  375. 443/tcp open https
  376. 3389/tcp filtered ms-wbt-server
  377.  
  378. Nmap done: 1 IP address (1 host up) scanned in 2.94 seconds
  379.  
  380.  
  381.  
  382. S U B - D O M A I N F I N D E R
  383. ==================================
  384.  
  385.  
  386. [i] Total Subdomains Found : 1
  387.  
  388. [+] Subdomain: mail.hizb-australia.org
  389. [-] IP: 103.9.171.7
  390. ######################################################################################################################################
  391. Trying "hizb-australia.org"
  392. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60654
  393. ;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 4, ADDITIONAL: 4
  394.  
  395. ;; QUESTION SECTION:
  396. ;hizb-australia.org. IN ANY
  397.  
  398. ;; ANSWER SECTION:
  399. hizb-australia.org. 3600 IN TXT "google-site-verification=MnTU5iIVYwSSrMZ9y1lrLbF7CentxirkTzv0hI0_qmg"
  400. hizb-australia.org. 3600 IN A 103.9.171.7
  401. hizb-australia.org. 3600 IN MX 10 mail.hizb-australia.org.
  402. hizb-australia.org. 3600 IN SOA ns1.melbourneit.net. admin.melbourneit.net. 2017100118 86400 7200 3600000 172800
  403. hizb-australia.org. 3600 IN NS ns4.melbourneit.net.
  404. hizb-australia.org. 3600 IN NS ns1.melbourneit.net.
  405. hizb-australia.org. 3600 IN NS ns2.melbourneit.net.
  406. hizb-australia.org. 3600 IN NS ns3.melbourneit.net.
  407.  
  408. ;; AUTHORITY SECTION:
  409. hizb-australia.org. 3600 IN NS ns4.melbourneit.net.
  410. hizb-australia.org. 3600 IN NS ns3.melbourneit.net.
  411. hizb-australia.org. 3600 IN NS ns2.melbourneit.net.
  412. hizb-australia.org. 3600 IN NS ns1.melbourneit.net.
  413.  
  414. ;; ADDITIONAL SECTION:
  415. ns3.melbourneit.net. 15851 IN A 203.55.142.16
  416. ns1.melbourneit.net. 15851 IN A 203.55.142.15
  417. ns4.melbourneit.net. 15851 IN A 203.55.143.16
  418. ns2.melbourneit.net. 15851 IN A 203.55.143.15
  419.  
  420. Received 403 bytes from 2001:18c0:121:6900:724f:b8ff:fefd:5b6a#53 in 138 ms
  421. #######################################################################################################################################
  422.  
  423. ; <<>> DiG 9.11.5-P4-5.1+b1-Debian <<>> +trace hizb-australia.org
  424. ;; global options: +cmd
  425. . 81977 IN NS i.root-servers.net.
  426. . 81977 IN NS f.root-servers.net.
  427. . 81977 IN NS l.root-servers.net.
  428. . 81977 IN NS c.root-servers.net.
  429. . 81977 IN NS e.root-servers.net.
  430. . 81977 IN NS a.root-servers.net.
  431. . 81977 IN NS d.root-servers.net.
  432. . 81977 IN NS g.root-servers.net.
  433. . 81977 IN NS k.root-servers.net.
  434. . 81977 IN NS j.root-servers.net.
  435. . 81977 IN NS m.root-servers.net.
  436. . 81977 IN NS h.root-servers.net.
  437. . 81977 IN NS b.root-servers.net.
  438. . 81977 IN RRSIG NS 8 0 518400 20190907170000 20190825160000 59944 . L9u+OQldyD8jUUebuXI0Ru1sh6Y0VLQORbUz/HlcF5M/QJ7FymiB+j6W XoDSd7+RGEtAmp3aJvphw0Jo31nFHkfQ3wopgpPnGAxl8ajoBk1aUByO aSnPKKbft/5smtJyNuW06O9GWukj1w8G6kHL8IxY9oAlnm8KXHRsmYQb MJG8/c/15D9/39o8CEQyLX2tFUbgTpu5Cz87JuMoqtr9TE5O2DPOmZ4h 2U+NZgTpNGpmhExw+GnbzJJ5NiFp4xODeJVCBk7PCGkI7FyYl7ljmLzQ Ll3rSU5qQQFFfMGz7KOkn68bNnDN/iOgpW4S0c1oZD5K6eBuL5fMRDdx 4p4WKQ==
  439. ;; Received 525 bytes from 38.132.106.139#53(38.132.106.139) in 29 ms
  440.  
  441. org. 172800 IN NS d0.org.afilias-nst.org.
  442. org. 172800 IN NS c0.org.afilias-nst.info.
  443. org. 172800 IN NS b0.org.afilias-nst.org.
  444. org. 172800 IN NS b2.org.afilias-nst.org.
  445. org. 172800 IN NS a2.org.afilias-nst.info.
  446. org. 172800 IN NS a0.org.afilias-nst.info.
  447. org. 86400 IN DS 9795 7 1 364DFAB3DAF254CAB477B5675B10766DDAA24982
  448. org. 86400 IN DS 9795 7 2 3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5
  449. org. 86400 IN RRSIG DS 8 1 86400 20190907170000 20190825160000 59944 . byPHXqo8VTHIMgV8Ixu1+wDMZoFZ4GNnWNOHuKosLUVTqEi76jDASioN xQwmincGdxdAkX5QKGVR0rAX7XpEDiZONieAMXzuow/R1NfTodBQPgVY PRQ/LUWn94V4K4KvLZACF6ia9FXuSbsZoA2x4opr79dtcafb3CRIM5Jp TsTVnAhho8hEcLfjeDbGABLxmIMvGCozFlmI8Mja1df54vM2RdOpoM0p XP6Gb4TccNW1Ei2FWL20+GtxSstP+ho3u4X7jBOQOjWLcTxRURDWJIh2 1FkLxDPRsUmnD5uJbkrhOMTTQTV+YvkE5JvJsDvBzTr3mmByZ7Jl9zcq VLDLqw==
  450. ;; Received 820 bytes from 192.36.148.17#53(i.root-servers.net) in 251 ms
  451.  
  452. hizb-australia.org. 86400 IN NS ns2.melbourneit.net.
  453. hizb-australia.org. 86400 IN NS ns4.melbourneit.net.
  454. hizb-australia.org. 86400 IN NS ns1.melbourneit.net.
  455. hizb-australia.org. 86400 IN NS ns3.melbourneit.net.
  456. h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86400 IN NSEC3 1 1 1 D399EAAB H9PARR669T6U8O1GSG9E1LMITK4DEM0T NS SOA RRSIG DNSKEY NSEC3PARAM
  457. h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86400 IN RRSIG NSEC3 7 2 86400 20190916051449 20190826041449 44078 org. fCOWxT4ZLNVGzaez8/gE9A6BGwUghFqViGT5WrW2r1vqluSF7f+9Y8mM q8JcNfEcwXLSPfDkx4Jqpjmz8kBxGqJ9iPSTofy2R3L9anS7JyhSWCyC akAuBe4fZw4+S3SIyWLsCX97GgQotsqSuwt2Jhomv70Hs/XfiEzYXcNs F1o=
  458. 5e9fmjs0v2abi27n7le1ps4a69tkarj5.org. 86400 IN NSEC3 1 1 1 D399EAAB 5E9HC7NUO2OOKFMNQ9TRHQ83PB1IESCD A RRSIG
  459. 5e9fmjs0v2abi27n7le1ps4a69tkarj5.org. 86400 IN RRSIG NSEC3 7 2 86400 20190915152819 20190825142819 44078 org. swskLRx5j0cVK1ktYgb4MOMD3Nhv6/dbCwrhPz9zjFYvFWGTw1Tn5OZN 4cDQY0nA15KSIJIysJXFxwqEk1CrgJOSdl5b2pBxiUPkZ1b01cbrX3F1 5ulzfyr3N4pKVZcNLtlLjfd6fbnOxmmJDzjud03XoFNyyVuvqSEvnffu cW0=
  460. ;; Received 627 bytes from 199.19.54.1#53(b0.org.afilias-nst.org) in 178 ms
  461.  
  462. hizb-australia.org. 3600 IN A 103.9.171.7
  463. ;; Received 63 bytes from 203.55.143.15#53(ns2.melbourneit.net) in 332 ms
  464. ######################################################################################################################################
  465. [*] Performing General Enumeration of Domain: hizb-australia.org
  466. [-] DNSSEC is not configured for hizb-australia.org
  467. [*] SOA ns1.melbourneit.net 203.55.142.15
  468. [*] NS ns3.melbourneit.net 203.55.142.16
  469. [*] NS ns2.melbourneit.net 203.55.143.15
  470. [*] NS ns4.melbourneit.net 203.55.143.16
  471. [*] NS ns1.melbourneit.net 203.55.142.15
  472. [*] MX mail.hizb-australia.org 103.9.171.7
  473. [*] A hizb-australia.org 103.9.171.7
  474. [*] TXT hizb-australia.org google-site-verification=MnTU5iIVYwSSrMZ9y1lrLbF7CentxirkTzv0hI0_qmg
  475. [*] Enumerating SRV Records
  476. [-] No SRV Records Found for hizb-australia.org
  477. [+] 0 Records Found
  478. ######################################################################################################################################
  479. [*] Processing domain hizb-australia.org
  480. [*] Using system resolvers ['38.132.106.139', '194.187.251.67', '185.93.180.131', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
  481. [+] Getting nameservers
  482. 203.55.142.16 - ns3.melbourneit.net
  483. 203.55.143.15 - ns2.melbourneit.net
  484. 203.55.143.16 - ns4.melbourneit.net
  485. 203.55.142.15 - ns1.melbourneit.net
  486. [-] Zone transfer failed
  487.  
  488. [+] TXT records found
  489. "google-site-verification=MnTU5iIVYwSSrMZ9y1lrLbF7CentxirkTzv0hI0_qmg"
  490.  
  491. [+] MX records found, added to target list
  492. 10 mail.hizb-australia.org.
  493.  
  494. [*] Scanning hizb-australia.org for A records
  495. 103.9.171.7 - hizb-australia.org
  496. 103.9.171.7 - admin.hizb-australia.org
  497. 103.9.171.7 - ftp.hizb-australia.org
  498. 103.9.171.7 - mail.hizb-australia.org
  499. 103.9.171.7 - wp.hizb-australia.org
  500. 103.9.171.7 - www.hizb-australia.org
  501. 103.9.171.7 - www2.hizb-australia.org
  502. ######################################################################################################################################
  503.  
  504.  
  505.  
  506. AVAILABLE PLUGINS
  507. -----------------
  508.  
  509. SessionRenegotiationPlugin
  510. HeartbleedPlugin
  511. SessionResumptionPlugin
  512. CompressionPlugin
  513. HttpHeadersPlugin
  514. OpenSslCipherSuitesPlugin
  515. RobotPlugin
  516. EarlyDataPlugin
  517. FallbackScsvPlugin
  518. CertificateInfoPlugin
  519. OpenSslCcsInjectionPlugin
  520.  
  521.  
  522.  
  523. CHECKING HOST(S) AVAILABILITY
  524. -----------------------------
  525.  
  526. 103.9.171.7:443 => 103.9.171.7
  527.  
  528.  
  529.  
  530.  
  531. SCAN RESULTS FOR 103.9.171.7:443 - 103.9.171.7
  532. ----------------------------------------------
  533.  
  534. * OpenSSL CCS Injection:
  535. OK - Not vulnerable to OpenSSL CCS injection
  536.  
  537. * Session Renegotiation:
  538. Unhandled exception while running --reneg:
  539. timeout - timed out
  540.  
  541. * TLS 1.2 Session Resumption Support:
  542. With Session IDs: PARTIALLY SUPPORTED (1 successful, 0 failed, 4 errors, 5 total attempts).
  543. ERROR #0: timeout - timed out
  544. ERROR #1: timeout - timed out
  545. ERROR #2: timeout - timed out
  546. ERROR #3: timeout - timed out
  547. With TLS Tickets: ERROR: timeout - timed out
  548.  
  549. * OpenSSL Heartbleed:
  550. OK - Not vulnerable to Heartbleed
  551.  
  552. * SSLV2 Cipher Suites:
  553. Server rejected all cipher suites.
  554. Undefined - An unexpected error happened:
  555. SSL_CK_RC4_128_WITH_MD5 timeout - timed out
  556. SSL_CK_RC4_128_EXPORT40_WITH_MD5 timeout - timed out
  557. SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5 timeout - timed out
  558. SSL_CK_DES_64_CBC_WITH_MD5 timeout - timed out
  559. SSL_CK_DES_192_EDE3_CBC_WITH_MD5 timeout - timed out
  560.  
  561. * Deflate Compression:
  562. Unhandled exception while running --compression:
  563. timeout - timed out
  564.  
  565. * TLSV1_3 Cipher Suites:
  566. Forward Secrecy OK - Supported
  567. RC4 OK - Not Supported
  568.  
  569. Preferred:
  570. None - Server followed client cipher suite preference.
  571. Accepted:
  572. TLS_AES_256_GCM_SHA384 256 bits HTTP 200 OK
  573. Undefined - An unexpected error happened:
  574. TLS_CHACHA20_POLY1305_SHA256 timeout - timed out
  575. TLS_AES_128_GCM_SHA256 timeout - timed out
  576. TLS_AES_128_CCM_SHA256 timeout - timed out
  577. TLS_AES_128_CCM_8_SHA256 timeout - timed out
  578.  
  579. * Certificate Information:
  580. Content
  581. SHA1 Fingerprint: cbd8b6c85b5a64b3d622c41a19c54fddb206906d
  582. Common Name: *.hosting-services.net.au
  583. Issuer: Trustwave Organization Validation SHA256 CA, Level 1
  584. Serial Number: 150452867755570677297683224193688107700926473
  585. Not Before: 2017-09-04 06:37:57
  586. Not After: 2020-10-26 12:37:57
  587. Signature Algorithm: sha256
  588. Public Key Algorithm: RSA
  589. Key Size: 2048
  590. Exponent: 65537 (0x10001)
  591. DNS Subject Alternative Names: ['*.hosting-services.net.au', 'hosting-services.net.au']
  592.  
  593. Trust
  594. Hostname Validation: FAILED - Certificate does NOT match 103.9.171.7
  595. Android CA Store (9.0.0_r9): FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
  596. Apple CA Store (iOS 12, macOS 10.14, watchOS 5, and tvOS 12):FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
  597. Java CA Store (jdk-12.0.1): FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
  598. Mozilla CA Store (2019-03-14): ERROR: timeout - timed out
  599. Windows CA Store (2019-05-27): ERROR: timeout - timed out
  600. Symantec 2018 Deprecation: OK - Not a Symantec-issued certificate
  601. Received Chain: *.hosting-services.net.au
  602. Verified Chain: ERROR - Could not build verified chain (certificate untrusted?)
  603. Received Chain Contains Anchor: ERROR - Could not build verified chain (certificate untrusted?)
  604. Received Chain Order: OK - Order is valid
  605. Verified Chain contains SHA1: ERROR - Could not build verified chain (certificate untrusted?)
  606.  
  607. Extensions
  608. OCSP Must-Staple: NOT SUPPORTED - Extension not found
  609. Certificate Transparency: NOT SUPPORTED - Extension not found
  610.  
  611. OCSP Stapling
  612. NOT SUPPORTED - Server did not send back an OCSP response
  613.  
  614. * ROBOT Attack:
  615. UNKNOWN - Received inconsistent results
  616.  
  617. * SSLV3 Cipher Suites:
  618. Server rejected all cipher suites.
  619. Undefined - An unexpected error happened:
  620. TLS_RSA_WITH_SEED_CBC_SHA timeout - timed out
  621. TLS_RSA_WITH_RC4_128_SHA timeout - timed out
  622. TLS_RSA_WITH_NULL_SHA256 timeout - timed out
  623. TLS_RSA_WITH_NULL_MD5 timeout - timed out
  624. TLS_RSA_WITH_DES_CBC_SHA timeout - timed out
  625. TLS_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  626. TLS_RSA_WITH_AES_256_CBC_SHA256 timeout - timed out
  627. TLS_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  628. TLS_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  629. TLS_RSA_WITH_AES_128_CBC_SHA timeout - timed out
  630. TLS_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  631. TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 timeout - timed out
  632. TLS_RSA_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  633. TLS_ECDH_anon_WITH_RC4_128_SHA timeout - timed out
  634. TLS_ECDH_anon_WITH_NULL_SHA timeout - timed out
  635. TLS_ECDH_anon_WITH_AES_256_CBC_SHA timeout - timed out
  636. TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA timeout - timed out
  637. TLS_ECDH_RSA_WITH_RC4_128_SHA timeout - timed out
  638. TLS_ECDH_RSA_WITH_NULL_SHA timeout - timed out
  639. TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  640. TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  641. TLS_ECDH_RSA_WITH_AES_128_CBC_SHA timeout - timed out
  642. TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  643. TLS_ECDH_ECDSA_WITH_RC4_128_SHA timeout - timed out
  644. TLS_ECDH_ECDSA_WITH_NULL_SHA timeout - timed out
  645. TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  646. TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA timeout - timed out
  647. TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  648. TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  649. TLS_ECDHE_RSA_WITH_RC4_128_SHA timeout - timed out
  650. TLS_ECDHE_RSA_WITH_NULL_SHA timeout - timed out
  651. TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  652. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 timeout - timed out
  653. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  654. TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  655. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  656. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA timeout - timed out
  657. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  658. TLS_ECDHE_ECDSA_WITH_RC4_128_SHA timeout - timed out
  659. TLS_ECDHE_ECDSA_WITH_NULL_SHA timeout - timed out
  660. TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 timeout - timed out
  661. TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA timeout - timed out
  662. TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  663. TLS_DH_anon_WITH_SEED_CBC_SHA timeout - timed out
  664. TLS_DH_anon_WITH_RC4_128_MD5 timeout - timed out
  665. TLS_DH_anon_WITH_DES_CBC_SHA timeout - timed out
  666. TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  667. TLS_DH_anon_WITH_AES_256_GCM_SHA384 timeout - timed out
  668. TLS_DH_anon_WITH_AES_128_CBC_SHA256 timeout - timed out
  669. TLS_DH_anon_WITH_AES_128_CBC_SHA timeout - timed out
  670. TLS_DH_anon_WITH_3DES_EDE_CBC_SHA timeout - timed out
  671. TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 timeout - timed out
  672. TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  673. TLS_DH_RSA_WITH_SEED_CBC_SHA timeout - timed out
  674. TLS_DH_RSA_WITH_DES_CBC_SHA timeout - timed out
  675. TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  676. TLS_DH_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  677. TLS_DH_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  678. TLS_DH_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  679. TLS_DH_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  680. TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  681. TLS_DH_DSS_WITH_DES_CBC_SHA timeout - timed out
  682. TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  683. TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  684. TLS_DH_DSS_WITH_AES_256_GCM_SHA384 timeout - timed out
  685. TLS_DH_DSS_WITH_AES_256_CBC_SHA256 timeout - timed out
  686. TLS_DH_DSS_WITH_AES_256_CBC_SHA timeout - timed out
  687. TLS_DH_DSS_WITH_AES_128_GCM_SHA256 timeout - timed out
  688. TLS_DH_DSS_WITH_AES_128_CBC_SHA256 timeout - timed out
  689. TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA timeout - timed out
  690. TLS_DHE_RSA_WITH_SEED_CBC_SHA timeout - timed out
  691. TLS_DHE_RSA_WITH_DES_CBC_SHA timeout - timed out
  692. TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  693. TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  694. TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  695. TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  696. TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  697. TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  698. TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  699. TLS_DHE_DSS_WITH_SEED_CBC_SHA timeout - timed out
  700. TLS_DHE_DSS_WITH_DES_CBC_SHA timeout - timed out
  701. TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  702. TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  703. TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 timeout - timed out
  704. TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA timeout - timed out
  705. TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  706.  
  707. * TLSV1_2 Cipher Suites:
  708. Unhandled exception while running --tlsv1_2:
  709. timeout - timed out
  710.  
  711. * Downgrade Attacks:
  712. Unhandled exception while running --fallback:
  713. timeout - timed out
  714.  
  715. * TLSV1_1 Cipher Suites:
  716. Forward Secrecy OK - Supported
  717. RC4 OK - Not Supported
  718.  
  719. Preferred:
  720. None - Server followed client cipher suite preference.
  721. Accepted:
  722. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  723. Undefined - An unexpected error happened:
  724. TLS_RSA_WITH_SEED_CBC_SHA timeout - timed out
  725. TLS_RSA_WITH_RC4_128_SHA timeout - timed out
  726. TLS_RSA_WITH_RC4_128_MD5 timeout - timed out
  727. TLS_RSA_WITH_NULL_SHA256 timeout - timed out
  728. TLS_RSA_WITH_NULL_SHA timeout - timed out
  729. TLS_RSA_WITH_NULL_MD5 timeout - timed out
  730. TLS_RSA_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  731. TLS_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  732. TLS_RSA_WITH_AES_256_CBC_SHA256 timeout - timed out
  733. TLS_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  734. TLS_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  735. TLS_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  736. TLS_RSA_WITH_AES_128_CBC_SHA timeout - timed out
  737. TLS_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  738. TLS_RSA_EXPORT_WITH_RC4_40_MD5 timeout - timed out
  739. TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5 timeout - timed out
  740. TLS_RSA_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  741. TLS_ECDH_anon_WITH_RC4_128_SHA timeout - timed out
  742. TLS_ECDH_anon_WITH_NULL_SHA timeout - timed out
  743. TLS_ECDH_anon_WITH_AES_256_CBC_SHA timeout - timed out
  744. TLS_ECDH_anon_WITH_AES_128_CBC_SHA timeout - timed out
  745. TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA timeout - timed out
  746. TLS_ECDH_RSA_WITH_RC4_128_SHA timeout - timed out
  747. TLS_ECDH_RSA_WITH_NULL_SHA timeout - timed out
  748. TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  749. TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 timeout - timed out
  750. TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  751. TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  752. TLS_ECDH_RSA_WITH_AES_128_CBC_SHA timeout - timed out
  753. TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  754. TLS_ECDH_ECDSA_WITH_RC4_128_SHA timeout - timed out
  755. TLS_ECDH_ECDSA_WITH_NULL_SHA timeout - timed out
  756. TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  757. TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA timeout - timed out
  758. TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  759. TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA timeout - timed out
  760. TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  761. TLS_ECDHE_RSA_WITH_NULL_SHA timeout - timed out
  762. TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  763. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 timeout - timed out
  764. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  765. TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  766. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  767. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  768. TLS_ECDHE_ECDSA_WITH_RC4_128_SHA timeout - timed out
  769. TLS_ECDHE_ECDSA_WITH_NULL_SHA timeout - timed out
  770. TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  771. TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 timeout - timed out
  772. TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA timeout - timed out
  773. TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  774. TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  775. TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  776. TLS_DH_anon_WITH_RC4_128_MD5 timeout - timed out
  777. TLS_DH_anon_WITH_DES_CBC_SHA timeout - timed out
  778. TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  779. TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  780. TLS_DH_anon_WITH_AES_256_GCM_SHA384 timeout - timed out
  781. TLS_DH_anon_WITH_AES_256_CBC_SHA256 timeout - timed out
  782. TLS_DH_anon_WITH_AES_256_CBC_SHA timeout - timed out
  783. TLS_DH_anon_WITH_AES_128_GCM_SHA256 timeout - timed out
  784. TLS_DH_anon_WITH_3DES_EDE_CBC_SHA timeout - timed out
  785. TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 timeout - timed out
  786. TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  787. TLS_DH_RSA_WITH_SEED_CBC_SHA timeout - timed out
  788. TLS_DH_RSA_WITH_DES_CBC_SHA timeout - timed out
  789. TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  790. TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  791. TLS_DH_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  792. TLS_DH_RSA_WITH_AES_256_CBC_SHA256 timeout - timed out
  793. TLS_DH_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  794. TLS_DH_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  795. TLS_DH_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  796. TLS_DH_RSA_WITH_AES_128_CBC_SHA timeout - timed out
  797. TLS_DH_DSS_WITH_SEED_CBC_SHA timeout - timed out
  798. TLS_DH_DSS_WITH_DES_CBC_SHA timeout - timed out
  799. TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  800. TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  801. TLS_DH_DSS_WITH_AES_256_GCM_SHA384 timeout - timed out
  802. TLS_DH_DSS_WITH_AES_256_CBC_SHA256 timeout - timed out
  803. TLS_DH_DSS_WITH_AES_256_CBC_SHA timeout - timed out
  804. TLS_DH_DSS_WITH_AES_128_GCM_SHA256 timeout - timed out
  805. TLS_DH_DSS_WITH_AES_128_CBC_SHA256 timeout - timed out
  806. TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA timeout - timed out
  807. TLS_DHE_RSA_WITH_SEED_CBC_SHA timeout - timed out
  808. TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  809. TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  810. TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 timeout - timed out
  811. TLS_DHE_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  812. TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  813. TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  814. TLS_DHE_RSA_WITH_AES_128_CBC_SHA timeout - timed out
  815. TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  816. TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  817. TLS_DHE_DSS_WITH_SEED_CBC_SHA timeout - timed out
  818. TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  819. TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  820. TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 timeout - timed out
  821. TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 timeout - timed out
  822. TLS_DHE_DSS_WITH_AES_256_CBC_SHA timeout - timed out
  823. TLS_DHE_DSS_WITH_AES_128_GCM_SHA256 timeout - timed out
  824. TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 timeout - timed out
  825. TLS_DHE_DSS_WITH_AES_128_CBC_SHA timeout - timed out
  826. TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA timeout - timed out
  827. TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  828.  
  829. * TLSV1 Cipher Suites:
  830. Forward Secrecy OK - Supported
  831. RC4 OK - Not Supported
  832.  
  833. Preferred:
  834. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  835. Accepted:
  836. TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  837. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  838. Undefined - An unexpected error happened:
  839. TLS_RSA_WITH_SEED_CBC_SHA timeout - timed out
  840. TLS_RSA_WITH_RC4_128_SHA timeout - timed out
  841. TLS_RSA_WITH_RC4_128_MD5 timeout - timed out
  842. TLS_RSA_WITH_NULL_SHA256 timeout - timed out
  843. TLS_RSA_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  844. TLS_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  845. TLS_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  846. TLS_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  847. TLS_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  848. TLS_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  849. TLS_RSA_EXPORT_WITH_RC4_40_MD5 timeout - timed out
  850. TLS_RSA_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  851. TLS_ECDH_anon_WITH_RC4_128_SHA timeout - timed out
  852. TLS_ECDH_anon_WITH_AES_256_CBC_SHA timeout - timed out
  853. TLS_ECDH_RSA_WITH_NULL_SHA timeout - timed out
  854. TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  855. TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 timeout - timed out
  856. TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  857. TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  858. TLS_ECDH_RSA_WITH_AES_128_CBC_SHA timeout - timed out
  859. TLS_ECDH_ECDSA_WITH_RC4_128_SHA timeout - timed out
  860. TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  861. TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA timeout - timed out
  862. TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  863. TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  864. TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA timeout - timed out
  865. TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  866. TLS_ECDHE_RSA_WITH_RC4_128_SHA timeout - timed out
  867. TLS_ECDHE_RSA_WITH_NULL_SHA timeout - timed out
  868. TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  869. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 timeout - timed out
  870. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  871. TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  872. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  873. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  874. TLS_ECDHE_ECDSA_WITH_RC4_128_SHA timeout - timed out
  875. TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  876. TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA timeout - timed out
  877. TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  878. TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 timeout - timed out
  879. TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA timeout - timed out
  880. TLS_DH_anon_WITH_SEED_CBC_SHA timeout - timed out
  881. TLS_DH_anon_WITH_RC4_128_MD5 timeout - timed out
  882. TLS_DH_anon_WITH_DES_CBC_SHA timeout - timed out
  883. TLS_DH_anon_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  884. TLS_DH_anon_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  885. TLS_DH_anon_WITH_AES_256_GCM_SHA384 timeout - timed out
  886. TLS_DH_anon_WITH_AES_256_CBC_SHA256 timeout - timed out
  887. TLS_DH_anon_WITH_AES_128_GCM_SHA256 timeout - timed out
  888. TLS_DH_anon_WITH_AES_128_CBC_SHA256 timeout - timed out
  889. TLS_DH_anon_WITH_AES_128_CBC_SHA timeout - timed out
  890. TLS_DH_anon_WITH_3DES_EDE_CBC_SHA timeout - timed out
  891. TLS_DH_RSA_WITH_SEED_CBC_SHA timeout - timed out
  892. TLS_DH_RSA_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  893. TLS_DH_RSA_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  894. TLS_DH_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  895. TLS_DH_RSA_WITH_AES_256_CBC_SHA256 timeout - timed out
  896. TLS_DH_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  897. TLS_DH_RSA_WITH_AES_128_GCM_SHA256 timeout - timed out
  898. TLS_DH_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  899. TLS_DH_DSS_WITH_SEED_CBC_SHA timeout - timed out
  900. TLS_DH_DSS_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  901. TLS_DH_DSS_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  902. TLS_DH_DSS_WITH_AES_256_GCM_SHA384 timeout - timed out
  903. TLS_DH_DSS_WITH_AES_256_CBC_SHA256 timeout - timed out
  904. TLS_DH_DSS_WITH_AES_256_CBC_SHA timeout - timed out
  905. TLS_DH_DSS_WITH_AES_128_GCM_SHA256 timeout - timed out
  906. TLS_DH_DSS_WITH_AES_128_CBC_SHA256 timeout - timed out
  907. TLS_DH_DSS_WITH_AES_128_CBC_SHA timeout - timed out
  908. TLS_DH_DSS_WITH_3DES_EDE_CBC_SHA timeout - timed out
  909. TLS_DHE_RSA_WITH_SEED_CBC_SHA timeout - timed out
  910. TLS_DHE_RSA_WITH_DES_CBC_SHA timeout - timed out
  911. TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  912. TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  913. TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 timeout - timed out
  914. TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 timeout - timed out
  915. TLS_DHE_RSA_WITH_AES_256_CBC_SHA timeout - timed out
  916. TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA timeout - timed out
  917. TLS_DHE_DSS_WITH_SEED_CBC_SHA timeout - timed out
  918. TLS_DHE_DSS_WITH_DES_CBC_SHA timeout - timed out
  919. TLS_DHE_DSS_WITH_CAMELLIA_256_CBC_SHA timeout - timed out
  920. TLS_DHE_DSS_WITH_CAMELLIA_128_CBC_SHA timeout - timed out
  921. TLS_DHE_DSS_WITH_AES_256_GCM_SHA384 timeout - timed out
  922. TLS_DHE_DSS_WITH_AES_256_CBC_SHA256 timeout - timed out
  923. TLS_DHE_DSS_WITH_AES_256_CBC_SHA timeout - timed out
  924. TLS_DHE_DSS_WITH_AES_128_CBC_SHA256 timeout - timed out
  925. TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA timeout - timed out
  926.  
  927.  
  928. SCAN COMPLETED IN 314.31 S
  929. --------------------------
  930. ######################################################################################################################################
  931.  
  932. Domains still to check: 1
  933. Checking if the hostname hizb-australia.org. given is in fact a domain...
  934.  
  935. Analyzing domain: hizb-australia.org.
  936. Checking NameServers using system default resolver...
  937. IP: 203.55.142.16 (Australia)
  938. HostName: ns3.melbourneit.net Type: NS
  939. HostName: ns3.melbourneit.net Type: PTR
  940. IP: 203.55.143.15 (Australia)
  941. HostName: ns2.melbourneit.net Type: NS
  942. HostName: ns2.melbourneit.net Type: PTR
  943. IP: 203.55.143.16 (Australia)
  944. HostName: ns4.melbourneit.net Type: NS
  945. HostName: ns4.melbourneit.net Type: PTR
  946. IP: 203.55.142.15 (Australia)
  947. HostName: ns1.melbourneit.net Type: NS
  948. HostName: ns1.melbourneit.net Type: PTR
  949.  
  950. Checking MailServers using system default resolver...
  951. IP: 103.9.171.7 (Australia)
  952. HostName: mail.hizb-australia.org Type: MX
  953. HostName: c5s1-2e-syd.hosting-services.net.au Type: PTR
  954.  
  955. Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
  956. No zone transfer found on nameserver 203.55.142.16
  957. No zone transfer found on nameserver 203.55.142.15
  958. No zone transfer found on nameserver 203.55.143.15
  959. No zone transfer found on nameserver 203.55.143.16
  960.  
  961. Checking SPF record...
  962.  
  963. Checking 192 most common hostnames using system default resolver...
  964. IP: 103.9.171.7 (Australia)
  965. HostName: mail.hizb-australia.org Type: MX
  966. HostName: c5s1-2e-syd.hosting-services.net.au Type: PTR
  967. HostName: www.hizb-australia.org. Type: A
  968. IP: 103.9.171.7 (Australia)
  969. HostName: mail.hizb-australia.org Type: MX
  970. HostName: c5s1-2e-syd.hosting-services.net.au Type: PTR
  971. HostName: www.hizb-australia.org. Type: A
  972. HostName: ftp.hizb-australia.org. Type: A
  973. IP: 103.9.171.7 (Australia)
  974. HostName: mail.hizb-australia.org Type: MX
  975. HostName: c5s1-2e-syd.hosting-services.net.au Type: PTR
  976. HostName: www.hizb-australia.org. Type: A
  977. HostName: ftp.hizb-australia.org. Type: A
  978. HostName: mail.hizb-australia.org. Type: A
  979. IP: 103.9.171.7 (Australia)
  980. HostName: mail.hizb-australia.org Type: MX
  981. HostName: c5s1-2e-syd.hosting-services.net.au Type: PTR
  982. HostName: www.hizb-australia.org. Type: A
  983. HostName: ftp.hizb-australia.org. Type: A
  984. HostName: mail.hizb-australia.org. Type: A
  985. HostName: www2.hizb-australia.org. Type: A
  986.  
  987. Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
  988. Checking netblock 203.55.142.0
  989. Checking netblock 103.9.171.0
  990. Checking netblock 203.55.143.0
  991.  
  992. Searching for hizb-australia.org. emails in Google
  993. [email protected]
  994. [email protected].
  995. [email protected]&
  996.  
  997. Checking 5 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
  998. Host 203.55.142.16 is up (reset ttl 64)
  999. Host 103.9.171.7 is up (reset ttl 64)
  1000. Host 203.55.142.15 is up (reset ttl 64)
  1001. Host 203.55.143.15 is up (reset ttl 64)
  1002. Host 203.55.143.16 is up (reset ttl 64)
  1003.  
  1004. Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
  1005. Scanning ip 203.55.142.16 (ns3.melbourneit.net (PTR)):
  1006. 22/tcp open ssh syn-ack ttl 52 OpenSSH 6.6.1p1 Debian 4~bpo70+1 (protocol 2.0)
  1007. | ssh-hostkey:
  1008. | 1024 21:ec:2e:fa:a6:00:09:2c:16:04:5a:a8:97:f0:cf:5a (DSA)
  1009. | 2048 77:f6:5b:2f:ce:d1:c7:69:98:8b:41:3e:54:02:39:05 (RSA)
  1010. |_ 256 ed:ca:b9:19:6d:c0:2d:39:b2:83:2e:50:a1:af:27:d9 (ECDSA)
  1011. 53/tcp open domain? syn-ack ttl 52
  1012. | fingerprint-strings:
  1013. | DNSVersionBindReqTCP:
  1014. | version
  1015. |_ bind
  1016. 111/tcp open rpcbind syn-ack ttl 52 2-4 (RPC #100000)
  1017. | rpcinfo:
  1018. | program version port/proto service
  1019. | 100000 2,3,4 111/tcp rpcbind
  1020. | 100000 2,3,4 111/udp rpcbind
  1021. | 100000 3,4 111/tcp6 rpcbind
  1022. | 100000 3,4 111/udp6 rpcbind
  1023. | 100024 1 34513/tcp status
  1024. | 100024 1 40563/udp6 status
  1025. | 100024 1 43612/udp status
  1026. |_ 100024 1 60400/tcp6 status
  1027. 179/tcp open tcpwrapped syn-ack ttl 243
  1028. 5432/tcp open postgresql syn-ack ttl 52 PostgreSQL DB 9.1.15 - 9.1.18
  1029. |_ssl-date: 2019-08-26T05:23:34+00:00; +4s from scanner time.
  1030. 9100/tcp open jetdirect? syn-ack ttl 52
  1031. OS Info: Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
  1032. Scanning ip 103.9.171.7 (www2.hizb-australia.org.):
  1033. 21/tcp open ftp? syn-ack ttl 50
  1034. | fingerprint-strings:
  1035. | GenericLines, GetRequest, HTTPOptions, Help, NULL, RTSPRequest:
  1036. | Your connection to this server has been blocked in this server's firewall.
  1037. | need to contact the server owner or hosting provider for further information.
  1038. | Your blocked IP address is: 176.113.74.69
  1039. |_ This server's hostname is: c5s1-2e-syd.hosting-services.net.au
  1040. |_ftp-bounce: ERROR: Script execution failed (use -d to debug)
  1041. 53/tcp open domain syn-ack ttl 50 ISC BIND 9.8.2rc1 (RedHat Enterprise Linux 6)
  1042. | dns-nsid:
  1043. |_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.3
  1044. 80/tcp open http syn-ack ttl 50 LiteSpeed httpd
  1045. |_http-server-header: LiteSpeed
  1046. |_http-title: 403 Forbidden
  1047. 110/tcp open pop3 syn-ack ttl 50 Dovecot pop3d
  1048. |_pop3-capabilities: STLS UIDL AUTH-RESP-CODE USER SASL(PLAIN LOGIN) RESP-CODES TOP PIPELINING CAPA
  1049. |_ssl-date: 2019-08-26T05:25:00+00:00; +3s from scanner time.
  1050. 143/tcp open imap syn-ack ttl 50 Dovecot imapd
  1051. |_imap-capabilities: capabilities AUTH=LOGINA0001 Pre-login IDLE LITERAL+ ENABLE listed STARTTLS have NAMESPACE SASL-IR AUTH=PLAIN IMAP4rev1 OK ID post-login more LOGIN-REFERRALS
  1052. |_ssl-date: 2019-08-26T05:25:00+00:00; +3s from scanner time.
  1053. 443/tcp open tcpwrapped syn-ack ttl 50
  1054. |_http-title: Did not follow redirect to https://103.9.171.7/
  1055. | ssl-cert: Subject: commonName=*.hosting-services.net.au/organizationName=VentraIP Australia Pty Ltd/stateOrProvinceName=Victoria/countryName=AU
  1056. | Subject Alternative Name: DNS:*.hosting-services.net.au, DNS:hosting-services.net.au
  1057. | Issuer: commonName=Trustwave Organization Validation SHA256 CA, Level 1/organizationName=Trustwave Holdings, Inc./stateOrProvinceName=Illinois/countryName=US
  1058. | Public Key type: rsa
  1059. | Public Key bits: 2048
  1060. | Signature Algorithm: sha256WithRSAEncryption
  1061. | Not valid before: 2017-09-04T06:37:57
  1062. | Not valid after: 2020-10-26T12:37:57
  1063. | MD5: f981 d482 a597 a38c b44a 3ddc bd09 cf35
  1064. |_SHA-1: cbd8 b6c8 5b5a 64b3 d622 c41a 19c5 4fdd b206 906d
  1065. |_ssl-date: 2019-08-26T05:24:58+00:00; +3s from scanner time.
  1066. | tls-alpn:
  1067. | h2
  1068. | spdy/3
  1069. | spdy/2
  1070. |_ http/1.1
  1071. 465/tcp open ssl/smtp syn-ack ttl 50 Exim smtpd 4.92
  1072. |_smtp-commands: Couldn't establish connection on port 465
  1073. | ssl-cert: Subject: commonName=*.hosting-services.net.au/organizationName=VentraIP Australia Pty Ltd/stateOrProvinceName=Victoria/countryName=AU
  1074. | Subject Alternative Name: DNS:*.hosting-services.net.au, DNS:hosting-services.net.au
  1075. | Issuer: commonName=Trustwave Organization Validation SHA256 CA, Level 1/organizationName=Trustwave Holdings, Inc./stateOrProvinceName=Illinois/countryName=US
  1076. | Public Key type: rsa
  1077. | Public Key bits: 2048
  1078. | Signature Algorithm: sha256WithRSAEncryption
  1079. | Not valid before: 2017-09-04T06:37:57
  1080. | Not valid after: 2020-10-26T12:37:57
  1081. | MD5: f981 d482 a597 a38c b44a 3ddc bd09 cf35
  1082. |_SHA-1: cbd8 b6c8 5b5a 64b3 d622 c41a 19c5 4fdd b206 906d
  1083. |_ssl-date: 2019-08-26T05:24:58+00:00; +3s from scanner time.
  1084. 587/tcp open smtp syn-ack ttl 50 Exim smtpd 4.92
  1085. | smtp-commands: c5s1-2e-syd.hosting-services.net.au Hello nmap.scanme.org [176.113.74.69], SIZE 52428800, 8BITMIME, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP,
  1086. |_ Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA BDAT NOOP QUIT RSET HELP
  1087. | ssl-cert: Subject: commonName=*.hosting-services.net.au/organizationName=VentraIP Australia Pty Ltd/stateOrProvinceName=Victoria/countryName=AU
  1088. | Subject Alternative Name: DNS:*.hosting-services.net.au, DNS:hosting-services.net.au
  1089. | Issuer: commonName=Trustwave Organization Validation SHA256 CA, Level 1/organizationName=Trustwave Holdings, Inc./stateOrProvinceName=Illinois/countryName=US
  1090. | Public Key type: rsa
  1091. | Public Key bits: 2048
  1092. | Signature Algorithm: sha256WithRSAEncryption
  1093. | Not valid before: 2017-09-04T06:37:57
  1094. | Not valid after: 2020-10-26T12:37:57
  1095. | MD5: f981 d482 a597 a38c b44a 3ddc bd09 cf35
  1096. |_SHA-1: cbd8 b6c8 5b5a 64b3 d622 c41a 19c5 4fdd b206 906d
  1097. |_ssl-date: 2019-08-26T05:25:03+00:00; +3s from scanner time.
  1098. 993/tcp open ssl/imaps? syn-ack ttl 50
  1099. |_ssl-date: 2019-08-26T05:24:58+00:00; +3s from scanner time.
  1100. 995/tcp open ssl/pop3s? syn-ack ttl 50
  1101. |_ssl-date: 2019-08-26T05:24:58+00:00; +3s from scanner time.
  1102. 8888/tcp open http syn-ack ttl 50 LiteSpeed httpd
  1103. OS Info: Service Info: Host: c5s1-2e-syd.hosting-services.net.au; OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:6
  1104. Scanning ip 203.55.142.15 (ns1.melbourneit.net (PTR)):
  1105. NSOCK ERROR [66.7140s] mksock_bind_addr(): Bind to 0.0.0.0:53 failed (IOD #26): Address already in use (98)
  1106. 22/tcp open ssh syn-ack ttl 52 OpenSSH 6.6.1p1 Debian 4~bpo70+1 (protocol 2.0)
  1107. | ssh-hostkey:
  1108. | 1024 21:ec:2e:fa:a6:00:09:2c:16:04:5a:a8:97:f0:cf:5a (DSA)
  1109. | 2048 77:f6:5b:2f:ce:d1:c7:69:98:8b:41:3e:54:02:39:05 (RSA)
  1110. |_ 256 ed:ca:b9:19:6d:c0:2d:39:b2:83:2e:50:a1:af:27:d9 (ECDSA)
  1111. 53/tcp open domain? syn-ack ttl 52
  1112. | fingerprint-strings:
  1113. | DNSVersionBindReqTCP:
  1114. | version
  1115. |_ bind
  1116. 111/tcp open rpcbind syn-ack ttl 52 2-4 (RPC #100000)
  1117. | rpcinfo:
  1118. | program version port/proto service
  1119. | 100000 2,3,4 111/tcp rpcbind
  1120. | 100000 2,3,4 111/udp rpcbind
  1121. | 100000 3,4 111/tcp6 rpcbind
  1122. | 100000 3,4 111/udp6 rpcbind
  1123. | 100024 1 34513/tcp status
  1124. | 100024 1 40563/udp6 status
  1125. | 100024 1 43612/udp status
  1126. |_ 100024 1 60400/tcp6 status
  1127. 179/tcp open tcpwrapped syn-ack ttl 243
  1128. 5432/tcp open postgresql syn-ack ttl 52 PostgreSQL DB 9.1.15 - 9.1.18
  1129. |_ssl-date: 2019-08-26T05:28:25+00:00; +3s from scanner time.
  1130. 9100/tcp open jetdirect? syn-ack ttl 52
  1131. OS Info: Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
  1132. Scanning ip 203.55.143.15 (ns2.melbourneit.net (PTR)):
  1133. 22/tcp open ssh syn-ack ttl 52 OpenSSH 6.6.1p1 Debian 4~bpo70+1 (protocol 2.0)
  1134. | ssh-hostkey:
  1135. | 1024 21:ec:2e:fa:a6:00:09:2c:16:04:5a:a8:97:f0:cf:5a (DSA)
  1136. | 2048 77:f6:5b:2f:ce:d1:c7:69:98:8b:41:3e:54:02:39:05 (RSA)
  1137. |_ 256 e5:76:18:eb:f0:14:d4:bf:2b:a5:8e:4f:4d:4f:8f:44 (ECDSA)
  1138. 53/tcp open domain? syn-ack ttl 52
  1139. | fingerprint-strings:
  1140. | DNSVersionBindReqTCP:
  1141. | version
  1142. |_ bind
  1143. 111/tcp open rpcbind syn-ack ttl 52 2-4 (RPC #100000)
  1144. | rpcinfo:
  1145. | program version port/proto service
  1146. | 100000 2,3,4 111/tcp rpcbind
  1147. | 100000 2,3,4 111/udp rpcbind
  1148. | 100000 3,4 111/tcp6 rpcbind
  1149. | 100000 3,4 111/udp6 rpcbind
  1150. | 100024 1 38887/tcp status
  1151. | 100024 1 38951/tcp6 status
  1152. | 100024 1 44742/udp6 status
  1153. |_ 100024 1 54763/udp status
  1154. 179/tcp open tcpwrapped syn-ack ttl 243
  1155. 5432/tcp open postgresql syn-ack ttl 52 PostgreSQL DB 9.1.15 - 9.1.18
  1156. |_ssl-date: 2019-08-26T05:29:46+00:00; +3s from scanner time.
  1157. 9100/tcp open jetdirect? syn-ack ttl 52
  1158. OS Info: Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
  1159. Scanning ip 203.55.143.16 (ns4.melbourneit.net (PTR)):
  1160. WebCrawling domain's web servers... up to 50 max links.
  1161.  
  1162. + URL to crawl: http://www2.hizb-australia.org.
  1163. + Date: 2019-08-26
  1164.  
  1165. + Crawling URL: http://www2.hizb-australia.org.:
  1166. + Links:
  1167. + Crawling http://www2.hizb-australia.org.
  1168. + Searching for directories...
  1169. + Searching open folders...
  1170.  
  1171.  
  1172. + URL to crawl: http://mail.hizb-australia.org.
  1173. + Date: 2019-08-26
  1174.  
  1175. + Crawling URL: http://mail.hizb-australia.org.:
  1176. + Links:
  1177. + Crawling http://mail.hizb-australia.org.
  1178. + Searching for directories...
  1179. + Searching open folders...
  1180.  
  1181.  
  1182. + URL to crawl: http://www.hizb-australia.org.
  1183. + Date: 2019-08-26
  1184.  
  1185. + Crawling URL: http://www.hizb-australia.org.:
  1186. + Links:
  1187. + Crawling http://www.hizb-australia.org.
  1188. + Searching for directories...
  1189. + Searching open folders...
  1190.  
  1191.  
  1192. + URL to crawl: http://mail.hizb-australia.org
  1193. + Date: 2019-08-26
  1194.  
  1195. + Crawling URL: http://mail.hizb-australia.org:
  1196. + Links:
  1197. + Crawling http://mail.hizb-australia.org
  1198. + Searching for directories...
  1199. + Searching open folders...
  1200.  
  1201.  
  1202. + URL to crawl: http://ftp.hizb-australia.org.
  1203. + Date: 2019-08-26
  1204.  
  1205. + Crawling URL: http://ftp.hizb-australia.org.:
  1206. + Links:
  1207. + Crawling http://ftp.hizb-australia.org.
  1208. + Searching for directories...
  1209. + Searching open folders...
  1210.  
  1211.  
  1212. + URL to crawl: http://www2.hizb-australia.org.:8888
  1213. + Date: 2019-08-26
  1214.  
  1215. + Crawling URL: http://www2.hizb-australia.org.:8888:
  1216. + Links:
  1217. + Crawling http://www2.hizb-australia.org.:8888
  1218. + Searching for directories...
  1219. + Searching open folders...
  1220.  
  1221.  
  1222. + URL to crawl: http://mail.hizb-australia.org.:8888
  1223. + Date: 2019-08-26
  1224.  
  1225. + Crawling URL: http://mail.hizb-australia.org.:8888:
  1226. + Links:
  1227. + Crawling http://mail.hizb-australia.org.:8888
  1228. + Searching for directories...
  1229. + Searching open folders...
  1230.  
  1231.  
  1232. + URL to crawl: http://www.hizb-australia.org.:8888
  1233. + Date: 2019-08-26
  1234.  
  1235. + Crawling URL: http://www.hizb-australia.org.:8888:
  1236. + Links:
  1237. + Crawling http://www.hizb-australia.org.:8888
  1238. + Searching for directories...
  1239. + Searching open folders...
  1240.  
  1241.  
  1242. + URL to crawl: http://mail.hizb-australia.org:8888
  1243. + Date: 2019-08-26
  1244.  
  1245. + Crawling URL: http://mail.hizb-australia.org:8888:
  1246. + Links:
  1247. + Crawling http://mail.hizb-australia.org:8888
  1248. + Searching for directories...
  1249. + Searching open folders...
  1250.  
  1251.  
  1252. + URL to crawl: http://ftp.hizb-australia.org.:8888
  1253. + Date: 2019-08-26
  1254.  
  1255. + Crawling URL: http://ftp.hizb-australia.org.:8888:
  1256. + Links:
  1257. + Crawling http://ftp.hizb-australia.org.:8888
  1258. + Searching for directories...
  1259. + Searching open folders...
  1260.  
  1261. --Finished--
  1262. Summary information for domain hizb-australia.org.
  1263. -----------------------------------------
  1264. Domain Specific Information:
  1265. Email: [email protected]
  1266. Email: [email protected].
  1267. Email: [email protected]&
  1268.  
  1269. Domain Ips Information:
  1270. IP: 203.55.142.16
  1271. HostName: ns3.melbourneit.net Type: NS
  1272. HostName: ns3.melbourneit.net Type: PTR
  1273. Country: Australia
  1274. Is Active: True (reset ttl 64)
  1275. Port: 22/tcp open ssh syn-ack ttl 52 OpenSSH 6.6.1p1 Debian 4~bpo70+1 (protocol 2.0)
  1276. Script Info: | ssh-hostkey:
  1277. Script Info: | 1024 21:ec:2e:fa:a6:00:09:2c:16:04:5a:a8:97:f0:cf:5a (DSA)
  1278. Script Info: | 2048 77:f6:5b:2f:ce:d1:c7:69:98:8b:41:3e:54:02:39:05 (RSA)
  1279. Script Info: |_ 256 ed:ca:b9:19:6d:c0:2d:39:b2:83:2e:50:a1:af:27:d9 (ECDSA)
  1280. Port: 53/tcp open domain? syn-ack ttl 52
  1281. Script Info: | fingerprint-strings:
  1282. Script Info: | DNSVersionBindReqTCP:
  1283. Script Info: | version
  1284. Script Info: |_ bind
  1285. Port: 111/tcp open rpcbind syn-ack ttl 52 2-4 (RPC #100000)
  1286. Script Info: | rpcinfo:
  1287. Script Info: | program version port/proto service
  1288. Script Info: | 100000 2,3,4 111/tcp rpcbind
  1289. Script Info: | 100000 2,3,4 111/udp rpcbind
  1290. Script Info: | 100000 3,4 111/tcp6 rpcbind
  1291. Script Info: | 100000 3,4 111/udp6 rpcbind
  1292. Script Info: | 100024 1 34513/tcp status
  1293. Script Info: | 100024 1 40563/udp6 status
  1294. Script Info: | 100024 1 43612/udp status
  1295. Script Info: |_ 100024 1 60400/tcp6 status
  1296. Port: 179/tcp open tcpwrapped syn-ack ttl 243
  1297. Port: 5432/tcp open postgresql syn-ack ttl 52 PostgreSQL DB 9.1.15 - 9.1.18
  1298. Script Info: |_ssl-date: 2019-08-26T05:23:34+00:00; +4s from scanner time.
  1299. Port: 9100/tcp open jetdirect? syn-ack ttl 52
  1300. Os Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
  1301. IP: 103.9.171.7
  1302. HostName: mail.hizb-australia.org Type: MX
  1303. HostName: c5s1-2e-syd.hosting-services.net.au Type: PTR
  1304. HostName: www.hizb-australia.org. Type: A
  1305. HostName: ftp.hizb-australia.org. Type: A
  1306. HostName: mail.hizb-australia.org. Type: A
  1307. HostName: www2.hizb-australia.org. Type: A
  1308. Country: Australia
  1309. Is Active: True (reset ttl 64)
  1310. Port: 21/tcp open ftp? syn-ack ttl 50
  1311. Script Info: | fingerprint-strings:
  1312. Script Info: | GenericLines, GetRequest, HTTPOptions, Help, NULL, RTSPRequest:
  1313. Script Info: | Your connection to this server has been blocked in this server's firewall.
  1314. Script Info: | need to contact the server owner or hosting provider for further information.
  1315. Script Info: | Your blocked IP address is: 176.113.74.69
  1316. Script Info: |_ This server's hostname is: c5s1-2e-syd.hosting-services.net.au
  1317. Script Info: |_ftp-bounce: ERROR: Script execution failed (use -d to debug)
  1318. Port: 53/tcp open domain syn-ack ttl 50 ISC BIND 9.8.2rc1 (RedHat Enterprise Linux 6)
  1319. Script Info: | dns-nsid:
  1320. Script Info: |_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.3
  1321. Port: 80/tcp open http syn-ack ttl 50 LiteSpeed httpd
  1322. Script Info: |_http-server-header: LiteSpeed
  1323. Script Info: |_http-title: 403 Forbidden
  1324. Port: 110/tcp open pop3 syn-ack ttl 50 Dovecot pop3d
  1325. Script Info: |_pop3-capabilities: STLS UIDL AUTH-RESP-CODE USER SASL(PLAIN LOGIN) RESP-CODES TOP PIPELINING CAPA
  1326. Script Info: |_ssl-date: 2019-08-26T05:25:00+00:00; +3s from scanner time.
  1327. Port: 143/tcp open imap syn-ack ttl 50 Dovecot imapd
  1328. Script Info: |_imap-capabilities: capabilities AUTH=LOGINA0001 Pre-login IDLE LITERAL+ ENABLE listed STARTTLS have NAMESPACE SASL-IR AUTH=PLAIN IMAP4rev1 OK ID post-login more LOGIN-REFERRALS
  1329. Script Info: |_ssl-date: 2019-08-26T05:25:00+00:00; +3s from scanner time.
  1330. Port: 443/tcp open tcpwrapped syn-ack ttl 50
  1331. Script Info: |_http-title: Did not follow redirect to https://103.9.171.7/
  1332. Script Info: | ssl-cert: Subject: commonName=*.hosting-services.net.au/organizationName=VentraIP Australia Pty Ltd/stateOrProvinceName=Victoria/countryName=AU
  1333. Script Info: | Subject Alternative Name: DNS:*.hosting-services.net.au, DNS:hosting-services.net.au
  1334. Script Info: | Issuer: commonName=Trustwave Organization Validation SHA256 CA, Level 1/organizationName=Trustwave Holdings, Inc./stateOrProvinceName=Illinois/countryName=US
  1335. Script Info: | Public Key type: rsa
  1336. Script Info: | Public Key bits: 2048
  1337. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1338. Script Info: | Not valid before: 2017-09-04T06:37:57
  1339. Script Info: | Not valid after: 2020-10-26T12:37:57
  1340. Script Info: | MD5: f981 d482 a597 a38c b44a 3ddc bd09 cf35
  1341. Script Info: |_SHA-1: cbd8 b6c8 5b5a 64b3 d622 c41a 19c5 4fdd b206 906d
  1342. Script Info: |_ssl-date: 2019-08-26T05:24:58+00:00; +3s from scanner time.
  1343. Script Info: | tls-alpn:
  1344. Script Info: | h2
  1345. Script Info: | spdy/3
  1346. Script Info: | spdy/2
  1347. Script Info: |_ http/1.1
  1348. Port: 465/tcp open ssl/smtp syn-ack ttl 50 Exim smtpd 4.92
  1349. Script Info: |_smtp-commands: Couldn't establish connection on port 465
  1350. Script Info: | ssl-cert: Subject: commonName=*.hosting-services.net.au/organizationName=VentraIP Australia Pty Ltd/stateOrProvinceName=Victoria/countryName=AU
  1351. Script Info: | Subject Alternative Name: DNS:*.hosting-services.net.au, DNS:hosting-services.net.au
  1352. Script Info: | Issuer: commonName=Trustwave Organization Validation SHA256 CA, Level 1/organizationName=Trustwave Holdings, Inc./stateOrProvinceName=Illinois/countryName=US
  1353. Script Info: | Public Key type: rsa
  1354. Script Info: | Public Key bits: 2048
  1355. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1356. Script Info: | Not valid before: 2017-09-04T06:37:57
  1357. Script Info: | Not valid after: 2020-10-26T12:37:57
  1358. Script Info: | MD5: f981 d482 a597 a38c b44a 3ddc bd09 cf35
  1359. Script Info: |_SHA-1: cbd8 b6c8 5b5a 64b3 d622 c41a 19c5 4fdd b206 906d
  1360. Script Info: |_ssl-date: 2019-08-26T05:24:58+00:00; +3s from scanner time.
  1361. Port: 587/tcp open smtp syn-ack ttl 50 Exim smtpd 4.92
  1362. Script Info: | smtp-commands: c5s1-2e-syd.hosting-services.net.au Hello nmap.scanme.org [176.113.74.69], SIZE 52428800, 8BITMIME, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP,
  1363. Script Info: |_ Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA BDAT NOOP QUIT RSET HELP
  1364. Script Info: | ssl-cert: Subject: commonName=*.hosting-services.net.au/organizationName=VentraIP Australia Pty Ltd/stateOrProvinceName=Victoria/countryName=AU
  1365. Script Info: | Subject Alternative Name: DNS:*.hosting-services.net.au, DNS:hosting-services.net.au
  1366. Script Info: | Issuer: commonName=Trustwave Organization Validation SHA256 CA, Level 1/organizationName=Trustwave Holdings, Inc./stateOrProvinceName=Illinois/countryName=US
  1367. Script Info: | Public Key type: rsa
  1368. Script Info: | Public Key bits: 2048
  1369. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1370. Script Info: | Not valid before: 2017-09-04T06:37:57
  1371. Script Info: | Not valid after: 2020-10-26T12:37:57
  1372. Script Info: | MD5: f981 d482 a597 a38c b44a 3ddc bd09 cf35
  1373. Script Info: |_SHA-1: cbd8 b6c8 5b5a 64b3 d622 c41a 19c5 4fdd b206 906d
  1374. Script Info: |_ssl-date: 2019-08-26T05:25:03+00:00; +3s from scanner time.
  1375. Port: 993/tcp open ssl/imaps? syn-ack ttl 50
  1376. Script Info: |_ssl-date: 2019-08-26T05:24:58+00:00; +3s from scanner time.
  1377. Port: 995/tcp open ssl/pop3s? syn-ack ttl 50
  1378. Script Info: |_ssl-date: 2019-08-26T05:24:58+00:00; +3s from scanner time.
  1379. Port: 8888/tcp open http syn-ack ttl 50 LiteSpeed httpd
  1380. Os Info: Host: c5s1-2e-syd.hosting-services.net.au; OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:6
  1381. IP: 203.55.142.15
  1382. HostName: ns1.melbourneit.net Type: NS
  1383. HostName: ns1.melbourneit.net Type: PTR
  1384. Country: Australia
  1385. Is Active: True (reset ttl 64)
  1386. Port: 22/tcp open ssh syn-ack ttl 52 OpenSSH 6.6.1p1 Debian 4~bpo70+1 (protocol 2.0)
  1387. Script Info: | ssh-hostkey:
  1388. Script Info: | 1024 21:ec:2e:fa:a6:00:09:2c:16:04:5a:a8:97:f0:cf:5a (DSA)
  1389. Script Info: | 2048 77:f6:5b:2f:ce:d1:c7:69:98:8b:41:3e:54:02:39:05 (RSA)
  1390. Script Info: |_ 256 ed:ca:b9:19:6d:c0:2d:39:b2:83:2e:50:a1:af:27:d9 (ECDSA)
  1391. Port: 53/tcp open domain? syn-ack ttl 52
  1392. Script Info: | fingerprint-strings:
  1393. Script Info: | DNSVersionBindReqTCP:
  1394. Script Info: | version
  1395. Script Info: |_ bind
  1396. Port: 111/tcp open rpcbind syn-ack ttl 52 2-4 (RPC #100000)
  1397. Script Info: | rpcinfo:
  1398. Script Info: | program version port/proto service
  1399. Script Info: | 100000 2,3,4 111/tcp rpcbind
  1400. Script Info: | 100000 2,3,4 111/udp rpcbind
  1401. Script Info: | 100000 3,4 111/tcp6 rpcbind
  1402. Script Info: | 100000 3,4 111/udp6 rpcbind
  1403. Script Info: | 100024 1 34513/tcp status
  1404. Script Info: | 100024 1 40563/udp6 status
  1405. Script Info: | 100024 1 43612/udp status
  1406. Script Info: |_ 100024 1 60400/tcp6 status
  1407. Port: 179/tcp open tcpwrapped syn-ack ttl 243
  1408. Port: 5432/tcp open postgresql syn-ack ttl 52 PostgreSQL DB 9.1.15 - 9.1.18
  1409. Script Info: |_ssl-date: 2019-08-26T05:28:25+00:00; +3s from scanner time.
  1410. Port: 9100/tcp open jetdirect? syn-ack ttl 52
  1411. Os Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
  1412. IP: 203.55.143.15
  1413. HostName: ns2.melbourneit.net Type: NS
  1414. HostName: ns2.melbourneit.net Type: PTR
  1415. Country: Australia
  1416. Is Active: True (reset ttl 64)
  1417. Port: 22/tcp open ssh syn-ack ttl 52 OpenSSH 6.6.1p1 Debian 4~bpo70+1 (protocol 2.0)
  1418. Script Info: | ssh-hostkey:
  1419. Script Info: | 1024 21:ec:2e:fa:a6:00:09:2c:16:04:5a:a8:97:f0:cf:5a (DSA)
  1420. Script Info: | 2048 77:f6:5b:2f:ce:d1:c7:69:98:8b:41:3e:54:02:39:05 (RSA)
  1421. Script Info: |_ 256 e5:76:18:eb:f0:14:d4:bf:2b:a5:8e:4f:4d:4f:8f:44 (ECDSA)
  1422. Port: 53/tcp open domain? syn-ack ttl 52
  1423. Script Info: | fingerprint-strings:
  1424. Script Info: | DNSVersionBindReqTCP:
  1425. Script Info: | version
  1426. Script Info: |_ bind
  1427. Port: 111/tcp open rpcbind syn-ack ttl 52 2-4 (RPC #100000)
  1428. Script Info: | rpcinfo:
  1429. Script Info: | program version port/proto service
  1430. Script Info: | 100000 2,3,4 111/tcp rpcbind
  1431. Script Info: | 100000 2,3,4 111/udp rpcbind
  1432. Script Info: | 100000 3,4 111/tcp6 rpcbind
  1433. Script Info: | 100000 3,4 111/udp6 rpcbind
  1434. Script Info: | 100024 1 38887/tcp status
  1435. Script Info: | 100024 1 38951/tcp6 status
  1436. Script Info: | 100024 1 44742/udp6 status
  1437. Script Info: |_ 100024 1 54763/udp status
  1438. Port: 179/tcp open tcpwrapped syn-ack ttl 243
  1439. Port: 5432/tcp open postgresql syn-ack ttl 52 PostgreSQL DB 9.1.15 - 9.1.18
  1440. Script Info: |_ssl-date: 2019-08-26T05:29:46+00:00; +3s from scanner time.
  1441. Port: 9100/tcp open jetdirect? syn-ack ttl 52
  1442. Os Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
  1443. IP: 203.55.143.16
  1444. HostName: ns4.melbourneit.net Type: NS
  1445. HostName: ns4.melbourneit.net Type: PTR
  1446. Country: Australia
  1447. Is Active: True (reset ttl 64)
  1448. ######################################################################################################################################
  1449. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 02:32 EDT
  1450. Warning: 103.9.171.7 giving up on port because retransmission cap hit (2).
  1451. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1452. Host is up (0.53s latency).
  1453. Not shown: 469 filtered ports, 3 closed ports
  1454. Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
  1455. PORT STATE SERVICE
  1456. 21/tcp open ftp
  1457. 53/tcp open domain
  1458. 80/tcp open http
  1459. 110/tcp open pop3
  1460. 143/tcp open imap
  1461. 443/tcp open https
  1462. 465/tcp open smtps
  1463. 587/tcp open submission
  1464. 993/tcp open imaps
  1465. 995/tcp open pop3s
  1466. 8888/tcp open sun-answerbook
  1467.  
  1468. Nmap done: 1 IP address (1 host up) scanned in 122.80 seconds
  1469. ######################################################################################################################################
  1470. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 02:34 EDT
  1471. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1472. Host is up (0.24s latency).
  1473. Not shown: 2 filtered ports
  1474. PORT STATE SERVICE
  1475. 53/udp open domain
  1476. 67/udp open|filtered dhcps
  1477. 68/udp open|filtered dhcpc
  1478. 69/udp open|filtered tftp
  1479. 88/udp open|filtered kerberos-sec
  1480. 123/udp open|filtered ntp
  1481. 139/udp open|filtered netbios-ssn
  1482. 161/udp open|filtered snmp
  1483. 162/udp open|filtered snmptrap
  1484. 389/udp open|filtered ldap
  1485. 500/udp open|filtered isakmp
  1486. 520/udp open|filtered route
  1487. 2049/udp open|filtered nfs
  1488.  
  1489. Nmap done: 1 IP address (1 host up) scanned in 3.58 seconds
  1490. #######################################################################################################################################
  1491. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 02:34 EDT
  1492. NSE: [ftp-brute] usernames: Time limit 3m00s exceeded.
  1493. NSE: [ftp-brute] usernames: Time limit 3m00s exceeded.
  1494. NSE: [ftp-brute] passwords: Time limit 3m00s exceeded.
  1495. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1496. Host is up (0.41s latency).
  1497.  
  1498. PORT STATE SERVICE VERSION
  1499. 21/tcp open ftp Pure-FTPd
  1500. | ftp-brute:
  1501. | Accounts: No valid accounts found
  1502. |_ Statistics: Performed 1742 guesses in 188 seconds, average tps: 8.4
  1503. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1504. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1505. Device type: general purpose|storage-misc|firewall
  1506. Running (JUST GUESSING): Linux 2.6.X|3.X (90%), Synology DiskStation Manager 5.X (90%), WatchGuard Fireware 11.X (89%)
  1507. OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
  1508. Aggressive OS guesses: Linux 2.6.32 (90%), Linux 2.6.39 (90%), Linux 3.10 (90%), Linux 3.4 (90%), Linux 3.1 - 3.2 (90%), Synology DiskStation Manager 5.1 (90%), Linux 2.6.32 or 3.10 (89%), WatchGuard Fireware 11.8 (89%), Linux 2.6.32 - 2.6.39 (87%), Linux 2.6.18 - 2.6.22 (86%)
  1509. No exact OS matches for host (test conditions non-ideal).
  1510. Network Distance: 20 hops
  1511.  
  1512. TRACEROUTE (using port 21/tcp)
  1513. HOP RTT ADDRESS
  1514. 1 173.85 ms 10.249.200.1
  1515. 2 175.31 ms 213.184.122.97
  1516. 3 174.50 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
  1517. 4 173.51 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
  1518. 5 234.87 ms bzq-219-189-6.cablep.bezeqint.net (62.219.189.6)
  1519. 6 239.94 ms 40ge1-3.core1.lon2.he.net (195.66.224.21)
  1520. 7 243.95 ms 40ge1-3.core1.lon2.he.net (195.66.224.21)
  1521. 8 363.24 ms 100ge8-1.core1.sjc2.he.net (184.105.81.218)
  1522. 9 370.37 ms 100ge8-1.core1.sjc2.he.net (184.105.81.218)
  1523. 10 304.23 ms 100ge13-2.core1.nyc4.he.net (72.52.92.166)
  1524. 11 385.31 ms vocus.gigabitethernet2-13.core1.sjc1.he.net (64.71.184.46)
  1525. 12 381.71 ms vocus.gigabitethernet2-13.core1.sjc1.he.net (64.71.184.46)
  1526. 13 539.13 ms 100g-0-0-0-0.cor01.sjc01.ca.vocus.net (49.255.255.4)
  1527. 14 534.27 ms bundle-101.bdr01.syd11.nsw.vocus.net.au (114.31.192.83)
  1528. 15 539.08 ms static-190.43.255.49.in-addr.VOCUS.net.au (49.255.43.190)
  1529. 16 539.41 ms bundle-101.bdr01.syd11.nsw.vocus.net.au (114.31.192.83)
  1530. 17 551.72 ms bundle-101.bdr01.syd11.nsw.vocus.net.au (114.31.192.83)
  1531. 18 573.41 ms 10ge-agg01.syd01.as45638.net.au (103.252.152.253)
  1532. 19 545.96 ms 10ge-gw01.syd01.ventraip.net.au (103.252.152.129)
  1533. 20 554.21 ms c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1534. #######################################################################################################################################
  1535. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 02:38 EDT
  1536. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1537. Host is up (0.068s latency).
  1538.  
  1539. PORT STATE SERVICE VERSION
  1540. 53/tcp filtered domain
  1541. Too many fingerprints match this host to give specific OS details
  1542. Network Distance: 21 hops
  1543.  
  1544. Host script results:
  1545. | dns-brute:
  1546. | DNS Brute-force hostnames:
  1547. | ns1.hosting-services.net.au - 112.140.176.10
  1548. | ns1.hosting-services.net.au - 2400:b800::1:0:0:0:6
  1549. | ns2.hosting-services.net.au - 112.140.180.10
  1550. | mail.hosting-services.net.au - 112.140.180.161
  1551. | ns2.hosting-services.net.au - 2400:b800:1:1::3
  1552. | ns3.hosting-services.net.au - 96.126.101.206
  1553. | ns3.hosting-services.net.au - 2600:3c01::f03c:91ff:fe93:b777
  1554. | dev.hosting-services.net.au - 112.140.181.61
  1555. | ftp.hosting-services.net.au - 112.140.178.1
  1556. |_ www.hosting-services.net.au - 112.140.180.161
  1557.  
  1558. TRACEROUTE (using proto 1/icmp)
  1559. HOP RTT ADDRESS
  1560. 1 165.98 ms 10.249.200.1
  1561. 2 166.97 ms 213.184.122.97
  1562. 3 181.43 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
  1563. 4 166.39 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
  1564. 5 181.49 ms bzq-114-65-1.cust.bezeqint.net (192.114.65.1)
  1565. 6 222.67 ms bzq-219-189-6.cablep.bezeqint.net (62.219.189.6)
  1566. 7 237.09 ms 40ge1-3.core1.lon2.he.net (195.66.224.21)
  1567. 8 298.69 ms 100ge13-2.core1.nyc4.he.net (72.52.92.166)
  1568. 9 357.61 ms 100ge8-1.core1.sjc2.he.net (184.105.81.218)
  1569. 10 356.52 ms 10ge4-4.core1.sjc1.he.net (72.52.92.117)
  1570. 11 353.02 ms vocus.gigabitethernet2-13.core1.sjc1.he.net (64.71.184.46)
  1571. 12 508.99 ms bundle-153.cor02.sjc01.ca.vocus.net (49.255.255.24)
  1572. 13 503.78 ms 100g-0-1-0-0.cor02.lax01.ca.vocus.net (49.255.255.2)
  1573. 14 507.30 ms bundle-200.cor01.akl05.akl.vocus.net.nz (114.31.202.46)
  1574. 15 507.02 ms BE-202.cor01.syd11.nsw.VOCUS.net.au (114.31.202.55)
  1575. 16 520.30 ms BE-1.cor02.syd04.nsw.VOCUS.net.au (114.31.192.41)
  1576. 17 518.68 ms bundle-101.bdr01.syd11.nsw.vocus.net.au (114.31.192.83)
  1577. 18 515.52 ms static-190.43.255.49.in-addr.VOCUS.net.au (49.255.43.190)
  1578. 19 523.86 ms 10ge-agg01.syd01.as45638.net.au (103.252.152.253)
  1579. 20 516.16 ms 10ge-gw01.syd01.ventraip.net.au (103.252.152.129)
  1580. 21 509.53 ms c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1581. #######################################################################################################################################
  1582. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 02:38 EDT
  1583. NSE: Loaded 164 scripts for scanning.
  1584. NSE: Script Pre-scanning.
  1585. Initiating NSE at 02:38
  1586. Completed NSE at 02:38, 0.00s elapsed
  1587. Initiating NSE at 02:38
  1588. Completed NSE at 02:38, 0.00s elapsed
  1589. Initiating Parallel DNS resolution of 1 host. at 02:38
  1590. Completed Parallel DNS resolution of 1 host. at 02:38, 0.03s elapsed
  1591. Initiating SYN Stealth Scan at 02:38
  1592. Scanning c5s1-2e-syd.hosting-services.net.au (103.9.171.7) [1 port]
  1593. Completed SYN Stealth Scan at 02:38, 0.54s elapsed (1 total ports)
  1594. Initiating Service scan at 02:38
  1595. Initiating OS detection (try #1) against c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1596. Retrying OS detection (try #2) against c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1597. Initiating Traceroute at 02:38
  1598. Completed Traceroute at 02:38, 1.11s elapsed
  1599. Initiating Parallel DNS resolution of 21 hosts. at 02:38
  1600. Completed Parallel DNS resolution of 21 hosts. at 02:38, 0.43s elapsed
  1601. NSE: Script scanning 103.9.171.7.
  1602. Initiating NSE at 02:38
  1603. Completed NSE at 02:38, 0.01s elapsed
  1604. Initiating NSE at 02:38
  1605. Completed NSE at 02:38, 0.00s elapsed
  1606. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1607. Host is up (0.14s latency).
  1608.  
  1609. PORT STATE SERVICE VERSION
  1610. 80/tcp filtered http
  1611. Too many fingerprints match this host to give specific OS details
  1612. Network Distance: 21 hops
  1613.  
  1614. TRACEROUTE (using proto 1/icmp)
  1615. HOP RTT ADDRESS
  1616. 1 168.66 ms 10.249.200.1
  1617. 2 169.73 ms 213.184.122.97
  1618. 3 168.70 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
  1619. 4 168.72 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
  1620. 5 168.74 ms bzq-114-65-1.cust.bezeqint.net (192.114.65.1)
  1621. 6 232.63 ms bzq-219-189-6.cablep.bezeqint.net (62.219.189.6)
  1622. 7 249.40 ms 40ge1-3.core1.lon2.he.net (195.66.224.21)
  1623. 8 307.99 ms 100ge13-2.core1.nyc4.he.net (72.52.92.166)
  1624. 9 356.15 ms 100ge8-1.core1.sjc2.he.net (184.105.81.218)
  1625. 10 356.80 ms 10ge4-4.core1.sjc1.he.net (72.52.92.117)
  1626. 11 363.05 ms vocus.gigabitethernet2-13.core1.sjc1.he.net (64.71.184.46)
  1627. 12 514.73 ms bundle-153.cor02.sjc01.ca.vocus.net (49.255.255.24)
  1628. 13 509.24 ms 100g-0-1-0-0.cor02.lax01.ca.vocus.net (49.255.255.2)
  1629. 14 509.82 ms bundle-200.cor01.akl05.akl.vocus.net.nz (114.31.202.46)
  1630. 15 509.27 ms BE-202.cor01.syd11.nsw.VOCUS.net.au (114.31.202.55)
  1631. 16 518.72 ms BE-1.cor02.syd04.nsw.VOCUS.net.au (114.31.192.41)
  1632. 17 517.36 ms bundle-101.bdr01.syd11.nsw.vocus.net.au (114.31.192.83)
  1633. 18 531.23 ms static-190.43.255.49.in-addr.VOCUS.net.au (49.255.43.190)
  1634. 19 548.89 ms 10ge-agg01.syd01.as45638.net.au (103.252.152.253)
  1635. 20 541.54 ms 10ge-gw01.syd01.ventraip.net.au (103.252.152.129)
  1636. 21 567.82 ms c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1637.  
  1638. NSE: Script Post-scanning.
  1639. Initiating NSE at 02:38
  1640. Completed NSE at 02:38, 0.00s elapsed
  1641. Initiating NSE at 02:38
  1642. Completed NSE at 02:38, 0.00s elapsed
  1643. Read data files from: /usr/bin/../share/nmap
  1644. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  1645. Nmap done: 1 IP address (1 host up) scanned in 8.12 seconds
  1646. Raw packets sent: 78 (7.274KB) | Rcvd: 36 (4.016KB)
  1647. ######################################################################################################################################
  1648. wig - WebApp Information Gatherer
  1649.  
  1650.  
  1651. Scanning http://103.9.171.7...
  1652. __________________ SITE INFO ___________________
  1653. IP Title
  1654. 103.9.171.7 Unauthorized Access
  1655.  
  1656. ___________________ VERSION ____________________
  1657. Name Versions Type
  1658. PHP 5.6.40 Platform
  1659. litespeed Platform
  1660.  
  1661. ________________________________________________
  1662. Time: 3370.5 sec Urls: 551 Fingerprints: 40401
  1663. #######################################################################################################################################
  1664. HTTP/1.1 200 OK
  1665. Connection: close
  1666. Content-Type: text/html
  1667. Last-Modified: Tue, 07 Aug 2018 09:11:39 GMT
  1668. Accept-Ranges: bytes
  1669. Content-Length: 163
  1670. Date: Mon, 26 Aug 2019 07:35:31 GMT
  1671. Server: LiteSpeed
  1672.  
  1673. HTTP/1.1 200 OK
  1674. Connection: close
  1675. Content-Type: text/html
  1676. Last-Modified: Tue, 07 Aug 2018 09:11:39 GMT
  1677. Accept-Ranges: bytes
  1678. Content-Length: 163
  1679. Date: Mon, 26 Aug 2019 07:35:32 GMT
  1680. Server: LiteSpeed
  1681.  
  1682. Allow: OPTIONS,HEAD,GET,POST
  1683. ######################################################################################################################################
  1684. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 03:35 EDT
  1685. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1686. Host is up (0.42s latency).
  1687.  
  1688. PORT STATE SERVICE VERSION
  1689. 110/tcp open pop3 Dovecot pop3d
  1690. | pop3-brute:
  1691. | Accounts: No valid accounts found
  1692. | Statistics: Performed 85 guesses in 80 seconds, average tps: 1.0
  1693. |_ ERROR: Failed to connect.
  1694. |_pop3-capabilities: TOP CAPA PIPELINING SASL(PLAIN LOGIN) AUTH-RESP-CODE USER UIDL STLS RESP-CODES
  1695. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1696. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1697. Device type: general purpose|firewall|storage-misc
  1698. Running (JUST GUESSING): Linux 2.6.X|3.X (90%), WatchGuard Fireware 11.X (90%), Synology DiskStation Manager 5.X (90%)
  1699. OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1
  1700. Aggressive OS guesses: Linux 2.6.32 (90%), Linux 3.10 (90%), WatchGuard Fireware 11.8 (90%), Synology DiskStation Manager 5.1 (90%), Linux 2.6.32 or 3.10 (89%), Linux 2.6.39 (89%), Linux 3.4 (89%), Linux 3.1 - 3.2 (88%), Linux 2.6.32 - 2.6.39 (87%), Linux 2.6.18 - 2.6.22 (86%)
  1701. No exact OS matches for host (test conditions non-ideal).
  1702. Network Distance: 17 hops
  1703.  
  1704. TRACEROUTE (using port 443/tcp)
  1705. HOP RTT ADDRESS
  1706. 1 161.52 ms 10.249.200.1
  1707. 2 162.92 ms 213.184.122.97
  1708. 3 161.72 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
  1709. 4 161.94 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
  1710. 5 222.38 ms bzq-114-65-1.cust.bezeqint.net (192.114.65.1)
  1711. 6 162.18 ms bzq-219-189-2.dsl.bezeqint.net (62.219.189.2)
  1712. 7 217.99 ms bzq-179-72-242.cust.bezeqint.net (212.179.72.242)
  1713. 8 228.77 ms 40ge1-3.core1.lon2.he.net (195.66.224.21)
  1714. 9 297.02 ms 100ge13-2.core1.nyc4.he.net (72.52.92.166)
  1715. 10 355.80 ms 100ge8-1.core1.sjc2.he.net (184.105.81.218)
  1716. 11 507.03 ms bundle-153.cor02.sjc01.ca.vocus.net (49.255.255.24)
  1717. 12 356.52 ms vocus.gigabitethernet2-13.core1.sjc1.he.net (64.71.184.46)
  1718. 13 351.96 ms vocus.gigabitethernet2-13.core1.sjc1.he.net (64.71.184.46)
  1719. 14 505.77 ms BE-201.cor02.syd04.nsw.VOCUS.net.au (49.255.255.13)
  1720. 15 502.01 ms static-190.43.255.49.in-addr.VOCUS.net.au (49.255.43.190)
  1721. 16 513.66 ms 10ge-agg01.syd01.as45638.net.au (103.252.152.253)
  1722. 17 500.94 ms c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1723. #######################################################################################################################################
  1724. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 03:37 EDT
  1725. NSE: Loaded 164 scripts for scanning.
  1726. NSE: Script Pre-scanning.
  1727. Initiating NSE at 03:37
  1728. Completed NSE at 03:37, 0.00s elapsed
  1729. Initiating NSE at 03:37
  1730. Completed NSE at 03:37, 0.00s elapsed
  1731. Initiating Parallel DNS resolution of 1 host. at 03:37
  1732. Completed Parallel DNS resolution of 1 host. at 03:37, 0.03s elapsed
  1733. Initiating SYN Stealth Scan at 03:37
  1734. Scanning c5s1-2e-syd.hosting-services.net.au (103.9.171.7) [1 port]
  1735. Completed SYN Stealth Scan at 03:37, 0.53s elapsed (1 total ports)
  1736. Initiating Service scan at 03:37
  1737. Initiating OS detection (try #1) against c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1738. Retrying OS detection (try #2) against c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1739. Initiating Traceroute at 03:37
  1740. Completed Traceroute at 03:37, 1.05s elapsed
  1741. Initiating Parallel DNS resolution of 21 hosts. at 03:37
  1742. Completed Parallel DNS resolution of 21 hosts. at 03:37, 0.70s elapsed
  1743. NSE: Script scanning 103.9.171.7.
  1744. Initiating NSE at 03:37
  1745. Completed NSE at 03:37, 0.01s elapsed
  1746. Initiating NSE at 03:37
  1747. Completed NSE at 03:37, 0.00s elapsed
  1748. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1749. Host is up (0.069s latency).
  1750.  
  1751. PORT STATE SERVICE VERSION
  1752. 443/tcp filtered https
  1753. Too many fingerprints match this host to give specific OS details
  1754. Network Distance: 21 hops
  1755.  
  1756. TRACEROUTE (using proto 1/icmp)
  1757. HOP RTT ADDRESS
  1758. 1 163.81 ms 10.249.200.1
  1759. 2 165.02 ms 213.184.122.97
  1760. 3 164.45 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
  1761. 4 164.51 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
  1762. 5 164.54 ms bzq-114-65-1.cust.bezeqint.net (192.114.65.1)
  1763. 6 221.42 ms bzq-219-189-6.dsl.bezeqint.net (62.219.189.6)
  1764. 7 227.03 ms 40ge1-3.core1.lon2.he.net (195.66.224.21)
  1765. 8 296.49 ms 100ge13-2.core1.nyc4.he.net (72.52.92.166)
  1766. 9 355.31 ms 100ge8-1.core1.sjc2.he.net (184.105.81.218)
  1767. 10 354.95 ms 10ge4-4.core1.sjc1.he.net (72.52.92.117)
  1768. 11 356.62 ms vocus.gigabitethernet2-13.core1.sjc1.he.net (64.71.184.46)
  1769. 12 512.37 ms bundle-153.cor02.sjc01.ca.vocus.net (49.255.255.24)
  1770. 13 507.80 ms 100g-0-1-0-0.cor02.lax01.ca.vocus.net (49.255.255.2)
  1771. 14 508.54 ms bundle-200.cor01.akl05.akl.vocus.net.nz (114.31.202.46)
  1772. 15 508.16 ms BE-202.cor01.syd11.nsw.VOCUS.net.au (114.31.202.55)
  1773. 16 508.30 ms BE-1.cor02.syd04.nsw.VOCUS.net.au (114.31.192.41)
  1774. 17 505.64 ms bundle-101.bdr01.syd11.nsw.vocus.net.au (114.31.192.83)
  1775. 18 503.57 ms static-190.43.255.49.in-addr.VOCUS.net.au (49.255.43.190)
  1776. 19 510.52 ms 10ge-agg01.syd01.as45638.net.au (103.252.152.253)
  1777. 20 503.06 ms 10ge-gw01.syd01.ventraip.net.au (103.252.152.129)
  1778. 21 508.06 ms c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1779.  
  1780. NSE: Script Post-scanning.
  1781. Initiating NSE at 03:37
  1782. Completed NSE at 03:37, 0.00s elapsed
  1783. Initiating NSE at 03:37
  1784. Completed NSE at 03:37, 0.00s elapsed
  1785. Read data files from: /usr/bin/../share/nmap
  1786. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  1787. Nmap done: 1 IP address (1 host up) scanned in 5.76 seconds
  1788. Raw packets sent: 78 (7.274KB) | Rcvd: 35 (3.712KB)
  1789. ######################################################################################################################################
  1790. https://103.9.171.7 [403 Forbidden] Country[AUSTRALIA][AU], Email[[email protected]], HTML5, HTTPServer[LiteSpeed], IP[103.9.171.7], LiteSpeed, Title[403 Forbidden], UncommonHeaders[alt-svc]
  1791. ######################################################################################################################################
  1792. Version: 1.11.13-static
  1793. OpenSSL 1.0.2-chacha (1.0.2g-dev)
  1794.  
  1795. Connected to 103.9.171.7
  1796.  
  1797. Testing SSL server 103.9.171.7 on port 443 using SNI name 103.9.171.7
  1798.  
  1799. TLS Fallback SCSV:
  1800. Server supports TLS Fallback SCSV
  1801.  
  1802. TLS renegotiation:
  1803. Secure session renegotiation supported
  1804.  
  1805. TLS Compression:
  1806. Compression disabled
  1807.  
  1808. Heartbleed:
  1809. TLS 1.2 not vulnerable to heartbleed
  1810. TLS 1.1 not vulnerable to heartbleed
  1811. TLS 1.0 not vulnerable to heartbleed
  1812.  
  1813. Supported Server Cipher(s):
  1814. Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve P-256 DHE 256
  1815. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-256 DHE 256
  1816. Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
  1817. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
  1818. Accepted TLSv1.2 128 bits AES128-GCM-SHA256
  1819. Accepted TLSv1.2 256 bits AES256-GCM-SHA384
  1820. Accepted TLSv1.2 128 bits AES128-SHA
  1821. Accepted TLSv1.2 256 bits AES256-SHA
  1822. Preferred TLSv1.1 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
  1823. Accepted TLSv1.1 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
  1824. Accepted TLSv1.1 128 bits AES128-SHA
  1825. Accepted TLSv1.1 256 bits AES256-SHA
  1826. Preferred TLSv1.0 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
  1827. Accepted TLSv1.0 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
  1828. Accepted TLSv1.0 128 bits AES128-SHA
  1829. Accepted TLSv1.0 256 bits AES256-SHA
  1830.  
  1831. SSL Certificate:
  1832. Signature Algorithm: sha256WithRSAEncryption
  1833. RSA Key Strength: 2048
  1834.  
  1835. Subject: *.hosting-services.net.au
  1836. Altnames: DNS:*.hosting-services.net.au, DNS:hosting-services.net.au
  1837. Issuer: Trustwave Organization Validation SHA256 CA, Level 1
  1838.  
  1839. Not valid before: Sep 4 06:37:57 2017 GMT
  1840. Not valid after: Oct 26 12:37:57 2020 GMT
  1841. #######################################################################################################################################
  1842. --------------------------------------------------------
  1843. <<<Yasuo discovered following vulnerable applications>>>
  1844. --------------------------------------------------------
  1845. +----------+-------------------------------+----------------------------------------------+----------+----------+
  1846. | App Name | URL to Application | Potential Exploit | Username | Password |
  1847. +----------+-------------------------------+----------------------------------------------+----------+----------+
  1848. | SVN | https://103.9.171.7:443/.svn/ | ./auxiliary/scanner/http/svn_wcdb_scanner.rb | | |
  1849. +----------+-------------------------------+----------------------------------------------+----------+----------+
  1850. ######################################################################################################################################
  1851. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 03:44 EDT
  1852. NSE: Loaded 47 scripts for scanning.
  1853. NSE: Script Pre-scanning.
  1854. Initiating NSE at 03:44
  1855. Completed NSE at 03:44, 0.00s elapsed
  1856. Initiating NSE at 03:44
  1857. Completed NSE at 03:44, 0.00s elapsed
  1858. Initiating Ping Scan at 03:44
  1859. Scanning 103.9.171.7 [4 ports]
  1860. Completed Ping Scan at 03:44, 0.54s elapsed (1 total hosts)
  1861. Initiating Parallel DNS resolution of 1 host. at 03:44
  1862. Completed Parallel DNS resolution of 1 host. at 03:44, 0.02s elapsed
  1863. Initiating SYN Stealth Scan at 03:44
  1864. Scanning c5s1-2e-syd.hosting-services.net.au (103.9.171.7) [65535 ports]
  1865. Discovered open port 21/tcp on 103.9.171.7
  1866. Discovered open port 143/tcp on 103.9.171.7
  1867. Discovered open port 993/tcp on 103.9.171.7
  1868. Discovered open port 443/tcp on 103.9.171.7
  1869. Discovered open port 587/tcp on 103.9.171.7
  1870. Discovered open port 80/tcp on 103.9.171.7
  1871. Discovered open port 53/tcp on 103.9.171.7
  1872. Discovered open port 8888/tcp on 103.9.171.7
  1873. SYN Stealth Scan Timing: About 2.44% done; ETC: 04:05 (0:20:42 remaining)
  1874. Discovered open port 2078/tcp on 103.9.171.7
  1875. SYN Stealth Scan Timing: About 5.34% done; ETC: 04:04 (0:18:54 remaining)
  1876. Discovered open port 2083/tcp on 103.9.171.7
  1877. SYN Stealth Scan Timing: About 9.56% done; ETC: 04:00 (0:14:49 remaining)
  1878. Discovered open port 2082/tcp on 103.9.171.7
  1879. SYN Stealth Scan Timing: About 13.88% done; ETC: 04:00 (0:13:45 remaining)
  1880. SYN Stealth Scan Timing: About 13.82% done; ETC: 04:04 (0:16:57 remaining)
  1881. SYN Stealth Scan Timing: About 15.13% done; ETC: 04:05 (0:18:02 remaining)
  1882. SYN Stealth Scan Timing: About 19.15% done; ETC: 04:05 (0:16:58 remaining)
  1883. SYN Stealth Scan Timing: About 22.15% done; ETC: 04:04 (0:15:52 remaining)
  1884. SYN Stealth Scan Timing: About 25.75% done; ETC: 04:03 (0:14:28 remaining)
  1885. Discovered open port 2080/tcp on 103.9.171.7
  1886. SYN Stealth Scan Timing: About 29.72% done; ETC: 04:03 (0:13:03 remaining)
  1887. Discovered open port 2077/tcp on 103.9.171.7
  1888. SYN Stealth Scan Timing: About 39.82% done; ETC: 04:04 (0:12:07 remaining)
  1889. SYN Stealth Scan Timing: About 44.79% done; ETC: 04:04 (0:11:03 remaining)
  1890. SYN Stealth Scan Timing: About 49.52% done; ETC: 04:04 (0:10:00 remaining)
  1891. SYN Stealth Scan Timing: About 54.25% done; ETC: 04:04 (0:08:57 remaining)
  1892. Discovered open port 2095/tcp on 103.9.171.7
  1893. SYN Stealth Scan Timing: About 58.47% done; ETC: 04:03 (0:07:58 remaining)
  1894. SYN Stealth Scan Timing: About 62.76% done; ETC: 04:03 (0:06:59 remaining)
  1895. SYN Stealth Scan Timing: About 67.00% done; ETC: 04:02 (0:06:02 remaining)
  1896. SYN Stealth Scan Timing: About 71.47% done; ETC: 04:02 (0:05:06 remaining)
  1897. SYN Stealth Scan Timing: About 76.18% done; ETC: 04:01 (0:04:09 remaining)
  1898. SYN Stealth Scan Timing: About 81.18% done; ETC: 04:01 (0:03:11 remaining)
  1899. Discovered open port 2079/tcp on 103.9.171.7
  1900. Discovered open port 2096/tcp on 103.9.171.7
  1901. SYN Stealth Scan Timing: About 86.41% done; ETC: 04:01 (0:02:15 remaining)
  1902. SYN Stealth Scan Timing: About 91.86% done; ETC: 04:00 (0:01:18 remaining)
  1903. Discovered open port 8887/tcp on 103.9.171.7
  1904. Discovered open port 465/tcp on 103.9.171.7
  1905. Completed SYN Stealth Scan at 03:59, 929.21s elapsed (65535 total ports)
  1906. Initiating Service scan at 03:59
  1907. Scanning 18 services on c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1908. Service scan Timing: About 72.22% done; ETC: 04:03 (0:01:03 remaining)
  1909. Completed Service scan at 04:03, 189.23s elapsed (18 services on 1 host)
  1910. Initiating OS detection (try #1) against c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1911. Retrying OS detection (try #2) against c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1912. Initiating Traceroute at 04:03
  1913. Completed Traceroute at 04:03, 0.87s elapsed
  1914. Initiating Parallel DNS resolution of 17 hosts. at 04:03
  1915. Completed Parallel DNS resolution of 17 hosts. at 04:03, 0.70s elapsed
  1916. NSE: Script scanning 103.9.171.7.
  1917. Initiating NSE at 04:03
  1918. Completed NSE at 04:03, 7.56s elapsed
  1919. Initiating NSE at 04:03
  1920. Completed NSE at 04:03, 4.21s elapsed
  1921. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  1922. Host is up (0.51s latency).
  1923. Not shown: 65511 filtered ports
  1924. PORT STATE SERVICE VERSION
  1925. 20/tcp closed ftp-data
  1926. 21/tcp open ftp Pure-FTPd
  1927. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1928. 25/tcp closed smtp
  1929. 53/tcp open domain ISC BIND 9.8.2rc1 (RedHat Enterprise Linux 6)
  1930. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1931. 80/tcp open http LiteSpeed httpd
  1932. |_http-server-header: LiteSpeed
  1933. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1934. 139/tcp closed netbios-ssn
  1935. 143/tcp open imap Dovecot imapd
  1936. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1937. 443/tcp open ssl/http LiteSpeed httpd
  1938. |_http-server-header: LiteSpeed
  1939. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1940. 445/tcp closed microsoft-ds
  1941. 465/tcp open ssl/smtp Exim smtpd 4.92
  1942. | vulners:
  1943. | cpe:/a:exim:exim:4.92:
  1944. |_ CVE-2019-13917 10.0 https://vulners.com/cve/CVE-2019-13917
  1945. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1946. 587/tcp open smtp Exim smtpd 4.92
  1947. | vulners:
  1948. | cpe:/a:exim:exim:4.92:
  1949. |_ CVE-2019-13917 10.0 https://vulners.com/cve/CVE-2019-13917
  1950. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1951. 993/tcp open ssl/imaps?
  1952. 2077/tcp open tsrmagt?
  1953. | fingerprint-strings:
  1954. | SIPOptions:
  1955. | HTTP/1.1 302 Moved
  1956. | Date: Mon, 26 Aug 2019 08:01:49 GMT
  1957. | Server: cPanel
  1958. | Persistent-Auth: false
  1959. | Host: c5s1-2e-syd.hosting-services.net.au:2077
  1960. | Cache-Control: no-cache, no-store, must-revalidate, private
  1961. | Connection: close
  1962. | Location: https://c5s1-2e-syd.hosting-services.net.au:2078sip:nm
  1963. | Vary: Accept-Encoding
  1964. | Expires: Fri, 01 Jan 1990 00:00:00 GMT
  1965. |_ X-Redirect-Reason: requiressl
  1966. 2078/tcp open tcpwrapped
  1967. 2079/tcp open idware-router?
  1968. | fingerprint-strings:
  1969. | SIPOptions:
  1970. | HTTP/1.1 302 Moved
  1971. | Date: Mon, 26 Aug 2019 08:01:49 GMT
  1972. | Server: cPanel
  1973. | Persistent-Auth: false
  1974. | Host: c5s1-2e-syd.hosting-services.net.au:2079
  1975. | Cache-Control: no-cache, no-store, must-revalidate, private
  1976. | Connection: close
  1977. | Location: https://c5s1-2e-syd.hosting-services.net.au:2080sip:nm
  1978. | Vary: Accept-Encoding
  1979. | Expires: Fri, 01 Jan 1990 00:00:00 GMT
  1980. |_ X-Redirect-Reason: requiressl
  1981. 2080/tcp open ssl/http cPanel httpd (unauthorized)
  1982. |_vulscan: ERROR: Script execution failed (use -d to debug)
  1983. 2082/tcp open infowave?
  1984. | fingerprint-strings:
  1985. | SIPOptions:
  1986. | HTTP/1.1 301 Moved
  1987. | Content-length: 141
  1988. | Location: https://c5s1-2e-syd.hosting-services.net.au:2083/sip%3anm
  1989. | Content-type: text/html; charset="utf-8"
  1990. | Cache-Control: no-cache, no-store, must-revalidate, private
  1991. |_ <html><head><META HTTP-EQUIV="refresh" CONTENT="2;URL=https://c5s1-2e-syd.hosting-services.net.au:2083/sip%3anm"></head><body></body></html>
  1992. 2083/tcp open ssl/radsec?
  1993. | fingerprint-strings:
  1994. | GetRequest:
  1995. | HTTP/1.0 200 OK
  1996. | Connection: close
  1997. | Content-Type: text/html; charset="utf-8"
  1998. | Date: Mon, 26 Aug 2019 08:00:38 GMT
  1999. | Cache-Control: no-cache, no-store, must-revalidate, private
  2000. | Pragma: no-cache
  2001. | Set-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
  2002. | Set-Cookie: cpsession=%3angHzkkWA4uD3JOJV%2cf587a135aeeeda2847bf8e38b3a120c4; HttpOnly; path=/; port=2083; secure
  2003. | Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
  2004. | Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=c5s1-2e-syd.hosting-services.net.au; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
  2005. | Set-Cookie: Horde=expired; HttpOnly; domain=.c5s1-2e-syd.hosting-services.net.au; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
  2006. | Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.c5s1-2e-syd
  2007. | HTTPOptions:
  2008. | HTTP/1.0 200 OK
  2009. | Connection: close
  2010. | Content-Type: text/html; charset="utf-8"
  2011. | Date: Mon, 26 Aug 2019 08:00:40 GMT
  2012. | Cache-Control: no-cache, no-store, must-revalidate, private
  2013. | Pragma: no-cache
  2014. | Set-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
  2015. | Set-Cookie: cpsession=%3aY_9yGvVy219s0Sji%2cc79cdf95c52a6afb78564c587765d5b3; HttpOnly; path=/; port=2083; secure
  2016. | Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
  2017. | Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=c5s1-2e-syd.hosting-services.net.au; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
  2018. | Set-Cookie: Horde=expired; HttpOnly; domain=.c5s1-2e-syd.hosting-services.net.au; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure
  2019. |_ Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.c5s1-2e-syd
  2020. 2095/tcp open nbx-ser?
  2021. | fingerprint-strings:
  2022. | SIPOptions:
  2023. | HTTP/1.1 301 Moved
  2024. | Content-length: 141
  2025. | Location: https://c5s1-2e-syd.hosting-services.net.au:2096/sip%3anm
  2026. | Content-type: text/html; charset="utf-8"
  2027. | Cache-Control: no-cache, no-store, must-revalidate, private
  2028. |_ <html><head><META HTTP-EQUIV="refresh" CONTENT="2;URL=https://c5s1-2e-syd.hosting-services.net.au:2096/sip%3anm"></head><body></body></html>
  2029. 2096/tcp open ssl/nbx-dir?
  2030. | fingerprint-strings:
  2031. | GetRequest:
  2032. | HTTP/1.0 200 OK
  2033. | Connection: close
  2034. | Content-Type: text/html; charset="utf-8"
  2035. | Date: Mon, 26 Aug 2019 08:00:38 GMT
  2036. | Cache-Control: no-cache, no-store, must-revalidate, private
  2037. | Pragma: no-cache
  2038. | Set-Cookie: webmailrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure
  2039. | Set-Cookie: webmailsession=%3ahwbY_NEtxpis3Jnh%2c441002fc02227789d330a316fadbcbb5; HttpOnly; path=/; port=2096; secure
  2040. | Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure
  2041. | Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=c5s1-2e-syd.hosting-services.net.au; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure
  2042. | Set-Cookie: Horde=expired; HttpOnly; domain=.c5s1-2e-syd.hosting-services.net.au; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure
  2043. | Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.c
  2044. | HTTPOptions:
  2045. | HTTP/1.0 200 OK
  2046. | Connection: close
  2047. | Content-Type: text/html; charset="utf-8"
  2048. | Date: Mon, 26 Aug 2019 08:00:40 GMT
  2049. | Cache-Control: no-cache, no-store, must-revalidate, private
  2050. | Pragma: no-cache
  2051. | Set-Cookie: webmailrelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure
  2052. | Set-Cookie: webmailsession=%3a6NoPGC_qMleEhwUB%2c854b7e663be533e35bfe0473eebb8ff4; HttpOnly; path=/; port=2096; secure
  2053. | Set-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure
  2054. | Set-Cookie: roundcube_sessauth=expired; HttpOnly; domain=c5s1-2e-syd.hosting-services.net.au; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure
  2055. | Set-Cookie: Horde=expired; HttpOnly; domain=.c5s1-2e-syd.hosting-services.net.au; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2096; secure
  2056. |_ Set-Cookie: horde_secret_key=expired; HttpOnly; domain=.c
  2057. 2408/tcp closed optimanet
  2058. 5768/tcp closed openmailpxy
  2059. 8887/tcp open ssl/http LiteSpeed httpd
  2060. |_http-server-header: LiteSpeed
  2061. |_vulscan: ERROR: Script execution failed (use -d to debug)
  2062. 8888/tcp open http LiteSpeed httpd
  2063. |_http-server-header: LiteSpeed
  2064. |_vulscan: ERROR: Script execution failed (use -d to debug)
  2065. 6 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
  2066. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  2067. SF-Port2077-TCP:V=7.80%I=7%D=8/26%Time=5D6391EB%P=x86_64-pc-linux-gnu%r(SI
  2068. SF:POptions,183,"HTTP/1\.1\x20302\x20Moved\r\nDate:\x20Mon,\x2026\x20Aug\x
  2069. SF:202019\x2008:01:49\x20GMT\r\nServer:\x20cPanel\r\nPersistent-Auth:\x20f
  2070. SF:alse\r\nHost:\x20c5s1-2e-syd\.hosting-services\.net\.au:2077\r\nCache-C
  2071. SF:ontrol:\x20no-cache,\x20no-store,\x20must-revalidate,\x20private\r\nCon
  2072. SF:nection:\x20close\r\nLocation:\x20https://c5s1-2e-syd\.hosting-services
  2073. SF:\.net\.au:2078sip:nm\r\nVary:\x20Accept-Encoding\r\nExpires:\x20Fri,\x2
  2074. SF:001\x20Jan\x201990\x2000:00:00\x20GMT\r\nX-Redirect-Reason:\x20requires
  2075. SF:sl\r\n\r\n");
  2076. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  2077. SF-Port2079-TCP:V=7.80%I=7%D=8/26%Time=5D6391EB%P=x86_64-pc-linux-gnu%r(SI
  2078. SF:POptions,183,"HTTP/1\.1\x20302\x20Moved\r\nDate:\x20Mon,\x2026\x20Aug\x
  2079. SF:202019\x2008:01:49\x20GMT\r\nServer:\x20cPanel\r\nPersistent-Auth:\x20f
  2080. SF:alse\r\nHost:\x20c5s1-2e-syd\.hosting-services\.net\.au:2079\r\nCache-C
  2081. SF:ontrol:\x20no-cache,\x20no-store,\x20must-revalidate,\x20private\r\nCon
  2082. SF:nection:\x20close\r\nLocation:\x20https://c5s1-2e-syd\.hosting-services
  2083. SF:\.net\.au:2080sip:nm\r\nVary:\x20Accept-Encoding\r\nExpires:\x20Fri,\x2
  2084. SF:001\x20Jan\x201990\x2000:00:00\x20GMT\r\nX-Redirect-Reason:\x20requires
  2085. SF:sl\r\n\r\n");
  2086. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  2087. SF-Port2082-TCP:V=7.80%I=7%D=8/26%Time=5D6391EB%P=x86_64-pc-linux-gnu%r(SI
  2088. SF:POptions,164,"HTTP/1\.1\x20301\x20Moved\r\nContent-length:\x20141\r\nLo
  2089. SF:cation:\x20https://c5s1-2e-syd\.hosting-services\.net\.au:2083/sip%3anm
  2090. SF:\r\nContent-type:\x20text/html;\x20charset=\"utf-8\"\r\nCache-Control:\
  2091. SF:x20no-cache,\x20no-store,\x20must-revalidate,\x20private\r\n\r\n<html><
  2092. SF:head><META\x20HTTP-EQUIV=\"refresh\"\x20CONTENT=\"2;URL=https://c5s1-2e
  2093. SF:-syd\.hosting-services\.net\.au:2083/sip%3anm\"></head><body></body></h
  2094. SF:tml>\n");
  2095. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  2096. SF-Port2083-TCP:V=7.80%T=SSL%I=7%D=8/26%Time=5D6391A4%P=x86_64-pc-linux-gn
  2097. SF:u%r(GetRequest,4000,"HTTP/1\.0\x20200\x20OK\r\nConnection:\x20close\r\n
  2098. SF:Content-Type:\x20text/html;\x20charset=\"utf-8\"\r\nDate:\x20Mon,\x2026
  2099. SF:\x20Aug\x202019\x2008:00:38\x20GMT\r\nCache-Control:\x20no-cache,\x20no
  2100. SF:-store,\x20must-revalidate,\x20private\r\nPragma:\x20no-cache\r\nSet-Co
  2101. SF:okie:\x20cprelogin=no;\x20HttpOnly;\x20expires=Thu,\x2001-Jan-1970\x200
  2102. SF:0:00:01\x20GMT;\x20path=/;\x20port=2083;\x20secure\r\nSet-Cookie:\x20cp
  2103. SF:session=%3angHzkkWA4uD3JOJV%2cf587a135aeeeda2847bf8e38b3a120c4;\x20Http
  2104. SF:Only;\x20path=/;\x20port=2083;\x20secure\r\nSet-Cookie:\x20roundcube_se
  2105. SF:ssid=expired;\x20HttpOnly;\x20expires=Thu,\x2001-Jan-1970\x2000:00:01\x
  2106. SF:20GMT;\x20path=/;\x20port=2083;\x20secure\r\nSet-Cookie:\x20roundcube_s
  2107. SF:essauth=expired;\x20HttpOnly;\x20domain=c5s1-2e-syd\.hosting-services\.
  2108. SF:net\.au;\x20expires=Thu,\x2001-Jan-1970\x2000:00:01\x20GMT;\x20path=/;\
  2109. SF:x20port=2083;\x20secure\r\nSet-Cookie:\x20Horde=expired;\x20HttpOnly;\x
  2110. SF:20domain=\.c5s1-2e-syd\.hosting-services\.net\.au;\x20expires=Thu,\x200
  2111. SF:1-Jan-1970\x2000:00:01\x20GMT;\x20path=/;\x20port=2083;\x20secure\r\nSe
  2112. SF:t-Cookie:\x20horde_secret_key=expired;\x20HttpOnly;\x20domain=\.c5s1-2e
  2113. SF:-syd")%r(HTTPOptions,4000,"HTTP/1\.0\x20200\x20OK\r\nConnection:\x20clo
  2114. SF:se\r\nContent-Type:\x20text/html;\x20charset=\"utf-8\"\r\nDate:\x20Mon,
  2115. SF:\x2026\x20Aug\x202019\x2008:00:40\x20GMT\r\nCache-Control:\x20no-cache,
  2116. SF:\x20no-store,\x20must-revalidate,\x20private\r\nPragma:\x20no-cache\r\n
  2117. SF:Set-Cookie:\x20cprelogin=no;\x20HttpOnly;\x20expires=Thu,\x2001-Jan-197
  2118. SF:0\x2000:00:01\x20GMT;\x20path=/;\x20port=2083;\x20secure\r\nSet-Cookie:
  2119. SF:\x20cpsession=%3aY_9yGvVy219s0Sji%2cc79cdf95c52a6afb78564c587765d5b3;\x
  2120. SF:20HttpOnly;\x20path=/;\x20port=2083;\x20secure\r\nSet-Cookie:\x20roundc
  2121. SF:ube_sessid=expired;\x20HttpOnly;\x20expires=Thu,\x2001-Jan-1970\x2000:0
  2122. SF:0:01\x20GMT;\x20path=/;\x20port=2083;\x20secure\r\nSet-Cookie:\x20round
  2123. SF:cube_sessauth=expired;\x20HttpOnly;\x20domain=c5s1-2e-syd\.hosting-serv
  2124. SF:ices\.net\.au;\x20expires=Thu,\x2001-Jan-1970\x2000:00:01\x20GMT;\x20pa
  2125. SF:th=/;\x20port=2083;\x20secure\r\nSet-Cookie:\x20Horde=expired;\x20HttpO
  2126. SF:nly;\x20domain=\.c5s1-2e-syd\.hosting-services\.net\.au;\x20expires=Thu
  2127. SF:,\x2001-Jan-1970\x2000:00:01\x20GMT;\x20path=/;\x20port=2083;\x20secure
  2128. SF:\r\nSet-Cookie:\x20horde_secret_key=expired;\x20HttpOnly;\x20domain=\.c
  2129. SF:5s1-2e-syd");
  2130. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  2131. SF-Port2095-TCP:V=7.80%I=7%D=8/26%Time=5D6391EB%P=x86_64-pc-linux-gnu%r(SI
  2132. SF:POptions,164,"HTTP/1\.1\x20301\x20Moved\r\nContent-length:\x20141\r\nLo
  2133. SF:cation:\x20https://c5s1-2e-syd\.hosting-services\.net\.au:2096/sip%3anm
  2134. SF:\r\nContent-type:\x20text/html;\x20charset=\"utf-8\"\r\nCache-Control:\
  2135. SF:x20no-cache,\x20no-store,\x20must-revalidate,\x20private\r\n\r\n<html><
  2136. SF:head><META\x20HTTP-EQUIV=\"refresh\"\x20CONTENT=\"2;URL=https://c5s1-2e
  2137. SF:-syd\.hosting-services\.net\.au:2096/sip%3anm\"></head><body></body></h
  2138. SF:tml>\n");
  2139. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  2140. SF-Port2096-TCP:V=7.80%T=SSL%I=7%D=8/26%Time=5D6391A4%P=x86_64-pc-linux-gn
  2141. SF:u%r(GetRequest,4000,"HTTP/1\.0\x20200\x20OK\r\nConnection:\x20close\r\n
  2142. SF:Content-Type:\x20text/html;\x20charset=\"utf-8\"\r\nDate:\x20Mon,\x2026
  2143. SF:\x20Aug\x202019\x2008:00:38\x20GMT\r\nCache-Control:\x20no-cache,\x20no
  2144. SF:-store,\x20must-revalidate,\x20private\r\nPragma:\x20no-cache\r\nSet-Co
  2145. SF:okie:\x20webmailrelogin=no;\x20HttpOnly;\x20expires=Thu,\x2001-Jan-1970
  2146. SF:\x2000:00:01\x20GMT;\x20path=/;\x20port=2096;\x20secure\r\nSet-Cookie:\
  2147. SF:x20webmailsession=%3ahwbY_NEtxpis3Jnh%2c441002fc02227789d330a316fadbcbb
  2148. SF:5;\x20HttpOnly;\x20path=/;\x20port=2096;\x20secure\r\nSet-Cookie:\x20ro
  2149. SF:undcube_sessid=expired;\x20HttpOnly;\x20expires=Thu,\x2001-Jan-1970\x20
  2150. SF:00:00:01\x20GMT;\x20path=/;\x20port=2096;\x20secure\r\nSet-Cookie:\x20r
  2151. SF:oundcube_sessauth=expired;\x20HttpOnly;\x20domain=c5s1-2e-syd\.hosting-
  2152. SF:services\.net\.au;\x20expires=Thu,\x2001-Jan-1970\x2000:00:01\x20GMT;\x
  2153. SF:20path=/;\x20port=2096;\x20secure\r\nSet-Cookie:\x20Horde=expired;\x20H
  2154. SF:ttpOnly;\x20domain=\.c5s1-2e-syd\.hosting-services\.net\.au;\x20expires
  2155. SF:=Thu,\x2001-Jan-1970\x2000:00:01\x20GMT;\x20path=/;\x20port=2096;\x20se
  2156. SF:cure\r\nSet-Cookie:\x20horde_secret_key=expired;\x20HttpOnly;\x20domain
  2157. SF:=\.c")%r(HTTPOptions,4000,"HTTP/1\.0\x20200\x20OK\r\nConnection:\x20clo
  2158. SF:se\r\nContent-Type:\x20text/html;\x20charset=\"utf-8\"\r\nDate:\x20Mon,
  2159. SF:\x2026\x20Aug\x202019\x2008:00:40\x20GMT\r\nCache-Control:\x20no-cache,
  2160. SF:\x20no-store,\x20must-revalidate,\x20private\r\nPragma:\x20no-cache\r\n
  2161. SF:Set-Cookie:\x20webmailrelogin=no;\x20HttpOnly;\x20expires=Thu,\x2001-Ja
  2162. SF:n-1970\x2000:00:01\x20GMT;\x20path=/;\x20port=2096;\x20secure\r\nSet-Co
  2163. SF:okie:\x20webmailsession=%3a6NoPGC_qMleEhwUB%2c854b7e663be533e35bfe0473e
  2164. SF:ebb8ff4;\x20HttpOnly;\x20path=/;\x20port=2096;\x20secure\r\nSet-Cookie:
  2165. SF:\x20roundcube_sessid=expired;\x20HttpOnly;\x20expires=Thu,\x2001-Jan-19
  2166. SF:70\x2000:00:01\x20GMT;\x20path=/;\x20port=2096;\x20secure\r\nSet-Cookie
  2167. SF::\x20roundcube_sessauth=expired;\x20HttpOnly;\x20domain=c5s1-2e-syd\.ho
  2168. SF:sting-services\.net\.au;\x20expires=Thu,\x2001-Jan-1970\x2000:00:01\x20
  2169. SF:GMT;\x20path=/;\x20port=2096;\x20secure\r\nSet-Cookie:\x20Horde=expired
  2170. SF:;\x20HttpOnly;\x20domain=\.c5s1-2e-syd\.hosting-services\.net\.au;\x20e
  2171. SF:xpires=Thu,\x2001-Jan-1970\x2000:00:01\x20GMT;\x20path=/;\x20port=2096;
  2172. SF:\x20secure\r\nSet-Cookie:\x20horde_secret_key=expired;\x20HttpOnly;\x20
  2173. SF:domain=\.c");
  2174. Aggressive OS guesses: Linux 2.6.32 (93%), Linux 2.6.39 (93%), Linux 3.4 (93%), WatchGuard Fireware 11.8 (93%), Synology DiskStation Manager 5.1 (92%), Linux 3.10 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.1 - 3.2 (92%), Linux 2.6.32 - 2.6.39 (90%), Grandstream GXV3275 video phone (88%)
  2175. No exact OS matches for host (test conditions non-ideal).
  2176. Uptime guess: 15.582 days (since Sat Aug 10 14:06:02 2019)
  2177. Network Distance: 19 hops
  2178. TCP Sequence Prediction: Difficulty=262 (Good luck!)
  2179. IP ID Sequence Generation: All zeros
  2180. Service Info: OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:6
  2181.  
  2182. TRACEROUTE (using port 5768/tcp)
  2183. HOP RTT ADDRESS
  2184. 1 163.35 ms 10.249.200.1
  2185. 2 164.72 ms 213.184.122.97
  2186. 3 163.42 ms bzq-82-80-246-9.cablep.bezeqint.net (82.80.246.9)
  2187. 4 163.60 ms bzq-179-124-185.cust.bezeqint.net (212.179.124.185)
  2188. 5 164.00 ms bzq-114-65-2.cust.bezeqint.net (192.114.65.2)
  2189. 6 220.74 ms bzq-219-189-57.cablep.bezeqint.net (62.219.189.57)
  2190. 7 224.73 ms bzq-219-189-10.cablep.bezeqint.net (62.219.189.10)
  2191. 8 298.58 ms 100ge13-2.core1.nyc4.he.net (72.52.92.166)
  2192. 9 358.80 ms 100ge8-1.core1.sjc2.he.net (184.105.81.218)
  2193. 10 353.24 ms 100ge8-1.core1.sjc2.he.net (184.105.81.218)
  2194. 11 355.88 ms vocus.gigabitethernet2-13.core1.sjc1.he.net (64.71.184.46)
  2195. 12 508.06 ms 100g-0-0-0-0.cor01.sjc01.ca.vocus.net (49.255.255.4)
  2196. 13 508.22 ms BE-201.cor02.syd04.nsw.VOCUS.net.au (49.255.255.13)
  2197. 14 506.85 ms bundle-101.bdr01.syd11.nsw.vocus.net.au (114.31.192.83)
  2198. 15 509.04 ms bundle-200.cor01.akl05.akl.vocus.net.nz (114.31.202.46)
  2199. 16 502.34 ms BE-202.cor01.syd11.nsw.VOCUS.net.au (114.31.202.55)
  2200. 17 505.37 ms BE-202.cor01.syd11.nsw.VOCUS.net.au (114.31.202.55)
  2201. 18 508.02 ms 10ge-agg01.syd01.as45638.net.au (103.252.152.253)
  2202. 19 510.99 ms c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  2203.  
  2204. NSE: Script Post-scanning.
  2205. Initiating NSE at 04:03
  2206. Completed NSE at 04:03, 0.00s elapsed
  2207. Initiating NSE at 04:03
  2208. Completed NSE at 04:03, 0.00s elapsed
  2209. Read data files from: /usr/bin/../share/nmap
  2210. OS and Service detection performed. Please report any incorrect results at https://
  2211. ######################################################################################################################################
  2212. Starting Nmap 7.80 ( https://nmap.org ) at 2019-08-26 04:03 EDT
  2213. NSE: Loaded 47 scripts for scanning.
  2214. NSE: Script Pre-scanning.
  2215. Initiating NSE at 04:03
  2216. Completed NSE at 04:03, 0.00s elapsed
  2217. Initiating NSE at 04:03
  2218. Completed NSE at 04:03, 0.00s elapsed
  2219. Initiating Parallel DNS resolution of 1 host. at 04:03
  2220. Completed Parallel DNS resolution of 1 host. at 04:03, 0.02s elapsed
  2221. Initiating UDP Scan at 04:03
  2222. Scanning c5s1-2e-syd.hosting-services.net.au (103.9.171.7) [15 ports]
  2223. Discovered open port 53/udp on 103.9.171.7
  2224. Completed UDP Scan at 04:03, 2.98s elapsed (15 total ports)
  2225. Initiating Service scan at 04:03
  2226. Scanning 13 services on c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  2227. Service scan Timing: About 15.38% done; ETC: 04:14 (0:08:54 remaining)
  2228. Completed Service scan at 04:05, 102.60s elapsed (13 services on 1 host)
  2229. Initiating OS detection (try #1) against c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  2230. Retrying OS detection (try #2) against c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  2231. Initiating Traceroute at 04:05
  2232. Completed Traceroute at 04:05, 7.20s elapsed
  2233. Initiating Parallel DNS resolution of 1 host. at 04:05
  2234. Completed Parallel DNS resolution of 1 host. at 04:05, 0.00s elapsed
  2235. NSE: Script scanning 103.9.171.7.
  2236. Initiating NSE at 04:05
  2237. Completed NSE at 04:05, 8.82s elapsed
  2238. Initiating NSE at 04:05
  2239. Completed NSE at 04:05, 2.67s elapsed
  2240. Nmap scan report for c5s1-2e-syd.hosting-services.net.au (103.9.171.7)
  2241. Host is up (0.33s latency).
  2242.  
  2243. PORT STATE SERVICE VERSION
  2244. 53/udp open domain ISC BIND 9.8.2rc1 (RedHat Enterprise Linux 6)
  2245. |_vulscan: ERROR: Script execution failed (use -d to debug)
  2246. 67/udp open|filtered dhcps
  2247. 68/udp open|filtered dhcpc
  2248. 69/udp open|filtered tftp
  2249. 88/udp open|filtered kerberos-sec
  2250. 123/udp open|filtered ntp
  2251. 137/udp filtered netbios-ns
  2252. 138/udp filtered netbios-dgm
  2253. 139/udp open|filtered netbios-ssn
  2254. 161/udp open|filtered snmp
  2255. 162/udp open|filtered snmptrap
  2256. 389/udp open|filtered ldap
  2257. 500/udp open|filtered isakmp
  2258. |_ike-version: ERROR: Script execution failed (use -d to debug)
  2259. 520/udp open|filtered route
  2260. 2049/udp open|filtered nfs
  2261. Too many fingerprints match this host to give specific OS details
  2262. Service Info: OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:6
  2263.  
  2264. TRACEROUTE (using port 138/udp)
  2265. HOP RTT ADDRESS
  2266. 1 162.95 ms 10.249.200.1
  2267. 2 ... 3
  2268. 4 160.87 ms 10.249.200.1
  2269. 5 167.23 ms 10.249.200.1
  2270. 6 167.21 ms 10.249.200.1
  2271. 7 167.19 ms 10.249.200.1
  2272. 8 167.19 ms 10.249.200.1
  2273. 9 167.18 ms 10.249.200.1
  2274. 10 167.16 ms 10.249.200.1
  2275. 11 ... 18
  2276. 19 164.47 ms 10.249.200.1
  2277. 20 165.67 ms 10.249.200.1
  2278. 21 ... 27
  2279. 28 160.18 ms 10.249.200.1
  2280. 29 ...
  2281. 30 162.57 ms 10.249.200.1
  2282.  
  2283. NSE: Script Post-scanning.
  2284. Initiating NSE at 04:05
  2285. Completed NSE at 04:05, 0.00s elapsed
  2286. Initiating NSE at 04:05
  2287. Completed NSE at 04:05, 0.00s elapsed
  2288. Read data files from: /usr/bin/../share/nmap
  2289. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  2290. Nmap done: 1 IP address (1 host up) scanned in 135.25 seconds
  2291. Raw packets sent: 136 (8.408KB) | Rcvd: 30 (2.678KB)
  2292. #######################################################################################################################################
  2293. [+] URL: http://www.hizb-australia.org/
  2294. [+] Started: Mon Aug 26 01:00:12 2019
  2295.  
  2296. Interesting Finding(s):
  2297.  
  2298. [+] http://www.hizb-australia.org/
  2299. | Interesting Entries:
  2300. | - X-Powered-By: PHP/5.6.40
  2301. | - X-UA-Compatible: IE=edge
  2302. | - Server: LiteSpeed
  2303. | Found By: Headers (Passive Detection)
  2304. | Confidence: 100%
  2305.  
  2306. [+] http://www.hizb-australia.org/robots.txt
  2307. | Interesting Entries:
  2308. | - /wp-admin/
  2309. | - /wp-admin/admin-ajax.php
  2310. | Found By: Robots Txt (Aggressive Detection)
  2311. | Confidence: 100%
  2312.  
  2313. [+] http://www.hizb-australia.org/xmlrpc.php
  2314. | Found By: Link Tag (Passive Detection)
  2315. | Confidence: 100%
  2316. | Confirmed By: Direct Access (Aggressive Detection), 100% confidence
  2317. | References:
  2318. | - http://codex.wordpress.org/XML-RPC_Pingback_API
  2319. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner
  2320. | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos
  2321. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login
  2322. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access
  2323.  
  2324. [+] Upload directory has listing enabled: http://www.hizb-australia.org/wp-content/uploads/
  2325. | Found By: Direct Access (Aggressive Detection)
  2326. | Confidence: 100%
  2327.  
  2328. [+] http://www.hizb-australia.org/wp-cron.php
  2329. | Found By: Direct Access (Aggressive Detection)
  2330. | Confidence: 60%
  2331. | References:
  2332. | - https://www.iplocation.net/defend-wordpress-from-ddos
  2333. | - https://github.com/wpscanteam/wpscan/issues/1299
  2334.  
  2335. [+] WordPress version 4.9.10 identified (Latest, released on 2019-03-13).
  2336. | Detected By: Query Parameter In Install Page (Aggressive Detection)
  2337. | - http://www.hizb-australia.org/wp-includes/css/buttons.min.css?ver=4.9.10
  2338. | - http://www.hizb-australia.org/wp-admin/css/install.min.css?ver=4.9.10
  2339. | - http://www.hizb-australia.org/wp-includes/css/dashicons.min.css?ver=4.9.10
  2340. | Confirmed By: Query Parameter In Upgrade Page (Aggressive Detection)
  2341. | - http://www.hizb-australia.org/wp-includes/css/buttons.min.css?ver=4.9.10
  2342. | - http://www.hizb-australia.org/wp-admin/css/install.min.css?ver=4.9.10
  2343.  
  2344. [+] WordPress theme in use: Lucid
  2345. | Location: http://www.hizb-australia.org/wp-content/themes/Lucid/
  2346. | Style URL: http://www.hizb-australia.org/wp-content/themes/Lucid/style.css
  2347. | Style Name: Lucid
  2348. | Style URI: http://www.elegantthemes.com/gallery/
  2349. | Description: 2 Column theme from Elegant Themes...
  2350. | Author: Elegant Themes
  2351. | Author URI: http://www.elegantthemes.com
  2352. |
  2353. | Detected By: Css Style (Passive Detection)
  2354. | Confirmed By: Urls In Homepage (Passive Detection)
  2355. |
  2356. | Version: 2.6.4 (80% confidence)
  2357. | Detected By: Style (Passive Detection)
  2358. | - http://www.hizb-australia.org/wp-content/themes/Lucid/style.css, Match: 'Version: 2.6.4'
  2359.  
  2360. [+] Enumerating All Plugins (via Passive Methods)
  2361. [+] Checking Plugin Versions (via Passive and Aggressive Methods)
  2362.  
  2363. [i] Plugin(s) Identified:
  2364.  
  2365. [+] bloom
  2366. | Location: http://www.hizb-australia.org/wp-content/plugins/bloom/
  2367. | Latest Version: 1.0.4
  2368. | Last Updated: 2016-04-14T16:53:00.000Z
  2369. |
  2370. | Detected By: Urls In Homepage (Passive Detection)
  2371. |
  2372. | [!] 1 vulnerability identified:
  2373. |
  2374. | [!] Title: ElegantThemes - Privilege Escalation
  2375. | Fixed in: 1.1.1
  2376. | References:
  2377. | - https://wpvulndb.com/vulnerabilities/8394
  2378. | - http://www.pritect.net/blog/elegant-themes-security-vulnerability
  2379. | - http://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products
  2380. |
  2381. | The version could not be determined.
  2382.  
  2383. [+] facebook-comment-by-vivacity
  2384. | Location: http://www.hizb-australia.org/wp-content/plugins/facebook-comment-by-vivacity/
  2385. | Last Updated: 2019-06-26T06:39:00.000Z
  2386. | [!] The version is out of date, the latest version is 1.4
  2387. |
  2388. | Detected By: Urls In Homepage (Passive Detection)
  2389. |
  2390. | Version: 1.3 (80% confidence)
  2391. | Detected By: Readme - Stable Tag (Aggressive Detection)
  2392. | - http://www.hizb-australia.org/wp-content/plugins/facebook-comment-by-vivacity/readme.txt
  2393.  
  2394. [+] feed-them-social
  2395. | Location: http://www.hizb-australia.org/wp-content/plugins/feed-them-social/
  2396. | Last Updated: 2019-08-08T15:47:00.000Z
  2397. | [!] The version is out of date, the latest version is 2.7.3.1
  2398. |
  2399. | Detected By: Urls In Homepage (Passive Detection)
  2400. |
  2401. | Version: 2.4.0 (80% confidence)
  2402. | Detected By: Readme - Stable Tag (Aggressive Detection)
  2403. | - http://www.hizb-australia.org/wp-content/plugins/feed-them-social/readme.txt
  2404.  
  2405. [+] instagram-feed
  2406. | Location: http://www.hizb-australia.org/wp-content/plugins/instagram-feed/
  2407. | Last Updated: 2019-08-10T10:51:00.000Z
  2408. | [!] The version is out of date, the latest version is 1.12.2
  2409. |
  2410. | Detected By: Urls In Homepage (Passive Detection)
  2411. |
  2412. | [!] 1 vulnerability identified:
  2413. |
  2414. | [!] Title: Instagram Feed <= 1.11.3 - Unspecified Issues
  2415. | Fixed in: 1.12
  2416. | References:
  2417. | - https://wpvulndb.com/vulnerabilities/9374
  2418. | - https://plugins.trac.wordpress.org/changeset?reponame=&new=2061834%40instagram-feed&old=2044806%40instagram-feed
  2419. |
  2420. | Version: 1.8.3 (100% confidence)
  2421. | Detected By: Query Parameter (Passive Detection)
  2422. | - http://www.hizb-australia.org/wp-content/plugins/instagram-feed/css/sb-instagram.min.css?ver=1.8.3
  2423. | - http://www.hizb-australia.org/wp-content/plugins/instagram-feed/js/sb-instagram.min.js?ver=1.8.3
  2424. | Confirmed By:
  2425. | Readme - Stable Tag (Aggressive Detection)
  2426. | - http://www.hizb-australia.org/wp-content/plugins/instagram-feed/README.txt
  2427. | Readme - ChangeLog Section (Aggressive Detection)
  2428. | - http://www.hizb-australia.org/wp-content/plugins/instagram-feed/README.txt
  2429.  
  2430. [+] monarch
  2431. | Location: http://www.hizb-australia.org/wp-content/plugins/monarch/
  2432. |
  2433. | Detected By: Urls In Homepage (Passive Detection)
  2434. |
  2435. | [!] 1 vulnerability identified:
  2436. |
  2437. | [!] Title: ElegantThemes - Privilege Escalation
  2438. | Fixed in: 1.2.7
  2439. | References:
  2440. | - https://wpvulndb.com/vulnerabilities/8394
  2441. | - http://www.pritect.net/blog/elegant-themes-security-vulnerability
  2442. | - http://wptavern.com/critical-security-vulnerability-discovered-in-elegant-themes-products
  2443. |
  2444. | The version could not be determined.
  2445.  
  2446. [+] page-views-count
  2447. | Location: http://www.hizb-australia.org/wp-content/plugins/page-views-count/
  2448. | Last Updated: 2019-08-01T05:59:00.000Z
  2449. | [!] The version is out of date, the latest version is 2.1.3
  2450. |
  2451. | Detected By: Urls In Homepage (Passive Detection)
  2452. |
  2453. | Version: 2.0.4 (100% confidence)
  2454. | Detected By: Query Parameter (Passive Detection)
  2455. | - http://www.hizb-australia.org/wp-content/plugins/page-views-count/assets/css/style.min.css?ver=2.0.4
  2456. | Confirmed By:
  2457. | Readme - Stable Tag (Aggressive Detection)
  2458. | - http://www.hizb-australia.org/wp-content/plugins/page-views-count/readme.txt
  2459. | Readme - ChangeLog Section (Aggressive Detection)
  2460. | - http://www.hizb-australia.org/wp-content/plugins/page-views-count/readme.txt
  2461.  
  2462. [+] shareaholic
  2463. | Location: http://www.hizb-australia.org/wp-content/plugins/shareaholic/
  2464. | Last Updated: 2019-07-11T21:56:00.000Z
  2465. | [!] The version is out of date, the latest version is 8.13.6
  2466. |
  2467. | Detected By: Meta Tag (Passive Detection)
  2468. |
  2469. | Version: 8.6.7 (100% confidence)
  2470. | Detected By: Meta Tag (Passive Detection)
  2471. | - http://www.hizb-australia.org/, Match: '8.6.7'
  2472. | Confirmed By:
  2473. | Readme - Stable Tag (Aggressive Detection)
  2474. | - http://www.hizb-australia.org/wp-content/plugins/shareaholic/readme.txt
  2475. | Readme - ChangeLog Section (Aggressive Detection)
  2476. | - http://www.hizb-australia.org/wp-content/plugins/shareaholic/readme.txt
  2477.  
  2478. [+] Enumerating Config Backups (via Passive and Aggressive Methods)
  2479. Checking Config Backups - Time: 00:00:10 <=============> (21 / 21) 100.00% Time: 00:00:10
  2480.  
  2481. [i] No Config Backups Found.
  2482.  
  2483.  
  2484. [+] Finished: Mon Aug 26 01:01:27 2019
  2485. [+] Requests Done: 82
  2486. [+] Cached Requests: 8
  2487. [+] Data Sent: 20.524 KB
  2488. [+] Data Received: 497.081 KB
  2489. [+] Memory used: 168.82 MB
  2490. [+] Elapsed time: 00:01:15
  2491. #######################################################################################################################################
  2492. [+] URL: http://www.hizb-australia.org/
  2493. [+] Started: Mon Aug 26 01:00:16 2019
  2494.  
  2495. Interesting Finding(s):
  2496.  
  2497. [+] http://www.hizb-australia.org/
  2498. | Interesting Entries:
  2499. | - X-Powered-By: PHP/5.6.40
  2500. | - X-UA-Compatible: IE=edge
  2501. | - Server: LiteSpeed
  2502. | Found By: Headers (Passive Detection)
  2503. | Confidence: 100%
  2504.  
  2505. [+] http://www.hizb-australia.org/robots.txt
  2506. | Interesting Entries:
  2507. | - /wp-admin/
  2508. | - /wp-admin/admin-ajax.php
  2509. | Found By: Robots Txt (Aggressive Detection)
  2510. | Confidence: 100%
  2511.  
  2512. [+] http://www.hizb-australia.org/xmlrpc.php
  2513. | Found By: Link Tag (Passive Detection)
  2514. | Confidence: 100%
  2515. | Confirmed By: Direct Access (Aggressive Detection), 100% confidence
  2516. | References:
  2517. | - http://codex.wordpress.org/XML-RPC_Pingback_API
  2518. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner
  2519. | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos
  2520. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login
  2521. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access
  2522.  
  2523. [+] Upload directory has listing enabled: http://www.hizb-australia.org/wp-content/uploads/
  2524. | Found By: Direct Access (Aggressive Detection)
  2525. | Confidence: 100%
  2526.  
  2527. [+] http://www.hizb-australia.org/wp-cron.php
  2528. | Found By: Direct Access (Aggressive Detection)
  2529. | Confidence: 60%
  2530. | References:
  2531. | - https://www.iplocation.net/defend-wordpress-from-ddos
  2532. | - https://github.com/wpscanteam/wpscan/issues/1299
  2533.  
  2534. [+] WordPress version 4.9.10 identified (Latest, released on 2019-03-13).
  2535. | Detected By: Query Parameter In Install Page (Aggressive Detection)
  2536. | - http://www.hizb-australia.org/wp-includes/css/buttons.min.css?ver=4.9.10
  2537. | - http://www.hizb-australia.org/wp-admin/css/install.min.css?ver=4.9.10
  2538. | - http://www.hizb-australia.org/wp-includes/css/dashicons.min.css?ver=4.9.10
  2539. | Confirmed By: Query Parameter In Upgrade Page (Aggressive Detection)
  2540. | - http://www.hizb-australia.org/wp-includes/css/buttons.min.css?ver=4.9.10
  2541. | - http://www.hizb-australia.org/wp-admin/css/install.min.css?ver=4.9.10
  2542.  
  2543. [+] WordPress theme in use: Lucid
  2544. | Location: http://www.hizb-australia.org/wp-content/themes/Lucid/
  2545. | Style URL: http://www.hizb-australia.org/wp-content/themes/Lucid/style.css
  2546. | Style Name: Lucid
  2547. | Style URI: http://www.elegantthemes.com/gallery/
  2548. | Description: 2 Column theme from Elegant Themes...
  2549. | Author: Elegant Themes
  2550. | Author URI: http://www.elegantthemes.com
  2551. |
  2552. | Detected By: Css Style (Passive Detection)
  2553. | Confirmed By: Urls In Homepage (Passive Detection)
  2554. |
  2555. | Version: 2.6.4 (80% confidence)
  2556. | Detected By: Style (Passive Detection)
  2557. | - http://www.hizb-australia.org/wp-content/themes/Lucid/style.css, Match: 'Version: 2.6.4'
  2558.  
  2559. [+] Enumerating Users (via Passive and Aggressive Methods)
  2560. Brute Forcing Author IDs - Time: 00:00:15 <==> (10 / 10) 100.00% Time: 00:00:15
  2561.  
  2562. [i] User(s) Identified:
  2563.  
  2564. [+] abuhamza
  2565. | Detected By: Author Posts - Author Pattern (Passive Detection)
  2566.  
  2567. [+] editor
  2568. | Detected By: Author Posts - Author Pattern (Passive Detection)
  2569. | Confirmed By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  2570.  
  2571. [+] AbuHamza
  2572. | Detected By: Rss Generator (Passive Detection)
  2573. | Confirmed By: Rss Generator (Aggressive Detection)
  2574.  
  2575. [+] fitrah
  2576. | Detected By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  2577.  
  2578.  
  2579. [+] Finished: Mon Aug 26 01:01:28 2019
  2580. [+] Requests Done: 55
  2581. [+] Cached Requests: 18
  2582. [+] Data Sent: 14.404 KB
  2583. [+] Data Received: 428.597 KB
  2584. [+] Memory used: 104.727 MB
  2585. [+] Elapsed time: 00:01:12
  2586. #######################################################################################################################################
  2587. [+] URL: http://www.hizb-australia.org/
  2588. [+] Started: Mon Aug 26 01:07:14 2019
  2589.  
  2590. Interesting Finding(s):
  2591.  
  2592. [+] http://www.hizb-australia.org/
  2593. | Interesting Entries:
  2594. | - X-Powered-By: PHP/5.6.40
  2595. | - X-UA-Compatible: IE=edge
  2596. | - Server: LiteSpeed
  2597. | Found By: Headers (Passive Detection)
  2598. | Confidence: 100%
  2599.  
  2600. [+] http://www.hizb-australia.org/robots.txt
  2601. | Interesting Entries:
  2602. | - /wp-admin/
  2603. | - /wp-admin/admin-ajax.php
  2604. | Found By: Robots Txt (Aggressive Detection)
  2605. | Confidence: 100%
  2606.  
  2607. [+] http://www.hizb-australia.org/xmlrpc.php
  2608. | Found By: Link Tag (Passive Detection)
  2609. | Confidence: 30%
  2610. | References:
  2611. | - http://codex.wordpress.org/XML-RPC_Pingback_API
  2612. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_ghost_scanner
  2613. | - https://www.rapid7.com/db/modules/auxiliary/dos/http/wordpress_xmlrpc_dos
  2614. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_xmlrpc_login
  2615. | - https://www.rapid7.com/db/modules/auxiliary/scanner/http/wordpress_pingback_access
  2616.  
  2617. [+] Upload directory has listing enabled: http://www.hizb-australia.org/wp-content/uploads/
  2618. | Found By: Direct Access (Aggressive Detection)
  2619. | Confidence: 100%
  2620.  
  2621. [+] http://www.hizb-australia.org/wp-cron.php
  2622. | Found By: Direct Access (Aggressive Detection)
  2623. | Confidence: 60%
  2624. | References:
  2625. | - https://www.iplocation.net/defend-wordpress-from-ddos
  2626. | - https://github.com/wpscanteam/wpscan/issues/1299
  2627.  
  2628. [+] WordPress version 4.9.10 identified (Latest, released on 2019-03-13).
  2629. | Detected By: Query Parameter In Install Page (Aggressive Detection)
  2630. | - http://www.hizb-australia.org/wp-includes/css/buttons.min.css?ver=4.9.10
  2631. | - http://www.hizb-australia.org/wp-admin/css/install.min.css?ver=4.9.10
  2632. | - http://www.hizb-australia.org/wp-includes/css/dashicons.min.css?ver=4.9.10
  2633. | Confirmed By: Query Parameter In Upgrade Page (Aggressive Detection)
  2634. | - http://www.hizb-australia.org/wp-includes/css/buttons.min.css?ver=4.9.10
  2635. | - http://www.hizb-australia.org/wp-admin/css/install.min.css?ver=4.9.10
  2636.  
  2637. [+] WordPress theme in use: Lucid
  2638. | Location: http://www.hizb-australia.org/wp-content/themes/Lucid/
  2639. | Style URL: http://www.hizb-australia.org/wp-content/themes/Lucid/style.css
  2640. | Style Name: Lucid
  2641. | Style URI: http://www.elegantthemes.com/gallery/
  2642. | Description: 2 Column theme from Elegant Themes...
  2643. | Author: Elegant Themes
  2644. | Author URI: http://www.elegantthemes.com
  2645. |
  2646. | Detected By: Css Style (Passive Detection)
  2647. | Confirmed By: Urls In Homepage (Passive Detection)
  2648. |
  2649. | Version: 2.6.4 (80% confidence)
  2650. | Detected By: Style (Passive Detection)
  2651. | - http://www.hizb-australia.org/wp-content/themes/Lucid/style.css, Match: 'Version: 2.6.4'
  2652.  
  2653. [+] Enumerating Users (via Passive and Aggressive Methods)
  2654. Brute Forcing Author IDs - Time: 00:01:08 <============> (10 / 10) 100.00% Time: 00:01:08
  2655.  
  2656. [i] User(s) Identified:
  2657.  
  2658. [+] abuhamza
  2659. | Detected By: Author Posts - Author Pattern (Passive Detection)
  2660.  
  2661. [+] editor
  2662. | Detected By: Author Posts - Author Pattern (Passive Detection)
  2663. | Confirmed By: Author Id Brute Forcing - Author Pattern (Aggressive Detection)
  2664.  
  2665. [+] AbuHamza
  2666. | Detected By: Rss Generator (Passive Detection)
  2667. | Confirmed By: Rss Generator (Aggressive Detection)
  2668.  
  2669.  
  2670. [+] Finished: Mon Aug 26 01:08:28 2019
  2671. [+] Requests Done: 22
  2672. [+] Cached Requests: 55
  2673. [+] Data Sent: 5.061 KB
  2674. [+] Data Received: 24.179 KB
  2675. [+] Memory used: 104.531 MB
  2676. [+] Elapsed time: 00:01:13
  2677. ######################################################################################################################################
  2678. [INFO] ------TARGET info------
  2679. [*] TARGET: http://www.hizb-australia.org/
  2680. [*] TARGET IP: 103.9.171.7
  2681. [INFO] NO load balancer detected for www.hizb-australia.org...
  2682. [*] DNS servers: hizb-australia.org.
  2683. [*] TARGET server: LiteSpeed
  2684. [*] CC: AU
  2685. [*] Country: Australia
  2686. [*] RegionCode: NSW
  2687. [*] RegionName: New South Wales
  2688. [*] City: Sydney
  2689. [*] ASN: AS45638
  2690. [*] BGP_PREFIX: 103.9.170.0/23
  2691. [*] ISP: SYNERGYWHOLESALE-AP SYNERGY WHOLESALE PTY LTD, AU
  2692. [INFO] DNS enumeration:
  2693. [*] admin.hizb-australia.org hizb-australia.org. 103.9.171.7
  2694. [*] ftp.hizb-australia.org hizb-australia.org. 103.9.171.7
  2695. [*] mail.hizb-australia.org 103.9.171.7
  2696. [*] www2.hizb-australia.org hizb-australia.org. 103.9.171.7
  2697. [INFO] Possible abuse mails are:
  2698. [*] [email protected]
  2699. [*] [email protected]
  2700. [INFO] NO PAC (Proxy Auto Configuration) file FOUND
  2701. [ALERT] robots.txt file FOUND in http://www.hizb-australia.org/robots.txt
  2702. [INFO] Checking for HTTP status codes recursively from http://www.hizb-australia.org/robots.txt
  2703. [INFO] Status code Folders
  2704. [INFO] Starting FUZZing in http://www.hizb-australia.org/FUzZzZzZzZz...
  2705. [INFO] Status code Folders
  2706. [*] 200 http://www.hizb-australia.org/index
  2707. [*] 200 http://www.hizb-australia.org/images
  2708. [*] 200 http://www.hizb-australia.org/download
  2709. [*] 200 http://www.hizb-australia.org/2006
  2710. [*] 200 http://www.hizb-australia.org/news
  2711. [*] 200 http://www.hizb-australia.org/crack
  2712. [*] 200 http://www.hizb-australia.org/serial
  2713. [*] 200 http://www.hizb-australia.org/warez
  2714. [*] 200 http://www.hizb-australia.org/full
  2715. [*] 200 http://www.hizb-australia.org/12
  2716. [ALERT] Look in the source code. It may contain passwords
  2717. [INFO] SAME content in http://www.hizb-australia.org/ AND http://103.9.171.7/
  2718. [INFO] Links found from http://www.hizb-australia.org/:
  2719. [INFO] GOOGLE has 269,000 results (0.24 seconds) about http://www.hizb-australia.org/
  2720. [INFO] BING shows 103.9.171.7 is shared with 11,200 hosts/vhosts
  2721. [INFO] Shodan detected the following opened ports on 103.9.171.7:
  2722. [*] 1
  2723. [*] 110
  2724. [*] 143
  2725. [*] 2082
  2726. [*] 2083
  2727. [*] 21
  2728. [*] 4
  2729. [*] 443
  2730. [*] 53
  2731. [*] 587
  2732. [*] 80
  2733. [*] 8888
  2734. [*] 993
  2735. [*] 995
  2736. [INFO] ------VirusTotal SECTION------
  2737. [INFO] VirusTotal passive DNS only stores address records. The following domains resolved to the given IP address:
  2738. [INFO] Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset:
  2739. [INFO] Latest files that are not detected by any antivirus solution and were downloaded by VirusTotal from the IP address provided:
  2740. [INFO] ------Alexa Rank SECTION------
  2741. [INFO] Percent of Visitors Rank in Country:
  2742. [INFO] Percent of Search Traffic:
  2743. [INFO] Percent of Unique Visits:
  2744. [INFO] Total Sites Linking In:
  2745. [*] Total Sites
  2746. [INFO] Useful links related to www.hizb-australia.org - 103.9.171.7:
  2747. [*] https://www.virustotal.com/pt/ip-address/103.9.171.7/information/
  2748. [*] https://www.hybrid-analysis.com/search?host=103.9.171.7
  2749. [*] https://www.shodan.io/host/103.9.171.7
  2750. [*] https://www.senderbase.org/lookup/?search_string=103.9.171.7
  2751. [*] https://www.alienvault.com/open-threat-exchange/ip/103.9.171.7
  2752. [*] http://pastebin.com/search?q=103.9.171.7
  2753. [*] http://urlquery.net/search.php?q=103.9.171.7
  2754. [*] http://www.alexa.com/siteinfo/www.hizb-australia.org
  2755. [*] http://www.google.com/safebrowsing/diagnostic?site=www.hizb-australia.org
  2756. [*] https://censys.io/ipv4/103.9.171.7
  2757. [*] https://www.abuseipdb.com/check/103.9.171.7
  2758. [*] https://urlscan.io/search/#103.9.171.7
  2759. [*] https://github.com/search?q=103.9.171.7&type=Code
  2760. [INFO] Useful links related to AS45638 - 103.9.170.0/23:
  2761. [*] http://www.google.com/safebrowsing/diagnostic?site=AS:45638
  2762. [*] https://www.senderbase.org/lookup/?search_string=103.9.170.0/23
  2763. [*] http://bgp.he.net/AS45638
  2764. [*] https://stat.ripe.net/AS45638
  2765. [INFO] Date: 26/08/19 | Time: 01:09:13
  2766. [INFO] Total time: 1 minute(s) and 19 second(s)
  2767. #######################################################################################################################################
  2768. [-] Date & Time: 26/08/2019 01:00:47
  2769. [I] Threads: 5
  2770. [-] Target: http://www.hizb-australia.org (103.9.171.7)
  2771. [M] Website Not in HTTPS: http://www.hizb-australia.org
  2772. [I] Server: LiteSpeed
  2773. [I] X-Powered-By: PHP/5.6.40
  2774. [L] X-Frame-Options: Not Enforced
  2775. [I] Strict-Transport-Security: Not Enforced
  2776. [I] X-Content-Security-Policy: Not Enforced
  2777. [I] X-Content-Type-Options: Not Enforced
  2778. [L] Robots.txt Found: http://www.hizb-australia.org/robots.txt
  2779. [I] CMS Detection: WordPress
  2780. [I] Wordpress Theme: Lucid
  2781. [-] WordPress usernames identified:
  2782. [M] AbuHamza
  2783. [M] Editor
  2784. [M] abuhamza
  2785. [M] buHamza
  2786. [M] editor
  2787. [M] fitrah
  2788. [M] XML-RPC services are enabled
  2789. #######################################################################################################################################
  2790. Anonymous JTSEC #OpISIS Full Recon #3
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!