API tools faq
paste
marys

online-jihad/exploitation

marys
Jan 10th, 2015
592
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.47 KB | None | 0 0
raw download clone embed print report
  1. SSL EXPLOITATION TEST . BY ANON-NINJA-CAT 'SEE ANON-CONE-CAT FOR CLEARANCE & ANON-INFOSEC-CAT & ANON-LULZ-CAT & ANON-ANTISEC-CAT TO ACCESS THE CYBER-HIVE '
  2. BEWARE ANON-GHOST-CAT & ANON-TOXIC-CAT ARE TRACKING ALL CONNECTIONS.
  3.  
  4. WE ARE ANONYMOUS
  5. WE ARE LEGION
  6. WE ARE GHOSTS OF THE CYBER-HIVE
  7. WE OWN THE MATRIX .
  8. WE ARE WORLDWIDE.
  9.  
  10. FOR PARIS & THE WORLD <3 <3 <3
  11.  
  12. #OpCharlieHebdo
  13.  
  14. http://online-jihad.com/
  15.  
  16. IP Address 76.74.254.120
  17.  
  18. Server Type nginx
  19.  
  20. The WordPress "http://online-jihad.com/readme.html" file exists.
  21.  
  22. WordPress version "2.7" found from data.
  23.  
  24. Sitemap: http://online-jihad.com/sitemap.xml
  25. Sitemap: http://online-jihad.com/news-sitemap.xml
  26.  
  27. User-agent: IRLbot
  28. Crawl-delay: 3600
  29.  
  30. User-agent: *
  31. Disallow: /next/
  32.  
  33. User-agent: *
  34. Disallow: /mshots/v1/
  35.  
  36. # har har
  37. User-agent: *
  38. Disallow: /activate/
  39.  
  40. User-agent: *
  41. Disallow: /wp-login.php
  42.  
  43. User-agent: *
  44. Disallow: /signup/
  45.  
  46. User-agent: *
  47. Disallow: /related-tags.php
  48.  
  49. User-agent: *
  50. Disallow: /public.api/
  51.  
  52. # MT refugees
  53. User-agent: *
  54. Disallow: /cgi-bin/
  55.  
  56. User-agent: *
  57. Disallow: /wp-admin/
  58.  
  59.  
  60. scan report for www.online-jihad.com (192.0.80.250)
  61. Host is up (0.13s latency).
  62. Other addresses for www.online-jihad.com (not scanned): 192.0.81.250 66.155.9.238 66.155.11.238 76.74.254.120 76.74.254.123
  63. PORT STATE SERVICE
  64. 80/tcp open http
  65. 443/tcp open https
  66.  
  67. The remote network has an active filter.
  68.  
  69. The target site has no DNS wildcard, and the contents of http://www.online-jihad.com/ differ from the contents of http://online-jihad.com.
  70.  
  71. GET http://online-jihad.com/wp-admin/css/farbtastic.css HTTP/1.1
  72. Host: online-jihad.com
  73.  
  74. The URL "http://online-jihad.com/" has the following allowed methods, which include DAV methods: *, ACL, BASELINE_CONTROL, CHECKIN, CHECKOUT, CONNECT, COPY, DEBUG, GET, HEAD, INDEX, INVALID, INVOKE, LABEL, LINK, LOCK, MERGE, MKACTIVITY, MKCOL, MKDIR, MKWORKSPACE, MOVE, NOTIFY, OPTIONS, PATCH, PIN, POLL, POST, PROPFIND, PROPPATCH, REPLY, REPORT, RMDIR, SEARCH, SHOWMETHOD, SPACEJUMP, SUBSCRIBE, SUBSCRIPTIONS, TEXTSEARCH, TRACK, UNCHECKOUT, UNLINK, UNLOCK, UNSUBSCRIBE, VERSION_CO
  75. =======================================================================================================================================================
  76. BACKDOORS: :) this could indicate that the server was hacked. ( i think so )
  77. --------
  78.  
  79. A web backdoor was found at: "http://online-jihad.com/r57.php"; (lulz)
  80.  
  81. GET http://online-jihad.com/2007/06/10/remote-controlled-cars/ HTTP/1.1
  82. Host: online-jihad.com
  83. -----------------------------------------------------------------------
  84. A web backdoor was found at: "http://online-jihad.com/c100.php"; (lulz)
  85.  
  86. GET http://online-jihad.com/2007/02/14/chinook-helikopter-abschuss-im-irak-%e2%80%93-al-furqan/ HTTP/1.1
  87. Host: online-jihad.com
  88. ------------------------------------------------------------------------
  89. A web backdoor was found at: "http://online-jihad.com/c99.php"; (lulz)
  90.  
  91. GET http://online-jihad.com/2007/02/14/chinook-helikopter-abschuss-im-irak-%e2%80%93-al-furqan/ HTTP/1.1
  92. Host: online-jihad.com
  93.  
  94. --------------------------------------------------------------------------------------------------------------------------------------------
  95. Testing SSL server online-jihad.com on port 443
  96.  
  97. Supported Server Cipher(s):
  98.  
  99. Accepted TLSv1 256 bits AES256-SHA
  100. Accepted TLSv1 128 bits AES128-SHA
  101.  
  102. Prefered Server Cipher(s):
  103. TLSv1 128 bits AES128-SHA
  104.  
  105. SSL Certificate:
  106. Version: 2
  107. Serial Number: -4294967295
  108. Signature Algorithm: sha256WithRSAEncryption
  109. Issuer: /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
  110. Not valid before: Apr 14 18:09:05 2014 GMT
  111. Not valid after: Oct 14 11:29:26 2015 GMT
  112. Subject: /OU=Domain Control Validated/CN=*.wordpress.com
  113. Public Key Algorithm: rsaEncryption
  114. RSA Public Key: (2048 bit)
  115. Modulus (2048 bit):
  116. 00:c3:8b:a8:b1:25:40:89:b0:40:52:8c:ab:75:28:
  117. ff:76:24:f5:2b:95:7a:e5:58:90:35:53:66:90:79:
  118. f0:f8:99:09:ee:aa:d9:ff:24:68:84:e6:85:0a:05:
  119. 7c:53:2f:e3:8e:16:ab:42:bd:93:bd:9a:1c:ad:58:
  120. 86:a1:29:53:b7:0d:bc:46:71:7d:3a:d6:fa:e6:ee:
  121. 52:be:77:89:99:1f:61:2e:e3:39:11:d8:76:41:ae:
  122. 28:16:69:ca:c2:c9:f3:f9:3e:0e:6e:13:b8:e4:30:
  123. 18:dc:c4:29:a9:6e:02:e5:9d:59:dd:97:98:81:21:
  124. 78:3d:a4:ce:56:1e:cb:b2:73:be:a5:e1:a7:ac:26:
  125. 8c:25:61:28:3f:7a:e8:02:81:35:ca:0b:f1:63:ad:
  126. 31:d5:4f:21:19:91:d4:8d:85:20:dd:5d:15:31:b8:
  127. bc:a7:b8:60:f9:bb:4a:24:4d:43:e9:1e:32:e0:5f:
  128. 1d:bf:25:fd:9d:c7:1d:d1:8e:ae:86:67:7d:1e:9d:
  129. 25:67:66:b7:c6:7c:26:89:c0:80:0d:81:50:e1:82:
  130. 07:db:01:e8:18:49:bc:c6:81:5d:07:f6:ac:18:9c:
  131. 44:ef:8d:13:a4:0e:78:46:1e:b3:04:8e:12:a3:dc:
  132. 55:1f:55:4b:18:60:ab:41:c8:1c:d5:e8:82:0e:8e:
  133. da:f9
  134. Exponent: 65537 (0x10001)
  135. X509v3 Extensions:
  136. X509v3 Basic Constraints: critical
  137. CA:FALSE
  138. X509v3 Extended Key Usage:
  139. TLS Web Server Authentication, TLS Web Client Authentication
  140. X509v3 Key Usage: critical
  141. Digital Signature, Key Encipherment
  142. X509v3 CRL Distribution Points:
  143. URI:http://crl.godaddy.com/gdig2s1-42.crl
  144.  
  145. X509v3 Certificate Policies:
  146. Policy: 2.16.840.1.114413.1.7.23.1
  147. CPS: http://certificates.godaddy.com/repository/
  148.  
  149. Authority Information Access:
  150. OCSP - URI:http://ocsp.godaddy.com/
  151. CA Issuers - URI:http://certificates.godaddy.com/repository/gdig2.crt
  152.  
  153. X509v3 Authority Key Identifier:
  154. keyid:40:C2:BD:27:8E:CC:34:83:30:A2:33:D7:FB:6C:B3:F0:B4:2C:80:CE
  155.  
  156. X509v3 Subject Alternative Name:
  157. DNS:*.wordpress.com, DNS:wordpress.com
  158. X509v3 Subject Key Identifier:
  159. A3:20:87:F9:D0:25:53:32:0C:74:F5:9C:FE:0D:32:2E:81:A6:02:BE
  160.  
  161. -----------------------------------------------------------------------------------------------------------------
  162. ----- online-jihad.com -----
  163.  
  164.  
  165. Host's addresses:
  166. __________________
  167.  
  168. online-jihad.com 5 IN A 76.74.254.120
  169. online-jihad.com 5 IN A 76.74.254.123
  170. online-jihad.com 5 IN A 192.0.80.250
  171. online-jihad.com 5 IN A 192.0.81.250
  172. online-jihad.com 5 IN A 66.155.9.238
  173. online-jihad.com 5 IN A 66.155.11.238
  174.  
  175.  
  176. Name Servers:
  177. ______________
  178.  
  179. ns1.wordpress.com 5 IN A 192.0.80.93
  180. ns2.wordpress.com 5 IN A 69.174.248.148
  181. ns3.wordpress.com 5 IN A 207.198.112.47
  182. ---------------------------------------------------------------------------------------------------------------------
  183. online-jihad.com (66.155.9.238) Grade F Cert.
  184.  
  185.  
  186. Server:nginx
  187. IP Address:66.155.9.238
  188. Port:443
  189. Hostname:online-jihad.com
  190.  
  191. EXPLOITS:
  192.  
  193. Sessions may be vulnerable to BEAST attack
  194. Attackers may be able to decrypt the encrypted SSL traffic
  195.  
  196. Hostname in certificate and DNS name do not match
  197. Users will receive strong browser warnings
  198.  
  199. Server has not enabled HTTP Strict-Transport-Security
  200. Users may be exposed to man-in-the-middle attacks
  201.  
  202. Server configuration does not meet PCI/DSS guidelines
  203. This is a problem if you process credit card information
  204.  
  205. Server has not yet upgraded to a Extended Validation certificate
  206. Increase customer confidence by offering visitors the highest level of assurance.
  207.  
  208. SSL 2.0 Disabled:Pass
  209. SSL 3.0 Disabled:Pass
  210. TLS 1.0 Enabled:Pass
  211. TLS 1.1 Enabled:Pass
  212. TLS 1.2 Enabled:Pass
  213. Weak ciphersuites disabled:Pass
  214. Certificates configured correctly:Fail
  215. Secure renegotiation configured:Pass
  216. Session resumption configured:Pass
  217. BEAST Vulnerability:Fail
  218. OCSP Stapling:Pass
  219. PCI Compliant:Fail
  220. FIPS Compliant:Fail
  221. Forward Secrecy Supported:Pass
  222. Heartbleed Vulnerability:Pass
  223.  
  224. Strict Transport Security:Fail
  225. Mixed Content (HTTP and HTTPS):Timed Out
  226. Domain name resolves to IPv4 address:Pass
  227. Domain name resolves to IPv6 address:Fail
  228. ------------------------------------------------------------------------------------------------------------------
  229.  
  230. online-jihad.com (192.0.80.250) Grade F Cert.
  231.  
  232. Server:nginx
  233. IP Address:192.0.80.250
  234. Port:443
  235. Hostname:online-jihad.com
  236.  
  237. Sessions may be vulnerable to BEAST attack
  238. Attackers may be able to decrypt the encrypted SSL traffic
  239.  
  240. Hostname in certificate and DNS name do not match
  241. Users will receive strong browser warnings
  242.  
  243. Server has not enabled HTTP Strict-Transport-Security
  244. Users may be exposed to man-in-the-middle attacks
  245.  
  246. SSL 2.0 Disabled:Pass
  247. SSL 3.0 Disabled:Pass
  248. TLS 1.0 Enabled:Pass
  249. TLS 1.1 Enabled:Pass
  250. TLS 1.2 Enabled:Pass
  251. Weak ciphersuites disabled:Pass
  252. Certificates configured correctly:Fail
  253. Secure renegotiation configured:Pass
  254. Session resumption configured:Pass
  255. BEAST Vulnerability:Fail
  256. OCSP Stapling:Pass
  257. PCI Compliant:Fail
  258. FIPS Compliant:Fail
  259. Forward Secrecy Supported:Pass
  260. Heartbleed Vulnerability:Pass
  261.  
  262. Strict Transport Security:Fail
  263. Mixed Content (HTTP and HTTPS):Timed Out
  264. Domain name resolves to IPv4 address:Pass
  265. Domain name resolves to IPv6 address:Fail
  266. --------------------------------------------------------------------------------------------------------------------
  267.  
  268. online-jihad.com (192.0.81.250) Grade F Cert.
  269.  
  270. Server:nginx
  271. IP Address:192.0.81.250
  272. Port:443
  273. Hostname:online-jihad.com
  274.  
  275. Sessions may be vulnerable to BEAST attack
  276. Attackers may be able to decrypt the encrypted SSL traffic
  277.  
  278. Hostname in certificate and DNS name do not match
  279. Users will receive strong browser warnings
  280.  
  281. Server has not enabled HTTP Strict-Transport-Security
  282. Users may be exposed to man-in-the-middle attacks
  283.  
  284. Server configuration does not meet PCI/DSS guidelines
  285. This is a problem if you process credit card information
  286.  
  287. Server has not yet upgraded to a Extended Validation certificate
  288. Increase customer confidence by offering visitors the highest level of assurance.
  289.  
  290. SSL 2.0 Disabled:Pass
  291. SSL 3.0 Disabled:Pass
  292. TLS 1.0 Enabled:Pass
  293. TLS 1.1 Enabled:Pass
  294. TLS 1.2 Enabled:Pass
  295. Weak ciphersuites disabled:Pass
  296. Certificates configured correctly:Fail
  297. Secure renegotiation configured:Pass
  298. Session resumption configured:Pass
  299. BEAST Vulnerability:Fail
  300. OCSP Stapling:Pass
  301. PCI Compliant:Fail
  302. FIPS Compliant:Fail
  303. Forward Secrecy Supported:Pass
  304. Heartbleed Vulnerability:Pass
  305.  
  306. Strict Transport Security:Fail
  307. Mixed Content (HTTP and HTTPS):Timed Out
  308. Domain name resolves to IPv4 address:Pass
  309. Domain name resolves to IPv6 address:Fail
  310. ---------------------------------------------------------------------------------------------------------------------------
  311.  
  312. online-jihad.com (66.155.11.238) Grade F Cert.
  313.  
  314. Server:nginx
  315. IP Address:66.155.11.238
  316. Port:443
  317. Hostname:online-jihad.com
  318.  
  319. Sessions may be vulnerable to BEAST attack
  320. Attackers may be able to decrypt the encrypted SSL traffic
  321.  
  322. Hostname in certificate and DNS name do not match
  323. Users will receive strong browser warnings
  324.  
  325. Server has not enabled HTTP Strict-Transport-Security
  326. Users may be exposed to man-in-the-middle attacks
  327.  
  328. Server configuration does not meet PCI/DSS guidelines
  329. This is a problem if you process credit card information
  330.  
  331. SSL 2.0 Disabled:Pass
  332. SSL 3.0 Disabled:Pass
  333. TLS 1.0 Enabled:Pass
  334. TLS 1.1 Enabled:Pass
  335. TLS 1.2 Enabled:Pass
  336. Weak ciphersuites disabled:Pass
  337. Certificates configured correctly:Fail
  338. Secure renegotiation configured:Pass
  339. Session resumption configured:Pass
  340. BEAST Vulnerability:Fail
  341. OCSP Stapling:Pass
  342. PCI Compliant:Fail
  343. FIPS Compliant:Fail
  344. Forward Secrecy Supported:Pass
  345. Heartbleed Vulnerability:Pass
  346.  
  347. Strict Transport Security:Fail
  348. Mixed Content (HTTP and HTTPS):Timed Out
  349. Domain name resolves to IPv4 address:Pass
  350. Domain name resolves to IPv6 address:Fail
  351. ----------------------------------------------------------------------------------------------------------------------
  352.  
  353. online-jihad.com (76.74.254.123) Grade F Cert.
  354.  
  355. Server:nginx
  356. IP Address:76.74.254.123
  357. Port:443
  358. Hostname:online-jihad.com
  359.  
  360. Sessions may be vulnerable to BEAST attack
  361. Attackers may be able to decrypt the encrypted SSL traffic
  362.  
  363. Hostname in certificate and DNS name do not match
  364. Users will receive strong browser warnings
  365.  
  366. Server has not enabled HTTP Strict-Transport-Security
  367. Users may be exposed to man-in-the-middle attacks
  368.  
  369. Server configuration does not meet PCI/DSS guidelines
  370. This is a problem if you process credit card information
  371.  
  372. SSL 2.0 Disabled:Pass
  373. SSL 3.0 Disabled:Pass
  374. TLS 1.0 Enabled:Pass
  375. TLS 1.1 Enabled:Pass
  376. TLS 1.2 Enabled:Pass
  377. Weak ciphersuites disabled:Pass
  378. Certificates configured correctly:Fail
  379. Secure renegotiation configured:Pass
  380. Session resumption configured:Pass
  381. BEAST Vulnerability:Fail
  382. OCSP Stapling:Pass
  383. PCI Compliant:Fail
  384. FIPS Compliant:Fail
  385. Forward Secrecy Supported:Pass
  386. Heartbleed Vulnerability:Pass
  387.  
  388. Strict Transport Security:Fail
  389. Mixed Content (HTTP and HTTPS):Timed Out
  390. Domain name resolves to IPv4 address:Pass
  391. Domain name resolves to IPv6 address:Fail
  392. ---------------------------------------------------------------------------------------------------------------------
  393.  
  394. online-jihad.com (76.74.254.120) Grade F Cert.
  395.  
  396. Server:nginx
  397. IP Address:76.74.254.120
  398. Port:443
  399. Hostname:online-jihad.com
  400.  
  401. Sessions may be vulnerable to BEAST attack
  402. Attackers may be able to decrypt the encrypted SSL traffic
  403.  
  404. Hostname in certificate and DNS name do not match
  405. Users will receive strong browser warnings
  406.  
  407. Server has not enabled HTTP Strict-Transport-Security
  408. Users may be exposed to man-in-the-middle attacks
  409.  
  410. Server configuration does not meet PCI/DSS guidelines
  411. This is a problem if you process credit card information
  412.  
  413. SSL 2.0 Disabled:Pass
  414. SSL 3.0 Disabled:Pass
  415. TLS 1.0 Enabled:Pass
  416. TLS 1.1 Enabled:Pass
  417. TLS 1.2 Enabled:Pass
  418. Weak ciphersuites disabled:Pass
  419. Certificates configured correctly:Fail
  420. Secure renegotiation configured:Pass
  421. Session resumption configured:Pass
  422. BEAST Vulnerability:Fail
  423. OCSP Stapling:Pass
  424. PCI Compliant:Fail
  425. FIPS Compliant:Fail
  426. Forward Secrecy Supported:Pass
  427. Heartbleed Vulnerability:Pass
  428.  
  429. Strict Transport Security:Fail
  430. Mixed Content (HTTP and HTTPS):Timed Out
  431. Domain name resolves to IPv4 address:Pass
  432. Domain name resolves to IPv6 address:Fail
  433. ---------------------------------------------------------------------------------------------------------------------
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!