Vulnerability Found In Indian Hacking Group Official Website

Vulnerability Found In Best Indian Hacking Group Official Website ( Fucked )

Vulnerability Found By - Nakul Mohan (Cia)

#Target - http://www.indiancyberarmy.org/en/index.php

1st Vulnerability - Apache mod_negotiation filename bruteforcing

mod_negotiation is an Apache module responsible for selecting the document that best matches the clients capabilities, from one of several available documents. If the client provides an invalid Accept header, the server will respond with a 406 Not Acceptable error containing a pseudo directory listing. This behaviour can help an attacker to learn more about his target, for example, generate a list of base names, generate a list of interesting extensions, look for backup files and so on.

2th - Possible sensitive files

A possible sensitive file has been found. This file is not directly linked from the website. This check looks for common sensitive resources like password files, configuration files, log files, include files, statistics data, database dumps. Each one of these files could help an attacker to learn more about his target.

3th Vulnerability - Session Cookie without HttpOnly flag set

This session cookie doesn't have the HTTPOnly flag set. When a cookie is set with the HTTPOnly flag, it instructs the browser that the cookie can only be accessed by the server and not by client-side scripts. This is an important security protection for session cookies.

4th Vulnerability - Session Cookie without Secure flag set

This session cookie doesn't have the Secure flag set. When a cookie is set with the Secure flag, it instructs the browser that the cookie can only be accessed over secure SSL channels. This is an important security protection for session cookies.

Some Broken Links Of - http://www.indiancyberarmy.org/en/index.php

A broken link refers to any link that should take you to a document, image or webpage, that actually results in an error. This page was linked from the website but it is inaccessible.

/en/become_partner.php
/en/projects/www.silencehour.com
/en/reg_foi.php
/en/reghacksafe.php
/en/renewmembership.php
/en/SpryAssets/SpryTabbedPanels.js


Join Us - https://www.facebook.com/groups/nakul.anonymous/