exploits Samaritans .org

http://www.samaritans.org/  intel by Hacktivist_15 <3 Anonymous Familia <3

SAMARITANS is run by 13 directors. Directory and secretary

Number of Employees 	Year
108 	2013
101 	2012
90 	2011
83 	2010
    93.93.227.151www.samaritans.org
    More details
    www.samaritans.org
    owa.samaritans.org
    mail.samaritans.org
    autodiscover.samaritans.org
    samaritans.org
80 	2009


IP Address 	93.93.227.151

Server Type 	Apache/2.2.15 (CentOS)


-----   www.samaritans.org   -----


Host's addresses:
__________________

www.samaritans.org                       5        IN    A        93.93.227.151


Name Servers
dns1.netpresto.co.uk 	213.239.202.80
dns0.netpresto.co.uk 	213.210.16.29

Registrant Contact Information:
    Name: John Vago
    Organization: Samaritans
    City: Ewell
    State: Surrey
    Zip: KT172AF
    Country: GB
    Phone: +44.2083948300
    Email: Email Masking [email protected]

 SAMARITANS	 Verified
Basic Info Mini Icon	Active - 00757372
Address Mini Icon	THE UPPER MILL, KINGSTON ROAD, EWELL, SURREY, KT17 2AF

    Address Mini Icon
    Cash: £2,765,000
    Net Worth: £6,525,000
    Assets: £3,410,000
    Liabilities: £1,691,000

EXPLOITS TO http://www.samaritans.org/

Found 1 URLs and 3 different points of injection.

The whole target has no protection (X-Frame-Options header) against ClickJacking attack

The URL: "http://www.samaritans.org/" sent the cookie: "SSESS7ae87a5e418552579f7a1314760a98b4=deleted; expires=Mon, 04-Nov-2013 07:01:42 GMT; path=/; domain=.samaritans.org; secure; httponly". This information was found in the request with id 72.


The server header for the remote web server is: "Apache/2.2.15 (CentOS)". This information was found in the request with id 63.
GET http://www.samaritans.org/ HTTP/1.1
Host: www.samaritans.org
Cookie: SERVERID=A

The URL: "http://www.samaritans.org/" sent the cookie: "SERVERID=A; path=/". This information was found in the request with id 1.
GET http://www.samaritans.org/ HTTP/1.1



The server header for the remote web server is: "Apache/2.2.15 (CentOS)". This information was found in the request with id 63.
The URL "http://www.samaritans.org/" has the following allowed methods, which include DAV methods: *, ACL, BASELINE_CONTROL, CHECKIN, CHECKOUT, COPY, DEBUG, GET, HEAD, INDEX, INVALID, INVOKE, LABEL, LINK, LOCK, MERGE, MKACTIVITY, MKCOL, MKDIR, MKWORKSPACE, MOVE, NOTIFY, OPTIONS, PATCH, PIN, POLL, POST, PROPFIND, PROPPATCH, REPLY, REPORT, RMDIR, SEARCH, SHOWMETHOD, SPACEJUMP, SUBSCRIBE, SUBSCRIPTIONS, TEXTSEARCH, TRACE, TRACK, UNCHECKOUT, UNLINK, UNLOCK, UNSUBSCRIBE, VERSION_CONTROL.


Server does not use secure renegotiation settings
Site is more vulnerable to Denial of Service (DOS) attacks

Sessions may be vulnerable to BEAST attack
Attackers may be able to decrypt the encrypted SSL traffic

Server configuration contains weak cipher suites
Cipher suites with known weaknesses should be disabled

Server has not enabled HTTP Strict-Transport-Security
Users may be exposed to man-in-the-middle attacks

Server doesn’t prefer ciphers that enable forward secrecy.
Encrypted communications captured today are at risk of being decrypted by an attacker in the future.

SSL 2.0 Disabled:Pass
SSL 3.0 Disabled:Pass
TLS 1.0 Enabled:Pass
TLS 1.1 Enabled:Pass
TLS 1.2 Enabled:Pass
Weak ciphersuites disabled:Fail    <<<<
Certificates configured correctly:Pass
Secure renegotiation configured:Fail  <<<<<<
Session resumption configured:Pass
BEAST Vulnerability:Fail  <<<<<<
OCSP Stapling:Fail  <<<<<
PCI Compliant:Pass
FIPS Compliant:Fail  <<<<
Forward Secrecy Supported:Fail  <<<<<
Heartbleed Vulnerability:Pass

Strict Transport Security:Fail  <<<<
Mixed Content (HTTP and HTTPS):Timed Out <<<<
Domain name resolves to IPv4 address:Pass
Domain name resolves to IPv6 address:Fail  <<<<



www.samaritans.org (93.93.227.151)
Host is up (0.032s latency).
PORT     STATE    SERVICE
21/tcp   filtered ftp
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   filtered smtp
53/tcp   filtered domain
80/tcp   open     http
110/tcp  filtered pop3
111/tcp  filtered rpcbind
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
143/tcp  filtered imap
443/tcp  open     https
445/tcp  filtered microsoft-ds
993/tcp  filtered imaps
995/tcp  filtered pop3s
1723/tcp filtered pptp
3306/tcp filtered mysql
3389/tcp filtered ms-wbt-server
5900/tcp filtered vnc
8080/tcp filtered http-proxy