marys

pimpmygame.com system exploits

Nov 6th, 2014
339
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 3.28 KB | None | 0 0
  1. http://pimpingmygame.com/ intel report by Hacktivist_15 <3 Anonymous Family <3 <3 <3 We Hack everything :)
  2.  
  3. IP Address 166.78.199.16
  4.  
  5. Server Type Apache/2.2.15 (Red Hat)
  6.  
  7. Name Server IP Location
  8. ns55.domaincontrol.com 216.69.185.28
  9. Scottsdale, AZ, US
  10. ns56.domaincontrol.com 208.109.255.28
  11. Scottsdale, AZ, US
  12.  
  13. pimpingmygame.com A 10 minutes 72.52.229.247 (Lansing, MI, US)
  14.  
  15.  
  16. Server:Apache/2.2.25 (Unix) mod_ssl/2.2.25 OpenSSL/1.0.0-fips mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635
  17. IP Address:72.52.229.247
  18. Port:443
  19. Hostname:pimpingmygame.com
  20.  
  21.  
  22. Registration Details
  23. Hostname:host.rsduniversity.com
  24.  
  25.  
  26. Certificate Details
  27. Domain Names:host.rsduniversity.com
  28.  
  29.  
  30. EXPLOITS
  31.  
  32. Sessions may be vulnerable to BEAST attack
  33. Attackers may be able to decrypt the encrypted SSL traffic
  34.  
  35. Hostname in certificate and DNS name do not match
  36. Users will receive strong browser warnings
  37.  
  38. Server is using a self-signed certificate
  39. Users will receive strong browser warnings
  40.  
  41. Server has not enabled HTTP Strict-Transport-Security
  42. Users may be exposed to man-in-the-middle attacks
  43.  
  44. Server configuration contains weak cipher suites
  45. Cipher suites with known weaknesses should be disabled
  46.  
  47. Server may have sent unnecessary certificates in the SSL/TLS negotiation
  48. Users may experience slower performance
  49.  
  50. Site is using certificate from CA that doesn’t support IPv4
  51. IPv4-only users may experience errors when visiting your site.
  52.  
  53. Server configuration does not meet FIPS guidelines
  54. Federal standards for data handling are not being met
  55.  
  56. Server configuration does not meet PCI/DSS guidelines
  57. This is a problem if you process credit card information
  58.  
  59. Nmap scan report for 72.52.229.247 < use Sockstress> 5 ports open freeze those servers>
  60. Host is up (0.23s latency).
  61. PORT STATE SERVICE
  62. 21/tcp open ftp <<<<<<<
  63. 22/tcp open ssh <<<<<<
  64. 23/tcp filtered telnet
  65. 25/tcp open smtp <<<<
  66. 53/tcp open domain <<<<
  67. 80/tcp open http <<<<<
  68. 110/tcp open pop3 <<<<
  69. 111/tcp filtered rpcbind
  70. 135/tcp filtered msrpc
  71. 139/tcp filtered netbios-ssn
  72. 143/tcp open imap <<<<
  73. 443/tcp open https <<<<
  74. 445/tcp filtered microsoft-ds
  75. 993/tcp open imaps <<<<
  76. 995/tcp open pop3s <<<<
  77. 1723/tcp filtered pptp
  78. 3306/tcp open mysql <<<<
  79. 3389/tcp filtered ms-wbt-server
  80. 5900/tcp filtered vnc
  81. 8080/tcp filtered http-proxy
  82.  
  83.  
  84. Strict Transport Security:Fail
  85. Mixed Content (HTTP and HTTPS):Timed Out
  86. Domain name resolves to IPv4 address:Pass
  87. Domain name resolves to IPv6 address:Fail
  88.  
  89.  
  90. No chain of trust:Pass
  91. Certificate not yet valid:Pass
  92. Certificate expired:Pass
  93. Hostname mismatch:Fail
  94. Certificate revoked:Pass
  95. Self-signed certificate:Fail
  96. Weak signature:Pass
  97. Debian Weak Key Vulnerability: Pass
  98. Certificate validation URIs resolve to IPv4 addresses:Fail
  99. Certificate validation URIs resolve to IPv6 addresses:Fail
  100.  
  101.  
  102.  
  103. SSL 2.0 Disabled:Pass
  104. SSL 3.0 Disabled:Fail
  105. TLS 1.0 Enabled:Pass
  106. TLS 1.1 Enabled:Pass
  107. TLS 1.2 Enabled:Pass
  108. Weak ciphersuites disabled:Fail
  109. Certificates configured correctly:Fail
  110. Secure renegotiation configured:Pass
  111. Session resumption configured:Pass
  112. BEAST Vulnerability:Fail
  113. OCSP Stapling:Fail
  114. PCI Compliant:Fail
  115. FIPS Compliant:Fail
  116. Forward Secrecy Supported:Pass
  117. Heartbleed Vulnerability:Pass
Advertisement
Add Comment
Please, Sign In to add comment