JTSEC1333

Anonymous JTSEC #OpWhales Full Recon #34

Aug 16th, 2019
1,223
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 94.61 KB | None | 0 0
  1. #######################################################################################################################################
  2. =======================================================================================================================================
  3. Hostname www.maruzenshowa.co.jp ISP Internet Initiative Japan Inc.
  4. Continent Asia Flag
  5. JP
  6. Country Japan Country Code JP
  7. Region Tokyo Local time 16 Aug 2019 20:01 JST
  8. City Narimasu Postal Code 175-0094
  9. IP Address 210.130.168.131 Latitude 35.784
  10. Longitude 139.632
  11. =======================================================================================================================================
  12. #######################################################################################################################################
  13. > www.maruzenshowa.co.jp
  14. Server: 38.132.106.139
  15. Address: 38.132.106.139#53
  16.  
  17. Non-authoritative answer:
  18. www.maruzenshowa.co.jp canonical name = 131.168.130.210.wh.2iij.net.
  19. Name: 131.168.130.210.wh.2iij.net
  20. Address: 210.130.168.131
  21. >
  22. #######################################################################################################################################
  23. [ JPRS database provides information on network administration. Its use is ]
  24. [ restricted to network administration purposes. For further information, ]
  25. [ use 'whois -h whois.jprs.jp help'. To suppress Japanese output, add'/e' ]
  26. [ at the end of command, e.g. 'whois -h whois.jprs.jp xxx/e'. ]
  27.  
  28. Domain Information:
  29. a. [Domain Name] MARUZENSHOWA.CO.JP
  30. g. [Organization] MARUZEN SHOWA UNYU CO., LTD.
  31. l. [Organization Type] CO.,LTD
  32. m. [Administrative Contact] TM30647JP
  33. n. [Technical Contact] TM30647JP
  34. p. [Name Server] dns.maruzenshowa.co.jp
  35. p. [Name Server] ns.center.web.ad.jp
  36. s. [Signing Key]
  37. [State] Connected (2019/10/31)
  38. [Registered Date] 1997/10/17
  39. [Connected Date] 1997/10/23
  40. [Last Update] 2018/11/01 01:04:27 (JST)
  41. #######################################################################################################################################
  42. [+] Target : www.maruzenshowa.co.jp
  43.  
  44. [+] IP Address : 210.130.168.131
  45.  
  46. [+] Headers :
  47.  
  48. [+] Date : Fri, 16 Aug 2019 11:07:46 GMT
  49. [+] Server : Apache
  50. [+] Last-Modified : Tue, 13 Aug 2019 00:21:03 GMT
  51. [+] ETag : "85f046-67c5-58ff49da34355"
  52. [+] Accept-Ranges : bytes
  53. [+] Content-Length : 26565
  54. [+] Keep-Alive : timeout=5, max=100
  55. [+] Connection : Keep-Alive
  56. [+] Content-Type : text/html
  57.  
  58. [+] SSL Certificate Information :
  59.  
  60. [+] countryName : JP
  61. [+] organizationalUnitName : Domain Control Validated
  62. [+] commonName : www.maruzenshowa.co.jp
  63. [+] countryName : BE
  64. [+] organizationName : GlobalSign nv-sa
  65. [+] commonName : GlobalSign RSA DV SSL CA 2018
  66. [+] Version : 3
  67. [+] Serial Number : 63C047CEDFB381C92B12C115
  68. [+] Not Before : Aug 8 00:25:39 2019 GMT
  69. [+] Not After : Aug 15 04:03:49 2021 GMT
  70. [+] OCSP : ('http://ocsp.globalsign.com/gsrsadvsslca2018',)
  71. [+] subject Alt Name : (('DNS', 'www.maruzenshowa.co.jp'), ('DNS', 'maruzenshowa.co.jp'))
  72. [+] CA Issuers : ('http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt',)
  73. [+] CRL Distribution Points : ('http://crl.globalsign.com/gsrsadvsslca2018.crl',)
  74.  
  75. [+] Whois Lookup :
  76.  
  77. [+] NIR : {'query': '210.130.168.131', 'raw': None, 'nets': [{'cidr': '210.130.168.0/24', 'name': 'IIJ Internet', 'handle': 'IIJNET', 'range': '210.130.168.1 - 210.130.168.255', 'country': 'JP', 'address': None, 'postal_code': None, 'nameservers': ['ns-e.secureweb.jp', 'ns-w.secureweb.jp'], 'created': None, 'updated': '2015-09-07T01:32:03', 'contacts': {'admin': {'email': '[email protected]', 'organization': 'Internet Initiative Japan Inc.', 'division': '', 'phone': '03-5205-6500', 'fax': '', 'updated': '2014-07-22T03:02:04'}, 'tech': {'email': '[email protected]', 'organization': 'Internet Initiative Japan Inc.', 'division': '', 'phone': '03-5205-6500', 'fax': '', 'updated': '2014-07-22T03:02:04'}}}]}
  78. [+] ASN Registry : apnic
  79. [+] ASN : 2497
  80. [+] ASN CIDR : 210.130.0.0/16
  81. [+] ASN Country Code : JP
  82. [+] ASN Date : 1996-08-16
  83. [+] ASN Description : IIJ Internet Initiative Japan Inc., JP
  84. [+] cidr : 210.128.0.0/13
  85. [+] name : JPNIC-NET-JP
  86. [+] handle : JNIC1-AP
  87. [+] range : 210.128.0.0 - 210.135.255.255
  88. [+] description : Japan Network Information Center
  89. [+] country : JP
  90. [+] state : None
  91. [+] city : None
  92. [+] address : Urbannet-Kanda Bldg 4F, 3-6-2 Uchi-Kanda
  93. Chiyoda-ku, Tokyo 101-0047, Japan
  94. [+] postal_code : None
  95. [+] emails : ['[email protected]']
  96. [+] created : None
  97. [+] updated : None
  98.  
  99. [+] Crawling Target...
  100.  
  101. [+] Looking for robots.txt........[ Found ]
  102. [+] Extracting robots Links.......[ 0 ]
  103. [+] Looking for sitemap.xml.......[ Found ]
  104. [+] Extracting sitemap Links......[ 716 ]
  105. [+] Extracting CSS Links..........[ 6 ]
  106. [+] Extracting Javascript Links...[ 9 ]
  107. [+] Extracting Internal Links.....[ 1 ]
  108. [+] Extracting External Links.....[ 4 ]
  109. [+] Extracting Images.............[ 51 ]
  110.  
  111. [+] Total Links Extracted : 787
  112.  
  113. [+] Dumping Links in /opt/FinalRecon/dumps/www.maruzenshowa.co.jp.dump
  114. [+] Completed!
  115. #######################################################################################################################################
  116. [+] Starting At 2019-08-16 07:08:56.134865
  117. [+] Collecting Information On: https://www.maruzenshowa.co.jp/
  118. [#] Status: 200
  119. --------------------------------------------------
  120. [#] Web Server Detected: Apache
  121. [!] X-Frame-Options Headers not detect! target might be vulnerable Click Jacking
  122. - Date: Fri, 16 Aug 2019 11:09:00 GMT
  123. - Server: Apache
  124. - Last-Modified: Tue, 13 Aug 2019 00:21:03 GMT
  125. - ETag: "85f046-67c5-58ff49da34355"
  126. - Accept-Ranges: bytes
  127. - Content-Length: 26565
  128. - Keep-Alive: timeout=5, max=100
  129. - Connection: Keep-Alive
  130. - Content-Type: text/html
  131. --------------------------------------------------
  132. [#] Finding Location..!
  133. [#] message: invalid query
  134. [#] query: maruzenshowa.co.jp
  135. [#] status: fail
  136. --------------------------------------------------
  137. [x] Didn't Detect WAF Presence on: https://www.maruzenshowa.co.jp/
  138. --------------------------------------------------
  139. [#] Starting Reverse DNS
  140. [-] Failed ! Fail
  141. --------------------------------------------------
  142. [!] Scanning Open Port
  143. --------------------------------------------------
  144. [+] Collecting Information Disclosure!
  145. [#] Detecting sitemap.xml file
  146. [!] sitemap.xml File Found: https://www.maruzenshowa.co.jp//sitemap.xml
  147. [#] Detecting robots.txt file
  148. [!] robots.txt File Found: https://www.maruzenshowa.co.jp/not_found.html
  149. [#] Detecting GNU Mailman
  150. [-] GNU Mailman App Not Detected!?
  151. --------------------------------------------------
  152. [+] Crawling Url Parameter On: https://www.maruzenshowa.co.jp/
  153. --------------------------------------------------
  154. [#] Searching Html Form !
  155. [+] Html Form Discovered
  156. [#] action: https://search.yahoo.co.jp/search
  157. [#] class: ['pc_only']
  158. [#] id: None
  159. [#] method: get
  160. --------------------------------------------------
  161. [!] Found 8 dom parameter
  162. [#] https://www.maruzenshowa.co.jp//#globalNav
  163. [#] https://www.maruzenshowa.co.jp//#mainContents
  164. [#] https://www.maruzenshowa.co.jp//#footContainer
  165. [#] https://www.maruzenshowa.co.jp//ir/library.html#anchor02
  166. [#] https://www.maruzenshowa.co.jp//ir/library.html#anchor01
  167. [#] https://www.maruzenshowa.co.jp//ir/library.html#anchor02
  168. [#] https://www.maruzenshowa.co.jp//ir/library.html#anchor03
  169. [#] https://www.maruzenshowa.co.jp//service/function/3pl/about.html#anchor01
  170. --------------------------------------------------
  171. [!] 1 Internal Dynamic Parameter Discovered
  172. [+] https://www.maruzenshowa.co.jp/contact/index.php/form/input?item=8
  173. --------------------------------------------------
  174. [-] No external Dynamic Paramter Found!?
  175. --------------------------------------------------
  176. [!] 114 Internal links Discovered
  177. [+] https://www.maruzenshowa.co.jp/favicon.ico
  178. [+] https://www.maruzenshowa.co.jp/favicon.ico
  179. [+] https://www.maruzenshowa.co.jp/apple-touch-icon.png
  180. [+] https://www.maruzenshowa.co.jp//common/css/import.css
  181. [+] https://www.maruzenshowa.co.jp//common/css/print.css
  182. [+] https://www.maruzenshowa.co.jp//common/css/fontsize_medium.css
  183. [+] https://www.maruzenshowa.co.jp//common/css/fontsize_large.css
  184. [+] https://www.maruzenshowa.co.jp//common/css/category/sitetop.css
  185. [+] https://www.maruzenshowa.co.jp//common/css/smart.css
  186. [+] https://www.maruzenshowa.co.jp//index.html
  187. [+] https://www.maruzenshowa.co.jp//ch/index.html
  188. [+] https://www.maruzenshowa.co.jp//en/index.html
  189. [+] https://www.maruzenshowa.co.jp//csr/index.html
  190. [+] https://www.maruzenshowa.co.jp//ir/index.html
  191. [+] https://www.maruzenshowa.co.jp//recruit/index.html
  192. [+] https://www.maruzenshowa.co.jp//faq/index.html
  193. [+] https://www.maruzenshowa.co.jp//sitemap/index.html
  194. [+] https://www.maruzenshowa.co.jp//service/index.html
  195. [+] https://www.maruzenshowa.co.jp//strength/index.html
  196. [+] https://www.maruzenshowa.co.jp//case/index.html
  197. [+] https://www.maruzenshowa.co.jp//base/index.html
  198. [+] https://www.maruzenshowa.co.jp//corporate/index.html
  199. [+] https://www.maruzenshowa.co.jp//contact/index.html
  200. [+] https://www.maruzenshowa.co.jp//service/function/3pl/about.html
  201. [+] https://www.maruzenshowa.co.jp//service/function/storage.html
  202. [+] https://www.maruzenshowa.co.jp//service/function/global/index.html
  203. [+] https://www.maruzenshowa.co.jp//service/function/yard_operation.html
  204. [+] https://www.maruzenshowa.co.jp//service/function/harbor/index.html
  205. [+] https://www.maruzenshowa.co.jp//service/function/machine/engineering.html
  206. [+] https://www.maruzenshowa.co.jp//service/function/truck/index.html
  207. [+] https://www.maruzenshowa.co.jp//service/function/office_relocation.html
  208. [+] https://www.maruzenshowa.co.jp//service/function/railroad.html
  209. [+] https://www.maruzenshowa.co.jp//service/function/moving/domestic.html
  210. [+] https://www.maruzenshowa.co.jp//service/industry/petrochemistry.html
  211. [+] https://www.maruzenshowa.co.jp//service/industry/construction_equipment.html
  212. [+] https://www.maruzenshowa.co.jp//service/industry/steel.html
  213. [+] https://www.maruzenshowa.co.jp//service/industry/building_material.html
  214. [+] https://www.maruzenshowa.co.jp//service/function/truck/precision.html
  215. [+] https://www.maruzenshowa.co.jp//service/industry/apparel.html
  216. [+] https://www.maruzenshowa.co.jp//service/industry/household_goods.html
  217. [+] https://www.maruzenshowa.co.jp//service/function/truck/precision.html
  218. [+] https://www.maruzenshowa.co.jp//service/function/global/overseas_plant.html
  219. [+] https://www.maruzenshowa.co.jp//service/function/truck/heavy_load.html
  220. [+] https://www.maruzenshowa.co.jp//csr/eco/eco.html
  221. [+] https://www.maruzenshowa.co.jp//service/function/truck/hazardous_materials.html
  222. [+] https://www.maruzenshowa.co.jp//service/purpose/efficiency.html
  223. [+] https://www.maruzenshowa.co.jp//service/function/office_relocation.html
  224. [+] https://www.maruzenshowa.co.jp//service/purpose/outsourcing.html
  225. [+] https://www.maruzenshowa.co.jp//service/function/machine/engineering.html
  226. [+] https://www.maruzenshowa.co.jp//info/release20190709_01.html
  227. [+] https://www.maruzenshowa.co.jp//info/index.html
  228. [+] https://www2.maruzenshowa.co.jp/mz3pl_open/
  229. [+] https://www2.maruzenshowa.co.jp/mz3pl_open/index2_JP.html
  230. [+] https://www2.maruzenshowa.co.jp/global/
  231. [+] https://www.maruzenshowa.co.jp//corporate/introduction.html
  232. [+] https://www.maruzenshowa.co.jp//service/attention.html
  233. [+] https://www.maruzenshowa.co.jp//base/domestic/hokkaido_tohoku/index.html
  234. [+] https://www.maruzenshowa.co.jp//base/domestic/kanto/index.html
  235. [+] https://www.maruzenshowa.co.jp//base/domestic/chubu/index.html
  236. [+] https://www.maruzenshowa.co.jp//base/domestic/kansai/index.html
  237. [+] https://www.maruzenshowa.co.jp//base/domestic/chugoku_shikoku/index.html
  238. [+] https://www.maruzenshowa.co.jp//base/domestic/kyushu/index.html
  239. [+] https://www.maruzenshowa.co.jp//base/global/east_asia/index.html
  240. [+] https://www.maruzenshowa.co.jp//base/global/americas/index.html
  241. [+] https://www.maruzenshowa.co.jp//base/global/southeast_asia/index.html
  242. [+] https://www.maruzenshowa.co.jp//base/global/europe/index.html
  243. [+] https://www.maruzenshowa.co.jp//service/warehouse.html
  244. [+] https://www.maruzenshowa.co.jp//solution/index.html
  245. [+] https://www.maruzenshowa.co.jp//service/function/harbor/customs_clearance/aeo.html
  246. [+] https://www.maruzenshowa.co.jp//csr/isms/iso27001.html
  247. [+] https://www.maruzenshowa.co.jp//service/index.html
  248. [+] https://www.maruzenshowa.co.jp//service/function/3pl/about.html
  249. [+] https://www.maruzenshowa.co.jp//service/function/global/index.html
  250. [+] https://www.maruzenshowa.co.jp//service/function/harbor/index.html
  251. [+] https://www.maruzenshowa.co.jp//service/function/truck/index.html
  252. [+] https://www.maruzenshowa.co.jp//service/function/railroad.html
  253. [+] https://www.maruzenshowa.co.jp//service/function/storage.html
  254. [+] https://www.maruzenshowa.co.jp//service/function/yard_operation.html
  255. [+] https://www.maruzenshowa.co.jp//service/function/machine/engineering.html
  256. [+] https://www.maruzenshowa.co.jp//service/function/office_relocation.html
  257. [+] https://www.maruzenshowa.co.jp//service/function/moving/domestic.html
  258. [+] https://www.maruzenshowa.co.jp//strength/index.html
  259. [+] https://www.maruzenshowa.co.jp//strength/solution.html
  260. [+] https://www.maruzenshowa.co.jp//strength/operation.html
  261. [+] https://www.maruzenshowa.co.jp//strength/network.html
  262. [+] https://www.maruzenshowa.co.jp//strength/it.html
  263. [+] https://www.maruzenshowa.co.jp//base/index.html
  264. [+] https://www.maruzenshowa.co.jp//case/index.html
  265. [+] https://www.maruzenshowa.co.jp//case/case01.html
  266. [+] https://www.maruzenshowa.co.jp//case/case02.html
  267. [+] https://www.maruzenshowa.co.jp//case/case03.html
  268. [+] https://www.maruzenshowa.co.jp//corporate/index.html
  269. [+] https://www.maruzenshowa.co.jp//corporate/message.html
  270. [+] https://www.maruzenshowa.co.jp//corporate/profile.html
  271. [+] https://www.maruzenshowa.co.jp//corporate/history.html
  272. [+] https://www.maruzenshowa.co.jp//corporate/business.html
  273. [+] https://www.maruzenshowa.co.jp//corporate/organization.html
  274. [+] https://www.maruzenshowa.co.jp//corporate/philosophy.html
  275. [+] https://www.maruzenshowa.co.jp//corporate/yakkan.html
  276. [+] https://www.maruzenshowa.co.jp//corporate/internal_control.html
  277. [+] https://www.maruzenshowa.co.jp//corporate/network/index.html
  278. [+] https://www.maruzenshowa.co.jp//corporate/group.html
  279. [+] https://www.maruzenshowa.co.jp//corporate/introduction.html
  280. [+] https://www.maruzenshowa.co.jp//csr/index.html
  281. [+] https://www.maruzenshowa.co.jp//ir/index.html
  282. [+] https://www.maruzenshowa.co.jp//recruit/index.html
  283. [+] https://www.maruzenshowa.co.jp//faq/index.html
  284. [+] https://www.maruzenshowa.co.jp//contact/index.html
  285. [+] https://www.maruzenshowa.co.jp//terms/index.html
  286. [+] https://www.maruzenshowa.co.jp//privacy/index.html
  287. [+] https://www.maruzenshowa.co.jp//privacy/specific.html
  288. [+] https://www.maruzenshowa.co.jp//csr/safety/gmark.html
  289. [+] https://www.maruzenshowa.co.jp//csr/quality/iso9001.html
  290. [+] https://www.maruzenshowa.co.jp//csr/eco/iso14001.html
  291. --------------------------------------------------
  292. [!] 2 External links Discovered
  293. [#] https://www.yahoo.co.jp/
  294. [#] https://get.adobe.com/jp/flashplayer
  295. --------------------------------------------------
  296. [#] Mapping Subdomain..
  297. [-] No Any Subdomain Found
  298. [!] Found 0 Subdomain
  299. --------------------------------------------------
  300. [!] Done At 2019-08-16 07:09:06.605548
  301. #######################################################################################################################################
  302. [i] Scanning Site: https://210.130.168.131
  303.  
  304.  
  305.  
  306. B A S I C I N F O
  307. ====================
  308.  
  309.  
  310. [+] Site Title: 丸全昭和運輸株式会社
  311. [+] IP address: 210.130.168.131
  312. [+] Web Server: Apache
  313. [+] CMS: Could Not Detect
  314. [+] Cloudflare: Not Detected
  315. [+] Robots File: Could NOT Find robots.txt!
  316.  
  317.  
  318.  
  319.  
  320. W H O I S L O O K U P
  321. ========================
  322.  
  323. [ JPNIC database provides information regarding IP address and ASN. Its use ]
  324. [ is restricted to network administration purposes. For further information, ]
  325. [ use 'whois -h whois.nic.ad.jp help'. To only display English output, ]
  326. [ add '/e' at the end of command, e.g. 'whois -h whois.nic.ad.jp xxx/e'. ]
  327.  
  328. Network Information:
  329. a. [Network Number] 210.130.168.0/24
  330. b. [Network Name] IIJNET
  331. g. [Organization] IIJ Internet
  332. m. [Administrative Contact] JP00010080
  333. n. [Technical Contact] JP00010080
  334. p. [Nameserver] ns-e.secureweb.jp
  335. p. [Nameserver] ns-w.secureweb.jp
  336. [Assigned Date] 2015/09/07
  337. [Return Date]
  338. [Last Update] 2015/09/07 10:32:03(JST)
  339.  
  340. Less Specific Info.
  341. ----------
  342. Internet Initiative Japan Inc.
  343. [Allocation] 210.130.0.0/16
  344.  
  345. More Specific Info.
  346. ----------
  347. No match!!
  348.  
  349.  
  350.  
  351.  
  352. G E O I P L O O K U P
  353. =========================
  354.  
  355. [i] IP Address: 210.130.168.131
  356. [i] Country: Japan
  357. [i] State: Tokyo
  358. [i] City: Nishiwaseda
  359. [i] Latitude: 35.705
  360. [i] Longitude: 139.6974
  361.  
  362.  
  363.  
  364.  
  365. H T T P H E A D E R S
  366. =======================
  367.  
  368.  
  369. [i] HTTP/1.1 200 OK
  370. [i] Date: Fri, 16 Aug 2019 11:08:47 GMT
  371. [i] Server: Apache
  372. [i] Last-Modified: Tue, 13 Aug 2019 00:21:03 GMT
  373. [i] ETag: "85f046-67c5-58ff49da34355"
  374. [i] Accept-Ranges: bytes
  375. [i] Content-Length: 26565
  376. [i] Connection: close
  377. [i] Content-Type: text/html
  378.  
  379.  
  380.  
  381.  
  382. D N S L O O K U P
  383. ===================
  384.  
  385. no records found
  386.  
  387.  
  388.  
  389. S U B N E T C A L C U L A T I O N
  390. ====================================
  391.  
  392. Address = 210.130.168.131
  393. Network = 210.130.168.131 / 32
  394. Netmask = 255.255.255.255
  395. Broadcast = not needed on Point-to-Point links
  396. Wildcard Mask = 0.0.0.0
  397. Hosts Bits = 0
  398. Max. Hosts = 1 (2^0 - 0)
  399. Host Range = { 210.130.168.131 - 210.130.168.131 }
  400.  
  401.  
  402.  
  403. N M A P P O R T S C A N
  404. ============================
  405.  
  406. Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-16 11:08 UTC
  407. Nmap scan report for www.maruzenshowa.co.jp (210.130.168.131)
  408. Host is up (0.17s latency).
  409.  
  410. PORT STATE SERVICE
  411. 21/tcp filtered ftp
  412. 22/tcp filtered ssh
  413. 23/tcp filtered telnet
  414. 80/tcp open http
  415. 110/tcp filtered pop3
  416. 143/tcp filtered imap
  417. 443/tcp open https
  418. 3389/tcp filtered ms-wbt-server
  419.  
  420. Nmap done: 1 IP address (1 host up) scanned in 2.86 seconds
  421.  
  422. #######################################################################################################################################
  423. [INFO] ------TARGET info------
  424. [*] TARGET: https://www.maruzenshowa.co.jp/
  425. [*] Same target https://www.maruzenshowa.co.jp/ was previously analyzed 1 time(s)
  426. [*] TARGET IP: 210.130.168.131
  427. [INFO] NO load balancer detected for www.maruzenshowa.co.jp...
  428. [*] DNS servers: 131.168.130.210.wh.2iij.net. ns-e.secureweb.jp.
  429. [*] TARGET server: Apache
  430. [*] CC: JP
  431. [*] Country: Japan
  432. [*] RegionCode: 13
  433. [*] RegionName: Tokyo
  434. [*] City: Shinjuku
  435. [*] ASN: AS2497
  436. [*] BGP_PREFIX: 210.130.0.0/16
  437. [*] ISP: IIJ Internet Initiative Japan Inc., JP
  438. [INFO] SSL/HTTPS certificate detected
  439. [*] Issuer: issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign RSA DV SSL CA 2018
  440. [*] Subject: subject=C = JP, OU = Domain Control Validated, CN = www.maruzenshowa.co.jp
  441. [INFO] DNS enumeration:
  442. [*] www2.maruzenshowa.co.jp 133.163.8.37
  443. [*] www3.maruzenshowa.co.jp 133.163.8.44
  444. [INFO] Possible abuse mails are:
  445. [INFO] NO PAC (Proxy Auto Configuration) file FOUND
  446. [ALERT] robots.txt file FOUND in http://www.maruzenshowa.co.jp/robots.txt
  447. [INFO] Checking for HTTP status codes recursively from http://www.maruzenshowa.co.jp/robots.txt
  448. [INFO] Status code Folders
  449. [INFO] Starting FUZZing in http://www.maruzenshowa.co.jp/FUzZzZzZzZz...
  450. [INFO] Status code Folders
  451. [*] 200 http://www.maruzenshowa.co.jp/index
  452. [*] 200 http://www.maruzenshowa.co.jp/images
  453. [*] 200 http://www.maruzenshowa.co.jp/download
  454. [*] 200 http://www.maruzenshowa.co.jp/2006
  455. [*] 200 http://www.maruzenshowa.co.jp/news
  456. [*] 200 http://www.maruzenshowa.co.jp/crack
  457. [*] 200 http://www.maruzenshowa.co.jp/serial
  458. [*] 200 http://www.maruzenshowa.co.jp/warez
  459. [*] 200 http://www.maruzenshowa.co.jp/full
  460. [*] 200 http://www.maruzenshowa.co.jp/12
  461. [ALERT] Look in the source code. It may contain passwords
  462.  
  463. Recherche 210.130.168.131
  464. Connexion HTTP à 210.130.168.131
  465. Envoi de la requête HTTP.
  466. Requête HTTP envoyée. Attente de réponse.
  467. HTTP/1.1 301 Moved Permanently
  468. Transfert de données terminé
  469. HTTP/1.1 301 Moved Permanently
  470. Utilisation de https://210.130.168.131/
  471. Recherche 210.130.168.131
  472. Connexion HTTPS à 210.130.168.131
  473.  
  474. lynx : accès impossible au fichier de départ http://210.130.168.131/
  475. [INFO] Links found from https://www.maruzenshowa.co.jp/ http://210.130.168.131/:
  476. [*] https://www2.maruzenshowa.co.jp/global/
  477. [*] https://www2.maruzenshowa.co.jp/mz3pl_open/
  478. [*] https://www2.maruzenshowa.co.jp/mz3pl_open/index2_JP.html
  479. [*] https://www.maruzenshowa.co.jp/base/domestic/chubu/index.html
  480. [*] https://www.maruzenshowa.co.jp/base/domestic/chugoku_shikoku/index.html
  481. [*] https://www.maruzenshowa.co.jp/base/domestic/hokkaido_tohoku/index.html
  482. [*] https://www.maruzenshowa.co.jp/base/domestic/kansai/index.html
  483. [*] https://www.maruzenshowa.co.jp/base/domestic/kanto/index.html
  484. [*] https://www.maruzenshowa.co.jp/base/domestic/kyushu/index.html
  485. [*] https://www.maruzenshowa.co.jp/base/global/americas/index.html
  486. [*] https://www.maruzenshowa.co.jp/base/global/east_asia/index.html
  487. [*] https://www.maruzenshowa.co.jp/base/global/europe/index.html
  488. [*] https://www.maruzenshowa.co.jp/base/global/southeast_asia/index.html
  489. [*] https://www.maruzenshowa.co.jp/base/index.html
  490. [*] https://www.maruzenshowa.co.jp/case/case01.html
  491. [*] https://www.maruzenshowa.co.jp/case/case02.html
  492. [*] https://www.maruzenshowa.co.jp/case/case03.html
  493. [*] https://www.maruzenshowa.co.jp/case/index.html
  494. [*] https://www.maruzenshowa.co.jp/ch/index.html
  495. [*] https://www.maruzenshowa.co.jp/contact/index.html
  496. [*] https://www.maruzenshowa.co.jp/contact/index.php/form/input?item=8
  497. [*] https://www.maruzenshowa.co.jp/corporate/business.html
  498. [*] https://www.maruzenshowa.co.jp/corporate/group.html
  499. [*] https://www.maruzenshowa.co.jp/corporate/history.html
  500. [*] https://www.maruzenshowa.co.jp/corporate/index.html
  501. [*] https://www.maruzenshowa.co.jp/corporate/internal_control.html
  502. [*] https://www.maruzenshowa.co.jp/corporate/introduction.html
  503. [*] https://www.maruzenshowa.co.jp/corporate/message.html
  504. [*] https://www.maruzenshowa.co.jp/corporate/network/index.html
  505. [*] https://www.maruzenshowa.co.jp/corporate/organization.html
  506. [*] https://www.maruzenshowa.co.jp/corporate/philosophy.html
  507. [*] https://www.maruzenshowa.co.jp/corporate/profile.html
  508. [*] https://www.maruzenshowa.co.jp/corporate/yakkan.html
  509. [*] https://www.maruzenshowa.co.jp/csr/eco/eco.html
  510. [*] https://www.maruzenshowa.co.jp/csr/index.html
  511. [*] https://www.maruzenshowa.co.jp/csr/isms/iso27001.html
  512. [*] https://www.maruzenshowa.co.jp/csr/safety/gmark.html
  513. [*] https://www.maruzenshowa.co.jp/en/index.html
  514. [*] https://www.maruzenshowa.co.jp/faq/index.html
  515. [*] https://www.maruzenshowa.co.jp/#footContainer
  516. [*] https://www.maruzenshowa.co.jp/#globalNav
  517. [*] https://www.maruzenshowa.co.jp/index.html
  518. [*] https://www.maruzenshowa.co.jp/info/index.html
  519. [*] https://www.maruzenshowa.co.jp/info/release20190709_01.html
  520. [*] https://www.maruzenshowa.co.jp/ir/index.html
  521. [*] https://www.maruzenshowa.co.jp/ir/library.html#anchor01
  522. [*] https://www.maruzenshowa.co.jp/ir/library.html#anchor02
  523. [*] https://www.maruzenshowa.co.jp/ir/library.html#anchor03
  524. [*] https://www.maruzenshowa.co.jp/#mainContents
  525. [*] https://www.maruzenshowa.co.jp/#Map
  526. [*] https://www.maruzenshowa.co.jp/#Map2
  527. [*] https://www.maruzenshowa.co.jp/#Map3
  528. [*] https://www.maruzenshowa.co.jp/privacy/index.html
  529. [*] https://www.maruzenshowa.co.jp/privacy/specific.html
  530. [*] https://www.maruzenshowa.co.jp/recruit/index.html
  531. [*] https://www.maruzenshowa.co.jp/service/attention.html
  532. [*] https://www.maruzenshowa.co.jp/service/function/3pl/about.html
  533. [*] https://www.maruzenshowa.co.jp/service/function/3pl/about.html#anchor01
  534. [*] https://www.maruzenshowa.co.jp/service/function/global/index.html
  535. [*] https://www.maruzenshowa.co.jp/service/function/global/overseas_plant.html
  536. [*] https://www.maruzenshowa.co.jp/service/function/harbor/customs_clearance/aeo.html
  537. [*] https://www.maruzenshowa.co.jp/service/function/harbor/index.html
  538. [*] https://www.maruzenshowa.co.jp/service/function/machine/engineering.html
  539. [*] https://www.maruzenshowa.co.jp/service/function/moving/domestic.html
  540. [*] https://www.maruzenshowa.co.jp/service/function/office_relocation.html
  541. [*] https://www.maruzenshowa.co.jp/service/function/railroad.html
  542. [*] https://www.maruzenshowa.co.jp/service/function/storage.html
  543. [*] https://www.maruzenshowa.co.jp/service/function/truck/hazardous_materials.html
  544. [*] https://www.maruzenshowa.co.jp/service/function/truck/heavy_load.html
  545. [*] https://www.maruzenshowa.co.jp/service/function/truck/index.html
  546. [*] https://www.maruzenshowa.co.jp/service/function/truck/precision.html
  547. [*] https://www.maruzenshowa.co.jp/service/function/yard_operation.html
  548. [*] https://www.maruzenshowa.co.jp/service/index.html
  549. [*] https://www.maruzenshowa.co.jp/service/industry/apparel.html
  550. [*] https://www.maruzenshowa.co.jp/service/industry/building_material.html
  551. [*] https://www.maruzenshowa.co.jp/service/industry/construction_equipment.html
  552. [*] https://www.maruzenshowa.co.jp/service/industry/household_goods.html
  553. [*] https://www.maruzenshowa.co.jp/service/industry/petrochemistry.html
  554. [*] https://www.maruzenshowa.co.jp/service/industry/steel.html
  555. [*] https://www.maruzenshowa.co.jp/service/purpose/efficiency.html
  556. [*] https://www.maruzenshowa.co.jp/service/purpose/outsourcing.html
  557. [*] https://www.maruzenshowa.co.jp/service/warehouse.html
  558. [*] https://www.maruzenshowa.co.jp/sitemap/index.html
  559. [*] https://www.maruzenshowa.co.jp/solution/index.html
  560. [*] https://www.maruzenshowa.co.jp/strength/index.html
  561. [*] https://www.maruzenshowa.co.jp/strength/it.html
  562. [*] https://www.maruzenshowa.co.jp/strength/network.html
  563. [*] https://www.maruzenshowa.co.jp/strength/operation.html
  564. [*] https://www.maruzenshowa.co.jp/strength/solution.html
  565. [*] https://www.maruzenshowa.co.jp/terms/index.html
  566. [*] https://www.yahoo.co.jp/
  567. [INFO] GOOGLE has 1,520 results (0.24 seconds) about http://www.maruzenshowa.co.jp/
  568. [INFO] BING shows 210.130.168.131 is shared with 14 hosts/vhosts
  569. [INFO] Shodan detected the following opened ports on 210.130.168.131:
  570. [*] 443
  571. [*] 80
  572. [INFO] ------VirusTotal SECTION------
  573. [INFO] VirusTotal passive DNS only stores address records. The following domains resolved to the given IP address:
  574. [INFO] Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset:
  575. [INFO] Latest files that are not detected by any antivirus solution and were downloaded by VirusTotal from the IP address provided:
  576. [INFO] ------Alexa Rank SECTION------
  577. [INFO] Percent of Visitors Rank in Country:
  578. [INFO] Percent of Search Traffic:
  579. [INFO] Percent of Unique Visits:
  580. [INFO] Total Sites Linking In:
  581. [*] Total Sites
  582. [INFO] Useful links related to www.maruzenshowa.co.jp - 210.130.168.131:
  583. [*] https://www.virustotal.com/pt/ip-address/210.130.168.131/information/
  584. [*] https://www.hybrid-analysis.com/search?host=210.130.168.131
  585. [*] https://www.shodan.io/host/210.130.168.131
  586. [*] https://www.senderbase.org/lookup/?search_string=210.130.168.131
  587. [*] https://www.alienvault.com/open-threat-exchange/ip/210.130.168.131
  588. [*] http://pastebin.com/search?q=210.130.168.131
  589. [*] http://urlquery.net/search.php?q=210.130.168.131
  590. [*] http://www.alexa.com/siteinfo/www.maruzenshowa.co.jp
  591. [*] http://www.google.com/safebrowsing/diagnostic?site=www.maruzenshowa.co.jp
  592. [*] https://censys.io/ipv4/210.130.168.131
  593. [*] https://www.abuseipdb.com/check/210.130.168.131
  594. [*] https://urlscan.io/search/#210.130.168.131
  595. [*] https://github.com/search?q=210.130.168.131&type=Code
  596. [INFO] Useful links related to AS2497 - 210.130.0.0/16:
  597. [*] http://www.google.com/safebrowsing/diagnostic?site=AS:2497
  598. [*] https://www.senderbase.org/lookup/?search_string=210.130.0.0/16
  599. [*] http://bgp.he.net/AS2497
  600. [*] https://stat.ripe.net/AS2497
  601. [INFO] Date: 16/08/19 | Time: 07:10:02
  602. [INFO] Total time: 1 minute(s) and 3 second(s)
  603. #######################################################################################################################################
  604. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16182
  605. ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 2, ADDITIONAL: 1
  606.  
  607. ;; QUESTION SECTION:
  608. ;maruzenshowa.co.jp. IN ANY
  609.  
  610. ;; ANSWER SECTION:
  611. maruzenshowa.co.jp. 3600 IN MX 10 mx.securemx.jp.
  612. maruzenshowa.co.jp. 3600 IN SOA dns.maruzenshowa.co.jp. admin.maruzenshowa.co.jp. 286018204 900 600 86400 3600
  613. maruzenshowa.co.jp. 3600 IN NS dns.maruzenshowa.co.jp.
  614. maruzenshowa.co.jp. 3600 IN NS ns.center.web.ad.jp.
  615.  
  616. ;; AUTHORITY SECTION:
  617. maruzenshowa.co.jp. 3600 IN NS dns.maruzenshowa.co.jp.
  618. maruzenshowa.co.jp. 3600 IN NS ns.center.web.ad.jp.
  619.  
  620. ;; ADDITIONAL SECTION:
  621. dns.maruzenshowa.co.jp. 43200 IN A 133.163.8.35
  622.  
  623. Received 199 bytes from 2001:18c0:121:6900:724f:b8ff:fefd:5b6a#53 in 240 ms
  624. #######################################################################################################################################
  625.  
  626. ; <<>> DiG 9.11.5-P4-5.1-Debian <<>> +trace maruzenshowa.co.jp
  627. ;; global options: +cmd
  628. . 82047 IN NS j.root-servers.net.
  629. . 82047 IN NS d.root-servers.net.
  630. . 82047 IN NS k.root-servers.net.
  631. . 82047 IN NS m.root-servers.net.
  632. . 82047 IN NS g.root-servers.net.
  633. . 82047 IN NS e.root-servers.net.
  634. . 82047 IN NS l.root-servers.net.
  635. . 82047 IN NS f.root-servers.net.
  636. . 82047 IN NS a.root-servers.net.
  637. . 82047 IN NS h.root-servers.net.
  638. . 82047 IN NS c.root-servers.net.
  639. . 82047 IN NS i.root-servers.net.
  640. . 82047 IN NS b.root-servers.net.
  641. . 82047 IN RRSIG NS 8 0 518400 20190829050000 20190816040000 59944 . kV7y2yGYXS6fL1G1naDnxwTN1rM3R79H6rkZlcLPJYoxk/VBkDsQsuPd Uk8uisoTbb8s1gcs1E/6BvkAbfp8NBAdrBLVjx4Xw6htJgZPZrZp4ieZ HejBaiTbXGpqtNOPF/kBUK3GhN+JAQ2g2BL5BheBVtSazTbsjINRqBPz oi5pOV5ekJQVqJrq+BQn5IqwIy+l441gTNVeXVSD+zayfbjldwvexLqN 9WWxJL/CUsHEDVLRAUIexceaPp3/hj1+H18Bicu+wXdiyfo6ePfRizRD vlPYDg2H207Vc6Y0pWxz+wZ+8BWZgTwoBVs3SJnwCDLjiuvkA2tADQD2 xQ75OQ==
  642. ;; Received 525 bytes from 38.132.106.139#53(38.132.106.139) in 44 ms
  643.  
  644. jp. 172800 IN NS c.dns.jp.
  645. jp. 172800 IN NS h.dns.jp.
  646. jp. 172800 IN NS a.dns.jp.
  647. jp. 172800 IN NS f.dns.jp.
  648. jp. 172800 IN NS g.dns.jp.
  649. jp. 172800 IN NS d.dns.jp.
  650. jp. 172800 IN NS e.dns.jp.
  651. jp. 172800 IN NS b.dns.jp.
  652. jp. 86400 IN DS 54004 8 1 0EC348CC7E6D3213CC89E5867088043FC7D5C111
  653. jp. 86400 IN DS 54004 8 2 5F4B24F667BC70880720D10DF317DC8FF80C63E586D504E6BBFE53F0 B9ECC040
  654. jp. 86400 IN RRSIG DS 8 1 86400 20190829050000 20190816040000 59944 . gZOXiPyymgNbZW49tQDAqtyaz2sH6d3kCC8f6LcklkH04GDLj8vclcUo YLgbby/fX6z3B/tMyGSuSuWQNOIU6MfTohsg7Qj5tA04BQrsynolmnAC 8kIocRZnZuFPbHMacvFp4uAmX9VSLnuPAAFfOymXdYLvCdTNxKwEWn47 G+iTQZWLcBSW+Lz4+dBTKz2L52Uulbg53tJId+LGIn8b3TItO5z4bkWX vIa8Y4rroukF/Ir8THFgvOaVVuPjA6tJQ2T93Yyd1rTyGlNFCHyCi8cl ug+EwTwfWQ8FKiKqTky5o7viqepvyRQ85hI4DJ/kmqozQJf5Cu81Zzxh kJunww==
  655. ;; Received 878 bytes from 193.0.14.129#53(k.root-servers.net) in 65 ms
  656.  
  657. maruzenshowa.co.jp. 86400 IN NS ns.center.web.ad.jp.
  658. maruzenshowa.co.jp. 86400 IN NS dns.maruzenshowa.co.jp.
  659. 164JL7ORRH9OM5ON9FAG2RJU9P2JEN2C.jp. 900 IN NSEC3 1 1 8 55EA52037A 16PQ91RI7IEQEKSCLD29L9RGGO987Q23 TXT RRSIG
  660. 164JL7ORRH9OM5ON9FAG2RJU9P2JEN2C.jp. 900 IN RRSIG NSEC3 8 2 900 20190909174502 20190810174502 41763 jp. upgfeGrO/MVDRlOfwHm+m0ZNZV5wyebpIO6DXJq9P7l7tf4IjnvdG9yc H8TqfkiO6Ty9vqvh0b17rzkVPaaLgUg+Qm4JXuWuun4GFGn++pDpges3 TnSrcoqxYjRp037Qtfcx7ev8gjXlTH2pIlEs5/MaU4jTVAJmaQUzK5da xiw=
  661. FFPRGDG3RLC2FVEC10KHLJ611RRD214V.jp. 900 IN NSEC3 1 1 8 55EA52037A FGHTGTLOGJNNC2IKFD52IQPGLS2D7459 TXT RRSIG
  662. FFPRGDG3RLC2FVEC10KHLJ611RRD214V.jp. 900 IN RRSIG NSEC3 8 2 900 20190909174502 20190810174502 41763 jp. 180R4XfhiSzquztbiZXsbiQ17L4dCWhXp5vG2uKc39Z8tD59RoMGO4PV Lsn2jECr0MfeEn+ZoLgSztkeE/LKApIOGStBM7jvTa8g6pbi/tcMFTr2 0Y1wVcyurkF/eP+jDkKMo+Icude68ZISyIoQQ+SzIIXFng1teZS5l43g 8VU=
  663. ;; Received 632 bytes from 203.119.1.1#53(a.dns.jp) in 243 ms
  664.  
  665. ;; Received 75 bytes from 133.163.8.35#53(dns.maruzenshowa.co.jp) in 248 ms
  666.  
  667. #######################################################################################################################################
  668. [*] Performing General Enumeration of Domain: maruzenshowa.co.jp
  669. [-] DNSSEC is not configured for maruzenshowa.co.jp
  670. [*] SOA dns.maruzenshowa.co.jp 133.163.8.35
  671. [*] NS dns.maruzenshowa.co.jp 133.163.8.35
  672. [*] NS ns.center.web.ad.jp 202.248.0.34
  673. [*] Bind Version for 202.248.0.34
  674. [*] MX mx.securemx.jp 210.130.202.98
  675. [*] MX mx.securemx.jp 210.130.202.97
  676. [*] MX mx.securemx.jp 210.130.202.122
  677. [*] MX mx.securemx.jp 210.130.202.123
  678. [*] Enumerating SRV Records
  679. [-] No SRV Records Found for maruzenshowa.co.jp
  680. [+] 0 Records Found
  681. #######################################################################################################################################
  682. [*] Processing domain maruzenshowa.co.jp
  683. [*] Using system resolvers ['38.132.106.139', '194.187.251.67', '185.93.180.131', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
  684. [+] Getting nameservers
  685. 133.163.8.35 - dns.maruzenshowa.co.jp
  686. 202.248.0.34 - ns.center.web.ad.jp
  687. [-] Zone transfer failed
  688.  
  689. [+] MX records found, added to target list
  690. 10 mx.securemx.jp.
  691.  
  692. [*] Scanning maruzenshowa.co.jp for A records
  693. 133.163.8.35 - dns.maruzenshowa.co.jp
  694. 133.163.8.34 - fw.maruzenshowa.co.jp
  695. 203.180.184.176 - proxy.maruzenshowa.co.jp
  696. 202.7.99.225 - smtp.maruzenshowa.co.jp
  697. 210.130.168.131 - www.maruzenshowa.co.jp
  698. 133.163.8.37 - www2.maruzenshowa.co.jp
  699. 133.163.8.44 - www3.maruzenshowa.co.jp
  700. 133.163.8.35 - www1.maruzenshowa.co.jp
  701. #######################################################################################################################################
  702.  
  703.  
  704.  
  705. AVAILABLE PLUGINS
  706. -----------------
  707.  
  708. RobotPlugin
  709. EarlyDataPlugin
  710. OpenSslCipherSuitesPlugin
  711. CertificateInfoPlugin
  712. HeartbleedPlugin
  713. SessionResumptionPlugin
  714. SessionRenegotiationPlugin
  715. CompressionPlugin
  716. HttpHeadersPlugin
  717. OpenSslCcsInjectionPlugin
  718. FallbackScsvPlugin
  719.  
  720.  
  721.  
  722. CHECKING HOST(S) AVAILABILITY
  723. -----------------------------
  724.  
  725. 210.130.168.131:443 => 210.130.168.131
  726.  
  727.  
  728.  
  729.  
  730. SCAN RESULTS FOR 210.130.168.131:443 - 210.130.168.131
  731. ------------------------------------------------------
  732.  
  733. * Downgrade Attacks:
  734. TLS_FALLBACK_SCSV: OK - Supported
  735.  
  736. * TLSV1_3 Cipher Suites:
  737. Server rejected all cipher suites.
  738.  
  739. * OpenSSL CCS Injection:
  740. OK - Not vulnerable to OpenSSL CCS injection
  741.  
  742. * TLS 1.2 Session Resumption Support:
  743. With Session IDs: OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
  744. With TLS Tickets: OK - Supported
  745.  
  746. * ROBOT Attack:
  747. OK - Not vulnerable
  748.  
  749. * OpenSSL Heartbleed:
  750. OK - Not vulnerable to Heartbleed
  751.  
  752. * TLSV1_1 Cipher Suites:
  753. Forward Secrecy OK - Supported
  754. RC4 INSECURE - Supported
  755.  
  756. Preferred:
  757. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  758. Accepted:
  759. TLS_RSA_WITH_RC4_128_SHA 128 bits HTTP 200 OK
  760. TLS_RSA_WITH_RC4_128_MD5 128 bits HTTP 200 OK
  761. TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 200 OK
  762. TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  763. TLS_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 200 OK
  764. TLS_ECDHE_RSA_WITH_RC4_128_SHA 128 bits HTTP 200 OK
  765. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 200 OK
  766. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  767. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 200 OK
  768.  
  769. * TLSV1_2 Cipher Suites:
  770. Forward Secrecy OK - Supported
  771. RC4 INSECURE - Supported
  772.  
  773. Preferred:
  774. TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 128 bits HTTP 200 OK
  775. Accepted:
  776. TLS_RSA_WITH_RC4_128_SHA 128 bits HTTP 200 OK
  777. TLS_RSA_WITH_RC4_128_MD5 128 bits HTTP 200 OK
  778. TLS_RSA_WITH_AES_256_GCM_SHA384 256 bits HTTP 200 OK
  779. TLS_RSA_WITH_AES_256_CBC_SHA256 256 bits HTTP 200 OK
  780. TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 200 OK
  781. TLS_RSA_WITH_AES_128_GCM_SHA256 128 bits HTTP 200 OK
  782. TLS_RSA_WITH_AES_128_CBC_SHA256 128 bits HTTP 200 OK
  783. TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  784. TLS_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 200 OK
  785. TLS_ECDHE_RSA_WITH_RC4_128_SHA 128 bits HTTP 200 OK
  786. TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 256 bits HTTP 200 OK
  787. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 256 bits HTTP 200 OK
  788. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 200 OK
  789. TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 128 bits HTTP 200 OK
  790. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 128 bits HTTP 200 OK
  791. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  792. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 200 OK
  793.  
  794. * Certificate Information:
  795. Content
  796. SHA1 Fingerprint: a42616c4805b5996c74f6084d5e693f8caa9d9b5
  797. Common Name: www.maruzenshowa.co.jp
  798. Issuer: GlobalSign RSA DV SSL CA 2018
  799. Serial Number: 30871468833848103726574911765
  800. Not Before: 2019-08-08 00:25:39
  801. Not After: 2021-08-15 04:03:49
  802. Signature Algorithm: sha256
  803. Public Key Algorithm: RSA
  804. Key Size: 2048
  805. Exponent: 65537 (0x10001)
  806. DNS Subject Alternative Names: ['www.maruzenshowa.co.jp', 'maruzenshowa.co.jp']
  807.  
  808. Trust
  809. Hostname Validation: FAILED - Certificate does NOT match 210.130.168.131
  810. Android CA Store (9.0.0_r9): OK - Certificate is trusted
  811. iOS CA Store (12, macOS 10.14, watchOS 5, and tvOS 12):OK - Certificate is trusted
  812. Java CA Store (jdk-11.0.2): OK - Certificate is trusted
  813. macOS CA Store (12, macOS 10.14, watchOS 5, and tvOS 12):OK - Certificate is trusted
  814. Mozilla CA Store (2018-11-22): OK - Certificate is trusted
  815. OPENJDK CA Store (jdk-11.0.2): OK - Certificate is trusted
  816. Windows CA Store (2018-12-08): OK - Certificate is trusted
  817. Symantec 2018 Deprecation: OK - Not a Symantec-issued certificate
  818. Received Chain: www.maruzenshowa.co.jp --> GlobalSign RSA DV SSL CA 2018
  819. Verified Chain: www.maruzenshowa.co.jp --> GlobalSign RSA DV SSL CA 2018 --> GlobalSign
  820. Received Chain Contains Anchor: OK - Anchor certificate not sent
  821. Received Chain Order: OK - Order is valid
  822. Verified Chain contains SHA1: OK - No SHA1-signed certificate in the verified certificate chain
  823.  
  824. Extensions
  825. OCSP Must-Staple: NOT SUPPORTED - Extension not found
  826. Certificate Transparency: OK - 3 SCTs included
  827.  
  828. OCSP Stapling
  829. NOT SUPPORTED - Server did not send back an OCSP response
  830.  
  831. * TLSV1 Cipher Suites:
  832. Forward Secrecy OK - Supported
  833. RC4 INSECURE - Supported
  834.  
  835. Preferred:
  836. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  837. Accepted:
  838. TLS_RSA_WITH_RC4_128_SHA 128 bits HTTP 200 OK
  839. TLS_RSA_WITH_RC4_128_MD5 128 bits HTTP 200 OK
  840. TLS_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 200 OK
  841. TLS_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  842. TLS_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 200 OK
  843. TLS_ECDHE_RSA_WITH_RC4_128_SHA 128 bits HTTP 200 OK
  844. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA 256 bits HTTP 200 OK
  845. TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA 128 bits HTTP 200 OK
  846. TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA 112 bits HTTP 200 OK
  847.  
  848. * Session Renegotiation:
  849. Client-initiated Renegotiation: OK - Rejected
  850. Secure Renegotiation: OK - Supported
  851.  
  852. * Deflate Compression:
  853. OK - Compression disabled
  854.  
  855. * SSLV2 Cipher Suites:
  856. Server rejected all cipher suites.
  857.  
  858. * SSLV3 Cipher Suites:
  859. Server rejected all cipher suites.
  860.  
  861.  
  862. SCAN COMPLETED IN 17.44 S
  863. -------------------------
  864. #######################################################################################################################################
  865.  
  866. Domains still to check: 1
  867. Checking if the hostname maruzenshowa.co.jp. given is in fact a domain...
  868.  
  869. Analyzing domain: maruzenshowa.co.jp.
  870. Checking NameServers using system default resolver...
  871. IP: 133.163.8.35 (Japan)
  872. HostName: dns.maruzenshowa.co.jp Type: NS
  873. HostName: www1.maruzenshowa.co.jp Type: PTR
  874. IP: 202.248.0.34 (Japan)
  875. HostName: ns.center.web.ad.jp Type: NS
  876. HostName: ns.center.web.ad.jp Type: PTR
  877.  
  878. Checking MailServers using system default resolver...
  879. IP: 210.130.202.98 (Japan)
  880. HostName: mx.securemx.jp Type: MX
  881. HostName: mx31.securemx.jp Type: PTR
  882. IP: 210.130.202.97 (Japan)
  883. HostName: mx.securemx.jp Type: MX
  884. HostName: mx30.securemx.jp Type: PTR
  885. IP: 210.130.202.122 (Japan)
  886. HostName: mx.securemx.jp Type: MX
  887. HostName: mx10.securemx.jp Type: PTR
  888. IP: 210.130.202.123 (Japan)
  889. HostName: mx.securemx.jp Type: MX
  890. HostName: mx11.securemx.jp Type: PTR
  891.  
  892. Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
  893. No zone transfer found on nameserver 202.248.0.34
  894. No zone transfer found on nameserver 133.163.8.35
  895.  
  896. Checking SPF record...
  897. No SPF record
  898.  
  899. Checking 192 most common hostnames using system default resolver...
  900. IP: 210.130.168.131 (Japan)
  901. HostName: www.maruzenshowa.co.jp. Type: A
  902. IP: 133.163.8.34 (Japan)
  903. HostName: fw.maruzenshowa.co.jp. Type: A
  904. IP: 133.163.8.35 (Japan)
  905. HostName: dns.maruzenshowa.co.jp Type: NS
  906. HostName: www1.maruzenshowa.co.jp Type: PTR
  907. HostName: dns.maruzenshowa.co.jp. Type: A
  908. IP: 202.7.99.225 (Japan)
  909. HostName: smtp.maruzenshowa.co.jp. Type: A
  910. IP: 203.180.184.176 (Japan)
  911. Sub Domain: proxy.maruzenshowa.co.jp. <- New Subdomain!
  912. HostName: proxy.maruzenshowa.co.jp. Type: A
  913. HostName: proxy.maruzenshowa.co.jp Type: PTR
  914. IP: 133.163.8.35 (Japan)
  915. HostName: dns.maruzenshowa.co.jp Type: NS
  916. HostName: www1.maruzenshowa.co.jp Type: PTR
  917. HostName: dns.maruzenshowa.co.jp. Type: A
  918. HostName: www1.maruzenshowa.co.jp. Type: A
  919. IP: 133.163.8.37 (Japan)
  920. HostName: www2.maruzenshowa.co.jp. Type: A
  921. IP: 133.163.8.44 (Japan)
  922. HostName: www3.maruzenshowa.co.jp. Type: A
  923.  
  924. Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
  925. Checking netblock 210.130.202.0
  926. Checking netblock 202.248.0.0
  927. Checking netblock 133.163.8.0
  928. Checking netblock 203.180.184.0
  929. Checking netblock 202.7.99.0
  930. Checking netblock 210.130.168.0
  931.  
  932. Searching for maruzenshowa.co.jp. emails in Google
  933.  
  934. Checking 12 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
  935. Host 210.130.202.97 is up (reset ttl 64)
  936. Host 202.248.0.34 is up (reset ttl 64)
  937. Host 210.130.202.98 is up (reset ttl 64)
  938. Host 133.163.8.34 is up (reset ttl 64)
  939. Host 133.163.8.35 is up (reset ttl 64)
  940. Host 210.130.202.123 is up (reset ttl 64)
  941. Host 210.130.202.122 is up (reset ttl 64)
  942. Host 203.180.184.176 is up (reset ttl 64)
  943. Host 202.7.99.225 is up (reset ttl 64)
  944. Host 210.130.168.131 is up (reset ttl 64)
  945. Host 133.163.8.37 is up (reset ttl 64)
  946. Host 133.163.8.44 is up (reset ttl 64)
  947.  
  948. Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
  949. Scanning ip 210.130.202.97 (mx30.securemx.jp (PTR)):
  950. Device type: storage-misc|general purpose
  951. Running: Sun embedded, Sun OpenSolaris, Sun Solaris 10|8|9
  952. Scanning ip 202.248.0.34 (ns.center.web.ad.jp (PTR)):
  953. 53/tcp open domain syn-ack ttl 43 (unknown banner:)
  954. | dns-nsid:
  955. |_ bind.version:
  956. | fingerprint-strings:
  957. | DNSVersionBindReqTCP:
  958. | version
  959. |_ bind
  960. Scanning ip 210.130.202.98 (mx31.securemx.jp (PTR)):
  961. Device type: storage-misc|general purpose
  962. Running: Sun embedded, Sun OpenSolaris, Sun Solaris 10|8|9
  963. Scanning ip 133.163.8.34 (fw.maruzenshowa.co.jp.):
  964. Scanning ip 133.163.8.35 (www1.maruzenshowa.co.jp.):
  965. 53/tcp open domain? syn-ack ttl 105
  966. | fingerprint-strings:
  967. | DNSVersionBindReqTCP:
  968. | version
  969. |_ bind
  970. Scanning ip 210.130.202.123 (mx11.securemx.jp (PTR)):
  971. Running: Sun Solaris 10|8
  972. Scanning ip 210.130.202.122 (mx10.securemx.jp (PTR)):
  973. Device type: storage-misc|general purpose
  974. Running: Sun embedded, Sun OpenSolaris, Sun Solaris 10|8|9
  975. Scanning ip 203.180.184.176 (proxy.maruzenshowa.co.jp (PTR)):
  976. Scanning ip 202.7.99.225 (smtp.maruzenshowa.co.jp.):
  977. Scanning ip 210.130.168.131 (www.maruzenshowa.co.jp.):
  978. 80/tcp open tcpwrapped syn-ack ttl 237
  979. | http-methods:
  980. |_ Supported Methods: GET HEAD POST OPTIONS
  981. |_http-server-header: Apache
  982. |_http-title: Did not follow redirect to https://210.130.168.131/
  983. 443/tcp open tcpwrapped syn-ack ttl 237
  984. | http-methods:
  985. |_ Supported Methods: GET HEAD POST OPTIONS
  986. | ssl-cert: Subject: commonName=www.maruzenshowa.co.jp/countryName=JP
  987. | Subject Alternative Name: DNS:www.maruzenshowa.co.jp, DNS:maruzenshowa.co.jp
  988. | Issuer: commonName=GlobalSign RSA DV SSL CA 2018/organizationName=GlobalSign nv-sa/countryName=BE
  989. | Public Key type: rsa
  990. | Public Key bits: 2048
  991. | Signature Algorithm: sha256WithRSAEncryption
  992. | Not valid before: 2019-08-08T00:25:39
  993. | Not valid after: 2021-08-15T04:03:49
  994. | MD5: 08e6 ff79 1102 3006 f5aa 7a6a 7d4c 8c14
  995. |_SHA-1: a426 16c4 805b 5996 c74f 6084 d5e6 93f8 caa9 d9b5
  996. |_ssl-date: 2019-08-16T11:22:17+00:00; +4s from scanner time.
  997. Device type: general purpose|load balancer
  998. |_clock-skew: mean: 3s, deviation: 0s, median: 3s
  999. Scanning ip 133.163.8.37 (www2.maruzenshowa.co.jp.):
  1000. 443/tcp open ssl/https syn-ack ttl 233
  1001. | fingerprint-strings:
  1002. | FourOhFourRequest:
  1003. | HTTP/1.1 404 Not Found
  1004. | Set-Cookie: FJNADDSPID=0tuUrV; expires=Fri, 16-Aug-2019 14:27:51 GMT; path=/
  1005. | Date: Fri, 16 Aug 2019 11:22:51 GMT
  1006. | Content-Length: 225
  1007. | Connection: close
  1008. | Content-Type: text/html; charset=iso-8859-1
  1009. | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  1010. | <html><head>
  1011. | <title>404 Not Found</title>
  1012. | </head><body>
  1013. | <h1>Not Found</h1>
  1014. | <p>The requested URL /nice ports,/Trinity.txt.bak was not found on this server.</p>
  1015. | </body></html>
  1016. | GetRequest:
  1017. | HTTP/1.1 200 OK
  1018. | Set-Cookie: FJNADDSPID=0tuUrT; expires=Fri, 16-Aug-2019 14:27:49 GMT; path=/
  1019. | Date: Fri, 16 Aug 2019 11:22:49 GMT
  1020. | Last-Modified: Fri, 11 Jun 2004 11:34:58 GMT
  1021. | ETag: "1bedd-8f-210e7c80"
  1022. | Accept-Ranges: bytes
  1023. | Content-Length: 143
  1024. | Connection: close
  1025. | Content-Type: text/html
  1026. | <html>
  1027. | <head>
  1028. | <meta http-equiv="Pragma" content="no-cache" />
  1029. | <meta http-equiv="Refresh" content="0;URL=/mz3pl_open/" />
  1030. | </head>
  1031. | </html>
  1032. | HTTPOptions:
  1033. | HTTP/1.1 200 OK
  1034. | Set-Cookie: FJNADDSPID=0tuUrU; expires=Fri, 16-Aug-2019 14:27:50 GMT; path=/
  1035. | Date: Fri, 16 Aug 2019 11:22:50 GMT
  1036. | Allow: GET,HEAD,POST,OPTIONS
  1037. | Content-Length: 0
  1038. | Connection: close
  1039. | Content-Type: text/html
  1040. | RTSPRequest:
  1041. | HTTP/1.1 200 OK
  1042. | Set-Cookie: FJNADDSPID=0tuUrX; expires=Fri, 16-Aug-2019 14:28:03 GMT; path=/
  1043. | Date: Fri, 16 Aug 2019 11:23:03 GMT
  1044. | Allow: GET,HEAD,POST,OPTIONS
  1045. | Content-Length: 0
  1046. | Connection: close
  1047. | Content-Type: text/html
  1048. | SSLSessionReq:
  1049. | HTTP/1.1 400 Bad Request
  1050. | Set-Cookie: FJNADDSPID=0tuUra; expires=Fri, 16-Aug-2019 14:28:28 GMT; path=/
  1051. | Date: Fri, 16 Aug 2019 11:23:28 GMT
  1052. | Content-Length: 226
  1053. | Connection: close
  1054. | Content-Type: text/html; charset=iso-8859-1
  1055. | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  1056. | <html><head>
  1057. | <title>400 Bad Request</title>
  1058. | </head><body>
  1059. | <h1>Bad Request</h1>
  1060. | <p>Your browser sent a request that this server could not understand.<br />
  1061. | </p>
  1062. |_ </body></html>
  1063. | http-methods:
  1064. |_ Supported Methods: POST OPTIONS
  1065. |_http-title: Site doesn't have a title (text/html).
  1066. | ssl-cert: Subject: commonName=www2.maruzenshowa.co.jp/organizationName=Maruzen Showa Unyu co.,ltd/stateOrProvinceName=KANAGAWA/countryName=JP
  1067. | Subject Alternative Name: DNS:www2.maruzenshowa.co.jp
  1068. | Issuer: commonName=DigiCert SHA2 Secure Server CA/organizationName=DigiCert Inc/countryName=US
  1069. | Public Key type: rsa
  1070. | Public Key bits: 2048
  1071. | Signature Algorithm: sha256WithRSAEncryption
  1072. | Not valid before: 2018-08-13T00:00:00
  1073. | Not valid after: 2020-10-01T12:00:00
  1074. | MD5: e017 8723 3604 af3d 5eee c7c2 77bb c838
  1075. |_SHA-1: 14ac d6ff b4e0 b7f9 be8d ce0d f6d0 8f7d 9fea 6e97
  1076. |_ssl-date: 2019-08-16T11:24:54+00:00; +4s from scanner time.
  1077. Scanning ip 133.163.8.44 (www3.maruzenshowa.co.jp.):
  1078. WebCrawling domain's web servers... up to 50 max links.
  1079.  
  1080. + URL to crawl: http://www2.maruzenshowa.co.jp.:443
  1081. + Date: 2019-08-16
  1082.  
  1083. + Crawling URL: http://www2.maruzenshowa.co.jp.:443:
  1084. + Links:
  1085. + Crawling http://www2.maruzenshowa.co.jp.:443
  1086. + Searching for directories...
  1087. + Searching open folders...
  1088.  
  1089. --Finished--
  1090. Summary information for domain maruzenshowa.co.jp.
  1091. -----------------------------------------
  1092. Domain Specific Information:
  1093.  
  1094. Domain Ips Information:
  1095. IP: 210.130.202.97
  1096. HostName: mx.securemx.jp Type: MX
  1097. HostName: mx30.securemx.jp Type: PTR
  1098. Country: Japan
  1099. Is Active: True (reset ttl 64)
  1100. Script Info: Device type: storage-misc|general purpose
  1101. Script Info: Running: Sun embedded, Sun OpenSolaris, Sun Solaris 10|8|9
  1102. IP: 202.248.0.34
  1103. HostName: ns.center.web.ad.jp Type: NS
  1104. HostName: ns.center.web.ad.jp Type: PTR
  1105. Country: Japan
  1106. Is Active: True (reset ttl 64)
  1107. Port: 53/tcp open domain syn-ack ttl 43 (unknown banner:)
  1108. Script Info: | dns-nsid:
  1109. Script Info: |_ bind.version:
  1110. Script Info: | fingerprint-strings:
  1111. Script Info: | DNSVersionBindReqTCP:
  1112. Script Info: | version
  1113. Script Info: |_ bind
  1114. IP: 210.130.202.98
  1115. HostName: mx.securemx.jp Type: MX
  1116. HostName: mx31.securemx.jp Type: PTR
  1117. Country: Japan
  1118. Is Active: True (reset ttl 64)
  1119. Script Info: Device type: storage-misc|general purpose
  1120. Script Info: Running: Sun embedded, Sun OpenSolaris, Sun Solaris 10|8|9
  1121. IP: 133.163.8.34
  1122. HostName: fw.maruzenshowa.co.jp. Type: A
  1123. Country: Japan
  1124. Is Active: True (reset ttl 64)
  1125. IP: 133.163.8.35
  1126. HostName: dns.maruzenshowa.co.jp Type: NS
  1127. HostName: www1.maruzenshowa.co.jp Type: PTR
  1128. HostName: dns.maruzenshowa.co.jp. Type: A
  1129. HostName: www1.maruzenshowa.co.jp. Type: A
  1130. Country: Japan
  1131. Is Active: True (reset ttl 64)
  1132. Port: 53/tcp open domain? syn-ack ttl 105
  1133. Script Info: | fingerprint-strings:
  1134. Script Info: | DNSVersionBindReqTCP:
  1135. Script Info: | version
  1136. Script Info: |_ bind
  1137. IP: 210.130.202.123
  1138. HostName: mx.securemx.jp Type: MX
  1139. HostName: mx11.securemx.jp Type: PTR
  1140. Country: Japan
  1141. Is Active: True (reset ttl 64)
  1142. Script Info: Running: Sun Solaris 10|8
  1143. IP: 210.130.202.122
  1144. HostName: mx.securemx.jp Type: MX
  1145. HostName: mx10.securemx.jp Type: PTR
  1146. Country: Japan
  1147. Is Active: True (reset ttl 64)
  1148. Script Info: Device type: storage-misc|general purpose
  1149. Script Info: Running: Sun embedded, Sun OpenSolaris, Sun Solaris 10|8|9
  1150. IP: 203.180.184.176
  1151. Sub Domain: proxy.maruzenshowa.co.jp.
  1152. HostName: proxy.maruzenshowa.co.jp. Type: A
  1153. HostName: proxy.maruzenshowa.co.jp Type: PTR
  1154. Country: Japan
  1155. Is Active: True (reset ttl 64)
  1156. IP: 202.7.99.225
  1157. HostName: smtp.maruzenshowa.co.jp. Type: A
  1158. Country: Japan
  1159. Is Active: True (reset ttl 64)
  1160. IP: 210.130.168.131
  1161. HostName: www.maruzenshowa.co.jp. Type: A
  1162. Country: Japan
  1163. Is Active: True (reset ttl 64)
  1164. Port: 80/tcp open tcpwrapped syn-ack ttl 237
  1165. Script Info: | http-methods:
  1166. Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
  1167. Script Info: |_http-server-header: Apache
  1168. Script Info: |_http-title: Did not follow redirect to https://210.130.168.131/
  1169. Port: 443/tcp open tcpwrapped syn-ack ttl 237
  1170. Script Info: | http-methods:
  1171. Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
  1172. Script Info: | ssl-cert: Subject: commonName=www.maruzenshowa.co.jp/countryName=JP
  1173. Script Info: | Subject Alternative Name: DNS:www.maruzenshowa.co.jp, DNS:maruzenshowa.co.jp
  1174. Script Info: | Issuer: commonName=GlobalSign RSA DV SSL CA 2018/organizationName=GlobalSign nv-sa/countryName=BE
  1175. Script Info: | Public Key type: rsa
  1176. Script Info: | Public Key bits: 2048
  1177. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1178. Script Info: | Not valid before: 2019-08-08T00:25:39
  1179. Script Info: | Not valid after: 2021-08-15T04:03:49
  1180. Script Info: | MD5: 08e6 ff79 1102 3006 f5aa 7a6a 7d4c 8c14
  1181. Script Info: |_SHA-1: a426 16c4 805b 5996 c74f 6084 d5e6 93f8 caa9 d9b5
  1182. Script Info: |_ssl-date: 2019-08-16T11:22:17+00:00; +4s from scanner time.
  1183. Script Info: Device type: general purpose|load balancer
  1184. Script Info: |_clock-skew: mean: 3s, deviation: 0s, median: 3s
  1185. IP: 133.163.8.37
  1186. HostName: www2.maruzenshowa.co.jp. Type: A
  1187. Country: Japan
  1188. Is Active: True (reset ttl 64)
  1189. Port: 443/tcp open ssl/https syn-ack ttl 233
  1190. Script Info: | fingerprint-strings:
  1191. Script Info: | FourOhFourRequest:
  1192. Script Info: | HTTP/1.1 404 Not Found
  1193. Script Info: | Set-Cookie: FJNADDSPID=0tuUrV; expires=Fri, 16-Aug-2019 14:27:51 GMT; path=/
  1194. Script Info: | Date: Fri, 16 Aug 2019 11:22:51 GMT
  1195. Script Info: | Content-Length: 225
  1196. Script Info: | Connection: close
  1197. Script Info: | Content-Type: text/html; charset=iso-8859-1
  1198. Script Info: | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  1199. Script Info: | <html><head>
  1200. Script Info: | <title>404 Not Found</title>
  1201. Script Info: | </head><body>
  1202. Script Info: | <h1>Not Found</h1>
  1203. Script Info: | <p>The requested URL /nice ports,/Trinity.txt.bak was not found on this server.</p>
  1204. Script Info: | </body></html>
  1205. Script Info: | GetRequest:
  1206. Script Info: | HTTP/1.1 200 OK
  1207. Script Info: | Set-Cookie: FJNADDSPID=0tuUrT; expires=Fri, 16-Aug-2019 14:27:49 GMT; path=/
  1208. Script Info: | Date: Fri, 16 Aug 2019 11:22:49 GMT
  1209. Script Info: | Last-Modified: Fri, 11 Jun 2004 11:34:58 GMT
  1210. Script Info: | ETag: "1bedd-8f-210e7c80"
  1211. Script Info: | Accept-Ranges: bytes
  1212. Script Info: | Content-Length: 143
  1213. Script Info: | Connection: close
  1214. Script Info: | Content-Type: text/html
  1215. Script Info: | <html>
  1216. Script Info: | <head>
  1217. Script Info: | <meta http-equiv="Pragma" content="no-cache" />
  1218. Script Info: | <meta http-equiv="Refresh" content="0;URL=/mz3pl_open/" />
  1219. Script Info: | </head>
  1220. Script Info: | </html>
  1221. Script Info: | HTTPOptions:
  1222. Script Info: | HTTP/1.1 200 OK
  1223. Script Info: | Set-Cookie: FJNADDSPID=0tuUrU; expires=Fri, 16-Aug-2019 14:27:50 GMT; path=/
  1224. Script Info: | Date: Fri, 16 Aug 2019 11:22:50 GMT
  1225. Script Info: | Allow: GET,HEAD,POST,OPTIONS
  1226. Script Info: | Content-Length: 0
  1227. Script Info: | Connection: close
  1228. Script Info: | Content-Type: text/html
  1229. Script Info: | RTSPRequest:
  1230. Script Info: | HTTP/1.1 200 OK
  1231. Script Info: | Set-Cookie: FJNADDSPID=0tuUrX; expires=Fri, 16-Aug-2019 14:28:03 GMT; path=/
  1232. Script Info: | Date: Fri, 16 Aug 2019 11:23:03 GMT
  1233. Script Info: | Allow: GET,HEAD,POST,OPTIONS
  1234. Script Info: | Content-Length: 0
  1235. Script Info: | Connection: close
  1236. Script Info: | Content-Type: text/html
  1237. Script Info: | SSLSessionReq:
  1238. Script Info: | HTTP/1.1 400 Bad Request
  1239. Script Info: | Set-Cookie: FJNADDSPID=0tuUra; expires=Fri, 16-Aug-2019 14:28:28 GMT; path=/
  1240. Script Info: | Date: Fri, 16 Aug 2019 11:23:28 GMT
  1241. Script Info: | Content-Length: 226
  1242. Script Info: | Connection: close
  1243. Script Info: | Content-Type: text/html; charset=iso-8859-1
  1244. Script Info: | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
  1245. Script Info: | <html><head>
  1246. Script Info: | <title>400 Bad Request</title>
  1247. Script Info: | </head><body>
  1248. Script Info: | <h1>Bad Request</h1>
  1249. Script Info: | <p>Your browser sent a request that this server could not understand.<br />
  1250. Script Info: | </p>
  1251. Script Info: |_ </body></html>
  1252. Script Info: | http-methods:
  1253. Script Info: |_ Supported Methods: POST OPTIONS
  1254. Script Info: |_http-title: Site doesn't have a title (text/html).
  1255. Script Info: | ssl-cert: Subject: commonName=www2.maruzenshowa.co.jp/organizationName=Maruzen Showa Unyu co.,ltd/stateOrProvinceName=KANAGAWA/countryName=JP
  1256. Script Info: | Subject Alternative Name: DNS:www2.maruzenshowa.co.jp
  1257. Script Info: | Issuer: commonName=DigiCert SHA2 Secure Server CA/organizationName=DigiCert Inc/countryName=US
  1258. Script Info: | Public Key type: rsa
  1259. Script Info: | Public Key bits: 2048
  1260. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1261. Script Info: | Not valid before: 2018-08-13T00:00:00
  1262. Script Info: | Not valid after: 2020-10-01T12:00:00
  1263. Script Info: | MD5: e017 8723 3604 af3d 5eee c7c2 77bb c838
  1264. Script Info: |_SHA-1: 14ac d6ff b4e0 b7f9 be8d ce0d f6d0 8f7d 9fea 6e97
  1265. Script Info: |_ssl-date: 2019-08-16T11:24:54+00:00; +4s from scanner time.
  1266. IP: 133.163.8.44
  1267. HostName: www3.maruzenshowa.co.jp. Type: A
  1268. Country: Japan
  1269. Is Active: True (reset ttl 64)
  1270.  
  1271. --------------End Summary --------------
  1272. -----------------------------------------
  1273.  
  1274.  
  1275.  
  1276. Checking if the hostname proxy.maruzenshowa.co.jp. given is in fact a domain...
  1277.  
  1278. Analyzing domain: proxy.maruzenshowa.co.jp.
  1279. Checking NameServers using system default resolver...
  1280. IP: 210.130.1.15 (Japan)
  1281. HostName: dns-c.iij.ad.jp Type: NS
  1282. HostName: sys-c.do.2iij.net Type: PTR
  1283. IP: 202.232.2.14 (Japan)
  1284. HostName: dns-b.iij.ad.jp Type: NS
  1285. HostName: sys-b.do.2iij.net Type: PTR
  1286.  
  1287. Checking MailServers using system default resolver...
  1288. IP: 203.180.38.156 (Japan)
  1289. HostName: bh0.iij.ad.jp Type: MX
  1290. HostName: bh1516.svc.2iij.net Type: PTR
  1291.  
  1292. Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
  1293. No zone transfer found on nameserver 210.130.1.15
  1294. No zone transfer found on nameserver 202.232.2.14
  1295.  
  1296. Checking SPF record...
  1297. No SPF record
  1298.  
  1299. Checking 192 most common hostnames using system default resolver...
  1300.  
  1301. Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
  1302. Checking netblock 210.130.1.0
  1303. Checking netblock 202.232.2.0
  1304. Checking netblock 203.180.38.0
  1305.  
  1306. Searching for proxy.maruzenshowa.co.jp. emails in Google
  1307.  
  1308. Checking 3 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
  1309. Host 210.130.1.15 is up (reset ttl 64)
  1310. Host 202.232.2.14 is up (reset ttl 64)
  1311. Host 203.180.38.156 is up (reset ttl 64)
  1312.  
  1313. Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
  1314. Scanning ip 210.130.1.15 (sys-c.do.2iij.net (PTR)):
  1315. 53/tcp open tcpwrapped syn-ack ttl 53
  1316. | dns-nsid:
  1317. | id.server: dns-bc1710
  1318. |_ bind.version: IIJ-DNS-SERVICE
  1319. Scanning ip 202.232.2.14 (sys-b.do.2iij.net (PTR)):
  1320. 53/tcp open domain syn-ack ttl 47 (unknown banner: IIJ-DNS-SERVICE)
  1321. | dns-nsid:
  1322. |_ bind.version: IIJ-DNS-SERVICE
  1323. | fingerprint-strings:
  1324. | DNSVersionBindReqTCP:
  1325. | version
  1326. | bind
  1327. |_ IIJ-DNS-SERVICE
  1328. Scanning ip 203.180.38.156 (bh1516.svc.2iij.net (PTR)):
  1329. WebCrawling domain's web servers... up to 50 max links.
  1330. --Finished--
  1331. Summary information for domain proxy.maruzenshowa.co.jp.
  1332. -----------------------------------------
  1333.  
  1334. Domain Ips Information:
  1335. IP: 210.130.1.15
  1336. HostName: dns-c.iij.ad.jp Type: NS
  1337. HostName: sys-c.do.2iij.net Type: PTR
  1338. Country: Japan
  1339. Is Active: True (reset ttl 64)
  1340. Port: 53/tcp open tcpwrapped syn-ack ttl 53
  1341. Script Info: | dns-nsid:
  1342. Script Info: | id.server: dns-bc1710
  1343. Script Info: |_ bind.version: IIJ-DNS-SERVICE
  1344. IP: 202.232.2.14
  1345. HostName: dns-b.iij.ad.jp Type: NS
  1346. HostName: sys-b.do.2iij.net Type: PTR
  1347. Country: Japan
  1348. Is Active: True (reset ttl 64)
  1349. Port: 53/tcp open domain syn-ack ttl 47 (unknown banner: IIJ-DNS-SERVICE)
  1350. Script Info: | dns-nsid:
  1351. Script Info: |_ bind.version: IIJ-DNS-SERVICE
  1352. Script Info: | fingerprint-strings:
  1353. Script Info: | DNSVersionBindReqTCP:
  1354. Script Info: | version
  1355. Script Info: | bind
  1356. Script Info: |_ IIJ-DNS-SERVICE
  1357. IP: 203.180.38.156
  1358. HostName: bh0.iij.ad.jp Type: MX
  1359. HostName: bh1516.svc.2iij.net Type: PTR
  1360. Country: Japan
  1361. Is Active: True (reset ttl 64)
  1362. #######################################################################################################################################
  1363. Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-16 07:11 EDT
  1364. Nmap scan report for www.maruzenshowa.co.jp (210.130.168.131)
  1365. Host is up (0.12s latency).
  1366. Not shown: 477 filtered ports, 4 closed ports
  1367. Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
  1368. PORT STATE SERVICE
  1369. 80/tcp open http
  1370. 443/tcp open https
  1371. #######################################################################################################################################
  1372. Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-16 07:11 EDT
  1373. Nmap scan report for www.maruzenshowa.co.jp (210.130.168.131)
  1374. Host is up (0.042s latency).
  1375. Not shown: 2 filtered ports, 1 closed port
  1376. PORT STATE SERVICE
  1377. 67/udp open|filtered dhcps
  1378. 68/udp open|filtered dhcpc
  1379. 69/udp open|filtered tftp
  1380. 88/udp open|filtered kerberos-sec
  1381. 123/udp open|filtered ntp
  1382. 139/udp open|filtered netbios-ssn
  1383. 161/udp open|filtered snmp
  1384. 162/udp open|filtered snmptrap
  1385. 389/udp open|filtered ldap
  1386. 500/udp open|filtered isakmp
  1387. 520/udp open|filtered route
  1388. 2049/udp open|filtered nfs
  1389. #######################################################################################################################################
  1390. Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-16 07:11 EDT
  1391. NSE: Loaded 162 scripts for scanning.
  1392. NSE: Script Pre-scanning.
  1393. Initiating NSE at 07:11
  1394. Completed NSE at 07:11, 0.00s elapsed
  1395. Initiating NSE at 07:11
  1396. Completed NSE at 07:11, 0.00s elapsed
  1397. Initiating Parallel DNS resolution of 1 host. at 07:11
  1398. Completed Parallel DNS resolution of 1 host. at 07:11, 0.03s elapsed
  1399. Initiating SYN Stealth Scan at 07:11
  1400. Scanning www.maruzenshowa.co.jp (210.130.168.131) [1 port]
  1401. Discovered open port 80/tcp on 210.130.168.131
  1402. Completed SYN Stealth Scan at 07:11, 0.25s elapsed (1 total ports)
  1403. Initiating Service scan at 07:11
  1404. Scanning 1 service on www.maruzenshowa.co.jp (210.130.168.131)
  1405. Completed Service scan at 07:11, 2.81s elapsed (1 service on 1 host)
  1406. Initiating OS detection (try #1) against www.maruzenshowa.co.jp (210.130.168.131)
  1407. Retrying OS detection (try #2) against www.maruzenshowa.co.jp (210.130.168.131)
  1408. Initiating Traceroute at 07:11
  1409. Completed Traceroute at 07:11, 0.23s elapsed
  1410. Initiating Parallel DNS resolution of 14 hosts. at 07:11
  1411. Completed Parallel DNS resolution of 14 hosts. at 07:11, 0.62s elapsed
  1412. NSE: Script scanning 210.130.168.131.
  1413. Initiating NSE at 07:11
  1414. Completed NSE at 07:12, 44.44s elapsed
  1415. Initiating NSE at 07:12
  1416. Completed NSE at 07:12, 0.42s elapsed
  1417. Nmap scan report for www.maruzenshowa.co.jp (210.130.168.131)
  1418. Host is up (0.20s latency).
  1419.  
  1420. PORT STATE SERVICE VERSION
  1421. 80/tcp open tcpwrapped
  1422. | http-brute:
  1423. |_ Path "/" does not require authentication
  1424. |_http-chrono: Request times for /; avg: 513.42ms; min: 503.70ms; max: 524.03ms
  1425. |_http-csrf: Couldn't find any CSRF vulnerabilities.
  1426. |_http-date: Fri, 16 Aug 2019 11:11:58 GMT; +4s from local time.
  1427. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
  1428. |_http-dombased-xss: Couldn't find any DOM based XSS.
  1429. |_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
  1430. |_http-errors: Couldn't find any error pages.
  1431. |_http-feed: Couldn't find any feeds.
  1432. |_http-fetch: Please enter the complete path of the directory to save data in.
  1433. | http-headers:
  1434. | Date: Fri, 16 Aug 2019 11:12:04 GMT
  1435. | Server: Apache
  1436. | Location: https://www.maruzenshowa.co.jp/
  1437. | Content-Length: 239
  1438. | Connection: close
  1439. | Content-Type: text/html; charset=iso-8859-1
  1440. |
  1441. |_ (Request type: GET)
  1442. |_http-jsonp-detection: Couldn't find any JSONP endpoints.
  1443. | http-methods:
  1444. |_ Supported Methods: GET HEAD POST OPTIONS
  1445. |_http-mobileversion-checker: No mobile version detected.
  1446. |_http-passwd: ERROR: Script execution failed (use -d to debug)
  1447. |_http-security-headers:
  1448. |_http-server-header: Apache
  1449. | http-sitemap-generator:
  1450. | Directory structure:
  1451. | Longest directory structure:
  1452. | Depth: 0
  1453. | Dir: /
  1454. | Total files found (by extension):
  1455. |_
  1456. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
  1457. |_http-title: Did not follow redirect to https://www.maruzenshowa.co.jp/
  1458. | http-vhosts:
  1459. |_127 names had status 301
  1460. |_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
  1461. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
  1462. |_http-xssed: No previously reported XSS vuln.
  1463. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1464. Device type: load balancer
  1465. Running (JUST GUESSING): F5 Networks TMOS 11.6.X (89%)
  1466. OS CPE: cpe:/o:f5:tmos:11.6
  1467. Aggressive OS guesses: F5 BIG-IP Local Traffic Manager load balancer (TMOS 11.6) (89%)
  1468. No exact OS matches for host (test conditions non-ideal).
  1469. Uptime guess: 29.929 days (since Wed Jul 17 08:54:52 2019)
  1470. Network Distance: 14 hops
  1471. TCP Sequence Prediction: Difficulty=259 (Good luck!)
  1472. IP ID Sequence Generation: Randomized
  1473.  
  1474. TRACEROUTE (using port 80/tcp)
  1475. HOP RTT ADDRESS
  1476. 1 21.56 ms 10.243.200.1
  1477. 2 21.90 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
  1478. 3 23.77 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
  1479. 4 21.73 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
  1480. 5 21.77 ms ix-xe-11-1-1-0.tcore1.w6c-montreal.as6453.net (66.198.96.98)
  1481. 6 57.13 ms if-ae-7-2.tcore1.tnk-toronto.as6453.net (66.198.96.62)
  1482. 7 56.66 ms if-ae-25-2.tcore1.ttt-toronto.as6453.net (64.86.33.103)
  1483. 8 56.88 ms if-ae-10-2.tcore2.ttt-toronto.as6453.net (64.86.32.34)
  1484. 9 57.22 ms if-ae-5-3.tcore1.aeq-ashburn.as6453.net (64.86.85.2)
  1485. 10 55.52 ms 216.98.100.249
  1486. 11 102.24 ms sjc002bb13.IIJ.Net (206.132.168.102)
  1487. 12 202.21 ms tky009bb00.IIJ.Net (58.138.88.241)
  1488. 13 199.19 ms tky009agr00.IIJ.Net (58.138.114.42)
  1489. 14 198.66 ms www.maruzenshowa.co.jp (210.130.168.131)
  1490.  
  1491. NSE: Script Post-scanning.
  1492. Initiating NSE at 07:12
  1493. Completed NSE at 07:12, 0.00s elapsed
  1494. Initiating NSE at 07:12
  1495. Completed NSE at 07:12, 0.00s elapsed
  1496. Read data files from: /usr/bin/../share/nmap
  1497. #######################################################################################################################################
  1498. http://210.130.168.131 [301 Moved Permanently] Apache, Country[JAPAN][JP], HTTPServer[Apache], IP[210.130.168.131], RedirectLocation[https://210.130.168.131/], Title[301 Moved Permanently]
  1499. https://210.130.168.131/ [200 OK] Adobe-Flash, Apache, Country[JAPAN][JP], HTTPServer[Apache], IP[210.130.168.131], JQuery, Script[text/javascript], Title[丸全昭和運輸株式会社], X-UA-Compatible[IE=EmulateIE7]
  1500. #######################################################################################################################################
  1501. HTTP/1.1 301 Moved Permanently
  1502. Date: Fri, 16 Aug 2019 11:12:50 GMT
  1503. Server: Apache
  1504. Location: https://210.130.168.131/
  1505. Content-Type: text/html; charset=iso-8859-1
  1506.  
  1507. HTTP/1.1 301 Moved Permanently
  1508. Date: Fri, 16 Aug 2019 11:12:51 GMT
  1509. Server: Apache
  1510. Location: https://210.130.168.131/
  1511. Content-Type: text/html; charset=iso-8859-1
  1512. #######################################################################################################################################
  1513. Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-16 07:12 EDT
  1514. NSE: Loaded 162 scripts for scanning.
  1515. NSE: Script Pre-scanning.
  1516. Initiating NSE at 07:12
  1517. Completed NSE at 07:12, 0.00s elapsed
  1518. Initiating NSE at 07:12
  1519. Completed NSE at 07:12, 0.00s elapsed
  1520. Initiating Parallel DNS resolution of 1 host. at 07:12
  1521. Completed Parallel DNS resolution of 1 host. at 07:12, 0.02s elapsed
  1522. Initiating SYN Stealth Scan at 07:12
  1523. Scanning www.maruzenshowa.co.jp (210.130.168.131) [1 port]
  1524. Discovered open port 443/tcp on 210.130.168.131
  1525. Completed SYN Stealth Scan at 07:12, 0.24s elapsed (1 total ports)
  1526. Initiating Service scan at 07:12
  1527. Scanning 1 service on www.maruzenshowa.co.jp (210.130.168.131)
  1528. Completed Service scan at 07:13, 2.60s elapsed (1 service on 1 host)
  1529. Initiating OS detection (try #1) against www.maruzenshowa.co.jp (210.130.168.131)
  1530. Retrying OS detection (try #2) against www.maruzenshowa.co.jp (210.130.168.131)
  1531. Initiating Traceroute at 07:13
  1532. Completed Traceroute at 07:13, 0.24s elapsed
  1533. Initiating Parallel DNS resolution of 14 hosts. at 07:13
  1534. Completed Parallel DNS resolution of 14 hosts. at 07:13, 0.22s elapsed
  1535. NSE: Script scanning 210.130.168.131.
  1536. Initiating NSE at 07:13
  1537. NSE: [http-wordpress-enum 210.130.168.131:443] got no answers from pipelined queries
  1538. Completed NSE at 07:15, 171.47s elapsed
  1539. Initiating NSE at 07:15
  1540. Completed NSE at 07:15, 0.42s elapsed
  1541. Nmap scan report for www.maruzenshowa.co.jp (210.130.168.131)
  1542. Host is up (0.20s latency).
  1543.  
  1544. PORT STATE SERVICE VERSION
  1545. 443/tcp open tcpwrapped
  1546. |_http-aspnet-debug: ERROR: Script execution failed (use -d to debug)
  1547. | http-brute:
  1548. |_ Path "/" does not require authentication
  1549. |_http-chrono: Request times for /; avg: 1322.66ms; min: 1112.05ms; max: 1524.93ms
  1550. | http-csrf:
  1551. | Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=www.maruzenshowa.co.jp
  1552. | Found the following possible CSRF vulnerabilities:
  1553. |
  1554. | Path: http://www.maruzenshowa.co.jp:443/
  1555. | Form id:
  1556. | Form action: https://search.yahoo.co.jp/search
  1557. |
  1558. | Path: http://www.maruzenshowa.co.jp:443/service/purpose/efficiency.html
  1559. | Form id:
  1560. | Form action: https://search.yahoo.co.jp/search
  1561. |
  1562. | Path: http://www.maruzenshowa.co.jp:443/base/domestic/chubu/index.html
  1563. | Form id:
  1564. | Form action: https://search.yahoo.co.jp/search
  1565. |
  1566. | Path: http://www.maruzenshowa.co.jp:443/corporate/message.html
  1567. | Form id:
  1568. | Form action: https://search.yahoo.co.jp/search
  1569. |
  1570. | Path: http://www.maruzenshowa.co.jp:443/strength/solution.html
  1571. | Form id:
  1572. | Form action: https://search.yahoo.co.jp/search
  1573. |
  1574. | Path: http://www.maruzenshowa.co.jp:443/service/function/office_relocation.html
  1575. | Form id:
  1576. | Form action: https://search.yahoo.co.jp/search
  1577. |
  1578. | Path: http://www.maruzenshowa.co.jp:443/base/domestic/chugoku_shikoku/index.html
  1579. | Form id:
  1580. | Form action: https://search.yahoo.co.jp/search
  1581. |
  1582. | Path: http://www.maruzenshowa.co.jp:443/ir/library.html
  1583. | Form id:
  1584. | Form action: https://search.yahoo.co.jp/search
  1585. |
  1586. | Path: http://www.maruzenshowa.co.jp:443/base/domestic/kyushu/index.html
  1587. | Form id:
  1588. | Form action: https://search.yahoo.co.jp/search
  1589. |
  1590. | Path: http://www.maruzenshowa.co.jp:443/service/industry/building_material.html
  1591. | Form id:
  1592. | Form action: https://search.yahoo.co.jp/search
  1593. |
  1594. | Path: http://www.maruzenshowa.co.jp:443/case/index.html
  1595. | Form id:
  1596. | Form action: https://search.yahoo.co.jp/search
  1597. |
  1598. | Path: http://www.maruzenshowa.co.jp:443/base/domestic/kansai/index.html
  1599. | Form id:
  1600. | Form action: https://search.yahoo.co.jp/search
  1601. |
  1602. | Path: http://www.maruzenshowa.co.jp:443/corporate/index.html
  1603. | Form id:
  1604. | Form action: https://search.yahoo.co.jp/search
  1605. |
  1606. | Path: http://www.maruzenshowa.co.jp:443/service/function/yard_operation.html
  1607. | Form id:
  1608. | Form action: https://search.yahoo.co.jp/search
  1609. |
  1610. | Path: http://www.maruzenshowa.co.jp:443/strength/it.html
  1611. | Form id:
  1612. | Form action: https://search.yahoo.co.jp/search
  1613. |
  1614. | Path: http://www.maruzenshowa.co.jp:443/index.html
  1615. | Form id:
  1616. | Form action: https://search.yahoo.co.jp/search
  1617. |
  1618. | Path: http://www.maruzenshowa.co.jp:443/corporate/internal_control.html
  1619. | Form id:
  1620. | Form action: https://search.yahoo.co.jp/search
  1621. |
  1622. | Path: http://www.maruzenshowa.co.jp:443/corporate/business.html
  1623. | Form id:
  1624. |_ Form action: https://search.yahoo.co.jp/search
  1625. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
  1626. |_http-dombased-xss: Couldn't find any DOM based XSS.
  1627. |_http-errors: Couldn't find any error pages.
  1628. |_http-feed: Couldn't find any feeds.
  1629. |_http-fetch: Please enter the complete path of the directory to save data in.
  1630. | http-headers:
  1631. | Date: Fri, 16 Aug 2019 11:13:19 GMT
  1632. | Server: Apache
  1633. | Last-Modified: Tue, 13 Aug 2019 00:21:03 GMT
  1634. | ETag: "85f046-67c5-58ff49da34355"
  1635. | Accept-Ranges: bytes
  1636. | Content-Length: 26565
  1637. | Connection: close
  1638. | Content-Type: text/html
  1639. |
  1640. |_ (Request type: HEAD)
  1641. |_http-jsonp-detection: Couldn't find any JSONP endpoints.
  1642. | http-methods:
  1643. |_ Supported Methods: OPTIONS
  1644. |_http-mobileversion-checker: No mobile version detected.
  1645. | http-security-headers:
  1646. | Strict_Transport_Security:
  1647. |_ HSTS not configured in HTTPS Server
  1648. | http-sitemap-generator:
  1649. | Directory structure:
  1650. | /
  1651. | Other: 1
  1652. | /base/domestic/chubu/
  1653. | html: 1
  1654. | /base/domestic/chugoku_shikoku/
  1655. | html: 1
  1656. | /base/domestic/hokkaido_tohoku/
  1657. | html: 1
  1658. | /base/global/southeast_asia/
  1659. | html: 1
  1660. | /common/css/
  1661. | css: 1
  1662. | /common/js/
  1663. | js: 2
  1664. | /contact/
  1665. | html: 1
  1666. | /corporate/
  1667. | html: 1
  1668. | /csr/isms/
  1669. | html: 1
  1670. | /faq/
  1671. | html: 1
  1672. | /images/
  1673. | gif: 5
  1674. | /privacy/
  1675. | html: 1
  1676. | /strength/
  1677. | html: 2
  1678. | Longest directory structure:
  1679. | Depth: 3
  1680. | Dir: /base/domestic/chubu/
  1681. | Total files found (by extension):
  1682. |_ Other: 1; css: 1; gif: 5; html: 11; js: 2
  1683. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
  1684. | http-vhosts:
  1685. | intra.maruzenshowa.co.jp : 200
  1686. | alerts.maruzenshowa.co.jp : 200
  1687. | server.maruzenshowa.co.jp : 200
  1688. |_124 names had status ERROR
  1689. |_http-vuln-cve2014-3704: ERROR: Script execution failed (use -d to debug)
  1690. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
  1691. |_http-xssed: No previously reported XSS vuln.
  1692. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1693. Device type: load balancer
  1694. Running (JUST GUESSING): F5 Networks TMOS 11.6.X (89%)
  1695. OS CPE: cpe:/o:f5:tmos:11.6
  1696. Aggressive OS guesses: F5 BIG-IP Local Traffic Manager load balancer (TMOS 11.6) (89%)
  1697. No exact OS matches for host (test conditions non-ideal).
  1698. Uptime guess: 29.931 days (since Wed Jul 17 08:54:52 2019)
  1699. Network Distance: 14 hops
  1700. TCP Sequence Prediction: Difficulty=262 (Good luck!)
  1701. IP ID Sequence Generation: Randomized
  1702.  
  1703. TRACEROUTE (using port 443/tcp)
  1704. HOP RTT ADDRESS
  1705. 1 22.18 ms 10.243.200.1
  1706. 2 22.31 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
  1707. 3 77.87 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
  1708. 4 22.22 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
  1709. 5 22.24 ms ix-xe-11-1-1-0.tcore1.w6c-montreal.as6453.net (66.198.96.98)
  1710. 6 58.70 ms if-ae-7-2.tcore1.tnk-toronto.as6453.net (66.198.96.62)
  1711. 7 57.35 ms if-ae-25-2.tcore1.ttt-toronto.as6453.net (64.86.33.103)
  1712. 8 57.32 ms if-ae-10-2.tcore2.ttt-toronto.as6453.net (64.86.32.34)
  1713. 9 57.45 ms if-ae-5-3.tcore1.aeq-ashburn.as6453.net (64.86.85.2)
  1714. 10 55.91 ms 216.98.100.249
  1715. 11 103.05 ms sjc002bb13.IIJ.Net (58.138.80.130)
  1716. 12 203.21 ms tky009bb00.IIJ.Net (58.138.88.241)
  1717. 13 200.81 ms tky009agr00.IIJ.Net (58.138.114.42)
  1718. 14 201.09 ms www.maruzenshowa.co.jp (210.130.168.131)
  1719.  
  1720. NSE: Script Post-scanning.
  1721. Initiating NSE at 07:15
  1722. Completed NSE at 07:15, 0.00s elapsed
  1723. Initiating NSE at 07:15
  1724. Completed NSE at 07:15, 0.00s elapsed
  1725. Read data files from: /usr/bin/../share/nmap
  1726. #######################################################################################################################################
  1727. Version: 1.11.13-static
  1728. OpenSSL 1.0.2-chacha (1.0.2g-dev)
  1729.  
  1730. Connected to 210.130.168.131
  1731.  
  1732. Testing SSL server 210.130.168.131 on port 443 using SNI name 210.130.168.131
  1733.  
  1734. TLS Fallback SCSV:
  1735. Server supports TLS Fallback SCSV
  1736.  
  1737. TLS renegotiation:
  1738. Secure session renegotiation supported
  1739.  
  1740. TLS Compression:
  1741. Compression disabled
  1742.  
  1743. Heartbleed:
  1744. TLS 1.2 not vulnerable to heartbleed
  1745. TLS 1.1 not vulnerable to heartbleed
  1746. TLS 1.0 not vulnerable to heartbleed
  1747.  
  1748. Supported Server Cipher(s):
  1749. Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve P-256 DHE 256
  1750. Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA256 Curve P-256 DHE 256
  1751. Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
  1752. Accepted TLSv1.2 128 bits AES128-GCM-SHA256
  1753. Accepted TLSv1.2 128 bits AES128-SHA256
  1754. Accepted TLSv1.2 128 bits AES128-SHA
  1755. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-256 DHE 256
  1756. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-256 DHE 256
  1757. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
  1758. Accepted TLSv1.2 256 bits AES256-GCM-SHA384
  1759. Accepted TLSv1.2 256 bits AES256-SHA256
  1760. Accepted TLSv1.2 256 bits AES256-SHA
  1761. Accepted TLSv1.2 128 bits ECDHE-RSA-RC4-SHA Curve P-256 DHE 256
  1762. Accepted TLSv1.2 128 bits RC4-SHA
  1763. Accepted TLSv1.2 128 bits RC4-MD5
  1764. Accepted TLSv1.2 112 bits ECDHE-RSA-DES-CBC3-SHA Curve P-256 DHE 256
  1765. Accepted TLSv1.2 112 bits DES-CBC3-SHA
  1766. Preferred TLSv1.1 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
  1767. Accepted TLSv1.1 128 bits AES128-SHA
  1768. Accepted TLSv1.1 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
  1769. Accepted TLSv1.1 256 bits AES256-SHA
  1770. Accepted TLSv1.1 128 bits ECDHE-RSA-RC4-SHA Curve P-256 DHE 256
  1771. Accepted TLSv1.1 128 bits RC4-SHA
  1772. Accepted TLSv1.1 128 bits RC4-MD5
  1773. Accepted TLSv1.1 112 bits ECDHE-RSA-DES-CBC3-SHA Curve P-256 DHE 256
  1774. Accepted TLSv1.1 112 bits DES-CBC3-SHA
  1775. Preferred TLSv1.0 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
  1776. Accepted TLSv1.0 128 bits AES128-SHA
  1777. Accepted TLSv1.0 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
  1778. Accepted TLSv1.0 256 bits AES256-SHA
  1779. Accepted TLSv1.0 128 bits ECDHE-RSA-RC4-SHA Curve P-256 DHE 256
  1780. Accepted TLSv1.0 128 bits RC4-SHA
  1781. Accepted TLSv1.0 128 bits RC4-MD5
  1782. Accepted TLSv1.0 112 bits ECDHE-RSA-DES-CBC3-SHA Curve P-256 DHE 256
  1783. Accepted TLSv1.0 112 bits DES-CBC3-SHA
  1784.  
  1785. SSL Certificate:
  1786. Signature Algorithm: sha256WithRSAEncryption
  1787. RSA Key Strength: 2048
  1788.  
  1789. Subject: www.maruzenshowa.co.jp
  1790. Altnames: DNS:www.maruzenshowa.co.jp, DNS:maruzenshowa.co.jp
  1791. Issuer: GlobalSign RSA DV SSL CA 2018
  1792.  
  1793. Not valid before: Aug 8 00:25:39 2019 GMT
  1794. Not valid after: Aug 15 04:03:49 2021 GMT
  1795. #######################################################################################################################################
  1796. Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-16 07:21 EDT
  1797. NSE: Loaded 45 scripts for scanning.
  1798. NSE: Script Pre-scanning.
  1799. Initiating NSE at 07:21
  1800. Completed NSE at 07:21, 0.00s elapsed
  1801. Initiating NSE at 07:21
  1802. Completed NSE at 07:21, 0.00s elapsed
  1803. Initiating Ping Scan at 07:21
  1804. Scanning 210.130.168.131 [4 ports]
  1805. Completed Ping Scan at 07:21, 0.24s elapsed (1 total hosts)
  1806. Initiating Parallel DNS resolution of 1 host. at 07:21
  1807. Completed Parallel DNS resolution of 1 host. at 07:21, 0.02s elapsed
  1808. Initiating SYN Stealth Scan at 07:21
  1809. Scanning www.maruzenshowa.co.jp (210.130.168.131) [65535 ports]
  1810. Discovered open port 443/tcp on 210.130.168.131
  1811. Discovered open port 80/tcp on 210.130.168.131
  1812. SYN Stealth Scan Timing: About 8.19% done; ETC: 07:27 (0:05:48 remaining)
  1813. SYN Stealth Scan Timing: About 35.43% done; ETC: 07:24 (0:01:51 remaining)
  1814. SYN Stealth Scan Timing: About 68.66% done; ETC: 07:23 (0:00:42 remaining)
  1815. Completed SYN Stealth Scan at 07:23, 115.37s elapsed (65535 total ports)
  1816. Initiating Service scan at 07:23
  1817. Scanning 2 services on www.maruzenshowa.co.jp (210.130.168.131)
  1818. Completed Service scan at 07:23, 2.80s elapsed (2 services on 1 host)
  1819. Initiating OS detection (try #1) against www.maruzenshowa.co.jp (210.130.168.131)
  1820. Retrying OS detection (try #2) against www.maruzenshowa.co.jp (210.130.168.131)
  1821. Initiating Traceroute at 07:23
  1822. Completed Traceroute at 07:23, 0.04s elapsed
  1823. Initiating Parallel DNS resolution of 2 hosts. at 07:23
  1824. Completed Parallel DNS resolution of 2 hosts. at 07:23, 0.00s elapsed
  1825. NSE: Script scanning 210.130.168.131.
  1826. Initiating NSE at 07:23
  1827. Completed NSE at 07:23, 1.57s elapsed
  1828. Initiating NSE at 07:23
  1829. Completed NSE at 07:23, 0.00s elapsed
  1830. Nmap scan report for www.maruzenshowa.co.jp (210.130.168.131)
  1831. Host is up (0.022s latency).
  1832. Not shown: 65529 filtered ports
  1833. PORT STATE SERVICE VERSION
  1834. 25/tcp closed smtp
  1835. 53/tcp closed domain
  1836. 80/tcp open tcpwrapped
  1837. |_http-server-header: Apache
  1838. 139/tcp closed netbios-ssn
  1839. 443/tcp open tcpwrapped
  1840. 445/tcp closed microsoft-ds
  1841. Device type: general purpose|load balancer
  1842. Running (JUST GUESSING): OpenBSD 4.X (87%), F5 Networks TMOS 11.6.X (86%)
  1843. OS CPE: cpe:/o:openbsd:openbsd:4.3 cpe:/o:f5:tmos:11.6
  1844. Aggressive OS guesses: OpenBSD 4.3 (87%), F5 BIG-IP Local Traffic Manager load balancer (TMOS 11.6) (86%)
  1845. No exact OS matches for host (test conditions non-ideal).
  1846. Uptime guess: 29.937 days (since Wed Jul 17 08:54:51 2019)
  1847. Network Distance: 2 hops
  1848. TCP Sequence Prediction: Difficulty=262 (Good luck!)
  1849. IP ID Sequence Generation: Randomized
  1850.  
  1851. TRACEROUTE (using port 139/tcp)
  1852. HOP RTT ADDRESS
  1853. 1 21.50 ms 10.243.200.1
  1854. 2 21.50 ms www.maruzenshowa.co.jp (210.130.168.131)
  1855.  
  1856. NSE: Script Post-scanning.
  1857. Initiating NSE at 07:23
  1858. Completed NSE at 07:23, 0.00s elapsed
  1859. Initiating NSE at 07:23
  1860. Completed NSE at 07:23, 0.00s elapsed
  1861. Read data files from: /usr/bin/../share/nmap
  1862. #######################################################################################################################################
  1863. Starting Nmap 7.70 ( https://nmap.org ) at 2019-08-16 07:23 EDT
  1864. NSE: Loaded 45 scripts for scanning.
  1865. NSE: Script Pre-scanning.
  1866. Initiating NSE at 07:23
  1867. Completed NSE at 07:23, 0.00s elapsed
  1868. Initiating NSE at 07:23
  1869. Completed NSE at 07:23, 0.00s elapsed
  1870. Initiating Parallel DNS resolution of 1 host. at 07:23
  1871. Completed Parallel DNS resolution of 1 host. at 07:23, 0.11s elapsed
  1872. Initiating UDP Scan at 07:23
  1873. Scanning www.maruzenshowa.co.jp (210.130.168.131) [15 ports]
  1874. Completed UDP Scan at 07:23, 1.65s elapsed (15 total ports)
  1875. Initiating Service scan at 07:23
  1876. Scanning 12 services on www.maruzenshowa.co.jp (210.130.168.131)
  1877. Service scan Timing: About 8.33% done; ETC: 07:43 (0:17:47 remaining)
  1878. Completed Service scan at 07:25, 102.58s elapsed (12 services on 1 host)
  1879. Initiating OS detection (try #1) against www.maruzenshowa.co.jp (210.130.168.131)
  1880. Initiating Traceroute at 07:25
  1881. Completed Traceroute at 07:25, 7.04s elapsed
  1882. Initiating Parallel DNS resolution of 1 host. at 07:25
  1883. Completed Parallel DNS resolution of 1 host. at 07:25, 0.00s elapsed
  1884. NSE: Script scanning 210.130.168.131.
  1885. Initiating NSE at 07:25
  1886. Completed NSE at 07:25, 7.13s elapsed
  1887. Initiating NSE at 07:25
  1888. Completed NSE at 07:25, 1.15s elapsed
  1889. Nmap scan report for www.maruzenshowa.co.jp (210.130.168.131)
  1890. Host is up (0.094s latency).
  1891.  
  1892. PORT STATE SERVICE VERSION
  1893. 53/udp closed domain
  1894. 67/udp open|filtered dhcps
  1895. 68/udp open|filtered dhcpc
  1896. 69/udp open|filtered tftp
  1897. 88/udp open|filtered kerberos-sec
  1898. 123/udp open|filtered ntp
  1899. 137/udp filtered netbios-ns
  1900. 138/udp filtered netbios-dgm
  1901. 139/udp open|filtered netbios-ssn
  1902. 161/udp open|filtered snmp
  1903. 162/udp open|filtered snmptrap
  1904. 389/udp open|filtered ldap
  1905. 500/udp open|filtered isakmp
  1906. 520/udp open|filtered route
  1907. 2049/udp open|filtered nfs
  1908. Device type: firewall|load balancer
  1909. Running: F5 Networks embedded, F5 Networks TMOS 11.1.X|11.4.X|11.6.X|9.1.X
  1910. OS CPE: cpe:/o:f5:tmos:11.1 cpe:/o:f5:tmos:11.4 cpe:/o:f5:tmos:11.6 cpe:/o:f5:tmos:9.1
  1911. Too many fingerprints match this host to give specific OS details
  1912. Network Distance: 14 hops
  1913.  
  1914. TRACEROUTE (using port 137/udp)
  1915. HOP RTT ADDRESS
  1916. 1 ... 4
  1917. 5 20.29 ms 10.243.200.1
  1918. 6 ... 7
  1919. 8 20.70 ms 10.243.200.1
  1920. 9 21.44 ms 10.243.200.1
  1921. 10 21.43 ms 10.243.200.1
  1922. 11 21.42 ms 10.243.200.1
  1923. 12 21.41 ms 10.243.200.1
  1924. 13 21.40 ms 10.243.200.1
  1925. 14 21.40 ms 10.243.200.1
  1926. 15 ... 18
  1927. 19 20.34 ms 10.243.200.1
  1928. 20 24.08 ms 10.243.200.1
  1929. 21 ... 28
  1930. 29 20.87 ms 10.243.200.1
  1931. 30 21.12 ms 10.243.200.1
  1932.  
  1933. NSE: Script Post-scanning.
  1934. Initiating NSE at 07:25
  1935. Completed NSE at 07:25, 0.00s elapsed
  1936. Initiating NSE at 07:25
  1937. Completed NSE at 07:25, 0.00s elapsed
  1938. Read data files from: /usr/bin/../share/nmap
  1939. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  1940. Nmap done: 1 IP address (1 host up) scanned in 122.53 seconds
  1941. Raw packets sent: 115 (8.716KB) | Rcvd: 218 (25.164KB)
  1942. #######################################################################################################################################
  1943. ---------------------------------------------------------------------------------------------------------------------------------------
  1944. + Target IP: 210.130.168.131
  1945. + Target Hostname: 210.130.168.131
  1946. + Target Port: 80
  1947. + Start Time: 2019-08-16 08:04:16 (GMT-4)
  1948. ---------------------------------------------------------------------------------------------------------------------------------------
  1949. + Server: Apache
  1950. + The anti-clickjacking X-Frame-Options header is not present.
  1951. + The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
  1952. + The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
  1953. + Root page / redirects to: https://210.130.168.131/
  1954. + Server may leak inodes via ETags, header found with file /cgi/admin.cgi, inode: 158234, size: 599, mtime: Wed Feb 13 09:28:47 2008
  1955. + 26522 requests: 0 error(s) and 4 item(s) reported on remote host
  1956. + End Time: 2019-08-16 09:39:47 (GMT-4) (5731 seconds)
  1957. ---------------------------------------------------------------------------------------------------------------------------------------
  1958. #######################################################################################################################################
  1959. ---------------------------------------------------------------------------------------------------------------------------------------
  1960. + Target IP: 210.130.168.131
  1961. + Target Hostname: 210.130.168.131
  1962. + Target Port: 443
  1963. ---------------------------------------------------------------------------------------------------------------------------------------
  1964. + SSL Info: Subject: /C=JP/OU=Domain Control Validated/CN=www.maruzenshowa.co.jp
  1965. Ciphers: ECDHE-RSA-AES128-GCM-SHA256
  1966. Issuer: /C=BE/O=GlobalSign nv-sa/CN=GlobalSign RSA DV SSL CA 2018
  1967. + Start Time: 2019-08-16 08:04:37 (GMT-4)
  1968. ---------------------------------------------------------------------------------------------------------------------------------------
  1969. + Server: Apache
  1970. + Server may leak inodes via ETags, header found with file /, inode: 8777798, size: 26565, mtime: Mon Aug 12 20:21:03 2019
  1971. + The anti-clickjacking X-Frame-Options header is not present.
  1972. + The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
  1973. + The site uses SSL and the Strict-Transport-Security HTTP header is not defined.
  1974. + The site uses SSL and Expect-CT header is not present.
  1975. + The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
  1976. + Hostname '210.130.168.131' does not match certificate's names: www.maruzenshowa.co.jp
  1977. + Allowed HTTP Methods: GET, HEAD, POST, OPTIONS
  1978. + OSVDB-3092: /sitemap.xml: This gives a nice listing of the site content.
  1979. + OSVDB-3092: /info/: This might be interesting...
  1980. + OSVDB-3092: /service/: This might be interesting...
  1981. + OSVDB-3092: /ir/: This might be interesting... potential country code (Islamic Republic Of Iran)
  1982. + OSVDB-3092: /ch/: This might be interesting... potential country code (Switzerland)
  1983. + 9539 requests: 0 error(s) and 13 item(s) reported on remote host
  1984. + End Time: 2019-08-16 10:22:03 (GMT-4) (8246 seconds)
  1985. ---------------------------------------------------------------------------------------------------------------------------------------
  1986. #######################################################################################################################################
  1987. Anonymous JTSEC #OpWhales Full Recon #34
Advertisement
Add Comment
Please, Sign In to add comment