API tools faq
paste
JTSEC1333

Anonymous JTSEC #OpTurkey Full Recon `2

JTSEC1333
Oct 10th, 2019
746
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 318.31 KB | None | 0 0
raw download clone embed print report
  1. #######################################################################################################################################
  2. =======================================================================================================================================
  3. Hostname en.hmb.gov.tr ISP Turk Telekom
  4. Continent Asia Flag
  5. TR
  6. Country Turkey Country Code TR
  7. Region Unknown Local time 11 Oct 2019 06:19 +03
  8. City Unknown Postal Code Unknown
  9. IP Address 212.174.188.50 Latitude 41.021
  10. Longitude 28.995
  11. ======================================================================================================================================
  12. #######################################################################################################################################
  13. > en.hmb.gov.tr
  14. Server: 38.132.106.139
  15. Address: 38.132.106.139#53
  16.  
  17. Non-authoritative answer:
  18. Name: en.hmb.gov.tr
  19. Address: 212.174.188.50
  20. >
  21. #######################################################################################################################################
  22. [+] Target : en.hmb.gov.tr
  23.  
  24. [+] IP Address : 212.174.188.50
  25.  
  26. [+] Headers :
  27.  
  28. [+] Server : nginx
  29. [+] Date : Fri, 11 Oct 2019 03:26:41 GMT
  30. [+] Content-Type : text/html
  31. [+] Last-Modified : Mon, 07 Oct 2019 13:24:44 GMT
  32. [+] Transfer-Encoding : chunked
  33. [+] Connection : keep-alive
  34. [+] ETag : W/"5d9b3c9c-1837"
  35. [+] Content-Encoding : gzip
  36.  
  37. [+] SSL Certificate Information :
  38.  
  39. [+] countryName : TR
  40. [+] stateOrProvinceName : Ankara
  41. [+] localityName : Cankaya
  42. [+] organizationalUnitName : Bilgi Islem Dairesi
  43. [+] organizationName : Hazine ve Maliye Bakanligi
  44. [+] commonName : *.hmb.gov.tr
  45. [+] countryName : BE
  46. [+] organizationName : GlobalSign nv-sa
  47. [+] commonName : GlobalSign Organization Validation CA - SHA256 - G2
  48. [+] Version : 3
  49. [+] Serial Number : 7CA3923562E521E1BEDD787C
  50. [+] Not Before : Oct 5 16:39:41 2018 GMT
  51. [+] Not After : Oct 5 16:39:41 2020 GMT
  52. [+] OCSP : ('http://ocsp2.globalsign.com/gsorganizationvalsha2g2',)
  53. [+] subject Alt Name : (('DNS', '*.hmb.gov.tr'), ('DNS', 'hmb.gov.tr'))
  54. [+] CA Issuers : ('http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt',)
  55. [+] CRL Distribution Points : ('http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl',)
  56.  
  57. [+] Whois Lookup :
  58.  
  59. [+] NIR : None
  60. [+] ASN Registry : ripencc
  61. [+] ASN : 9121
  62. [+] ASN CIDR : 212.174.128.0/17
  63. [+] ASN Country Code : TR
  64. [+] ASN Date : 1999-04-07
  65. [+] ASN Description : TTNET, TR
  66. [+] cidr : 212.174.188.0/24
  67. [+] name : MALIYE
  68. [+] handle : ED4533-RIPE
  69. [+] range : 212.174.188.0 - 212.174.188.255
  70. [+] description : MALIYE BAKANLIGI BILGI ISLEM DAIRESI BASKANLIGI
  71. [+] country : TR
  72. [+] state : None
  73. [+] city : None
  74. [+] address : Bilgi Islem Merkezi Kat:1 Dikmen/ANKARA
  75. [+] postal_code : None
  76. [+] emails : None
  77. [+] created : 1970-01-01T00:00:00Z
  78. [+] updated : 2017-10-02T09:00:57Z
  79.  
  80. [+] Crawling Target...
  81.  
  82. [+] Looking for robots.txt........[ Found ]
  83. [+] Extracting robots Links.......[ 1 ]
  84. [+] Looking for sitemap.xml.......[ Found ]
  85. [+] Extracting sitemap Links......[ 0 ]
  86. [+] Extracting CSS Links..........[ 2 ]
  87. [+] Extracting Javascript Links...[ 2 ]
  88. [+] Extracting Internal Links.....[ 0 ]
  89. [+] Extracting External Links.....[ 0 ]
  90. [+] Extracting Images.............[ 0 ]
  91.  
  92. [+] Total Links Extracted : 5
  93.  
  94. [+] Dumping Links in /opt/FinalRecon/dumps/en.hmb.gov.tr.dump
  95. [+] Completed!
  96. #######################################################################################################################################
  97. [+] Starting At 2019-10-10 23:27:29.368801
  98. [+] Collecting Information On: https://en.hmb.gov.tr/
  99. [#] Status: 200
  100. --------------------------------------------------
  101. [#] Web Server Detected: nginx
  102. [!] X-Frame-Options Headers not detect! target might be vulnerable Click Jacking
  103. - Server: nginx
  104. - Date: Fri, 11 Oct 2019 03:26:50 GMT
  105. - Content-Type: text/html
  106. - Last-Modified: Mon, 07 Oct 2019 13:24:44 GMT
  107. - Transfer-Encoding: chunked
  108. - Connection: keep-alive
  109. - ETag: W/"5d9b3c9c-1837"
  110. - Content-Encoding: gzip
  111. --------------------------------------------------
  112. [#] Finding Location..!
  113. [#] as: AS9121 Turk Telekomunikasyon Anonim Sirketi
  114. [#] city: Ankara
  115. [#] country: Turkey
  116. [#] countryCode: TR
  117. [#] isp: TurkTelecom
  118. [#] lat: 39.9104
  119. [#] lon: 32.847
  120. [#] org:
  121. [#] query: 212.174.188.50
  122. [#] region: 06
  123. [#] regionName: Ankara
  124. [#] status: success
  125. [#] timezone: Europe/Istanbul
  126. [#] zip:
  127. --------------------------------------------------
  128. [x] Didn't Detect WAF Presence on: https://en.hmb.gov.tr/
  129. --------------------------------------------------
  130. [#] Starting Reverse DNS
  131. [!] Found 2 any Domain
  132. - hmb.gov.tr
  133. - muhasebat.hmb.gov.tr
  134. --------------------------------------------------
  135. [!] Scanning Open Port
  136. [#] 80/tcp open http
  137. [#] 443/tcp open https
  138. --------------------------------------------------
  139. [+] Collecting Information Disclosure!
  140. [#] Detecting sitemap.xml file
  141. [-] sitemap.xml file not Found!?
  142. [#] Detecting robots.txt file
  143. [!] robots.txt File Found: https://en.hmb.gov.tr//robots.txt
  144. [#] Detecting GNU Mailman
  145. [-] GNU Mailman App Not Detected!?
  146. --------------------------------------------------
  147. [+] Crawling Url Parameter On: https://en.hmb.gov.tr/
  148. --------------------------------------------------
  149. [#] Searching Html Form !
  150. [-] No Html Form Found!?
  151. --------------------------------------------------
  152. [-] No DOM Paramter Found!?
  153. --------------------------------------------------
  154. [-] No internal Dynamic Parameter Found!?
  155. --------------------------------------------------
  156. [!] 1 External Dynamic Parameter Discovered
  157. [#] https://fonts.googleapis.com/css?family=Open+Sans:300,400,500,700
  158. --------------------------------------------------
  159. [!] 29 Internal links Discovered
  160. [+] https://en.hmb.gov.tr///assets/vendor-2874a984551b4c780366c120d51dd084.css
  161. [+] https://en.hmb.gov.tr///assets/hmb-frontend-2c611e0d3ec71128aed8724251b0a93a.css
  162. [+] https://en.hmb.gov.tr///favicon.ico
  163. [+] https://en.hmb.gov.tr///favicon-16x16.png
  164. [+] https://en.hmb.gov.tr///favicon-32x32.png
  165. [+] https://en.hmb.gov.tr///manifest.json
  166. [+] https://en.hmb.gov.tr///apple-touch-icon-57x57.png
  167. [+] https://en.hmb.gov.tr///apple-touch-icon-60x60.png
  168. [+] https://en.hmb.gov.tr///apple-touch-icon-72x72.png
  169. [+] https://en.hmb.gov.tr///apple-touch-icon-76x76.png
  170. [+] https://en.hmb.gov.tr///apple-touch-icon-114x114.png
  171. [+] https://en.hmb.gov.tr///apple-touch-icon-120x120.png
  172. [+] https://en.hmb.gov.tr///apple-touch-icon-144x144.png
  173. [+] https://en.hmb.gov.tr///apple-touch-icon-152x152.png
  174. [+] https://en.hmb.gov.tr///apple-touch-icon-167x167.png
  175. [+] https://en.hmb.gov.tr///apple-touch-icon-180x180.png
  176. [+] https://en.hmb.gov.tr///apple-touch-icon-1024x1024.png
  177. [+] https://en.hmb.gov.tr///apple-touch-startup-image-320x460.png
  178. [+] https://en.hmb.gov.tr///apple-touch-startup-image-640x920.png
  179. [+] https://en.hmb.gov.tr///apple-touch-startup-image-640x1096.png
  180. [+] https://en.hmb.gov.tr///apple-touch-startup-image-750x1294.png
  181. [+] https://en.hmb.gov.tr///apple-touch-startup-image-1182x2208.png
  182. [+] https://en.hmb.gov.tr///apple-touch-startup-image-1242x2148.png
  183. [+] https://en.hmb.gov.tr///apple-touch-startup-image-748x1024.png
  184. [+] https://en.hmb.gov.tr///apple-touch-startup-image-768x1004.png
  185. [+] https://en.hmb.gov.tr///apple-touch-startup-image-1496x2048.png
  186. [+] https://en.hmb.gov.tr///apple-touch-startup-image-1536x2008.png
  187. [+] https://en.hmb.gov.tr///coast-228x228.png
  188. [+] https://en.hmb.gov.tr///yandex-browser-manifest.json
  189. --------------------------------------------------
  190. [-] No External Link Found!?
  191. --------------------------------------------------
  192. [#] Mapping Subdomain..
  193. [!] Found 10 Subdomain
  194. - webmail.hmb.gov.tr
  195. - en.hmb.gov.tr
  196. - bkmybs.hmb.gov.tr
  197. - ms.hmb.gov.tr
  198. - muhasebat.hmb.gov.tr
  199. - www.hmb.gov.tr
  200. - mailgw01.hmb.gov.tr
  201. - mailgw02.hmb.gov.tr
  202. - mailgw03.hmb.gov.tr
  203. - mailgw04.hmb.gov.tr
  204. --------------------------------------------------
  205. [!] Done At 2019-10-10 23:28:16.979959
  206. #######################################################################################################################################
  207. [i] Scanning Site: https://en.hmb.gov.tr
  208.  
  209.  
  210.  
  211. B A S I C I N F O
  212. ====================
  213.  
  214.  
  215. [+] Site Title: T.C. Hazine ve Maliye Bakanlığı
  216. [+] IP address: 212.174.188.50
  217. [+] Web Server: nginx
  218. [+] CMS: Could Not Detect
  219. [+] Cloudflare: Not Detected
  220. [+] Robots File: Found
  221.  
  222. -------------[ contents ]----------------
  223. # http://www.robotstxt.org
  224. User-agent: *
  225. Disallow:
  226.  
  227. -----------[end of contents]-------------
  228.  
  229.  
  230.  
  231. W H O I S L O O K U P
  232. ========================
  233.  
  234. error check your api query
  235.  
  236.  
  237.  
  238. G E O I P L O O K U P
  239. =========================
  240.  
  241. [i] IP Address: 212.174.188.50
  242. [i] Country: Turkey
  243. [i] State: Istanbul
  244. [i] City: Bueyuekcekmece
  245. [i] Latitude: 41.0156
  246. [i] Longitude: 28.56
  247.  
  248.  
  249.  
  250.  
  251. H T T P H E A D E R S
  252. =======================
  253.  
  254.  
  255. [i] HTTP/1.1 200 OK
  256. [i] Server: nginx
  257. [i] Date: Fri, 11 Oct 2019 03:27:11 GMT
  258. [i] Content-Type: text/html
  259. [i] Content-Length: 6199
  260. [i] Last-Modified: Mon, 07 Oct 2019 13:24:44 GMT
  261. [i] Connection: close
  262. [i] ETag: "5d9b3c9c-1837"
  263. [i] Accept-Ranges: bytes
  264.  
  265.  
  266.  
  267.  
  268. D N S L O O K U P
  269. ===================
  270.  
  271. en.hmb.gov.tr. 3599 IN A 212.174.188.50
  272.  
  273.  
  274.  
  275.  
  276. S U B N E T C A L C U L A T I O N
  277. ====================================
  278.  
  279. Address = 212.174.188.50
  280. Network = 212.174.188.50 / 32
  281. Netmask = 255.255.255.255
  282. Broadcast = not needed on Point-to-Point links
  283. Wildcard Mask = 0.0.0.0
  284. Hosts Bits = 0
  285. Max. Hosts = 1 (2^0 - 0)
  286. Host Range = { 212.174.188.50 - 212.174.188.50 }
  287.  
  288.  
  289.  
  290. N M A P P O R T S C A N
  291. ============================
  292.  
  293. Starting Nmap 7.70 ( https://nmap.org ) at 2019-10-11 03:27 UTC
  294. Nmap scan report for en.hmb.gov.tr (212.174.188.50)
  295. Host is up (0.13s latency).
  296.  
  297. PORT STATE SERVICE
  298. 21/tcp filtered ftp
  299. 22/tcp filtered ssh
  300. 23/tcp filtered telnet
  301. 80/tcp open http
  302. 110/tcp filtered pop3
  303. 143/tcp filtered imap
  304. 443/tcp open https
  305. 3389/tcp filtered ms-wbt-server
  306.  
  307. Nmap done: 1 IP address (1 host up) scanned in 19.07 seconds
  308.  
  309.  
  310. ########################################################################################################################################
  311. [INFO] ------TARGET info------
  312. [*] TARGET: https://en.hmb.gov.tr/
  313. [*] TARGET IP: 212.174.188.50
  314. [INFO] NO load balancer detected for en.hmb.gov.tr...
  315. [*] DNS servers: ns1.muhasebat.gov.tr.
  316. [*] TARGET server: nginx
  317. [*] CC: TR
  318. [*] Country: Turkey
  319. [*] RegionCode: 06
  320. [*] RegionName: Ankara
  321. [*] City: Ankara
  322. [*] ASN: AS9121
  323. [*] BGP_PREFIX: 212.174.0.0/15
  324. [*] ISP: TTNet Turk Telekomunikasyon Anonim Sirketi, TR
  325. [INFO] SSL/HTTPS certificate detected
  326. [*] Issuer: issuer=C = BE, O = GlobalSign nv-sa, CN = GlobalSign Organization Validation CA - SHA256 - G2
  327. [*] Subject: subject=C = TR, ST = Ankara, L = Cankaya, OU = Bilgi Islem Dairesi, O = Hazine ve Maliye Bakanligi, CN = *.hmb.gov.tr
  328. [INFO] DNS enumeration:
  329. [*] mail.hmb.gov.tr 212.174.188.10
  330. [*] ns1.hmb.gov.tr 212.174.189.24
  331. [*] ns2.hmb.gov.tr 212.174.189.29
  332. [*] vpn.hmb.gov.tr 212.174.189.60
  333. [*] webmail.hmb.gov.tr 212.174.188.9
  334. [INFO] Possible abuse mails are:
  335. [*] [email protected]
  336. [*] [email protected]
  337. [*] [email protected]
  338. [INFO] NO PAC (Proxy Auto Configuration) file FOUND
  339. [ALERT] robots.txt file FOUND in http://en.hmb.gov.tr/robots.txt
  340. [INFO] Checking for HTTP status codes recursively from http://en.hmb.gov.tr/robots.txt
  341. [INFO] Status code Folders
  342. [INFO] Starting FUZZing in http://en.hmb.gov.tr/FUzZzZzZzZz...
  343. [INFO] Status code Folders
  344. [*] 200 http://en.hmb.gov.tr/index
  345. [*] 200 http://en.hmb.gov.tr/download
  346. [*] 200 http://en.hmb.gov.tr/2006
  347. [*] 200 http://en.hmb.gov.tr/news
  348. [*] 200 http://en.hmb.gov.tr/crack
  349. [*] 200 http://en.hmb.gov.tr/serial
  350. [*] 200 http://en.hmb.gov.tr/warez
  351. [*] 200 http://en.hmb.gov.tr/full
  352. [*] 200 http://en.hmb.gov.tr/12
  353. [ALERT] Look in the source code. It may contain passwords
  354. [ALERT] Content in http://en.hmb.gov.tr/ AND http://www.en.hmb.gov.tr/ is different
  355. [INFO] MD5 for http://en.hmb.gov.tr/ is: b91692eed697bfce6e07bd7c3b7b7df1
  356. [INFO] MD5 for http://www.en.hmb.gov.tr/ is: d41d8cd98f00b204e9800998ecf8427e
  357. [INFO] http://en.hmb.gov.tr/ redirects to https://en.hmb.gov.tr/
  358. [INFO] http://www.en.hmb.gov.tr/ redirects to http://www.en.hmb.gov.tr/
  359. [INFO] SAME content in http://en.hmb.gov.tr/ AND http://212.174.188.50/
  360. [INFO] Links found from https://en.hmb.gov.tr/:
  361. [INFO] GOOGLE has 39,200,000 results (0.21 seconds) about http://en.hmb.gov.tr/
  362. [INFO] Shodan detected the following opened ports on 212.174.188.50:
  363. [*] 443
  364. [*] 80
  365. [INFO] ------VirusTotal SECTION------
  366. [INFO] VirusTotal passive DNS only stores address records. The following domains resolved to the given IP address:
  367. [INFO] Latest URLs hosted in this IP address detected by at least one URL scanner or malicious URL dataset:
  368. [INFO] Latest files that are not detected by any antivirus solution and were downloaded by VirusTotal from the IP address provided:
  369. [INFO] ------Alexa Rank SECTION------
  370. [INFO] Percent of Visitors Rank in Country:
  371. [INFO] Percent of Search Traffic:
  372. [INFO] Percent of Unique Visits:
  373. [INFO] Total Sites Linking In:
  374. [*] Total Sites
  375. [INFO] Useful links related to en.hmb.gov.tr - 212.174.188.50:
  376. [*] https://www.virustotal.com/pt/ip-address/212.174.188.50/information/
  377. [*] https://www.hybrid-analysis.com/search?host=212.174.188.50
  378. [*] https://www.shodan.io/host/212.174.188.50
  379. [*] https://www.senderbase.org/lookup/?search_string=212.174.188.50
  380. [*] https://www.alienvault.com/open-threat-exchange/ip/212.174.188.50
  381. [*] http://pastebin.com/search?q=212.174.188.50
  382. [*] http://urlquery.net/search.php?q=212.174.188.50
  383. [*] http://www.alexa.com/siteinfo/en.hmb.gov.tr
  384. [*] http://www.google.com/safebrowsing/diagnostic?site=en.hmb.gov.tr
  385. [*] https://censys.io/ipv4/212.174.188.50
  386. [*] https://www.abuseipdb.com/check/212.174.188.50
  387. [*] https://urlscan.io/search/#212.174.188.50
  388. [*] https://github.com/search?q=212.174.188.50&type=Code
  389. [INFO] Useful links related to AS9121 - 212.174.0.0/15:
  390. [*] http://www.google.com/safebrowsing/diagnostic?site=AS:9121
  391. [*] https://www.senderbase.org/lookup/?search_string=212.174.0.0/15
  392. [*] http://bgp.he.net/AS9121
  393. [*] https://stat.ripe.net/AS9121
  394. [INFO] Date: 10/10/19 | Time: 23:29:11
  395. [INFO] Total time: 1 minute(s) and 24 second(s)
  396. ########################################################################################################################################
  397. [*] Load target domain: en.hmb.gov.tr
  398. - starting scanning @ 2019-10-10 23:32:12
  399.  
  400. [+] Running & Checking source to be used
  401. ---------------------------------------------
  402.  
  403. ⍥ Shodan [ ✕ ]
  404. ⍥ Webarchive [ ✔ ]
  405. ⍥ Dnsdumpster [ ✔ ]
  406. ⍥ Binaryedge [ ✕ ]
  407. ⍥ Censys [ ✕ ]
  408. ⍥ Certspotter [ ✔ ]
  409. ⍥ Entrust [ ✔ ]
  410. ⍥ Threatcrowd [ ✔ ]
  411. ⍥ Certsh [ ✔ ]
  412. ⍥ Riddler [ ✔ ]
  413. ⍥ Threatminer [ ✔ ]
  414. ⍥ Virustotal [ ✕ ]
  415. ⍥ Bufferover [ ✔ ]
  416. ⍥ Hackertarget [ ✔ ]
  417. ⍥ Securitytrails [ ✕ ]
  418. ⍥ Findsubdomain [ ✔ ]
  419.  
  420. [+] Get & Count subdomain total From source
  421. ---------------------------------------------
  422.  
  423. ⍥ Hackertarget: Total Subdomain (1)
  424. ⍥ Findsubdomain: Total Subdomain (0)
  425. ⍥ Certspotter: Total Subdomain (0)
  426. ⍥ Threatminer: Total Subdomain (0)
  427. ⍥ Certsh: Total Subdomain (0)
  428. ⍥ BufferOver: Total Subdomain (0)
  429. ⍥ Entrust: Total Subdomain (0)
  430. ⍥ Threatcrowd: Total Subdomain (0)
  431. ⍥ Dnsdumpster: Total Subdomain (1)
  432. ⍥ Riddler: Total Subdomain (0)
  433. ⍥ Webarchive: Total Subdomain (1)
  434.  
  435. [+] Parsing & Sorting list Domain
  436. ---------------------------------------------
  437.  
  438. ⍥ Total [1]
  439.  
  440. - en.hmb.gov.tr
  441.  
  442. ⍥ Total [1]
  443.  
  444. [+] Probe subdomain for working on http/https
  445. ---------------------------------------------
  446.  
  447. - http://en.hmb.gov.tr
  448. - https://en.hmb.gov.tr
  449.  
  450. ⍥ Total [2]
  451.  
  452.  
  453. [+] Check Live Host: Ping Sweep - ICMP PING
  454. ---------------------------------------------
  455.  
  456. ⍥ [DEAD] en.hmb.gov.tr
  457.  
  458. [+] Check Resolving: Subdomains & Domains
  459. ---------------------------------------------
  460.  
  461. ⍥ Resolving domains to: 212.174.188.50
  462.  
  463. [+] Subdomain TakeOver - Check Possible Vulns
  464. ---------------------------------------------
  465.  
  466. ⍥ [FAILS] En: Unknown http://en.hmb.gov.tr
  467. ⍥ [FAILS] En: Unknown https://en.hmb.gov.tr
  468.  
  469. [+] Checks status code on port 80 and 443
  470. ---------------------------------------------
  471.  
  472. ⍥ [301] http://en.hmb.gov.tr
  473. ⍥ [200] https://en.hmb.gov.tr
  474.  
  475. [+] Web Screenshots: from domain list
  476. ---------------------------------------------
  477.  
  478. [+] 2 URLs to be screenshot
  479.  
  480. [+] 2 actual URLs screenshot
  481. [+] 0 error(s)
  482.  
  483. [+] Generate Reports: Make report into HTML
  484. ---------------------------------------------
  485.  
  486. ⍥ Make template for reports
  487. - output/10-10-2019/en.hmb.gov.tr/reports
  488.  
  489. ⍥ Successful Created ..
  490.  
  491. [+] Sud⍥my has been sucessfully completed
  492. ---------------------------------------------
  493.  
  494. ⍥ Location output:
  495. - output/10-10-2019/en.hmb.gov.tr
  496. - output/10-10-2019/en.hmb.gov.tr/report
  497. - output/10-10-2019/en.hmb.gov.tr/screenshots
  498.  
  499. #######################################################################################################################################
  500. Enter Address Website = en.hmb.gov.tr
  501.  
  502.  
  503.  
  504. Reversing IP With HackTarget 'en.hmb.gov.tr'
  505. -----------------------------------------------
  506.  
  507. [+] bahum.gov.tr
  508. [+] bkmybs.hmb.gov.tr
  509. [+] bumko.gov.tr
  510. [+] en.hmb.gov.tr
  511. [+] gep.gov.tr
  512. [+] hmb.gov.tr
  513. [+] icdenetim.gov.tr
  514. [+] kontrol.bumko.gov.tr
  515. [+] maliye-imid.gov.tr
  516. [+] maliye.gov.tr
  517. [+] ms.hmb.gov.tr
  518. [+] muhasebat.gov.tr
  519. [+] muhasebat.hmb.gov.tr
  520. [+] oib.gov.tr
  521. [+] pergen.gov.tr
  522. [+] sgb.gov.tr
  523. [+] sigortacilik.gov.tr
  524. [+] www.bahum.gov.tr
  525. [+] www.bumko.gov.tr
  526. [+] www.gep.gov.tr
  527. [+] www.hmb.gov.tr
  528. [+] www.icdenetim.gov.tr
  529. [+] www.maliye-imid.gov.tr
  530. [+] www.maliye.gov.tr
  531. [+] www.maliyekefalet.gov.tr
  532. [+] www.masak.gov.tr
  533. [+] www.muhasebat.gov.tr
  534. [+] www.oib.gov.tr
  535. [+] www.pergen.gov.tr
  536. [+] www.sgb.gov.tr
  537. [+] www.sigortacilik.gov.tr
  538. [+] www.vdk.gov.tr
  539.  
  540.  
  541.  
  542. Reverse IP With YouGetSignal 'en.hmb.gov.tr'
  543. -----------------------------------------------
  544.  
  545. [*] IP: 212.174.188.50
  546. [*] Domain: en.hmb.gov.tr
  547. [*] Total Domains: 3
  548.  
  549. [+] en.hmb.gov.tr
  550. [+] hmb.gov.tr
  551. [+] muhasebat.hmb.gov.tr
  552.  
  553.  
  554.  
  555. Geo IP Lookup 'en.hmb.gov.tr'
  556. --------------------------------
  557.  
  558. [+] IP Address: 212.174.188.50
  559. [+] Country: Turkey
  560. [+] State: Istanbul
  561. [+] City: Bueyuekcekmece
  562. [+] Latitude: 41.0156
  563. [+] Longitude: 28.56
  564.  
  565.  
  566.  
  567.  
  568. DNS Lookup 'en.hmb.gov.tr'
  569. -----------------------------
  570.  
  571. [+] en.hmb.gov.tr. 3599 IN A 212.174.188.50
  572.  
  573.  
  574.  
  575. Show HTTP Header 'en.hmb.gov.tr'
  576. -----------------------------------
  577.  
  578. [+] HTTP/1.1 301 Moved Permanently
  579. [+] Server: nginx
  580. [+] Date: Fri, 11 Oct 2019 03:30:00 GMT
  581. [+] Content-Type: text/html
  582. [+] Content-Length: 178
  583. [+] Connection: keep-alive
  584. [+] Location: https://en.hmb.gov.tr/
  585. [+]
  586.  
  587.  
  588.  
  589. Port Scan 'en.hmb.gov.tr'
  590. ----------------------------
  591.  
  592. Starting Nmap 7.70 ( https://nmap.org ) at 2019-10-11 03:30 UTC
  593. Nmap scan report for en.hmb.gov.tr (212.174.188.50)
  594. Host is up (0.13s latency).
  595.  
  596. PORT STATE SERVICE
  597. 21/tcp filtered ftp
  598. 22/tcp filtered ssh
  599. 23/tcp filtered telnet
  600. 80/tcp open http
  601. 110/tcp filtered pop3
  602. 143/tcp filtered imap
  603. 443/tcp open https
  604. 3389/tcp filtered ms-wbt-server
  605.  
  606. Nmap done: 1 IP address (1 host up) scanned in 18.68 seconds
  607.  
  608.  
  609.  
  610.  
  611.  
  612. Robot.txt 'en.hmb.gov.tr'
  613. ----------------------------
  614.  
  615. # http://www.robotstxt.org
  616. User-agent: *
  617. Disallow:
  618.  
  619.  
  620.  
  621.  
  622. Traceroute 'en.hmb.gov.tr'
  623. -----------------------------
  624.  
  625. Start: 2019-10-11T03:31:06+0000
  626. HOST: web01 Loss% Snt Last Avg Best Wrst StDev
  627. 1.|-- 45.79.12.202 0.0% 3 0.7 0.6 0.6 0.7 0.0
  628. 2.|-- 45.79.12.2 0.0% 3 19.1 6.8 0.6 19.1 10.6
  629. 3.|-- 45.79.12.9 0.0% 3 0.5 10.1 0.5 23.8 12.1
  630. 4.|-- 199.245.16.65 0.0% 3 1.7 1.6 1.6 1.7 0.1
  631. 5.|-- ae-14.r22.dllstx09.us.bb.gin.ntt.net 0.0% 3 1.2 1.6 1.2 2.4 0.7
  632. 6.|-- ae-1.r22.asbnva02.us.bb.gin.ntt.net 0.0% 3 38.7 38.8 38.7 38.9 0.1
  633. 7.|-- ae-6.r25.frnkge08.de.bb.gin.ntt.net 0.0% 3 131.5 129.6 128.5 131.5 1.7
  634. 8.|-- ae-2.r01.frnkge13.de.bb.gin.ntt.net 0.0% 3 129.3 129.4 129.3 129.6 0.2
  635. 9.|-- nmf-0.r04.frnkge02.de.bb.gin.ntt.net 0.0% 3 127.9 128.0 127.9 128.0 0.0
  636. 10.|-- 06-ebgp-ulus1-k---301-fra-col-2.statik.turktelekom.com.tr 0.0% 3 171.8 168.9 167.4 171.8 2.5
  637. 11.|-- 212.156.117.186.29-gumushane-t3-1.25-erzurum-t2-1.statik.turktelekom.com.tr 0.0% 3 167.5 167.4 167.3 167.5 0.1
  638. 12.|-- 06-ulus-xrs-t2-1---06-ebgp-ulus1-k.statik.turktelekom.com.tr 0.0% 3 165.8 165.8 165.8 165.8 0.0
  639. 13.|-- 81.212.215.188.static.turktelekom.com.tr 0.0% 3 166.0 166.0 165.9 166.1 0.1
  640. 14.|-- mta4-v14.buaslanmis.com 0.0% 3 168.7 168.9 168.7 169.1 0.2
  641. 15.|-- ??? 100.0 3 0.0 0.0 0.0 0.0 0.0
  642.  
  643.  
  644.  
  645. Page Admin Finder 'en.hmb.gov.tr'
  646. ------------------------------------
  647.  
  648.  
  649.  
  650. Avilable Links :
  651.  
  652. Find Page >> http://en.hmb.gov.tr/admin/
  653.  
  654. Find Page >> http://en.hmb.gov.tr/administrator/
  655.  
  656. Find Page >> http://en.hmb.gov.tr/admin1/
  657.  
  658. Find Page >> http://en.hmb.gov.tr/admin2/
  659.  
  660. Find Page >> http://en.hmb.gov.tr/admin3/
  661.  
  662. Find Page >> http://en.hmb.gov.tr/admin4/
  663.  
  664. Find Page >> http://en.hmb.gov.tr/admin5/
  665.  
  666. Find Page >> http://en.hmb.gov.tr/usuarios/
  667.  
  668. Find Page >> http://en.hmb.gov.tr/usuario/
  669.  
  670. Find Page >> http://en.hmb.gov.tr/moderator/
  671.  
  672. Find Page >> http://en.hmb.gov.tr/webadmin/
  673.  
  674. Find Page >> http://en.hmb.gov.tr/adminarea/
  675.  
  676. Find Page >> http://en.hmb.gov.tr/bb-admin/
  677.  
  678. Find Page >> http://en.hmb.gov.tr/adminLogin/
  679.  
  680. Find Page >> http://en.hmb.gov.tr/admin_area/
  681.  
  682. Find Page >> http://en.hmb.gov.tr/panel-administracion/
  683.  
  684. Find Page >> http://en.hmb.gov.tr/instadmin/
  685.  
  686. Find Page >> http://en.hmb.gov.tr/memberadmin/
  687.  
  688. Find Page >> http://en.hmb.gov.tr/administratorlogin/
  689.  
  690. Find Page >> http://en.hmb.gov.tr/adm/
  691.  
  692. Find Page >> http://en.hmb.gov.tr/siteadmin/login.html
  693.  
  694. Find Page >> http://en.hmb.gov.tr/admin/account.html
  695.  
  696. Find Page >> http://en.hmb.gov.tr/admin/index.html
  697.  
  698. Find Page >> http://en.hmb.gov.tr/admin/login.html
  699.  
  700. Find Page >> http://en.hmb.gov.tr/admin/admin.html
  701.  
  702. Find Page >> http://en.hmb.gov.tr/admin_area/login.html
  703.  
  704. Find Page >> http://en.hmb.gov.tr/admin_area/index.html
  705.  
  706. Find Page >> http://en.hmb.gov.tr/admincp/index.asp
  707.  
  708. Find Page >> http://en.hmb.gov.tr/admincp/login.asp
  709.  
  710. Find Page >> http://en.hmb.gov.tr/admincp/index.html
  711.  
  712. Find Page >> http://en.hmb.gov.tr/adminpanel.html
  713.  
  714. Find Page >> http://en.hmb.gov.tr/webadmin.html
  715.  
  716. Find Page >> http://en.hmb.gov.tr/webadmin/index.html
  717.  
  718. Find Page >> http://en.hmb.gov.tr/webadmin/admin.html
  719.  
  720. Find Page >> http://en.hmb.gov.tr/webadmin/login.html
  721.  
  722. Find Page >> http://en.hmb.gov.tr/admin/admin_login.html
  723.  
  724. Find Page >> http://en.hmb.gov.tr/admin_login.html
  725.  
  726. Find Page >> http://en.hmb.gov.tr/panel-administracion/login.html
  727.  
  728. Find Page >> http://en.hmb.gov.tr/admin_area/admin.html
  729.  
  730. Find Page >> http://en.hmb.gov.tr/bb-admin/index.html
  731.  
  732. Find Page >> http://en.hmb.gov.tr/bb-admin/login.html
  733.  
  734. Find Page >> http://en.hmb.gov.tr/bb-admin/admin.html
  735.  
  736. Find Page >> http://en.hmb.gov.tr/admin/home.html
  737.  
  738. Find Page >> http://en.hmb.gov.tr/pages/admin/admin-login.html
  739.  
  740. Find Page >> http://en.hmb.gov.tr/admin/admin-login.html
  741.  
  742. Find Page >> http://en.hmb.gov.tr/admin-login.html
  743.  
  744. Find Page >> http://en.hmb.gov.tr/admin/adminLogin.html
  745.  
  746. Find Page >> http://en.hmb.gov.tr/adminLogin.html
  747.  
  748. Find Page >> http://en.hmb.gov.tr/home.html
  749.  
  750. Find Page >> http://en.hmb.gov.tr/adminarea/index.html
  751.  
  752. Find Page >> http://en.hmb.gov.tr/adminarea/admin.html
  753.  
  754. Find Page >> http://en.hmb.gov.tr/admin/controlpanel.html
  755.  
  756. Find Page >> http://en.hmb.gov.tr/admin.html
  757.  
  758. Find Page >> http://en.hmb.gov.tr/admin/cp.html
  759.  
  760. Find Page >> http://en.hmb.gov.tr/cp.html
  761.  
  762. Find Page >> http://en.hmb.gov.tr/moderator.html
  763.  
  764. Find Page >> http://en.hmb.gov.tr/administrator/index.html
  765.  
  766. Find Page >> http://en.hmb.gov.tr/administrator/login.html
  767.  
  768. Find Page >> http://en.hmb.gov.tr/user.html
  769.  
  770. Find Page >> http://en.hmb.gov.tr/administrator/account.html
  771.  
  772. Find Page >> http://en.hmb.gov.tr/administrator.html
  773.  
  774. Find Page >> http://en.hmb.gov.tr/login.html
  775.  
  776. Find Page >> http://en.hmb.gov.tr/modelsearch/login.html
  777.  
  778. Find Page >> http://en.hmb.gov.tr/moderator/login.html
  779.  
  780. Find Page >> http://en.hmb.gov.tr/adminarea/login.html
  781.  
  782. Find Page >> http://en.hmb.gov.tr/panel-administracion/index.html
  783.  
  784. Find Page >> http://en.hmb.gov.tr/panel-administracion/admin.html
  785.  
  786. Find Page >> http://en.hmb.gov.tr/modelsearch/index.html
  787.  
  788. Find Page >> http://en.hmb.gov.tr/modelsearch/admin.html
  789.  
  790. Find Page >> http://en.hmb.gov.tr/admincontrol/login.html
  791.  
  792. Find Page >> http://en.hmb.gov.tr/adm/index.html
  793.  
  794. Find Page >> http://en.hmb.gov.tr/adm.html
  795.  
  796. Find Page >> http://en.hmb.gov.tr/moderator/admin.html
  797.  
  798. Find Page >> http://en.hmb.gov.tr/account.html
  799.  
  800. Find Page >> http://en.hmb.gov.tr/controlpanel.html
  801.  
  802. Find Page >> http://en.hmb.gov.tr/admincontrol.html
  803.  
  804. Find Page >> http://en.hmb.gov.tr/account.asp
  805.  
  806. Find Page >> http://en.hmb.gov.tr/admin/account.asp
  807.  
  808. Find Page >> http://en.hmb.gov.tr/admin/index.asp
  809.  
  810. Find Page >> http://en.hmb.gov.tr/admin/login.asp
  811.  
  812. Find Page >> http://en.hmb.gov.tr/admin/admin.asp
  813.  
  814. Find Page >> http://en.hmb.gov.tr/admin_area/admin.asp
  815.  
  816. Find Page >> http://en.hmb.gov.tr/admin_area/login.asp
  817.  
  818. Find Page >> http://en.hmb.gov.tr/admin_area/index.asp
  819.  
  820. Find Page >> http://en.hmb.gov.tr/bb-admin/index.asp
  821.  
  822. Find Page >> http://en.hmb.gov.tr/bb-admin/login.asp
  823.  
  824. Find Page >> http://en.hmb.gov.tr/bb-admin/admin.asp
  825.  
  826. Find Page >> http://en.hmb.gov.tr/admin/home.asp
  827.  
  828. Find Page >> http://en.hmb.gov.tr/admin/controlpanel.asp
  829.  
  830. Find Page >> http://en.hmb.gov.tr/admin.asp
  831.  
  832. Find Page >> http://en.hmb.gov.tr/pages/admin/admin-login.asp
  833.  
  834. Find Page >> http://en.hmb.gov.tr/admin/admin-login.asp
  835.  
  836. Find Page >> http://en.hmb.gov.tr/admin-login.asp
  837.  
  838. Find Page >> http://en.hmb.gov.tr/admin/cp.asp
  839.  
  840. Find Page >> http://en.hmb.gov.tr/cp.asp
  841.  
  842. Find Page >> http://en.hmb.gov.tr/administrator/account.asp
  843.  
  844. Find Page >> http://en.hmb.gov.tr/administrator.asp
  845.  
  846. Find Page >> http://en.hmb.gov.tr/acceso.asp
  847.  
  848. Find Page >> http://en.hmb.gov.tr/login.asp
  849.  
  850. Find Page >> http://en.hmb.gov.tr/modelsearch/login.asp
  851.  
  852. Find Page >> http://en.hmb.gov.tr/moderator.asp
  853.  
  854. Find Page >> http://en.hmb.gov.tr/moderator/login.asp
  855.  
  856. Find Page >> http://en.hmb.gov.tr/administrator/login.asp
  857.  
  858. Find Page >> http://en.hmb.gov.tr/moderator/admin.asp
  859.  
  860. Find Page >> http://en.hmb.gov.tr/controlpanel.asp
  861.  
  862. Find Page >> http://en.hmb.gov.tr/user.asp
  863.  
  864. Find Page >> http://en.hmb.gov.tr/admincontrol.asp
  865.  
  866. Find Page >> http://en.hmb.gov.tr/adminpanel.asp
  867.  
  868. Find Page >> http://en.hmb.gov.tr/webadmin.asp
  869.  
  870. Find Page >> http://en.hmb.gov.tr/webadmin/index.asp
  871.  
  872. Find Page >> http://en.hmb.gov.tr/webadmin/admin.asp
  873.  
  874. Find Page >> http://en.hmb.gov.tr/webadmin/login.asp
  875.  
  876. Find Page >> http://en.hmb.gov.tr/admin/admin_login.asp
  877.  
  878. Find Page >> http://en.hmb.gov.tr/admin_login.asp
  879.  
  880. Find Page >> http://en.hmb.gov.tr/panel-administracion/login.asp
  881.  
  882. Find Page >> http://en.hmb.gov.tr/adminLogin.asp
  883.  
  884. Find Page >> http://en.hmb.gov.tr/admin/adminLogin.asp
  885.  
  886. Find Page >> http://en.hmb.gov.tr/home.asp
  887.  
  888. Find Page >> http://en.hmb.gov.tr/adminarea/index.asp
  889.  
  890. Find Page >> http://en.hmb.gov.tr/adminarea/admin.asp
  891.  
  892. Find Page >> http://en.hmb.gov.tr/adminarea/login.asp
  893.  
  894. Find Page >> http://en.hmb.gov.tr/panel-administracion/index.asp
  895.  
  896. Find Page >> http://en.hmb.gov.tr/panel-administracion/admin.asp
  897.  
  898. Find Page >> http://en.hmb.gov.tr/modelsearch/index.asp
  899.  
  900. Find Page >> http://en.hmb.gov.tr/modelsearch/admin.asp
  901.  
  902. Find Page >> http://en.hmb.gov.tr/administrator/index.asp
  903.  
  904. Find Page >> http://en.hmb.gov.tr/admincontrol/login.asp
  905.  
  906. Find Page >> http://en.hmb.gov.tr/adm/admloginuser.asp
  907.  
  908. Find Page >> http://en.hmb.gov.tr/admloginuser.asp
  909.  
  910. Find Page >> http://en.hmb.gov.tr/admin2.asp
  911.  
  912. Find Page >> http://en.hmb.gov.tr/admin2/login.asp
  913.  
  914. Find Page >> http://en.hmb.gov.tr/admin2/index.asp
  915.  
  916. Find Page >> http://en.hmb.gov.tr/adm/index.asp
  917.  
  918. Find Page >> http://en.hmb.gov.tr/adm.asp
  919.  
  920. Find Page >> http://en.hmb.gov.tr/affiliate.asp
  921.  
  922. Find Page >> http://en.hmb.gov.tr/adm_auth.asp
  923.  
  924. Find Page >> http://en.hmb.gov.tr/memberadmin.asp
  925.  
  926. Find Page >> http://en.hmb.gov.tr/administratorlogin.asp
  927.  
  928. Find Page >> http://en.hmb.gov.tr/siteadmin/login.asp
  929.  
  930. Find Page >> http://en.hmb.gov.tr/siteadmin/index.asp
  931.  
  932. Find Page >> http://en.hmb.gov.tr/admin/account.cfm
  933.  
  934. Find Page >> http://en.hmb.gov.tr/admin/index.cfm
  935.  
  936. Find Page >> http://en.hmb.gov.tr/admin/login.cfm
  937.  
  938. Find Page >> http://en.hmb.gov.tr/admin/admin.cfm
  939.  
  940. Find Page >> http://en.hmb.gov.tr/admin_area/admin.cfm
  941.  
  942. Find Page >> http://en.hmb.gov.tr/admin_area/login.cfm
  943.  
  944. Find Page >> http://en.hmb.gov.tr/siteadmin/login.cfm
  945.  
  946. Find Page >> http://en.hmb.gov.tr/siteadmin/index.cfm
  947.  
  948. Find Page >> http://en.hmb.gov.tr/admin_area/index.cfm
  949.  
  950. Find Page >> http://en.hmb.gov.tr/bb-admin/index.cfm
  951.  
  952. Find Page >> http://en.hmb.gov.tr/bb-admin/login.cfm
  953.  
  954. Find Page >> http://en.hmb.gov.tr/bb-admin/admin.cfm
  955.  
  956. Find Page >> http://en.hmb.gov.tr/admin/home.cfm
  957.  
  958. Find Page >> http://en.hmb.gov.tr/admin/controlpanel.cfm
  959.  
  960. Find Page >> http://en.hmb.gov.tr/admin.cfm
  961.  
  962. Find Page >> http://en.hmb.gov.tr/admin/cp.cfm
  963.  
  964. Find Page >> http://en.hmb.gov.tr/cp.cfm
  965.  
  966. Find Page >> http://en.hmb.gov.tr/administrator/index.cfm
  967.  
  968. Find Page >> http://en.hmb.gov.tr/administrator/login.cfm
  969.  
  970. Find Page >> http://en.hmb.gov.tr/nsw/admin/login.cfm
  971.  
  972. Find Page >> http://en.hmb.gov.tr/webadmin/login.cfm
  973.  
  974. Find Page >> http://en.hmb.gov.tr/admin/admin_login.cfm
  975.  
  976. Find Page >> http://en.hmb.gov.tr/admin_login.cfm
  977.  
  978. Find Page >> http://en.hmb.gov.tr/administrator/account.cfm
  979.  
  980. Find Page >> http://en.hmb.gov.tr/administrator.cfm
  981.  
  982. Find Page >> http://en.hmb.gov.tr/pages/admin/admin-login.cfm
  983.  
  984. Find Page >> http://en.hmb.gov.tr/admin/admin-login.cfm
  985.  
  986. Find Page >> http://en.hmb.gov.tr/admin-login.cfm
  987.  
  988. Find Page >> http://en.hmb.gov.tr/login.cfm
  989.  
  990. Find Page >> http://en.hmb.gov.tr/modelsearch/login.cfm
  991.  
  992. Find Page >> http://en.hmb.gov.tr/moderator.cfm
  993.  
  994. Find Page >> http://en.hmb.gov.tr/moderator/login.cfm
  995.  
  996. Find Page >> http://en.hmb.gov.tr/moderator/admin.cfm
  997.  
  998. Find Page >> http://en.hmb.gov.tr/account.cfm
  999.  
  1000. Find Page >> http://en.hmb.gov.tr/controlpanel.cfm
  1001.  
  1002. Find Page >> http://en.hmb.gov.tr/admincontrol.cfm
  1003.  
  1004. Find Page >> http://en.hmb.gov.tr/acceso.cfm
  1005.  
  1006. Find Page >> http://en.hmb.gov.tr/rcjakar/admin/login.cfm
  1007.  
  1008. Find Page >> http://en.hmb.gov.tr/webadmin.cfm
  1009.  
  1010. Find Page >> http://en.hmb.gov.tr/webadmin/index.cfm
  1011.  
  1012. Find Page >> http://en.hmb.gov.tr/webadmin/admin.cfm
  1013.  
  1014. Find Page >> http://en.hmb.gov.tr/adminpanel.cfm
  1015.  
  1016. Find Page >> http://en.hmb.gov.tr/user.cfm
  1017.  
  1018. Find Page >> http://en.hmb.gov.tr/panel-administracion/login.cfm
  1019.  
  1020. Find Page >> http://en.hmb.gov.tr/wp-login.cfm
  1021.  
  1022. Find Page >> http://en.hmb.gov.tr/adminLogin.cfm
  1023.  
  1024. Find Page >> http://en.hmb.gov.tr/admin/adminLogin.cfm
  1025.  
  1026. Find Page >> http://en.hmb.gov.tr/home.cfm
  1027.  
  1028. Find Page >> http://en.hmb.gov.tr/adminarea/index.cfm
  1029.  
  1030. Find Page >> http://en.hmb.gov.tr/adminarea/admin.cfm
  1031.  
  1032. Find Page >> http://en.hmb.gov.tr/adminarea/login.cfm
  1033.  
  1034. Find Page >> http://en.hmb.gov.tr/panel-administracion/index.cfm
  1035.  
  1036. Find Page >> http://en.hmb.gov.tr/panel-administracion/admin.cfm
  1037.  
  1038. Find Page >> http://en.hmb.gov.tr/modelsearch/index.cfm
  1039.  
  1040. Find Page >> http://en.hmb.gov.tr/modelsearch/admin.cfm
  1041.  
  1042. Find Page >> http://en.hmb.gov.tr/admincontrol/login.cfm
  1043.  
  1044. Find Page >> http://en.hmb.gov.tr/adm/admloginuser.cfm
  1045.  
  1046. Find Page >> http://en.hmb.gov.tr/admloginuser.cfm
  1047.  
  1048. Find Page >> http://en.hmb.gov.tr/admin2.cfm
  1049.  
  1050. Find Page >> http://en.hmb.gov.tr/admin2/login.cfm
  1051.  
  1052. Find Page >> http://en.hmb.gov.tr/admin2/index.cfm
  1053.  
  1054. Find Page >> http://en.hmb.gov.tr/usuarios/login.cfm
  1055.  
  1056. Find Page >> http://en.hmb.gov.tr/adm/index.cfm
  1057.  
  1058. Find Page >> http://en.hmb.gov.tr/adm.cfm
  1059.  
  1060. Find Page >> http://en.hmb.gov.tr/affiliate.cfm
  1061.  
  1062. Find Page >> http://en.hmb.gov.tr/adm_auth.cfm
  1063.  
  1064. Find Page >> http://en.hmb.gov.tr/memberadmin.cfm
  1065.  
  1066. Find Page >> http://en.hmb.gov.tr/administratorlogin.cfm
  1067.  
  1068. Find Page >> http://en.hmb.gov.tr/admin/account.js
  1069.  
  1070. Find Page >> http://en.hmb.gov.tr/admin/index.js
  1071.  
  1072. Find Page >> http://en.hmb.gov.tr/admin/login.js
  1073.  
  1074. Find Page >> http://en.hmb.gov.tr/admin/admin.js
  1075.  
  1076. Find Page >> http://en.hmb.gov.tr/admin_area/admin.js
  1077.  
  1078. Find Page >> http://en.hmb.gov.tr/admin_area/login.js
  1079.  
  1080. Find Page >> http://en.hmb.gov.tr/siteadmin/login.js
  1081.  
  1082. Find Page >> http://en.hmb.gov.tr/siteadmin/index.js
  1083.  
  1084. Find Page >> http://en.hmb.gov.tr/admin_area/index.js
  1085.  
  1086. Find Page >> http://en.hmb.gov.tr/bb-admin/index.js
  1087.  
  1088. Find Page >> http://en.hmb.gov.tr/bb-admin/login.js
  1089.  
  1090. Find Page >> http://en.hmb.gov.tr/bb-admin/admin.js
  1091.  
  1092. Find Page >> http://en.hmb.gov.tr/admin/home.js
  1093.  
  1094. Find Page >> http://en.hmb.gov.tr/admin/controlpanel.js
  1095.  
  1096. Find Page >> http://en.hmb.gov.tr/admin.js
  1097.  
  1098. Find Page >> http://en.hmb.gov.tr/admin/cp.js
  1099.  
  1100. Find Page >> http://en.hmb.gov.tr/cp.js
  1101.  
  1102. Find Page >> http://en.hmb.gov.tr/administrator/index.js
  1103.  
  1104. Find Page >> http://en.hmb.gov.tr/administrator/login.js
  1105.  
  1106. Find Page >> http://en.hmb.gov.tr/nsw/admin/login.js
  1107.  
  1108. Find Page >> http://en.hmb.gov.tr/webadmin/login.js
  1109.  
  1110. Find Page >> http://en.hmb.gov.tr/admin/admin_login.js
  1111.  
  1112. Find Page >> http://en.hmb.gov.tr/admin_login.js
  1113.  
  1114. Find Page >> http://en.hmb.gov.tr/administrator/account.js
  1115.  
  1116. Find Page >> http://en.hmb.gov.tr/administrator.js
  1117.  
  1118. Find Page >> http://en.hmb.gov.tr/pages/admin/admin-login.js
  1119.  
  1120. Find Page >> http://en.hmb.gov.tr/admin/admin-login.js
  1121.  
  1122. Find Page >> http://en.hmb.gov.tr/admin-login.js
  1123.  
  1124. Find Page >> http://en.hmb.gov.tr/login.js
  1125.  
  1126. Find Page >> http://en.hmb.gov.tr/modelsearch/login.js
  1127.  
  1128. Find Page >> http://en.hmb.gov.tr/moderator.js
  1129.  
  1130. Find Page >> http://en.hmb.gov.tr/moderator/login.js
  1131.  
  1132. Find Page >> http://en.hmb.gov.tr/moderator/admin.js
  1133.  
  1134. Find Page >> http://en.hmb.gov.tr/account.js
  1135.  
  1136. Find Page >> http://en.hmb.gov.tr/controlpanel.js
  1137.  
  1138. Find Page >> http://en.hmb.gov.tr/admincontrol.js
  1139.  
  1140. Find Page >> http://en.hmb.gov.tr/rcjakar/admin/login.js
  1141.  
  1142. Find Page >> http://en.hmb.gov.tr/webadmin.js
  1143.  
  1144. Find Page >> http://en.hmb.gov.tr/webadmin/index.js
  1145.  
  1146. Find Page >> http://en.hmb.gov.tr/acceso.js
  1147.  
  1148. Find Page >> http://en.hmb.gov.tr/webadmin/admin.js
  1149.  
  1150. Find Page >> http://en.hmb.gov.tr/adminpanel.js
  1151.  
  1152. Find Page >> http://en.hmb.gov.tr/user.js
  1153.  
  1154. Find Page >> http://en.hmb.gov.tr/panel-administracion/login.js
  1155.  
  1156. Find Page >> http://en.hmb.gov.tr/wp-login.js
  1157.  
  1158. Find Page >> http://en.hmb.gov.tr/adminLogin.js
  1159.  
  1160. Find Page >> http://en.hmb.gov.tr/admin/adminLogin.js
  1161.  
  1162. Find Page >> http://en.hmb.gov.tr/home.js
  1163.  
  1164. Find Page >> http://en.hmb.gov.tr/adminarea/index.js
  1165.  
  1166. Find Page >> http://en.hmb.gov.tr/adminarea/admin.js
  1167.  
  1168. Find Page >> http://en.hmb.gov.tr/adminarea/login.js
  1169.  
  1170. Find Page >> http://en.hmb.gov.tr/panel-administracion/index.js
  1171.  
  1172. Find Page >> http://en.hmb.gov.tr/panel-administracion/admin.js
  1173.  
  1174. Find Page >> http://en.hmb.gov.tr/modelsearch/index.js
  1175.  
  1176. Find Page >> http://en.hmb.gov.tr/modelsearch/admin.js
  1177.  
  1178. Find Page >> http://en.hmb.gov.tr/admincontrol/login.js
  1179.  
  1180. Find Page >> http://en.hmb.gov.tr/adm/admloginuser.js
  1181.  
  1182. Find Page >> http://en.hmb.gov.tr/admloginuser.js
  1183.  
  1184. Find Page >> http://en.hmb.gov.tr/admin2.js
  1185.  
  1186. Find Page >> http://en.hmb.gov.tr/admin2/login.js
  1187.  
  1188. Find Page >> http://en.hmb.gov.tr/admin2/index.js
  1189.  
  1190. Find Page >> http://en.hmb.gov.tr/usuarios/login.js
  1191.  
  1192. Find Page >> http://en.hmb.gov.tr/adm/index.js
  1193.  
  1194. Find Page >> http://en.hmb.gov.tr/adm.js
  1195.  
  1196. Find Page >> http://en.hmb.gov.tr/affiliate.js
  1197.  
  1198. Find Page >> http://en.hmb.gov.tr/adm_auth.js
  1199.  
  1200. Find Page >> http://en.hmb.gov.tr/memberadmin.js
  1201.  
  1202. Find Page >> http://en.hmb.gov.tr/administratorlogin.js
  1203.  
  1204. Find Page >> http://en.hmb.gov.tr/admin/account.cgi
  1205.  
  1206. Find Page >> http://en.hmb.gov.tr/admin/index.cgi
  1207.  
  1208. Find Page >> http://en.hmb.gov.tr/admin/login.cgi
  1209.  
  1210. Find Page >> http://en.hmb.gov.tr/admin/admin.cgi
  1211.  
  1212. Find Page >> http://en.hmb.gov.tr/admin_area/admin.cgi
  1213.  
  1214. Find Page >> http://en.hmb.gov.tr/admin_area/login.cgi
  1215.  
  1216. Find Page >> http://en.hmb.gov.tr/siteadmin/login.cgi
  1217.  
  1218. Find Page >> http://en.hmb.gov.tr/siteadmin/index.cgi
  1219.  
  1220. Find Page >> http://en.hmb.gov.tr/admin_area/index.cgi
  1221.  
  1222. Find Page >> http://en.hmb.gov.tr/bb-admin/index.cgi
  1223.  
  1224. Find Page >> http://en.hmb.gov.tr/bb-admin/login.cgi
  1225.  
  1226. Find Page >> http://en.hmb.gov.tr/bb-admin/admin.cgi
  1227.  
  1228. Find Page >> http://en.hmb.gov.tr/admin/home.cgi
  1229.  
  1230. Find Page >> http://en.hmb.gov.tr/admin/controlpanel.cgi
  1231.  
  1232. Find Page >> http://en.hmb.gov.tr/admin.cgi
  1233.  
  1234. Find Page >> http://en.hmb.gov.tr/admin/cp.cgi
  1235.  
  1236. Find Page >> http://en.hmb.gov.tr/cp.cgi
  1237.  
  1238. Find Page >> http://en.hmb.gov.tr/administrator/index.cgi
  1239.  
  1240. Find Page >> http://en.hmb.gov.tr/administrator/login.cgi
  1241.  
  1242. Find Page >> http://en.hmb.gov.tr/nsw/admin/login.cgi
  1243.  
  1244. Find Page >> http://en.hmb.gov.tr/webadmin/login.cgi
  1245.  
  1246. Find Page >> http://en.hmb.gov.tr/admin/admin_login.cgi
  1247.  
  1248. Find Page >> http://en.hmb.gov.tr/admin_login.cgi
  1249.  
  1250. Find Page >> http://en.hmb.gov.tr/administrator/account.cgi
  1251.  
  1252. Find Page >> http://en.hmb.gov.tr/administrator.cgi
  1253.  
  1254. Find Page >> http://en.hmb.gov.tr/pages/admin/admin-login.cgi
  1255.  
  1256. Find Page >> http://en.hmb.gov.tr/admin/admin-login.cgi
  1257.  
  1258. Find Page >> http://en.hmb.gov.tr/admin-login.cgi
  1259.  
  1260. Find Page >> http://en.hmb.gov.tr/login.cgi
  1261.  
  1262. Find Page >> http://en.hmb.gov.tr/modelsearch/login.cgi
  1263.  
  1264. Find Page >> http://en.hmb.gov.tr/moderator.cgi
  1265.  
  1266. Find Page >> http://en.hmb.gov.tr/moderator/login.cgi
  1267.  
  1268. Find Page >> http://en.hmb.gov.tr/moderator/admin.cgi
  1269.  
  1270. Find Page >> http://en.hmb.gov.tr/account.cgi
  1271.  
  1272. Find Page >> http://en.hmb.gov.tr/controlpanel.cgi
  1273.  
  1274. Find Page >> http://en.hmb.gov.tr/admincontrol.cgi
  1275.  
  1276. Find Page >> http://en.hmb.gov.tr/rcjakar/admin/login.cgi
  1277.  
  1278. Find Page >> http://en.hmb.gov.tr/webadmin.cgi
  1279.  
  1280. Find Page >> http://en.hmb.gov.tr/webadmin/index.cgi
  1281.  
  1282. Find Page >> http://en.hmb.gov.tr/acceso.cgi
  1283.  
  1284. Find Page >> http://en.hmb.gov.tr/webadmin/admin.cgi
  1285.  
  1286. Find Page >> http://en.hmb.gov.tr/adminpanel.cgi
  1287.  
  1288. Find Page >> http://en.hmb.gov.tr/user.cgi
  1289.  
  1290. Find Page >> http://en.hmb.gov.tr/panel-administracion/login.cgi
  1291.  
  1292. Find Page >> http://en.hmb.gov.tr/wp-login.cgi
  1293.  
  1294. Find Page >> http://en.hmb.gov.tr/adminLogin.cgi
  1295.  
  1296. Find Page >> http://en.hmb.gov.tr/admin/adminLogin.cgi
  1297.  
  1298. Find Page >> http://en.hmb.gov.tr/home.cgi
  1299.  
  1300. Find Page >> http://en.hmb.gov.tr/adminarea/index.cgi
  1301.  
  1302. Find Page >> http://en.hmb.gov.tr/adminarea/admin.cgi
  1303.  
  1304. Find Page >> http://en.hmb.gov.tr/adminarea/login.cgi
  1305.  
  1306. Find Page >> http://en.hmb.gov.tr/panel-administracion/index.cgi
  1307.  
  1308. Find Page >> http://en.hmb.gov.tr/panel-administracion/admin.cgi
  1309.  
  1310. Find Page >> http://en.hmb.gov.tr/modelsearch/index.cgi
  1311.  
  1312. Find Page >> http://en.hmb.gov.tr/modelsearch/admin.cgi
  1313.  
  1314. Find Page >> http://en.hmb.gov.tr/admincontrol/login.cgi
  1315.  
  1316. Find Page >> http://en.hmb.gov.tr/adm/admloginuser.cgi
  1317.  
  1318. Find Page >> http://en.hmb.gov.tr/admloginuser.cgi
  1319.  
  1320. Find Page >> http://en.hmb.gov.tr/admin2.cgi
  1321.  
  1322. Find Page >> http://en.hmb.gov.tr/admin2/login.cgi
  1323.  
  1324. Find Page >> http://en.hmb.gov.tr/admin2/index.cgi
  1325.  
  1326. Find Page >> http://en.hmb.gov.tr/usuarios/login.cgi
  1327.  
  1328. Find Page >> http://en.hmb.gov.tr/adm/index.cgi
  1329.  
  1330. Find Page >> http://en.hmb.gov.tr/adm.cgi
  1331.  
  1332. Find Page >> http://en.hmb.gov.tr/affiliate.cgi
  1333.  
  1334. Find Page >> http://en.hmb.gov.tr/adm_auth.cgi
  1335.  
  1336. Find Page >> http://en.hmb.gov.tr/memberadmin.cgi
  1337.  
  1338. Find Page >> http://en.hmb.gov.tr/administratorlogin.cgi
  1339.  
  1340. Find Page >> http://en.hmb.gov.tr/admin_panel/
  1341.  
  1342. Find Page >> http://en.hmb.gov.tr/admin_panel.html
  1343.  
  1344. Find Page >> http://en.hmb.gov.tr/adm_cp/
  1345. #######################################################################################################################################
  1346. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21194
  1347. ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
  1348.  
  1349. ;; QUESTION SECTION:
  1350. ;en.hmb.gov.tr. IN ANY
  1351.  
  1352. ;; ANSWER SECTION:
  1353. en.hmb.gov.tr. 3600 IN A 212.174.188.50
  1354.  
  1355. ;; AUTHORITY SECTION:
  1356. hmb.gov.tr. 43200 IN NS ns3.muhasebat.gov.tr.
  1357. hmb.gov.tr. 43200 IN NS ns1.muhasebat.gov.tr.
  1358.  
  1359. ;; ADDITIONAL SECTION:
  1360. ns1.muhasebat.gov.tr. 42687 IN A 212.174.189.29
  1361. ns3.muhasebat.gov.tr. 42687 IN A 212.174.189.24
  1362.  
  1363. Received 125 bytes from 2001:18c0:121:6900:724f:b8ff:fefd:5b6a#53 in 2018 ms
  1364. ########################################################################################################################################
  1365. ; <<>> DiG 9.11.5-P4-5.1+b1-Debian <<>> +trace en.hmb.gov.tr
  1366. ;; global options: +cmd
  1367. . 83966 IN NS g.root-servers.net.
  1368. . 83966 IN NS d.root-servers.net.
  1369. . 83966 IN NS m.root-servers.net.
  1370. . 83966 IN NS a.root-servers.net
  1371. . 83966 IN NS e.root-servers.net.
  1372. . 83966 IN NS f.root-servers.net.
  1373. . 83966 IN NS h.root-servers.net.
  1374. . 83966 IN NS c.root-servers.net.
  1375. . 83966 IN NS b.root-servers.net.
  1376. . 83966 IN NS j.root-servers.net.
  1377. . 83966 IN NS i.root-servers.net.
  1378. . 83966 IN NS l.root-servers.net.
  1379. . 83966 IN NS k.root-servers.net.
  1380. . 83966 IN RRSIG NS 8 0 518400 20191023170000 20191010160000 22545 . sEqYXFvUPcMu1T90AWfMc9qC/3fzkIedU3tYYDMot3m/lnLto9+0avlp /lCjgGxVVDcqxCehNod58TxBmBPW//h7GiD2FfhhSrpu+/Q8j4Uvmzq/ DoD0REnDIcvYTb0sZCQQAW0Bsv8E3zEtq4CO5Vwpfwy20hRTO1Es9ikW l7JiKMGF+/S6R0rCs8dQ3UzUOTuZyiEoaGBZm7Un93TyKeiBpBjTj24y 6x3qER2gvv+K4tetnPWNsTe7tBlrtjf3SNz2oi6SP+zmYFAU5S1gkg78 blwGR5zH/vC8OBQBeLq0as1qiTpAaTBJETFIJu4vlEYWIzZ4TkYZk4Vg yhrvig==
  1381. ;; Received 525 bytes from 38.132.106.139#53(38.132.106.139) in 85 ms
  1382.  
  1383. tr. 172800 IN NS ns21.nic.tr.
  1384. tr. 172800 IN NS ns22.nic.tr.
  1385. tr. 172800 IN NS ns31.nic.tr.
  1386. tr. 172800 IN NS ns41.nic.tr.
  1387. tr. 172800 IN NS ns42.nic.tr.
  1388. tr. 172800 IN NS ns91.nic.tr.
  1389. tr. 172800 IN NS ns92.nic.tr.
  1390. tr. 86400 IN NSEC trade. NS RRSIG NSEC
  1391. tr. 86400 IN RRSIG NSEC 8 1 86400 20191023170000 20191010160000 22545 . ddnGvTsodXTqQJRNwE83h9HHh09rMdMIH9ON15qEihMkD7GLAKoBAddI mTUH02iuXHqrXREzVYkhg58QIOGTAnIn1ybT4yvtjrOZLtHLk8fbLcry 1nveOQ+MII6Yy4eJxV4MbdsvP0WfSSNxWF65oBEXNPK7VN8iRc1dq3gV MKMOdTQSaQQr6zevrk8u2oIqTnVhitKB25P2v+aNDYo9dZ8CBhcCOB1K N29O8J8s4WwEeAWu13NSDk030akz0GogeiquZ+QexLv6OHrKcF3JaaEW sfLhRGYdyRuHZfc4j7Rt4Nzb94AX8xs376UBur1Le/7tYxw8lpg4aNsE x5OKRw==
  1392. ;; Received 717 bytes from 2001:503:ba3e::2:30#53(a.root-servers.net) in 42 ms
  1393.  
  1394. hmb.gov.tr. 43200 IN NS ns1.muhasebat.gov.tr.
  1395. hmb.gov.tr. 43200 IN NS ns3.muhasebat.gov.tr.
  1396. ;; Received 120 bytes from 31.210.155.2#53(ns31.nic.tr) in 207 ms
  1397.  
  1398. ;; Received 54 bytes from 212.174.189.29#53(ns1.muhasebat.gov.tr) in 207 ms
  1399. #######################################################################################################################################
  1400.  
  1401. AVAILABLE PLUGINS
  1402. -----------------
  1403.  
  1404. SessionRenegotiationPlugin
  1405. EarlyDataPlugin
  1406. HttpHeadersPlugin
  1407. CertificateInfoPlugin
  1408. OpenSslCipherSuitesPlugin
  1409. HeartbleedPlugin
  1410. RobotPlugin
  1411. OpenSslCcsInjectionPlugin
  1412. CompressionPlugin
  1413. FallbackScsvPlugin
  1414. SessionResumptionPlugin
  1415.  
  1416.  
  1417.  
  1418. CHECKING HOST(S) AVAILABILITY
  1419. -----------------------------
  1420.  
  1421. 212.174.188.50:443 => 212.174.188.50
  1422.  
  1423.  
  1424.  
  1425.  
  1426. SCAN RESULTS FOR 212.174.188.50:443 - 212.174.188.50
  1427. ----------------------------------------------------
  1428.  
  1429. * Downgrade Attacks:
  1430. TLS_FALLBACK_SCSV: OK - Supported
  1431.  
  1432. * SSLV2 Cipher Suites:
  1433. Server rejected all cipher suites.
  1434.  
  1435. * Deflate Compression:
  1436. OK - Compression disabled
  1437.  
  1438. * Session Renegotiation:
  1439. Client-initiated Renegotiation: OK - Rejected
  1440. Secure Renegotiation: OK - Supported
  1441.  
  1442. * TLSV1_3 Cipher Suites:
  1443. Forward Secrecy OK - Supported
  1444. RC4 OK - Not Supported
  1445.  
  1446. Preferred:
  1447. TLS_AES_256_GCM_SHA384 256 bits HTTP 301 Moved Permanently - https://www.hmb.gov.tr
  1448. Accepted:
  1449. TLS_CHACHA20_POLY1305_SHA256 256 bits HTTP 301 Moved Permanently - https://www.hmb.gov.tr
  1450. TLS_AES_256_GCM_SHA384 256 bits HTTP 301 Moved Permanently - https://www.hmb.gov.tr
  1451. TLS_AES_128_GCM_SHA256 128 bits HTTP 301 Moved Permanently - https://www.hmb.gov.tr
  1452.  
  1453. * ROBOT Attack:
  1454. OK - Not vulnerable
  1455.  
  1456. * OpenSSL Heartbleed:
  1457. OK - Not vulnerable to Heartbleed
  1458.  
  1459. * TLSV1_1 Cipher Suites:
  1460. Server rejected all cipher suites.
  1461.  
  1462. * TLSV1 Cipher Suites:
  1463. Server rejected all cipher suites.
  1464.  
  1465. * Certificate Information:
  1466. Content
  1467. SHA1 Fingerprint: 97a7ad852f9fe53dbae797aabdeef469cbd38cef
  1468. Common Name: *.hmb.gov.tr
  1469. Issuer: GlobalSign Organization Validation CA - SHA256 - G2
  1470. Serial Number: 38573886576754047190994614396
  1471. Not Before: 2018-10-05 16:39:41
  1472. Not After: 2020-10-05 16:39:41
  1473. Signature Algorithm: sha256
  1474. Public Key Algorithm: RSA
  1475. Key Size: 2048
  1476. Exponent: 65537 (0x10001)
  1477. DNS Subject Alternative Names: ['*.hmb.gov.tr', 'hmb.gov.tr']
  1478.  
  1479. Trust
  1480. Hostname Validation: FAILED - Certificate does NOT match 212.174.188.50
  1481. Android CA Store (9.0.0_r9): OK - Certificate is trusted
  1482. Apple CA Store (iOS 12, macOS 10.14, watchOS 5, and tvOS 12):OK - Certificate is trusted
  1483. Java CA Store (jdk-12.0.1): OK - Certificate is trusted
  1484. Mozilla CA Store (2019-03-14): OK - Certificate is trusted
  1485. Windows CA Store (2019-05-27): OK - Certificate is trusted
  1486. Symantec 2018 Deprecation: WARNING: Certificate distrusted by Google and Mozilla on September 2018
  1487. Received Chain: *.hmb.gov.tr --> GlobalSign Organization Validation CA - SHA256 - G2
  1488. Verified Chain: *.hmb.gov.tr --> GlobalSign Organization Validation CA - SHA256 - G2 --> GlobalSign
  1489. Received Chain Contains Anchor: OK - Anchor certificate not sent
  1490. Received Chain Order: OK - Order is valid
  1491. Verified Chain contains SHA1: OK - No SHA1-signed certificate in the verified certificate chain
  1492.  
  1493. Extensions
  1494. OCSP Must-Staple: NOT SUPPORTED - Extension not found
  1495. Certificate Transparency: OK - 3 SCTs included
  1496.  
  1497. OCSP Stapling
  1498. NOT SUPPORTED - Server did not send back an OCSP response
  1499.  
  1500. * TLS 1.2 Session Resumption Support:
  1501. With Session IDs: OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
  1502. With TLS Tickets: NOT SUPPORTED - TLS ticket not assigned.
  1503.  
  1504. * OpenSSL CCS Injection:
  1505. OK - Not vulnerable to OpenSSL CCS injection
  1506.  
  1507. * TLSV1_2 Cipher Suites:
  1508. Forward Secrecy OK - Supported
  1509. RC4 OK - Not Supported
  1510.  
  1511. Preferred:
  1512. TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 256 bits HTTP 301 Moved Permanently - https://www.hmb.gov.tr
  1513. Accepted:
  1514. TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 256 bits HTTP 301 Moved Permanently - https://www.hmb.gov.tr
  1515. TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 256 bits HTTP 301 Moved Permanently - https://www.hmb.gov.tr
  1516.  
  1517. * SSLV3 Cipher Suites:
  1518. Server rejected all cipher suites.
  1519.  
  1520.  
  1521. SCAN COMPLETED IN 16.00 S
  1522. -------------------------
  1523. #######################################################################################################################################
  1524.  
  1525. Domains still to check: 1
  1526. Checking if the hostname hmb.gov.tr. given is in fact a domain...
  1527.  
  1528. Analyzing domain: hmb.gov.tr.
  1529. Checking NameServers using system default resolver...
  1530. IP: 212.174.189.24 (Turkey)
  1531. HostName: ns3.muhasebat.gov.tr Type: NS
  1532. HostName: 212.174.189.24.static.ttnet.com.tr Type: PTR
  1533. IP: 212.174.189.29 (Turkey)
  1534. HostName: ns1.muhasebat.gov.tr Type: NS
  1535. HostName: 212.174.189.29.static.ttnet.com.tr Type: PTR
  1536.  
  1537. Checking MailServers using system default resolver...
  1538. IP: 212.174.188.11 (Turkey)
  1539. HostName: mailgw01.hmb.gov.tr Type: MX
  1540. HostName: mailgw01.maliye.gov.tr Type: PTR
  1541. IP: 212.174.188.13 (Turkey)
  1542. HostName: mailgw03.hmb.gov.tr Type: MX
  1543. HostName: mailgw03.hmb.gov.tr Type: PTR
  1544. IP: 212.174.188.12 (Turkey)
  1545. HostName: mailgw02.hmb.gov.tr Type: MX
  1546. HostName: mailgw02.maliye.gov.tr Type: PTR
  1547.  
  1548. Checking the zone transfer for each NS... (if this takes more than 10 seconds, just hit CTRL-C and it will continue. Bug in the libs)
  1549. No zone transfer found on nameserver 212.174.189.24
  1550. No zone transfer found on nameserver 212.174.189.29
  1551.  
  1552. Checking SPF record...
  1553. New hostname found: mailgw01
  1554. New hostname found: mailgw02
  1555. New hostname found: mailgw03
  1556. New hostname found: mailgw04
  1557.  
  1558. Checking 196 most common hostnames using system default resolver...
  1559. IP: 212.174.188.50 (Turkey)
  1560. HostName: www.hmb.gov.tr. Type: A
  1561. IP: 212.174.188.10 (Turkey)
  1562. HostName: mail.hmb.gov.tr. Type: A
  1563. IP: 212.174.189.24 (Turkey)
  1564. HostName: ns3.muhasebat.gov.tr Type: NS
  1565. HostName: 212.174.189.24.static.ttnet.com.tr Type: PTR
  1566. HostName: ns1.hmb.gov.tr. Type: A
  1567. IP: 212.174.189.29 (Turkey)
  1568. HostName: ns1.muhasebat.gov.tr Type: NS
  1569. HostName: 212.174.189.29.static.ttnet.com.tr Type: PTR
  1570. HostName: ns2.hmb.gov.tr. Type: A
  1571. IP: 212.174.188.9 (Turkey)
  1572. HostName: webmail.hmb.gov.tr. Type: A
  1573. IP: 212.174.188.11 (Turkey)
  1574. HostName: mailgw01.hmb.gov.tr Type: MX
  1575. HostName: mailgw01.maliye.gov.tr Type: PTR
  1576. HostName: mailgw01.hmb.gov.tr. Type: A
  1577. IP: 212.174.188.12 (Turkey)
  1578. HostName: mailgw02.hmb.gov.tr Type: MX
  1579. HostName: mailgw02.maliye.gov.tr Type: PTR
  1580. HostName: mailgw02.hmb.gov.tr. Type: A
  1581. IP: 212.174.188.13 (Turkey)
  1582. HostName: mailgw03.hmb.gov.tr Type: MX
  1583. HostName: mailgw03.hmb.gov.tr Type: PTR
  1584. HostName: mailgw03.hmb.gov.tr. Type: A
  1585. IP: 212.174.188.15 (Turkey)
  1586. HostName: mailgw04.hmb.gov.tr. Type: A
  1587.  
  1588. Checking with nmap the reverse DNS hostnames of every <ip>/24 netblock using system default resolver...
  1589. Checking netblock 212.174.188.0
  1590. Checking netblock 212.174.189.0
  1591.  
  1592. Searching for hmb.gov.tr. emails in Google
  1593. [email protected].
  1594. [email protected]
  1595. [email protected].
  1596. [email protected].
  1597.  
  1598. Checking 9 active hosts using nmap... (nmap -sn -n -v -PP -PM -PS80,25 -PA -PY -PU53,40125 -PE --reason <ip> -oA <output_directory>/nmap/<ip>.sn)
  1599. Host 212.174.188.9 is up (reset ttl 64)
  1600. Host 212.174.188.12 is up (reset ttl 64)
  1601. Host 212.174.188.11 is up (reset ttl 64)
  1602. Host 212.174.188.10 is up (reset ttl 64)
  1603. Host 212.174.188.13 is up (reset ttl 64)
  1604. Host 212.174.189.24 is up (reset ttl 64)
  1605. Host 212.174.188.15 is up (reset ttl 64)
  1606. Host 212.174.188.50 is up (reset ttl 64)
  1607. Host 212.174.189.29 is up (reset ttl 64)
  1608.  
  1609. Checking ports on every active host using nmap... (nmap -O --reason --webxml --traceroute -sS -sV -sC -Pn -n -v -F <ip> -oA <output_directory>/nmap/<ip>)
  1610. Scanning ip 212.174.188.9 (webmail.hmb.gov.tr.):
  1611. 80/tcp open http-proxy syn-ack ttl 234 F5 BIG-IP load balancer http proxy
  1612. | http-methods:
  1613. |_ Supported Methods: GET HEAD POST OPTIONS
  1614. |_http-server-header: BigIP
  1615. |_http-title: Did not follow redirect to https://212.174.188.9/
  1616. |_https-redirect: ERROR: Script execution failed (use -d to debug)
  1617. 443/tcp open ssl/https? syn-ack ttl 234
  1618. |_http-favicon: Unknown favicon MD5: 486373B021971D0A95AF04C811799E21
  1619. | ssl-cert: Subject: commonName=*.hmb.gov.tr/organizationName=Hazine ve Maliye Bakanligi/stateOrProvinceName=Ankara/countryName=TR
  1620. | Subject Alternative Name: DNS:*.hmb.gov.tr, DNS:hmb.gov.tr
  1621. | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G2/organizationName=GlobalSign nv-sa/countryName=BE
  1622. | Public Key type: rsa
  1623. | Public Key bits: 2048
  1624. | Signature Algorithm: sha256WithRSAEncryption
  1625. | Not valid before: 2018-10-05T16:39:41
  1626. | Not valid after: 2020-10-05T16:39:41
  1627. | MD5: d9a6 828e 3cb7 f9b5 8a71 1d50 fb89 5033
  1628. |_SHA-1: 97a7 ad85 2f9f e53d bae7 97aa bdee f469 cbd3 8cef
  1629. |_ssl-date: TLS randomness does not represent time
  1630. Device type: general purpose|WAP
  1631. OS Info: Service Info: Device: load balancer
  1632. Scanning ip 212.174.188.12 (mailgw02.hmb.gov.tr.):
  1633. Scanning ip 212.174.188.11 (mailgw01.hmb.gov.tr.):
  1634. 80/tcp open http syn-ack ttl 107 Microsoft IIS httpd 7.5
  1635. | http-methods:
  1636. |_ Supported Methods: GET HEAD POST OPTIONS
  1637. |_http-server-header: Microsoft-IIS/7.5
  1638. |_http-title: Did not follow redirect to https://mail.muhasebat.gov.tr/owa
  1639. 443/tcp open ssl/https? syn-ack ttl 107
  1640. |_ssl-date: 2019-10-11T03:47:25+00:00; -2m03s from scanner time.
  1641. Device type: general purpose|WAP
  1642. Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Microsoft Windows 7|2008|2012|Vista (86%)
  1643. OS Info: Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  1644. |_clock-skew: -2m03s
  1645. Scanning ip 212.174.188.10 (mail.hmb.gov.tr.):
  1646. 80/tcp open http-proxy syn-ack ttl 234 F5 BIG-IP load balancer http proxy
  1647. | http-methods:
  1648. |_ Supported Methods: GET HEAD POST OPTIONS
  1649. |_http-server-header: BigIP
  1650. |_http-title: Did not follow redirect to https://212.174.188.10/
  1651. |_https-redirect: ERROR: Script execution failed (use -d to debug)
  1652. 443/tcp open ssl/http-proxy syn-ack ttl 234 F5 BIG-IP load balancer http proxy
  1653. | http-methods:
  1654. |_ Supported Methods: GET HEAD POST OPTIONS
  1655. |_http-server-header: BigIP
  1656. | ssl-cert: Subject: commonName=*.hmb.gov.tr/organizationName=Hazine ve Maliye Bakanligi/stateOrProvinceName=Ankara/countryName=TR
  1657. | Subject Alternative Name: DNS:*.hmb.gov.tr, DNS:hmb.gov.tr
  1658. | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G2/organizationName=GlobalSign nv-sa/countryName=BE
  1659. | Public Key type: rsa
  1660. | Public Key bits: 2048
  1661. | Signature Algorithm: sha256WithRSAEncryption
  1662. | Not valid before: 2018-10-05T16:39:41
  1663. | Not valid after: 2020-10-05T16:39:41
  1664. | MD5: d9a6 828e 3cb7 f9b5 8a71 1d50 fb89 5033
  1665. |_SHA-1: 97a7 ad85 2f9f e53d bae7 97aa bdee f469 cbd3 8cef
  1666. |_ssl-date: TLS randomness does not represent time
  1667. Device type: general purpose|WAP
  1668. OS Info: Service Info: Device: load balancer
  1669. Scanning ip 212.174.188.13 (mailgw03.hmb.gov.tr.):
  1670. Scanning ip 212.174.189.24 (ns1.hmb.gov.tr.):
  1671. 53/tcp open domain syn-ack ttl 108 Microsoft DNS 6.1.7601 (1DB15EC5) (Windows Server 2008 R2 SP1)
  1672. | dns-nsid:
  1673. |_ bind.version: Microsoft DNS 6.1.7601 (1DB15EC5)
  1674. Device type: general purpose|WAP
  1675. Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Microsoft Windows 7|2008|2012|Vista (88%)
  1676. OS Info: Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1
  1677. Scanning ip 212.174.188.15 (mailgw04.hmb.gov.tr.):
  1678. Scanning ip 212.174.188.50 (www.hmb.gov.tr.):
  1679. 80/tcp open http syn-ack ttl 41 nginx
  1680. | http-methods:
  1681. |_ Supported Methods: GET HEAD POST OPTIONS
  1682. |_http-title: Did not follow redirect to https://www.hmb.gov.tr
  1683. 443/tcp open ssl/http syn-ack ttl 41 nginx
  1684. | http-methods:
  1685. |_ Supported Methods: GET HEAD POST OPTIONS
  1686. |_http-title: Did not follow redirect to https://www.hmb.gov.tr
  1687. | ssl-cert: Subject: commonName=*.hmb.gov.tr/organizationName=Hazine ve Maliye Bakanligi/stateOrProvinceName=Ankara/countryName=TR
  1688. | Subject Alternative Name: DNS:*.hmb.gov.tr, DNS:hmb.gov.tr
  1689. | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G2/organizationName=GlobalSign nv-sa/countryName=BE
  1690. | Public Key type: rsa
  1691. | Public Key bits: 2048
  1692. | Signature Algorithm: sha256WithRSAEncryption
  1693. | Not valid before: 2018-10-05T16:39:41
  1694. | Not valid after: 2020-10-05T16:39:41
  1695. | MD5: d9a6 828e 3cb7 f9b5 8a71 1d50 fb89 5033
  1696. |_SHA-1: 97a7 ad85 2f9f e53d bae7 97aa bdee f469 cbd3 8cef
  1697. Running (JUST GUESSING): Linux 3.X|2.6.X|4.X (92%)
  1698. Scanning ip 212.174.189.29 (ns2.hmb.gov.tr.):
  1699. 53/tcp open domain syn-ack ttl 108 Microsoft DNS 6.1.7601 (1DB15F75) (Windows Server 2008 R2 SP1)
  1700. | dns-nsid:
  1701. |_ bind.version: Microsoft DNS 6.1.7601 (1DB15F75)
  1702. OS Info: Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1
  1703. WebCrawling domain's web servers... up to 50 max links.
  1704.  
  1705. + URL to crawl: http://webmail.hmb.gov.tr.
  1706. + Date: 2019-10-10
  1707.  
  1708. + Crawling URL: http://webmail.hmb.gov.tr.:
  1709. + Links:
  1710. + Crawling http://webmail.hmb.gov.tr.
  1711. + Searching for directories...
  1712. + Searching open folders...
  1713.  
  1714.  
  1715. + URL to crawl: http://mailgw01.hmb.gov.tr.
  1716. + Date: 2019-10-10
  1717.  
  1718. + Crawling URL: http://mailgw01.hmb.gov.tr.:
  1719. + Links:
  1720. + Crawling http://mailgw01.hmb.gov.tr. (400 Bad Request)
  1721. + Searching for directories...
  1722. + Searching open folders...
  1723.  
  1724.  
  1725. + URL to crawl: http://mailgw01.hmb.gov.tr
  1726. + Date: 2019-10-10
  1727.  
  1728. + Crawling URL: http://mailgw01.hmb.gov.tr:
  1729. + Links:
  1730. + Crawling http://mailgw01.hmb.gov.tr ([SSL: UNSUPPORTED_PROTOCOL] unsupported protocol (_ssl.c:727))
  1731. + Searching for directories...
  1732. + Searching open folders...
  1733.  
  1734.  
  1735. + URL to crawl: http://mail.hmb.gov.tr.
  1736. + Date: 2019-10-10
  1737.  
  1738. + Crawling URL: http://mail.hmb.gov.tr.:
  1739. + Links:
  1740. + Crawling http://mail.hmb.gov.tr.
  1741. + Searching for directories...
  1742. + Searching open folders...
  1743.  
  1744.  
  1745. + URL to crawl: http://mail.hmb.gov.tr.:443
  1746. + Date: 2019-10-10
  1747.  
  1748. + Crawling URL: http://mail.hmb.gov.tr.:443:
  1749. + Links:
  1750. + Crawling http://mail.hmb.gov.tr.:443
  1751. + Searching for directories...
  1752. + Searching open folders...
  1753.  
  1754.  
  1755. + URL to crawl: http://www.hmb.gov.tr.
  1756. + Date: 2019-10-10
  1757.  
  1758. + Crawling URL: http://www.hmb.gov.tr.:
  1759. + Links:
  1760. + Crawling http://www.hmb.gov.tr.
  1761. + Crawling http://www.hmb.gov.tr./manifest.json (File! Not crawling it.)
  1762. + Crawling http://www.hmb.gov.tr./yandex-browser-manifest.json (File! Not crawling it.)
  1763. + Searching for directories...
  1764. - Found: http://www.hmb.gov.tr./assets/
  1765. + Searching open folders...
  1766. - http://www.hmb.gov.tr./assets/ (403 Forbidden)
  1767.  
  1768.  
  1769. + URL to crawl: https://www.hmb.gov.tr.
  1770. + Date: 2019-10-10
  1771.  
  1772. + Crawling URL: https://www.hmb.gov.tr.:
  1773. + Links:
  1774. + Crawling https://www.hmb.gov.tr.
  1775. + Searching for directories...
  1776. + Searching open folders...
  1777.  
  1778. --Finished--
  1779. Summary information for domain hmb.gov.tr.
  1780. -----------------------------------------
  1781. Domain Specific Information:
  1782. Email: [email protected].
  1783. Email: [email protected]
  1784. Email: [email protected].
  1785. Email: [email protected].
  1786.  
  1787. Domain Ips Information:
  1788. IP: 212.174.188.9
  1789. HostName: webmail.hmb.gov.tr. Type: A
  1790. Country: Turkey
  1791. Is Active: True (reset ttl 64)
  1792. Port: 80/tcp open http-proxy syn-ack ttl 234 F5 BIG-IP load balancer http proxy
  1793. Script Info: | http-methods:
  1794. Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
  1795. Script Info: |_http-server-header: BigIP
  1796. Script Info: |_http-title: Did not follow redirect to https://212.174.188.9/
  1797. Script Info: |_https-redirect: ERROR: Script execution failed (use -d to debug)
  1798. Port: 443/tcp open ssl/https? syn-ack ttl 234
  1799. Script Info: |_http-favicon: Unknown favicon MD5: 486373B021971D0A95AF04C811799E21
  1800. Script Info: | ssl-cert: Subject: commonName=*.hmb.gov.tr/organizationName=Hazine ve Maliye Bakanligi/stateOrProvinceName=Ankara/countryName=TR
  1801. Script Info: | Subject Alternative Name: DNS:*.hmb.gov.tr, DNS:hmb.gov.tr
  1802. Script Info: | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G2/organizationName=GlobalSign nv-sa/countryName=BE
  1803. Script Info: | Public Key type: rsa
  1804. Script Info: | Public Key bits: 2048
  1805. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1806. Script Info: | Not valid before: 2018-10-05T16:39:41
  1807. Script Info: | Not valid after: 2020-10-05T16:39:41
  1808. Script Info: | MD5: d9a6 828e 3cb7 f9b5 8a71 1d50 fb89 5033
  1809. Script Info: |_SHA-1: 97a7 ad85 2f9f e53d bae7 97aa bdee f469 cbd3 8cef
  1810. Script Info: |_ssl-date: TLS randomness does not represent time
  1811. Script Info: Device type: general purpose|WAP
  1812. Os Info: Device: load balancer
  1813. IP: 212.174.188.12
  1814. HostName: mailgw02.hmb.gov.tr Type: MX
  1815. HostName: mailgw02.maliye.gov.tr Type: PTR
  1816. HostName: mailgw02.hmb.gov.tr. Type: A
  1817. Country: Turkey
  1818. Is Active: True (reset ttl 64)
  1819. IP: 212.174.188.11
  1820. HostName: mailgw01.hmb.gov.tr Type: MX
  1821. HostName: mailgw01.maliye.gov.tr Type: PTR
  1822. HostName: mailgw01.hmb.gov.tr. Type: A
  1823. Country: Turkey
  1824. Is Active: True (reset ttl 64)
  1825. Port: 80/tcp open http syn-ack ttl 107 Microsoft IIS httpd 7.5
  1826. Script Info: | http-methods:
  1827. Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
  1828. Script Info: |_http-server-header: Microsoft-IIS/7.5
  1829. Script Info: |_http-title: Did not follow redirect to https://mail.muhasebat.gov.tr/owa
  1830. Port: 443/tcp open ssl/https? syn-ack ttl 107
  1831. Script Info: |_ssl-date: 2019-10-11T03:47:25+00:00; -2m03s from scanner time.
  1832. Script Info: Device type: general purpose|WAP
  1833. Script Info: Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Microsoft Windows 7|2008|2012|Vista (86%)
  1834. Os Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  1835. Script Info: |_clock-skew: -2m03s
  1836. IP: 212.174.188.10
  1837. HostName: mail.hmb.gov.tr. Type: A
  1838. Country: Turkey
  1839. Is Active: True (reset ttl 64)
  1840. Port: 80/tcp open http-proxy syn-ack ttl 234 F5 BIG-IP load balancer http proxy
  1841. Script Info: | http-methods:
  1842. Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
  1843. Script Info: |_http-server-header: BigIP
  1844. Script Info: |_http-title: Did not follow redirect to https://212.174.188.10/
  1845. Script Info: |_https-redirect: ERROR: Script execution failed (use -d to debug)
  1846. Port: 443/tcp open ssl/http-proxy syn-ack ttl 234 F5 BIG-IP load balancer http proxy
  1847. Script Info: | http-methods:
  1848. Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
  1849. Script Info: |_http-server-header: BigIP
  1850. Script Info: | ssl-cert: Subject: commonName=*.hmb.gov.tr/organizationName=Hazine ve Maliye Bakanligi/stateOrProvinceName=Ankara/countryName=TR
  1851. Script Info: | Subject Alternative Name: DNS:*.hmb.gov.tr, DNS:hmb.gov.tr
  1852. Script Info: | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G2/organizationName=GlobalSign nv-sa/countryName=BE
  1853. Script Info: | Public Key type: rsa
  1854. Script Info: | Public Key bits: 2048
  1855. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1856. Script Info: | Not valid before: 2018-10-05T16:39:41
  1857. Script Info: | Not valid after: 2020-10-05T16:39:41
  1858. Script Info: | MD5: d9a6 828e 3cb7 f9b5 8a71 1d50 fb89 5033
  1859. Script Info: |_SHA-1: 97a7 ad85 2f9f e53d bae7 97aa bdee f469 cbd3 8cef
  1860. Script Info: |_ssl-date: TLS randomness does not represent time
  1861. Script Info: Device type: general purpose|WAP
  1862. Os Info: Device: load balancer
  1863. IP: 212.174.188.13
  1864. HostName: mailgw03.hmb.gov.tr Type: MX
  1865. HostName: mailgw03.hmb.gov.tr Type: PTR
  1866. HostName: mailgw03.hmb.gov.tr. Type: A
  1867. Country: Turkey
  1868. Is Active: True (reset ttl 64)
  1869. IP: 212.174.189.24
  1870. HostName: ns3.muhasebat.gov.tr Type: NS
  1871. HostName: 212.174.189.24.static.ttnet.com.tr Type: PTR
  1872. HostName: ns1.hmb.gov.tr. Type: A
  1873. Country: Turkey
  1874. Is Active: True (reset ttl 64)
  1875. Port: 53/tcp open domain syn-ack ttl 108 Microsoft DNS 6.1.7601 (1DB15EC5) (Windows Server 2008 R2 SP1)
  1876. Script Info: | dns-nsid:
  1877. Script Info: |_ bind.version: Microsoft DNS 6.1.7601 (1DB15EC5)
  1878. Script Info: Device type: general purpose|WAP
  1879. Script Info: Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Microsoft Windows 7|2008|2012|Vista (88%)
  1880. Os Info: OS: Windows; CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1
  1881. IP: 212.174.188.15
  1882. HostName: mailgw04.hmb.gov.tr. Type: A
  1883. Country: Turkey
  1884. Is Active: True (reset ttl 64)
  1885. IP: 212.174.188.50
  1886. HostName: www.hmb.gov.tr. Type: A
  1887. Country: Turkey
  1888. Is Active: True (reset ttl 64)
  1889. Port: 80/tcp open http syn-ack ttl 41 nginx
  1890. Script Info: | http-methods:
  1891. Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
  1892. Script Info: |_http-title: Did not follow redirect to https://www.hmb.gov.tr
  1893. Port: 443/tcp open ssl/http syn-ack ttl 41 nginx
  1894. Script Info: | http-methods:
  1895. Script Info: |_ Supported Methods: GET HEAD POST OPTIONS
  1896. Script Info: |_http-title: Did not follow redirect to https://www.hmb.gov.tr
  1897. Script Info: | ssl-cert: Subject: commonName=*.hmb.gov.tr/organizationName=Hazine ve Maliye Bakanligi/stateOrProvinceName=Ankara/countryName=TR
  1898. Script Info: | Subject Alternative Name: DNS:*.hmb.gov.tr, DNS:hmb.gov.tr
  1899. Script Info: | Issuer: commonName=GlobalSign Organization Validation CA - SHA256 - G2/organizationName=GlobalSign nv-sa/countryName=BE
  1900. Script Info: | Public Key type: rsa
  1901. Script Info: | Public Key bits: 2048
  1902. Script Info: | Signature Algorithm: sha256WithRSAEncryption
  1903. Script Info: | Not valid before: 2018-10-05T16:39:41
  1904. Script Info: | Not valid after: 2020-10-05T16:39:41
  1905. Script Info: | MD5: d9a6 828e 3cb7 f9b5 8a71 1d50 fb89 5033
  1906. Script Info: |_SHA-1: 97a7 ad85 2f9f e53d bae7 97aa bdee f469 cbd3 8cef
  1907. Script Info: Running (JUST GUESSING): Linux 3.X|2.6.X|4.X (92%)
  1908. IP: 212.174.189.29
  1909. HostName: ns1.muhasebat.gov.tr Type: NS
  1910. HostName: 212.174.189.29.static.ttnet.com.tr Type: PTR
  1911. HostName: ns2.hmb.gov.tr. Type: A
  1912. Country: Turkey
  1913. Is Active: True (reset ttl 64)
  1914. Port: 53/tcp open domain syn-ack ttl 108 Microsoft DNS 6.1.7601 (1DB15F75) (Windows Server 2008 R2 SP1)
  1915. Script Info: | dns-nsid:
  1916. Script Info: |_ bind.version: Microsoft DNS 6.1.7601 (1DB15F75)
  1917. Os Info: OS: Windows; CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1
  1918. #######################################################################################################################################
  1919. dnsenum VERSION:1.2.4
  1920.  
  1921. ----- en.hmb.gov.tr -----
  1922.  
  1923.  
  1924. Host's addresses:
  1925. __________________
  1926.  
  1927. en.hmb.gov.tr. 1568 IN A 212.174.188.50
  1928.  
  1929.  
  1930. Name Servers:
  1931. ______________
  1932.  
  1933. #######################################################################################################################################
  1934. [+] en.hmb.gov.tr has no SPF record!
  1935. [*] No DMARC record found. Looking for organizational record
  1936. [*] Found organizational DMARC record:
  1937. [*] v=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected];
  1938. [*] No explicit organizational subdomain policy. Defaulting to organizational policy
  1939. [+] DMARC policy set to none
  1940. [+] Spoofing possible for en.hmb.gov.tr!
  1941. ######################################################################################################################################
  1942. INFO[0000] Starting to process queue....
  1943. INFO[0000] Starting to process permutations....
  1944. INFO[0001] FORBIDDEN http://hmb-staging.s3.amazonaws.com (http://hmb.gov.tr)
  1945. INFO[0001] FORBIDDEN http://hmb.s3.amazonaws.com (http://hmb.gov.tr)
  1946. #######################################################################################################################################
  1947. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-10 23:59 EDT
  1948. Nmap scan report for en.hmb.gov.tr (212.174.188.50)
  1949. Host is up (0.18s latency).
  1950. Not shown: 995 filtered ports, 3 closed ports
  1951. Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
  1952. PORT STATE SERVICE
  1953. 80/tcp open http
  1954. 443/tcp open https
  1955.  
  1956. Nmap done: 1 IP address (1 host up) scanned in 34.32 seconds
  1957. #######################################################################################################################################
  1958.  
  1959. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-11 00:00 EDT
  1960. Nmap scan report for en.hmb.gov.tr (212.174.188.50)
  1961. Host is up (0.060s latency).
  1962. Not shown: 2 filtered ports
  1963. PORT STATE SERVICE
  1964. 53/udp open|filtered domain
  1965. 67/udp open|filtered dhcps
  1966. 68/udp open|filtered dhcpc
  1967. 69/udp open|filtered tftp
  1968. 88/udp open|filtered kerberos-sec
  1969. 123/udp open|filtered ntp
  1970. 139/udp open|filtered netbios-ssn
  1971. 161/udp open|filtered snmp
  1972. 162/udp open|filtered snmptrap
  1973. 389/udp open|filtered ldap
  1974. 500/udp open|filtered isakmp
  1975. 520/udp open|filtered route
  1976. 2049/udp open|filtered nfs
  1977.  
  1978. Nmap done: 1 IP address (1 host up) scanned in 14.14 seconds
  1979. #######################################################################################################################################
  1980. HTTP/1.1 301 Moved Permanently
  1981. Server: nginx
  1982. Date: Fri, 11 Oct 2019 03:59:38 GMT
  1983. Content-Type: text/html
  1984. Content-Length: 178
  1985. Connection: keep-alive
  1986. Location: https://en.hmb.gov.tr/
  1987. #######################################################################################################################################
  1988. http://en.hmb.gov.tr [301 Moved Permanently] Country[TURKEY][TR], HTTPServer[nginx], IP[212.174.188.50], RedirectLocation[https://en.hmb.gov.tr/], Title[301 Moved Permanently], nginx
  1989. https://en.hmb.gov.tr/ [200 OK] Country[TURKEY][TR], HTML5, HTTPServer[nginx], IP[212.174.188.50], Script, Title[T.C. Hazine ve Maliye Bakanlığı], X-UA-Compatible[IE=edge], nginx
  1990. #######################################################################################################################################
  1991. wig - WebApp Information Gatherer
  1992.  
  1993.  
  1994. Scanning https://en.hmb.gov.tr...
  1995. _____________________ SITE INFO ______________________
  1996. IP Title
  1997. 212.174.188.50 T.C. Hazine ve Maliye Bakanlığı
  1998.  
  1999. ______________________ VERSION _______________________
  2000. Name Versions Type
  2001. nginx Platform
  2002.  
  2003. ____________________ INTERESTING _____________________
  2004. URL Note Type
  2005. /robots.txt robots.txt index Interesting
  2006.  
  2007. ______________________________________________________
  2008. Time: 150.3 sec Urls: 629 Fingerprints: 40401
  2009. ######################################################################################################################################
  2010. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-11 00:03 EDT
  2011. NSE: Loaded 163 scripts for scanning.
  2012. NSE: Script Pre-scanning.
  2013. Initiating NSE at 00:03
  2014. Completed NSE at 00:03, 0.00s elapsed
  2015. Initiating NSE at 00:03
  2016. Completed NSE at 00:03, 0.00s elapsed
  2017. Initiating Parallel DNS resolution of 1 host. at 00:03
  2018. Completed Parallel DNS resolution of 1 host. at 00:03, 11.86s elapsed
  2019. Initiating SYN Stealth Scan at 00:03
  2020. Scanning en.hmb.gov.tr (212.174.188.50) [1 port]
  2021. Discovered open port 80/tcp on 212.174.188.50
  2022. Completed SYN Stealth Scan at 00:03, 0.28s elapsed (1 total ports)
  2023. Initiating Service scan at 00:03
  2024. Scanning 1 service on en.hmb.gov.tr (212.174.188.50)
  2025. Completed Service scan at 00:03, 6.42s elapsed (1 service on 1 host)
  2026. Initiating OS detection (try #1) against en.hmb.gov.tr (212.174.188.50)
  2027. Retrying OS detection (try #2) against en.hmb.gov.tr (212.174.188.50)
  2028. Initiating Traceroute at 00:03
  2029. Completed Traceroute at 00:03, 3.10s elapsed
  2030. Initiating Parallel DNS resolution of 16 hosts. at 00:03
  2031. Completed Parallel DNS resolution of 16 hosts. at 00:03, 10.38s elapsed
  2032. NSE: Script scanning 212.174.188.50.
  2033. Initiating NSE at 00:03
  2034. Completed NSE at 00:04, 50.46s elapsed
  2035. Initiating NSE at 00:04
  2036. Completed NSE at 00:04, 0.96s elapsed
  2037. Nmap scan report for en.hmb.gov.tr (212.174.188.50)
  2038. Host is up (0.22s latency).
  2039.  
  2040. PORT STATE SERVICE VERSION
  2041. 80/tcp open http nginx
  2042. | http-brute:
  2043. |_ Path "/" does not require authentication
  2044. |_http-chrono: Request times for /; avg: 599.75ms; min: 512.83ms; max: 664.12ms
  2045. | http-cross-domain-policy:
  2046. | VULNERABLE:
  2047. | Cross-domain and Client Access policies.
  2048. | State: LIKELY VULNERABLE
  2049. | A cross-domain policy file specifies the permissions that a web client such as Java, Adobe Flash, Adobe Reader,
  2050. | etc. use to access data across different domains. A client acces policy file is similar to cross-domain policy
  2051. | but is used for M$ Silverlight applications. Overly permissive configurations enables Cross-site Request
  2052. | Forgery attacks, and may allow third parties to access sensitive data meant for the user.
  2053. | Check results:
  2054. | /crossdomain.xml:
  2055. | <?xml version="1.0"?>
  2056. | <!DOCTYPE cross-domain-policy SYSTEM "http://www.adobe.com/xml/dtds/cross-domain-policy.dtd">
  2057. | <cross-domain-policy>
  2058. | <!-- Read this: www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html -->
  2059. |
  2060. | <!-- Most restrictive policy: -->
  2061. | <site-control permitted-cross-domain-policies="none"/>
  2062. |
  2063. | <!-- Least restrictive policy: -->
  2064. | <site-control permitted-cross-domain-policies="all"/>
  2065. | <allow-access-from domain="*.hmb.gov.tr" to-ports="*" secure="false"/>
  2066. | <allow-http-request-headers-from domain="*.hmb.gov.tr" headers="*" secure="false"/>
  2067. |
  2068. | </cross-domain-policy>
  2069. |
  2070. | Extra information:
  2071. | Trusted domains:gov.tr
  2072. | Use the script argument 'domain-lookup' to find trusted domains available for purchase
  2073. | References:
  2074. | http://gursevkalra.blogspot.com/2013/08/bypassing-same-origin-policy-with-flash.html
  2075. | https://www.adobe.com/devnet-docs/acrobatetk/tools/AppSec/CrossDomain_PolicyFile_Specification.pdf
  2076. | https://www.adobe.com/devnet/articles/crossdomain_policy_file_spec.html
  2077. | http://sethsec.blogspot.com/2014/03/exploiting-misconfigured-crossdomainxml.html
  2078. | http://acunetix.com/vulnerabilities/web/insecure-clientaccesspolicy-xml-file
  2079. |_ https://www.owasp.org/index.php/Test_RIA_cross_domain_policy_%28OTG-CONFIG-008%29
  2080. |_http-csrf: Couldn't find any CSRF vulnerabilities.
  2081. |_http-date: Fri, 11 Oct 2019 04:03:13 GMT; -40s from local time.
  2082. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
  2083. |_http-dombased-xss: Couldn't find any DOM based XSS.
  2084. |_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
  2085. |_http-errors: Couldn't find any error pages.
  2086. |_http-feed: Couldn't find any feeds.
  2087. |_http-fetch: Please enter the complete path of the directory to save data in.
  2088. | http-headers:
  2089. | Server: nginx
  2090. | Date: Fri, 11 Oct 2019 04:03:16 GMT
  2091. | Content-Type: text/html
  2092. | Content-Length: 178
  2093. | Connection: close
  2094. | Location: https://en.hmb.gov.tr/
  2095. |
  2096. |_ (Request type: GET)
  2097. | http-internal-ip-disclosure:
  2098. |_ Internal IP Leaked: 10.128.10.36
  2099. |_http-jsonp-detection: Couldn't find any JSONP endpoints.
  2100. | http-methods:
  2101. |_ Supported Methods: GET HEAD POST OPTIONS
  2102. |_http-mobileversion-checker: No mobile version detected.
  2103. |_http-passwd: ERROR: Script execution failed (use -d to debug)
  2104. |_http-security-headers:
  2105. | http-sitemap-generator:
  2106. | Directory structure:
  2107. | Longest directory structure:
  2108. | Depth: 0
  2109. | Dir: /
  2110. | Total files found (by extension):
  2111. |_
  2112. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
  2113. |_http-title: Did not follow redirect to https://en.hmb.gov.tr/
  2114. | http-vhosts:
  2115. | 125 names had status 200
  2116. | www.hmb.gov.tr : 301 -> https://www.hmb.gov.tr/
  2117. |_en.hmb.gov.tr : 301 -> https://en.hmb.gov.tr/
  2118. |_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
  2119. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
  2120. |_http-xssed: No previously reported XSS vuln.
  2121. | vulscan: VulDB - https://vuldb.com:
  2122. | [133852] Sangfor Sundray WLAN Controller up to 3.7.4.2 Cookie Header nginx_webconsole.php Code Execution
  2123. | [132132] SoftNAS Cloud 4.2.0/4.2.1 Nginx privilege escalation
  2124. | [131858] Puppet Discovery up to 1.3.x Nginx Container weak authentication
  2125. | [130644] Nginx Unit up to 1.7.0 Router Process Request Heap-based memory corruption
  2126. | [127759] VeryNginx 0.3.3 Web Application Firewall privilege escalation
  2127. | [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
  2128. | [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
  2129. | [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
  2130. | [119845] Pivotal Operations Manager up to 2.0.13/2.1.5 Nginx privilege escalation
  2131. | [114368] SuSE Portus 2.3 Nginx Certificate weak authentication
  2132. | [103517] nginx up to 1.13.2 Range Filter Request Integer Overflow memory corruption
  2133. | [89849] nginx RFC 3875 Namespace Conflict Environment Variable Open Redirect
  2134. | [87719] nginx up to 1.11.0 ngx_files.c ngx_chain_to_iovec denial of service
  2135. | [80760] nginx 0.6.18/1.9.9 DNS CNAME Record Crash denial of service
  2136. | [80759] nginx 0.6.18/1.9.9 DNS CNAME Record Use-After-Free denial of service
  2137. | [80758] nginx 0.6.18/1.9.9 DNS UDP Packet Crash denial of service
  2138. | [67677] nginx up to 1.7.3 SSL weak authentication
  2139. | [67296] nginx up to 1.7.3 SMTP Proxy ngx_mail_smtp_starttls privilege escalation
  2140. | [12822] nginx up to 1.5.11 SPDY SPDY Request Heap-based memory corruption
  2141. | [12824] nginx 1.5.10 on 32-bit SPDY memory corruption
  2142. | [11237] nginx up to 1.5.6 URI String Bypass privilege escalation
  2143. | [65364] nginx up to 1.1.13 Default Configuration information disclosure
  2144. | [8671] nginx up to 1.4 proxy_pass denial of service
  2145. | [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
  2146. | [7247] nginx 1.2.6 Proxy Function spoofing
  2147. | [61434] nginx 1.2.0/1.3.0 on Windows Access Restriction privilege escalation
  2148. | [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
  2149. | [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
  2150. | [59645] nginx up to 0.8.9 Heap-based memory corruption
  2151. | [53592] nginx 0.8.36 memory corruption
  2152. | [53590] nginx up to 0.8.9 unknown vulnerability
  2153. | [51533] nginx 0.7.64 Terminal privilege escalation
  2154. | [50905] nginx up to 0.8.9 directory traversal
  2155. | [50903] nginx up to 0.8.10 NULL Pointer Dereference denial of service
  2156. | [50043] nginx up to 0.8.10 memory corruption
  2157. |
  2158. | MITRE CVE - https://cve.mitre.org:
  2159. | [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
  2160. | [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
  2161. | [CVE-2012-3380] Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
  2162. | [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
  2163. | [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
  2164. | [CVE-2011-4963] nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
  2165. | [CVE-2011-4315] Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
  2166. | [CVE-2010-2266] nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
  2167. | [CVE-2010-2263] nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
  2168. | [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
  2169. | [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
  2170. | [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
  2171. | [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
  2172. |
  2173. | SecurityFocus - https://www.securityfocus.com/bid/:
  2174. | [99534] Nginx CVE-2017-7529 Remote Integer Overflow Vulnerability
  2175. | [93903] Nginx CVE-2016-1247 Remote Privilege Escalation Vulnerability
  2176. | [91819] Nginx CVE-2016-1000105 Security Bypass Vulnerability
  2177. | [90967] nginx CVE-2016-4450 Denial of Service Vulnerability
  2178. | [82230] nginx Multiple Denial of Service Vulnerabilities
  2179. | [78928] Nginx CVE-2010-2266 Denial-Of-Service Vulnerability
  2180. | [70025] nginx CVE-2014-3616 SSL Session Fixation Vulnerability
  2181. | [69111] nginx SMTP Proxy Remote Command Injection Vulnerability
  2182. | [67507] nginx SPDY Implementation CVE-2014-0088 Arbitrary Code Execution Vulnerability
  2183. | [66537] nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability
  2184. | [63814] nginx CVE-2013-4547 URI Processing Security Bypass Vulnerability
  2185. | [59824] Nginx CVE-2013-2070 Remote Security Vulnerability
  2186. | [59699] nginx 'ngx_http_parse.c' Stack Buffer Overflow Vulnerability
  2187. | [59496] nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability
  2188. | [59323] nginx NULL-Byte Arbitrary Code Execution Vulnerability
  2189. | [58105] Nginx 'access.log' Insecure File Permissions Vulnerability
  2190. | [57139] nginx CVE-2011-4968 Man in The Middle Vulnerability
  2191. | [55920] nginx CVE-2011-4963 Security Bypass Vulnerability
  2192. | [54331] Nginx Naxsi Module 'nx_extract.py' Script Remote File Disclosure Vulnerability
  2193. | [52999] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  2194. | [52578] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  2195. | [50710] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  2196. | [40760] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  2197. | [40434] nginx Space String Remote Source Code Disclosure Vulnerability
  2198. | [40420] nginx Directory Traversal Vulnerability
  2199. | [37711] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  2200. | [36839] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  2201. | [36490] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  2202. | [36438] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  2203. | [36384] nginx HTTP Request Remote Buffer Overflow Vulnerability
  2204. |
  2205. | IBM X-Force - https://exchange.xforce.ibmcloud.com:
  2206. | [84623] Phusion Passenger gem for Ruby with nginx configuration insecure permissions
  2207. | [84172] nginx denial of service
  2208. | [84048] nginx buffer overflow
  2209. | [83923] nginx ngx_http_close_connection() integer overflow
  2210. | [83688] nginx null byte code execution
  2211. | [83103] Naxsi module for Nginx naxsi_unescape_uri() function security bypass
  2212. | [82319] nginx access.log information disclosure
  2213. | [80952] nginx SSL spoofing
  2214. | [77244] nginx and Microsoft Windows request security bypass
  2215. | [76778] Naxsi module for Nginx nx_extract.py directory traversal
  2216. | [74831] nginx ngx_http_mp4_module.c buffer overflow
  2217. | [74191] nginx ngx_cpystrn() information disclosure
  2218. | [74045] nginx header response information disclosure
  2219. | [71355] nginx ngx_resolver_copy() buffer overflow
  2220. | [59370] nginx characters denial of service
  2221. | [59369] nginx DATA source code disclosure
  2222. | [59047] nginx space source code disclosure
  2223. | [58966] nginx unspecified directory traversal
  2224. | [54025] nginx ngx_http_parse.c denial of service
  2225. | [53431] nginx WebDAV component directory traversal
  2226. | [53328] Nginx CRC-32 cached domain name spoofing
  2227. | [53250] Nginx ngx_http_parse_complex_uri() function code execution
  2228. |
  2229. | Exploit-DB - https://www.exploit-db.com:
  2230. | [26737] nginx 1.3.9/1.4.0 x86 Brute Force Remote Exploit
  2231. | [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
  2232. | [25499] nginx 1.3.9-1.4.0 DoS PoC
  2233. | [24967] nginx 0.6.x Arbitrary Code Execution NullByte Injection
  2234. | [14830] nginx 0.6.38 - Heap Corruption Exploit
  2235. | [13822] Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability
  2236. | [13818] Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities
  2237. | [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
  2238. | [9901] nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC
  2239. | [9829] nginx 0.7.61 WebDAV directory traversal
  2240. |
  2241. | OpenVAS (Nessus) - http://www.openvas.org:
  2242. | [864418] Fedora Update for nginx FEDORA-2012-3846
  2243. | [864310] Fedora Update for nginx FEDORA-2012-6238
  2244. | [864209] Fedora Update for nginx FEDORA-2012-6411
  2245. | [864204] Fedora Update for nginx FEDORA-2012-6371
  2246. | [864121] Fedora Update for nginx FEDORA-2012-4006
  2247. | [864115] Fedora Update for nginx FEDORA-2012-3991
  2248. | [864065] Fedora Update for nginx FEDORA-2011-16075
  2249. | [863654] Fedora Update for nginx FEDORA-2011-16110
  2250. | [861232] Fedora Update for nginx FEDORA-2007-1158
  2251. | [850180] SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
  2252. | [831680] Mandriva Update for nginx MDVSA-2012:043 (nginx)
  2253. | [802045] 64-bit Debian Linux Rootkit with nginx Doing iFrame Injection
  2254. | [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
  2255. | [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  2256. | [103469] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  2257. | [103344] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  2258. | [100676] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  2259. | [100659] nginx Directory Traversal Vulnerability
  2260. | [100658] nginx Space String Remote Source Code Disclosure Vulnerability
  2261. | [100441] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  2262. | [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  2263. | [100277] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  2264. | [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
  2265. | [100275] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  2266. | [71574] Gentoo Security Advisory GLSA 201206-07 (nginx)
  2267. | [71308] Gentoo Security Advisory GLSA 201203-22 (nginx)
  2268. | [71297] FreeBSD Ports: nginx
  2269. | [71276] FreeBSD Ports: nginx
  2270. | [71239] Debian Security Advisory DSA 2434-1 (nginx)
  2271. | [66451] Fedora Core 11 FEDORA-2009-12782 (nginx)
  2272. | [66450] Fedora Core 10 FEDORA-2009-12775 (nginx)
  2273. | [66449] Fedora Core 12 FEDORA-2009-12750 (nginx)
  2274. | [64924] Gentoo Security Advisory GLSA 200909-18 (nginx)
  2275. | [64912] Fedora Core 10 FEDORA-2009-9652 (nginx)
  2276. | [64911] Fedora Core 11 FEDORA-2009-9630 (nginx)
  2277. | [64894] FreeBSD Ports: nginx
  2278. | [64869] Debian Security Advisory DSA 1884-1 (nginx)
  2279. |
  2280. | SecurityTracker - https://www.securitytracker.com:
  2281. | [1028544] nginx Bug Lets Remote Users Deny Service or Obtain Potentially Sensitive Information
  2282. | [1028519] nginx Stack Overflow Lets Remote Users Execute Arbitrary Code
  2283. | [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
  2284. | [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
  2285. |
  2286. | OSVDB - http://www.osvdb.org:
  2287. | [94864] cPnginx Plugin for cPanel nginx Configuration Manipulation Arbitrary File Access
  2288. | [93282] nginx proxy_pass Crafted Upstream Proxied Server Response Handling Worker Process Memory Disclosure
  2289. | [93037] nginx /http/ngx_http_parse.c Worker Process Crafted Request Handling Remote Overflow
  2290. | [92796] nginx ngx_http_close_connection Function Crafted r-&gt
  2291. | [92634] nginx ngx_http_request.h zero_in_uri URL Null Byte Handling Remote Code Execution
  2292. | [90518] nginx Log Directory Permission Weakness Local Information Disclosure
  2293. | [88910] nginx Proxy Functionality SSL Certificate Validation MitM Spoofing Weakness
  2294. | [84339] nginx/Windows Multiple Request Sequence Parsing Arbitrary File Access
  2295. | [83617] Naxsi Module for Nginx naxsi-ui/ nx_extract.py Traversal Arbitrary File Access
  2296. | [81339] nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
  2297. | [80124] nginx HTTP Header Response Parsing Freed Memory Information Disclosure
  2298. | [77184] nginx ngx_resolver.c ngx_resolver_copy() Function DNS Response Parsing Remote Overflow
  2299. | [65531] nginx on Windows URI ::$DATA Append Arbitrary File Access
  2300. | [65530] nginx Encoded Traversal Sequence Memory Corruption Remote DoS
  2301. | [65294] nginx on Windows Encoded Space Request Remote Source Disclosure
  2302. | [63136] nginx on Windows 8.3 Filename Alias Request Access Rules / Authentication Bypass
  2303. | [62617] nginx Internal DNS Cache Poisoning Weakness
  2304. | [61779] nginx HTTP Request Escape Sequence Terminal Command Injection
  2305. | [59278] nginx src/http/ngx_http_parse.c ngx_http_process_request_headers() Function URL Handling NULL Dereference DoS
  2306. | [58328] nginx WebDAV Multiple Method Traversal Arbitrary File Write
  2307. | [58128] nginx ngx_http_parse_complex_uri() Function Underflow
  2308. | [44447] nginx (engine x) msie_refresh Directive Unspecified XSS
  2309. | [44446] nginx (engine x) ssl_verify_client Directive HTTP/0.9 Protocol Bypass
  2310. | [44445] nginx (engine x) ngx_http_realip_module satisfy_any Directive Unspecified Access Bypass
  2311. | [44444] nginx (engine x) X-Accel-Redirect Header Unspecified Traversal
  2312. | [44443] nginx (engine x) rtsig Method Signal Queue Overflow
  2313. | [44442] nginx (engine x) Worker Process Millisecond Timers Unspecified Overflow
  2314. |_
  2315. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  2316. Device type: general purpose
  2317. Running (JUST GUESSING): Linux 3.X|2.6.X|4.X (98%)
  2318. OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.0
  2319. Aggressive OS guesses: Linux 3.10 - 3.12 (98%), Linux 2.6.32 (90%), Linux 3.10 - 3.16 (90%), Linux 4.0 (90%), Linux 4.4 (89%), Linux 3.10 (88%)
  2320. No exact OS matches for host (test conditions non-ideal).
  2321. Uptime guess: 11.868 days (since Sun Sep 29 03:14:49 2019)
  2322. Network Distance: 25 hops
  2323. TCP Sequence Prediction: Difficulty=263 (Good luck!)
  2324. IP ID Sequence Generation: All zeros
  2325.  
  2326. TRACEROUTE (using port 80/tcp)
  2327. HOP RTT ADDRESS
  2328. 1 56.55 ms 10.249.204.1
  2329. 2 86.95 ms 104.245.145.161
  2330. 3 87.08 ms te0-0-2-1.225.nr11.b010988-1.yyz02.atlas.cogentco.com (38.104.156.9)
  2331. 4 87.06 ms te0-0-0-1.agr13.yyz02.atlas.cogentco.com (154.24.54.37)
  2332. 5 87.04 ms te0-9-0-9.ccr32.yyz02.atlas.cogentco.com (154.54.43.153)
  2333. 6 87.15 ms be2994.ccr22.cle04.atlas.cogentco.com (154.54.31.233)
  2334. 7 87.19 ms be2718.ccr42.ord01.atlas.cogentco.com (154.54.7.129)
  2335. 8 87.29 ms be2766.ccr41.ord03.atlas.cogentco.com (154.54.46.178)
  2336. 9 87.25 ms ae-11.r08.chcgil09.us.bb.gin.ntt.net (129.250.9.121)
  2337. 10 87.34 ms ae-0.r20.chcgil09.us.bb.gin.ntt.net (129.250.2.191)
  2338. 11 82.60 ms ae-0.r25.nycmny01.us.bb.gin.ntt.net (129.250.2.167)
  2339. 12 219.03 ms ae-9.r24.frnkge08.de.bb.gin.ntt.net (129.250.2.5)
  2340. 13 187.16 ms ae-1.r01.frnkge13.de.bb.gin.ntt.net (129.250.2.85)
  2341. 14 ... 18
  2342. 19 249.06 ms mta4-v14.buaslanmis.com (212.174.117.78)
  2343. 20 249.10 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  2344. 21 244.98 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  2345. 22 207.76 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  2346. 23 214.44 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  2347. 24 257.95 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  2348. 25 227.69 ms 212.174.188.50
  2349.  
  2350. NSE: Script Post-scanning.
  2351. Initiating NSE at 00:04
  2352. Completed NSE at 00:04, 0.00s elapsed
  2353. Initiating NSE at 00:04
  2354. Completed NSE at 00:04, 0.00s elapsed
  2355. Read data files from: /usr/bin/../share/nmap
  2356. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  2357. Nmap done: 1 IP address (1 host up) scanned in 90.51 seconds
  2358. Raw packets sent: 125 (10.636KB) | Rcvd: 51 (3.630KB)
  2359. ######################################################################################################################################
  2360. ------------------------------------------------------------------------------------------------------------------------
  2361.  
  2362. [ ! ] Starting SCANNER INURLBR 2.1 at [11-10-2019 00:04:59]
  2363. [ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
  2364. It is the end user's responsibility to obey all applicable local, state and federal laws.
  2365. Developers assume no liability and are not responsible for any misuse or damage caused by this program
  2366.  
  2367. [ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/loot/workspace/en.hmb.gov.tr/output/inurlbr-en.hmb.gov.tr ]
  2368. [ INFO ][ DORK ]::[ site:en.hmb.gov.tr ]
  2369. [ INFO ][ SEARCHING ]:: {
  2370. [ INFO ][ ENGINE ]::[ GOOGLE - www.google.gr ]
  2371.  
  2372. [ INFO ][ SEARCHING ]::
  2373. -[:::]
  2374. [ INFO ][ ENGINE ]::[ GOOGLE API ]
  2375.  
  2376. [ INFO ][ SEARCHING ]::
  2377. -[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
  2378. [ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.co.ck ID: 006688160405527839966:yhpefuwybre ]
  2379.  
  2380. [ INFO ][ SEARCHING ]::
  2381. -[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
  2382.  
  2383. [ INFO ][ TOTAL FOUND VALUES ]:: [ 100 ]
  2384.  
  2385.  
  2386. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2387. |_[ + ] [ 0 / 100 ]-[00:05:14] [ - ]
  2388. |_[ + ] Target:: [ https://en.hmb.gov.tr/ ]
  2389. |_[ + ] Exploit::
  2390. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2391. |_[ + ] More details:: / - / , ISP:
  2392. |_[ + ] Found:: UNIDENTIFIED
  2393.  
  2394. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2395. |_[ + ] [ 1 / 100 ]-[00:05:16] [ - ]
  2396. |_[ + ] Target:: [ https://en.hmb.gov.tr/awards ]
  2397. |_[ + ] Exploit::
  2398. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2399. |_[ + ] More details:: / - / , ISP:
  2400. |_[ + ] Found:: UNIDENTIFIED
  2401.  
  2402. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2403. |_[ + ] [ 2 / 100 ]-[00:05:17] [ - ]
  2404. |_[ + ] Target:: [ https://en.hmb.gov.tr/contact ]
  2405. |_[ + ] Exploit::
  2406. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2407. |_[ + ] More details:: / - / , ISP:
  2408. |_[ + ] Found:: UNIDENTIFIED
  2409.  
  2410. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2411. |_[ + ] [ 3 / 100 ]-[00:05:19] [ - ]
  2412. |_[ + ] Target:: [ https://en.hmb.gov.tr/municipalities ]
  2413. |_[ + ] Exploit::
  2414. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2415. |_[ + ] More details:: / - / , ISP:
  2416. |_[ + ] Found:: UNIDENTIFIED
  2417.  
  2418. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2419. |_[ + ] [ 4 / 100 ]-[00:05:21] [ - ]
  2420. |_[ + ] Target:: [ https://en.hmb.gov.tr/departments ]
  2421. |_[ + ] Exploit::
  2422. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2423. |_[ + ] More details:: / - / , ISP:
  2424. |_[ + ] Found:: UNIDENTIFIED
  2425.  
  2426. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2427. |_[ + ] [ 5 / 100 ]-[00:05:22] [ - ]
  2428. |_[ + ] Target:: [ https://en.hmb.gov.tr/disclaimer ]
  2429. |_[ + ] Exploit::
  2430. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2431. |_[ + ] More details:: / - / , ISP:
  2432. |_[ + ] Found:: UNIDENTIFIED
  2433.  
  2434. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2435. |_[ + ] [ 6 / 100 ]-[00:05:24] [ - ]
  2436. |_[ + ] Target:: [ https://en.hmb.gov.tr/insurance ]
  2437. |_[ + ] Exploit::
  2438. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2439. |_[ + ] More details:: / - / , ISP:
  2440. |_[ + ] Found:: UNIDENTIFIED
  2441.  
  2442. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2443. |_[ + ] [ 7 / 100 ]-[00:05:25] [ - ]
  2444. |_[ + ] Target:: [ https://en.hmb.gov.tr/mtp ]
  2445. |_[ + ] Exploit::
  2446. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2447. |_[ + ] More details:: / - / , ISP:
  2448. |_[ + ] Found:: UNIDENTIFIED
  2449.  
  2450. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2451. |_[ + ] [ 8 / 100 ]-[00:05:27] [ - ]
  2452. |_[ + ] Target:: [ https://en.hmb.gov.tr/minister ]
  2453. |_[ + ] Exploit::
  2454. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2455. |_[ + ] More details:: / - / , ISP:
  2456. |_[ + ] Found:: UNIDENTIFIED
  2457.  
  2458. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2459. |_[ + ] [ 9 / 100 ]-[00:05:28] [ - ]
  2460. |_[ + ] Target:: [ https://en.hmb.gov.tr/links ]
  2461. |_[ + ] Exploit::
  2462. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2463. |_[ + ] More details:: / - / , ISP:
  2464. |_[ + ] Found:: UNIDENTIFIED
  2465.  
  2466. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2467. |_[ + ] [ 10 / 100 ]-[00:05:30] [ - ]
  2468. |_[ + ] Target:: [ https://en.hmb.gov.tr/exchange ]
  2469. |_[ + ] Exploit::
  2470. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2471. |_[ + ] More details:: / - / , ISP:
  2472. |_[ + ] Found:: UNIDENTIFIED
  2473.  
  2474. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2475. |_[ + ] [ 11 / 100 ]-[00:05:32] [ - ]
  2476. |_[ + ] Target:: [ https://en.hmb.gov.tr/foreign-offices ]
  2477. |_[ + ] Exploit::
  2478. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2479. |_[ + ] More details:: / - / , ISP:
  2480. |_[ + ] Found:: UNIDENTIFIED
  2481.  
  2482. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2483. |_[ + ] [ 12 / 100 ]-[00:05:33] [ - ]
  2484. |_[ + ] Target:: [ https://en.hmb.gov.tr/iro-newsletter ]
  2485. |_[ + ] Exploit::
  2486. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2487. |_[ + ] More details:: / - / , ISP:
  2488. |_[ + ] Found:: UNIDENTIFIED
  2489.  
  2490. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2491. |_[ + ] [ 13 / 100 ]-[00:05:35] [ - ]
  2492. |_[ + ] Target:: [ https://en.hmb.gov.tr/public-finance ]
  2493. |_[ + ] Exploit::
  2494. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2495. |_[ + ] More details:: / - / , ISP:
  2496. |_[ + ] Found:: UNIDENTIFIED
  2497.  
  2498. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2499. |_[ + ] [ 14 / 100 ]-[00:05:36] [ - ]
  2500. |_[ + ] Target:: [ https://en.hmb.gov.tr/imf-relations ]
  2501. |_[ + ] Exploit::
  2502. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2503. |_[ + ] More details:: / - / , ISP:
  2504. |_[ + ] Found:: UNIDENTIFIED
  2505.  
  2506. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2507. |_[ + ] [ 15 / 100 ]-[00:05:37] [ - ]
  2508. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-books ]
  2509. |_[ + ] Exploit::
  2510. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2511. |_[ + ] More details:: / - / , ISP:
  2512. |_[ + ] Found:: UNIDENTIFIED
  2513.  
  2514. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2515. |_[ + ] [ 16 / 100 ]-[00:05:39] [ - ]
  2516. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-typologies ]
  2517. |_[ + ] Exploit::
  2518. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2519. |_[ + ] More details:: / - / , ISP:
  2520. |_[ + ] Found:: UNIDENTIFIED
  2521.  
  2522. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2523. |_[ + ] [ 17 / 100 ]-[00:05:41] [ - ]
  2524. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-sanctions ]
  2525. |_[ + ] Exploit::
  2526. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2527. |_[ + ] More details:: / - / , ISP:
  2528. |_[ + ] Found:: UNIDENTIFIED
  2529.  
  2530. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2531. |_[ + ] [ 18 / 100 ]-[00:05:42] [ - ]
  2532. |_[ + ] Target:: [ https://en.hmb.gov.tr/central-government ]
  2533. |_[ + ] Exploit::
  2534. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2535. |_[ + ] More details:: / - / , ISP:
  2536. |_[ + ] Found:: UNIDENTIFIED
  2537.  
  2538. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2539. |_[ + ] [ 19 / 100 ]-[00:05:44] [ - ]
  2540. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-guidelines ]
  2541. |_[ + ] Exploit::
  2542. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2543. |_[ + ] More details:: / - / , ISP:
  2544. |_[ + ] Found:: UNIDENTIFIED
  2545.  
  2546. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2547. |_[ + ] [ 20 / 100 ]-[00:05:45] [ - ]
  2548. |_[ + ] Target:: [ https://en.hmb.gov.tr/iro-announcements ]
  2549. |_[ + ] Exploit::
  2550. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2551. |_[ + ] More details:: / - / , ISP:
  2552. |_[ + ] Found:: UNIDENTIFIED
  2553.  
  2554. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2555. |_[ + ] [ 21 / 100 ]-[00:05:47] [ - ]
  2556. |_[ + ] Target:: [ https://en.hmb.gov.tr/iro-subscription ]
  2557. |_[ + ] Exploit::
  2558. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2559. |_[ + ] More details:: / - / , ISP:
  2560. |_[ + ] Found:: UNIDENTIFIED
  2561.  
  2562. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2563. |_[ + ] [ 22 / 100 ]-[00:05:48] [ - ]
  2564. |_[ + ] Target:: [ https://en.hmb.gov.tr/insurance-reports ]
  2565. |_[ + ] Exploit::
  2566. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2567. |_[ + ] More details:: / - / , ISP:
  2568. |_[ + ] Found:: UNIDENTIFIED
  2569.  
  2570. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2571. |_[ + ] [ 23 / 100 ]-[00:05:50] [ - ]
  2572. |_[ + ] Target:: [ https://en.hmb.gov.tr/treasury-law ]
  2573. |_[ + ] Exploit::
  2574. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2575. |_[ + ] More details:: / - / , ISP:
  2576. |_[ + ] Found:: UNIDENTIFIED
  2577.  
  2578. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2579. |_[ + ] [ 24 / 100 ]-[00:05:51] [ - ]
  2580. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-presentation ]
  2581. |_[ + ] Exploit::
  2582. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2583. |_[ + ] More details:: / - / , ISP:
  2584. |_[ + ] Found:: UNIDENTIFIED
  2585.  
  2586. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2587. |_[ + ] [ 25 / 100 ]-[00:05:53] [ - ]
  2588. |_[ + ] Target:: [ https://en.hmb.gov.tr/economic-indicators ]
  2589. |_[ + ] Exploit::
  2590. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2591. |_[ + ] More details:: / - / , ISP:
  2592. |_[ + ] Found:: UNIDENTIFIED
  2593.  
  2594. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2595. |_[ + ] [ 26 / 100 ]-[00:05:54] [ - ]
  2596. |_[ + ] Target:: [ https://en.hmb.gov.tr/credit-ratings ]
  2597. |_[ + ] Exploit::
  2598. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2599. |_[ + ] More details:: / - / , ISP:
  2600. |_[ + ] Found:: UNIDENTIFIED
  2601.  
  2602. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2603. |_[ + ] [ 27 / 100 ]-[00:05:56] [ - ]
  2604. |_[ + ] Target:: [ https://en.hmb.gov.tr/general-government ]
  2605. |_[ + ] Exploit::
  2606. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2607. |_[ + ] More details:: / - / , ISP:
  2608. |_[ + ] Found:: UNIDENTIFIED
  2609.  
  2610. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2611. |_[ + ] [ 28 / 100 ]-[00:05:58] [ - ]
  2612. |_[ + ] Target:: [ https://en.hmb.gov.tr/control-contacts ]
  2613. |_[ + ] Exploit::
  2614. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2615. |_[ + ] More details:: / - / , ISP:
  2616. |_[ + ] Found:: UNIDENTIFIED
  2617.  
  2618. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2619. |_[ + ] [ 29 / 100 ]-[00:05:59] [ - ]
  2620. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-dictionary ]
  2621. |_[ + ] Exploit::
  2622. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2623. |_[ + ] More details:: / - / , ISP:
  2624. |_[ + ] Found:: UNIDENTIFIED
  2625.  
  2626. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2627. |_[ + ] [ 30 / 100 ]-[00:06:01] [ - ]
  2628. |_[ + ] Target:: [ https://en.hmb.gov.tr/local-government ]
  2629. |_[ + ] Exploit::
  2630. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2631. |_[ + ] More details:: / - / , ISP:
  2632. |_[ + ] Found:: UNIDENTIFIED
  2633.  
  2634. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2635. |_[ + ] [ 31 / 100 ]-[00:06:02] [ - ]
  2636. |_[ + ] Target:: [ https://en.hmb.gov.tr/control-history ]
  2637. |_[ + ] Exploit::
  2638. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2639. |_[ + ] More details:: / - / , ISP:
  2640. |_[ + ] Found:: UNIDENTIFIED
  2641.  
  2642. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2643. |_[ + ] [ 32 / 100 ]-[00:06:04] [ - ]
  2644. |_[ + ] Target:: [ https://en.hmb.gov.tr/contact-us ]
  2645. |_[ + ] Exploit::
  2646. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2647. |_[ + ] More details:: / - / , ISP:
  2648. |_[ + ] Found:: UNIDENTIFIED
  2649.  
  2650. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2651. |_[ + ] [ 33 / 100 ]-[00:06:05] [ - ]
  2652. |_[ + ] Target:: [ https://en.hmb.gov.tr/sec-registrations ]
  2653. |_[ + ] Exploit::
  2654. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2655. |_[ + ] More details:: / - / , ISP:
  2656. |_[ + ] Found:: UNIDENTIFIED
  2657.  
  2658. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2659. |_[ + ] [ 34 / 100 ]-[00:06:07] [ - ]
  2660. |_[ + ] Target:: [ https://en.hmb.gov.tr/secondary-legislation ]
  2661. |_[ + ] Exploit::
  2662. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2663. |_[ + ] More details:: / - / , ISP:
  2664. |_[ + ] Found:: UNIDENTIFIED
  2665.  
  2666. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2667. |_[ + ] [ 35 / 100 ]-[00:06:08] [ - ]
  2668. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-str ]
  2669. |_[ + ] Exploit::
  2670. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2671. |_[ + ] More details:: / - / , ISP:
  2672. |_[ + ] Found:: UNIDENTIFIED
  2673.  
  2674. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2675. |_[ + ] [ 36 / 100 ]-[00:06:10] [ - ]
  2676. |_[ + ] Target:: [ https://en.hmb.gov.tr/insurance-legislation ]
  2677. |_[ + ] Exploit::
  2678. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2679. |_[ + ] More details:: / - / , ISP:
  2680. |_[ + ] Found:: UNIDENTIFIED
  2681.  
  2682. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2683. |_[ + ] [ 37 / 100 ]-[00:06:11] [ - ]
  2684. |_[ + ] Target:: [ https://en.hmb.gov.tr/metropolitan-municipalities ]
  2685. |_[ + ] Exploit::
  2686. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2687. |_[ + ] More details:: / - / , ISP:
  2688. |_[ + ] Found:: UNIDENTIFIED
  2689.  
  2690. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2691. |_[ + ] [ 38 / 100 ]-[00:06:13] [ - ]
  2692. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-projects ]
  2693. |_[ + ] Exploit::
  2694. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2695. |_[ + ] More details:: / - / , ISP:
  2696. |_[ + ] Found:: UNIDENTIFIED
  2697.  
  2698. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2699. |_[ + ] [ 39 / 100 ]-[00:06:14] [ - ]
  2700. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-chronology ]
  2701. |_[ + ] Exploit::
  2702. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2703. |_[ + ] More details:: / - / , ISP:
  2704. |_[ + ] Found:: UNIDENTIFIED
  2705.  
  2706. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2707. |_[ + ] [ 40 / 100 ]-[00:06:16] [ - ]
  2708. |_[ + ] Target:: [ https://en.hmb.gov.tr/iacb-projects ]
  2709. |_[ + ] Exploit::
  2710. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2711. |_[ + ] More details:: / - / , ISP:
  2712. |_[ + ] Found:: UNIDENTIFIED
  2713.  
  2714. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2715. |_[ + ] [ 41 / 100 ]-[00:06:17] [ - ]
  2716. |_[ + ] Target:: [ https://en.hmb.gov.tr/exchange-legislation ]
  2717. |_[ + ] Exploit::
  2718. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2719. |_[ + ] More details:: / - / , ISP:
  2720. |_[ + ] Found:: UNIDENTIFIED
  2721.  
  2722. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2723. |_[ + ] [ 42 / 100 ]-[00:06:19] [ - ]
  2724. |_[ + ] Target:: [ https://en.hmb.gov.tr/bulent-aksu ]
  2725. |_[ + ] Exploit::
  2726. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2727. |_[ + ] More details:: / - / , ISP:
  2728. |_[ + ] Found:: UNIDENTIFIED
  2729.  
  2730. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2731. |_[ + ] [ 43 / 100 ]-[00:06:21] [ - ]
  2732. |_[ + ] Target:: [ https://en.hmb.gov.tr/development-agencies ]
  2733. |_[ + ] Exploit::
  2734. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2735. |_[ + ] More details:: / - / , ISP:
  2736. |_[ + ] Found:: UNIDENTIFIED
  2737.  
  2738. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2739. |_[ + ] [ 44 / 100 ]-[00:06:22] [ - ]
  2740. |_[ + ] Target:: [ https://en.hmb.gov.tr/extrabudegetary-funds ]
  2741. |_[ + ] Exploit::
  2742. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2743. |_[ + ] More details:: / - / , ISP:
  2744. |_[ + ] Found:: UNIDENTIFIED
  2745.  
  2746. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2747. |_[ + ] [ 45 / 100 ]-[00:06:24] [ - ]
  2748. |_[ + ] Target:: [ https://en.hmb.gov.tr/control-tasks ]
  2749. |_[ + ] Exploit::
  2750. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2751. |_[ + ] More details:: / - / , ISP:
  2752. |_[ + ] Found:: UNIDENTIFIED
  2753.  
  2754. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2755. |_[ + ] [ 46 / 100 ]-[00:06:25] [ - ]
  2756. |_[ + ] Target:: [ https://en.hmb.gov.tr/iacb-publications ]
  2757. |_[ + ] Exploit::
  2758. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2759. |_[ + ] More details:: / - / , ISP:
  2760. |_[ + ] Found:: UNIDENTIFIED
  2761.  
  2762. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2763. |_[ + ] [ 47 / 100 ]-[00:06:27] [ - ]
  2764. |_[ + ] Target:: [ https://en.hmb.gov.tr/social-facilities ]
  2765. |_[ + ] Exploit::
  2766. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2767. |_[ + ] More details:: / - / , ISP:
  2768. |_[ + ] Found:: UNIDENTIFIED
  2769.  
  2770. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2771. |_[ + ] [ 48 / 100 ]-[00:06:28] [ - ]
  2772. |_[ + ] Target:: [ https://en.hmb.gov.tr/national-standarts ]
  2773. |_[ + ] Exploit::
  2774. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2775. |_[ + ] More details:: / - / , ISP:
  2776. |_[ + ] Found:: UNIDENTIFIED
  2777.  
  2778. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2779. |_[ + ] [ 49 / 100 ]-[00:06:30] [ - ]
  2780. |_[ + ] Target:: [ https://en.hmb.gov.tr/primary-legislation ]
  2781. |_[ + ] Exploit::
  2782. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2783. |_[ + ] More details:: / - / , ISP:
  2784. |_[ + ] Found:: UNIDENTIFIED
  2785.  
  2786. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2787. |_[ + ] [ 50 / 100 ]-[00:06:31] [ - ]
  2788. |_[ + ] Target:: [ https://en.hmb.gov.tr/investors-guides ]
  2789. |_[ + ] Exploit::
  2790. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2791. |_[ + ] More details:: / - / , ISP:
  2792. |_[ + ] Found:: UNIDENTIFIED
  2793.  
  2794. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2795. |_[ + ] [ 51 / 100 ]-[00:06:33] [ - ]
  2796. |_[ + ] Target:: [ https://en.hmb.gov.tr/tertiary-legislation ]
  2797. |_[ + ] Exploit::
  2798. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2799. |_[ + ] More details:: / - / , ISP:
  2800. |_[ + ] Found:: UNIDENTIFIED
  2801.  
  2802. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2803. |_[ + ] [ 52 / 100 ]-[00:06:35] [ - ]
  2804. |_[ + ] Target:: [ https://en.hmb.gov.tr/revolving-funds ]
  2805. |_[ + ] Exploit::
  2806. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2807. |_[ + ] More details:: / - / , ISP:
  2808. |_[ + ] Found:: UNIDENTIFIED
  2809.  
  2810. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2811. |_[ + ] [ 53 / 100 ]-[00:06:36] [ - ]
  2812. |_[ + ] Target:: [ https://en.hmb.gov.tr/debt-indicators ]
  2813. |_[ + ] Exploit::
  2814. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2815. |_[ + ] More details:: / - / , ISP:
  2816. |_[ + ] Found:: UNIDENTIFIED
  2817.  
  2818. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2819. |_[ + ] [ 54 / 100 ]-[00:06:37] [ - ]
  2820. |_[ + ] Target:: [ https://en.hmb.gov.tr/osman-dincbas ]
  2821. |_[ + ] Exploit::
  2822. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2823. |_[ + ] More details:: / - / , ISP:
  2824. |_[ + ] Found:: UNIDENTIFIED
  2825.  
  2826. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2827. |_[ + ] [ 55 / 100 ]-[00:06:39] [ - ]
  2828. |_[ + ] Target:: [ https://en.hmb.gov.tr/control-communication ]
  2829. |_[ + ] Exploit::
  2830. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2831. |_[ + ] More details:: / - / , ISP:
  2832. |_[ + ] Found:: UNIDENTIFIED
  2833.  
  2834. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2835. |_[ + ] [ 56 / 100 ]-[00:06:41] [ - ]
  2836. |_[ + ] Target:: [ https://en.hmb.gov.tr/wb-relations ]
  2837. |_[ + ] Exploit::
  2838. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2839. |_[ + ] More details:: / - / , ISP:
  2840. |_[ + ] Found:: UNIDENTIFIED
  2841.  
  2842. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2843. |_[ + ] [ 57 / 100 ]-[00:06:42] [ - ]
  2844. |_[ + ] Target:: [ https://en.hmb.gov.tr/duyuru/growth ]
  2845. |_[ + ] Exploit::
  2846. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2847. |_[ + ] More details:: / - / , ISP:
  2848. |_[ + ] Found:: UNIDENTIFIED
  2849.  
  2850. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2851. |_[ + ] [ 58 / 100 ]-[00:06:44] [ - ]
  2852. |_[ + ] Target:: [ https://en.hmb.gov.tr/international-relations ]
  2853. |_[ + ] Exploit::
  2854. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2855. |_[ + ] More details:: / - / , ISP:
  2856. |_[ + ] Found:: UNIDENTIFIED
  2857.  
  2858. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2859. |_[ + ] [ 59 / 100 ]-[00:06:45] [ - ]
  2860. |_[ + ] Target:: [ https://en.hmb.gov.tr/coordination-board ]
  2861. |_[ + ] Exploit::
  2862. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2863. |_[ + ] More details:: / - / , ISP:
  2864. |_[ + ] Found:: UNIDENTIFIED
  2865.  
  2866. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2867. |_[ + ] [ 60 / 100 ]-[00:06:47] [ - ]
  2868. |_[ + ] Target:: [ https://en.hmb.gov.tr/iacb-legislations ]
  2869. |_[ + ] Exploit::
  2870. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2871. |_[ + ] More details:: / - / , ISP:
  2872. |_[ + ] Found:: UNIDENTIFIED
  2873.  
  2874. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2875. |_[ + ] [ 61 / 100 ]-[00:06:48] [ - ]
  2876. |_[ + ] Target:: [ https://en.hmb.gov.tr/provincial-special-administrations ]
  2877. |_[ + ] Exploit::
  2878. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2879. |_[ + ] More details:: / - / , ISP:
  2880. |_[ + ] Found:: UNIDENTIFIED
  2881.  
  2882. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2883. |_[ + ] [ 62 / 100 ]-[00:06:50] [ - ]
  2884. |_[ + ] Target:: [ https://en.hmb.gov.tr/conference-and-seminars ]
  2885. |_[ + ] Exploit::
  2886. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2887. |_[ + ] More details:: / - / , ISP:
  2888. |_[ + ] Found:: UNIDENTIFIED
  2889.  
  2890. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2891. |_[ + ] [ 63 / 100 ]-[00:06:51] [ - ]
  2892. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-obliged-parties ]
  2893. |_[ + ] Exploit::
  2894. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2895. |_[ + ] More details:: / - / , ISP:
  2896. |_[ + ] Found:: UNIDENTIFIED
  2897.  
  2898. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2899. |_[ + ] [ 64 / 100 ]-[00:06:53] [ - ]
  2900. |_[ + ] Target:: [ https://en.hmb.gov.tr/investor-relations-office ]
  2901. |_[ + ] Exploit::
  2902. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2903. |_[ + ] More details:: / - / , ISP:
  2904. |_[ + ] Found:: UNIDENTIFIED
  2905.  
  2906. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2907. |_[ + ] [ 65 / 100 ]-[00:06:54] [ - ]
  2908. |_[ + ] Target:: [ https://en.hmb.gov.tr/general-budget-institutions ]
  2909. |_[ + ] Exploit::
  2910. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2911. |_[ + ] More details:: / - / , ISP:
  2912. |_[ + ] Found:: UNIDENTIFIED
  2913.  
  2914. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2915. |_[ + ] [ 66 / 100 ]-[00:06:56] [ - ]
  2916. |_[ + ] Target:: [ https://en.hmb.gov.tr/twinning-project-2 ]
  2917. |_[ + ] Exploit::
  2918. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2919. |_[ + ] More details:: / - / , ISP:
  2920. |_[ + ] Found:: UNIDENTIFIED
  2921.  
  2922. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2923. |_[ + ] [ 67 / 100 ]-[00:06:57] [ - ]
  2924. |_[ + ] Target:: [ https://en.hmb.gov.tr/data-release-calendar ]
  2925. |_[ + ] Exploit::
  2926. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2927. |_[ + ] More details:: / - / , ISP:
  2928. |_[ + ] Found:: UNIDENTIFIED
  2929.  
  2930. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2931. |_[ + ] [ 68 / 100 ]-[00:06:59] [ - ]
  2932. |_[ + ] Target:: [ https://en.hmb.gov.tr/social-security-institutions ]
  2933. |_[ + ] Exploit::
  2934. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2935. |_[ + ] More details:: / - / , ISP:
  2936. |_[ + ] Found:: UNIDENTIFIED
  2937.  
  2938. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2939. |_[ + ] [ 69 / 100 ]-[00:07:01] [ - ]
  2940. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-duties-powers ]
  2941. |_[ + ] Exploit::
  2942. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2943. |_[ + ] More details:: / - / , ISP:
  2944. |_[ + ] Found:: UNIDENTIFIED
  2945.  
  2946. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2947. |_[ + ] [ 70 / 100 ]-[00:07:02] [ - ]
  2948. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-activity-reports ]
  2949. |_[ + ] Exploit::
  2950. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2951. |_[ + ] More details:: / - / , ISP:
  2952. |_[ + ] Found:: UNIDENTIFIED
  2953.  
  2954. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2955. |_[ + ] [ 71 / 100 ]-[00:07:03] [ - ]
  2956. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-national-legistation ]
  2957. |_[ + ] Exploit::
  2958. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2959. |_[ + ] More details:: / - / , ISP:
  2960. |_[ + ] Found:: UNIDENTIFIED
  2961.  
  2962. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2963. |_[ + ] [ 72 / 100 ]-[00:07:05] [ - ]
  2964. |_[ + ] Target:: [ https://en.hmb.gov.tr/confidentiality-of-reporting ]
  2965. |_[ + ] Exploit::
  2966. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2967. |_[ + ] More details:: / - / , ISP:
  2968. |_[ + ] Found:: UNIDENTIFIED
  2969.  
  2970. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2971. |_[ + ] [ 73 / 100 ]-[00:07:06] [ - ]
  2972. |_[ + ] Target:: [ https://en.hmb.gov.tr/about-public-finance ]
  2973. |_[ + ] Exploit::
  2974. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2975. |_[ + ] More details:: / - / , ISP:
  2976. |_[ + ] Found:: UNIDENTIFIED
  2977.  
  2978. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2979. |_[ + ] [ 74 / 100 ]-[00:07:08] [ - ]
  2980. |_[ + ] Target:: [ https://en.hmb.gov.tr/special-budget-institutions ]
  2981. |_[ + ] Exploit::
  2982. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2983. |_[ + ] More details:: / - / , ISP:
  2984. |_[ + ] Found:: UNIDENTIFIED
  2985.  
  2986. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2987. |_[ + ] [ 75 / 100 ]-[00:07:10] [ - ]
  2988. |_[ + ] Target:: [ https://en.hmb.gov.tr/iro-main-indicator ]
  2989. |_[ + ] Exploit::
  2990. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2991. |_[ + ] More details:: / - / , ISP:
  2992. |_[ + ] Found:: UNIDENTIFIED
  2993.  
  2994. _[ - ]::--------------------------------------------------------------------------------------------------------------
  2995. |_[ + ] [ 76 / 100 ]-[00:07:11] [ - ]
  2996. |_[ + ] Target:: [ https://en.hmb.gov.tr/presentations-conference-calls ]
  2997. |_[ + ] Exploit::
  2998. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  2999. |_[ + ] More details:: / - / , ISP:
  3000. |_[ + ] Found:: UNIDENTIFIED
  3001.  
  3002. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3003. |_[ + ] [ 77 / 100 ]-[00:07:13] [ - ]
  3004. |_[ + ] Target:: [ https://en.hmb.gov.tr/information-for-investors ]
  3005. |_[ + ] Exploit::
  3006. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3007. |_[ + ] More details:: / - / , ISP:
  3008. |_[ + ] Found:: UNIDENTIFIED
  3009.  
  3010. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3011. |_[ + ] [ 78 / 100 ]-[00:07:14] [ - ]
  3012. |_[ + ] Target:: [ https://en.hmb.gov.tr/frequently-asked-questions ]
  3013. |_[ + ] Exploit::
  3014. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3015. |_[ + ] More details:: / - / , ISP:
  3016. |_[ + ] Found:: UNIDENTIFIED
  3017.  
  3018. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3019. |_[ + ] [ 79 / 100 ]-[00:07:16] [ - ]
  3020. |_[ + ] Target:: [ https://en.hmb.gov.tr/suspicious-transactions-types ]
  3021. |_[ + ] Exploit::
  3022. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3023. |_[ + ] More details:: / - / , ISP:
  3024. |_[ + ] Found:: UNIDENTIFIED
  3025.  
  3026. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3027. |_[ + ] [ 80 / 100 ]-[00:07:17] [ - ]
  3028. |_[ + ] Target:: [ https://en.hmb.gov.tr/investor-protection-measures ]
  3029. |_[ + ] Exploit::
  3030. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3031. |_[ + ] More details:: / - / , ISP:
  3032. |_[ + ] Found:: UNIDENTIFIED
  3033.  
  3034. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3035. |_[ + ] [ 81 / 100 ]-[00:07:19] [ - ]
  3036. |_[ + ] Target:: [ https://en.hmb.gov.tr/government-finance-statistics ]
  3037. |_[ + ] Exploit::
  3038. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3039. |_[ + ] More details:: / - / , ISP:
  3040. |_[ + ] Found:: UNIDENTIFIED
  3041.  
  3042. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3043. |_[ + ] [ 82 / 100 ]-[00:07:21] [ - ]
  3044. |_[ + ] Target:: [ https://en.hmb.gov.tr/it-modernization-program ]
  3045. |_[ + ] Exploit::
  3046. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3047. |_[ + ] More details:: / - / , ISP:
  3048. |_[ + ] Found:: UNIDENTIFIED
  3049.  
  3050. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3051. |_[ + ] [ 83 / 100 ]-[00:07:22] [ - ]
  3052. |_[ + ] Target:: [ https://en.hmb.gov.tr/local-government-unions ]
  3053. |_[ + ] Exploit::
  3054. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3055. |_[ + ] More details:: / - / , ISP:
  3056. |_[ + ] Found:: UNIDENTIFIED
  3057.  
  3058. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3059. |_[ + ] [ 84 / 100 ]-[00:07:24] [ - ]
  3060. |_[ + ] Target:: [ https://en.hmb.gov.tr/primary-dealership-system ]
  3061. |_[ + ] Exploit::
  3062. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3063. |_[ + ] More details:: / - / , ISP:
  3064. |_[ + ] Found:: UNIDENTIFIED
  3065.  
  3066. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3067. |_[ + ] [ 85 / 100 ]-[00:07:26] [ - ]
  3068. |_[ + ] Target:: [ https://en.hmb.gov.tr/duyuru/duty-losses ]
  3069. |_[ + ] Exploit::
  3070. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3071. |_[ + ] More details:: / - / , ISP:
  3072. |_[ + ] Found:: UNIDENTIFIED
  3073.  
  3074. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3075. |_[ + ] [ 86 / 100 ]-[00:07:27] [ - ]
  3076. |_[ + ] Target:: [ https://en.hmb.gov.tr/state-owned-enterprises ]
  3077. |_[ + ] Exploit::
  3078. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3079. |_[ + ] More details:: / - / , ISP:
  3080. |_[ + ] Found:: UNIDENTIFIED
  3081.  
  3082. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3083. |_[ + ] [ 87 / 100 ]-[00:07:29] [ - ]
  3084. |_[ + ] Target:: [ https://en.hmb.gov.tr/extrabudegetary-other-institutions ]
  3085. |_[ + ] Exploit::
  3086. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3087. |_[ + ] More details:: / - / , ISP:
  3088. |_[ + ] Found:: UNIDENTIFIED
  3089.  
  3090. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3091. |_[ + ] [ 88 / 100 ]-[00:07:30] [ - ]
  3092. |_[ + ] Target:: [ https://en.hmb.gov.tr/duyuru/press-statement ]
  3093. |_[ + ] Exploit::
  3094. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3095. |_[ + ] More details:: / - / , ISP:
  3096. |_[ + ] Found:: UNIDENTIFIED
  3097.  
  3098. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3099. |_[ + ] [ 89 / 100 ]-[00:07:32] [ - ]
  3100. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-vision-mission ]
  3101. |_[ + ] Exploit::
  3102. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3103. |_[ + ] More details:: / - / , ISP:
  3104. |_[ + ] Found:: UNIDENTIFIED
  3105.  
  3106. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3107. |_[ + ] [ 90 / 100 ]-[00:07:33] [ - ]
  3108. |_[ + ] Target:: [ https://en.hmb.gov.tr/duyuru/2017-financing_program ]
  3109. |_[ + ] Exploit::
  3110. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3111. |_[ + ] More details:: / - / , ISP:
  3112. |_[ + ] Found:: UNIDENTIFIED
  3113.  
  3114. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3115. |_[ + ] [ 91 / 100 ]-[00:07:35] [ - ]
  3116. |_[ + ] Target:: [ https://en.hmb.gov.tr/internal-control-standarts ]
  3117. |_[ + ] Exploit::
  3118. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3119. |_[ + ] More details:: / - / , ISP:
  3120. |_[ + ] Found:: UNIDENTIFIED
  3121.  
  3122. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3123. |_[ + ] [ 92 / 100 ]-[00:07:36] [ - ]
  3124. |_[ + ] Target:: [ https://en.hmb.gov.tr/internal-audit-standarts ]
  3125. |_[ + ] Exploit::
  3126. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3127. |_[ + ] More details:: / - / , ISP:
  3128. |_[ + ] Found:: UNIDENTIFIED
  3129.  
  3130. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3131. |_[ + ] [ 93 / 100 ]-[00:07:38] [ - ]
  3132. |_[ + ] Target:: [ https://en.hmb.gov.tr/en-US/Mainpage ]
  3133. |_[ + ] Exploit::
  3134. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3135. |_[ + ] More details:: / - / , ISP:
  3136. |_[ + ] Found:: UNIDENTIFIED
  3137.  
  3138. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3139. |_[ + ] [ 94 / 100 ]-[00:07:40] [ - ]
  3140. |_[ + ] Target:: [ https://en.hmb.gov.tr/phd-nureddin-nebati ]
  3141. |_[ + ] Exploit::
  3142. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3143. |_[ + ] More details:: / - / , ISP:
  3144. |_[ + ] Found:: UNIDENTIFIED
  3145.  
  3146. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3147. |_[ + ] [ 95 / 100 ]-[00:07:41] [ - ]
  3148. |_[ + ] Target:: [ https://en.hmb.gov.tr/debt-management-legislation ]
  3149. |_[ + ] Exploit::
  3150. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3151. |_[ + ] More details:: / - / , ISP:
  3152. |_[ + ] Found:: UNIDENTIFIED
  3153.  
  3154. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3155. |_[ + ] [ 96 / 100 ]-[00:07:43] [ - ]
  3156. |_[ + ] Target:: [ https://en.hmb.gov.tr/world-bank-projects ]
  3157. |_[ + ] Exploit::
  3158. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3159. |_[ + ] More details:: / - / , ISP:
  3160. |_[ + ] Found:: UNIDENTIFIED
  3161.  
  3162. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3163. |_[ + ] [ 97 / 100 ]-[00:07:44] [ - ]
  3164. |_[ + ] Target:: [ https://en.hmb.gov.tr/business-angel-scheme ]
  3165. |_[ + ] Exploit::
  3166. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3167. |_[ + ] More details:: / - / , ISP:
  3168. |_[ + ] Found:: UNIDENTIFIED
  3169.  
  3170. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3171. |_[ + ] [ 98 / 100 ]-[00:07:46] [ - ]
  3172. |_[ + ] Target:: [ https://en.hmb.gov.tr/turkish-economy ]
  3173. |_[ + ] Exploit::
  3174. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3175. |_[ + ] More details:: / - / , ISP:
  3176. |_[ + ] Found:: UNIDENTIFIED
  3177.  
  3178. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3179. |_[ + ] [ 99 / 100 ]-[00:07:47] [ - ]
  3180. |_[ + ] Target:: [ https://en.hmb.gov.tr/experience-sharing-program ]
  3181. |_[ + ] Exploit::
  3182. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3183. |_[ + ] More details:: / - / , ISP:
  3184. |_[ + ] Found:: UNIDENTIFIED
  3185.  
  3186. [ INFO ] [ Shutting down ]
  3187. [ INFO ] [ End of process INURLBR at [11-10-2019 00:07:47]
  3188. [ INFO ] [ TOTAL FILTERED VALUES ]:: [ 0 ]
  3189. [ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/loot/workspace/en.hmb.gov.tr/output/inurlbr-en.hmb.gov.tr ]
  3190. #######################################################################################################################################
  3191. HTTP/1.1 200 OK
  3192. Server: nginx
  3193. Date: Fri, 11 Oct 2019 04:07:12 GMT
  3194. Content-Type: text/html
  3195. Content-Length: 6199
  3196. Last-Modified: Mon, 07 Oct 2019 13:24:44 GMT
  3197. Connection: keep-alive
  3198. ETag: "5d9b3c9c-1837"
  3199. Accept-Ranges: bytes
  3200. #######################################################################################################################################
  3201.  
  3202. wig - WebApp Information Gatherer
  3203.  
  3204.  
  3205. Scanning https://en.hmb.gov.tr...
  3206. ____________________ SITE INFO _____________________
  3207. IP Title
  3208. 212.174.188.50 T.C. Hazine ve Maliye Bakanlığı
  3209.  
  3210. _____________________ VERSION ______________________
  3211. Name Versions Type
  3212. nginx Platform
  3213.  
  3214. ___________________ INTERESTING ____________________
  3215. URL Note Type
  3216. /robots.txt robots.txt index Interesting
  3217.  
  3218. ____________________________________________________
  3219. Time: 1.7 sec Urls: 629 Fingerprints: 40401
  3220. #######################################################################################################################################
  3221. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-11 00:08 EDT
  3222. NSE: Loaded 163 scripts for scanning.
  3223. NSE: Script Pre-scanning.
  3224. Initiating NSE at 00:08
  3225. Completed NSE at 00:08, 0.00s elapsed
  3226. Initiating NSE at 00:08
  3227. Completed NSE at 00:08, 0.00s elapsed
  3228. Initiating Parallel DNS resolution of 1 host. at 00:08
  3229. Completed Parallel DNS resolution of 1 host. at 00:08, 10.38s elapsed
  3230. Initiating SYN Stealth Scan at 00:08
  3231. Scanning en.hmb.gov.tr (212.174.188.50) [1 port]
  3232. Discovered open port 443/tcp on 212.174.188.50
  3233. Completed SYN Stealth Scan at 00:08, 0.25s elapsed (1 total ports)
  3234. Initiating Service scan at 00:08
  3235. Scanning 1 service on en.hmb.gov.tr (212.174.188.50)
  3236. Completed Service scan at 00:08, 13.45s elapsed (1 service on 1 host)
  3237. Initiating OS detection (try #1) against en.hmb.gov.tr (212.174.188.50)
  3238. Initiating Traceroute at 00:08
  3239. Completed Traceroute at 00:08, 0.60s elapsed
  3240. Initiating Parallel DNS resolution of 21 hosts. at 00:08
  3241. Completed Parallel DNS resolution of 21 hosts. at 00:08, 6.22s elapsed
  3242. NSE: Script scanning 212.174.188.50.
  3243. Initiating NSE at 00:08
  3244. Completed NSE at 00:13, 293.70s elapsed
  3245. Initiating NSE at 00:13
  3246. Completed NSE at 00:13, 2.53s elapsed
  3247. Nmap scan report for en.hmb.gov.tr (212.174.188.50)
  3248. Host is up (0.22s latency).
  3249.  
  3250. PORT STATE SERVICE VERSION
  3251. 443/tcp open ssl/http nginx
  3252. | http-backup-finder:
  3253. | Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=en.hmb.gov.tr
  3254. | https://en.hmb.gov.tr:443/assets/vendor-762733947933133dc078a17ae6569f64.bak
  3255. | https://en.hmb.gov.tr:443/assets/vendor-762733947933133dc078a17ae6569f64.js~
  3256. | https://en.hmb.gov.tr:443/assets/vendor-762733947933133dc078a17ae6569f64 copy.js
  3257. | https://en.hmb.gov.tr:443/assets/Copy of vendor-762733947933133dc078a17ae6569f64.js
  3258. | https://en.hmb.gov.tr:443/assets/Copy (2) of vendor-762733947933133dc078a17ae6569f64.js
  3259. | https://en.hmb.gov.tr:443/assets/vendor-762733947933133dc078a17ae6569f64.js.1
  3260. | https://en.hmb.gov.tr:443/assets/vendor-762733947933133dc078a17ae6569f64.js.~1~
  3261. | https://en.hmb.gov.tr:443/assets/hmb-frontend-ec89b55213b506c267824d367414b1c1.bak
  3262. | https://en.hmb.gov.tr:443/assets/hmb-frontend-ec89b55213b506c267824d367414b1c1.js~
  3263. | https://en.hmb.gov.tr:443/assets/hmb-frontend-ec89b55213b506c267824d367414b1c1 copy.js
  3264. | https://en.hmb.gov.tr:443/assets/Copy of hmb-frontend-ec89b55213b506c267824d367414b1c1.js
  3265. | https://en.hmb.gov.tr:443/assets/Copy (2) of hmb-frontend-ec89b55213b506c267824d367414b1c1.js
  3266. | https://en.hmb.gov.tr:443/assets/hmb-frontend-ec89b55213b506c267824d367414b1c1.js.1
  3267. | https://en.hmb.gov.tr:443/assets/hmb-frontend-ec89b55213b506c267824d367414b1c1.js.~1~
  3268. | https://en.hmb.gov.tr:443/yandex-browser-manifest.bak
  3269. | https://en.hmb.gov.tr:443/yandex-browser-manifest.json~
  3270. | https://en.hmb.gov.tr:443/yandex-browser-manifest copy.json
  3271. | https://en.hmb.gov.tr:443/Copy of yandex-browser-manifest.json
  3272. | https://en.hmb.gov.tr:443/Copy (2) of yandex-browser-manifest.json
  3273. | https://en.hmb.gov.tr:443/yandex-browser-manifest.json.1
  3274. | https://en.hmb.gov.tr:443/yandex-browser-manifest.json.~1~
  3275. | https://en.hmb.gov.tr:443/manifest.bak
  3276. | https://en.hmb.gov.tr:443/manifest.json~
  3277. | https://en.hmb.gov.tr:443/manifest copy.json
  3278. | https://en.hmb.gov.tr:443/Copy of manifest.json
  3279. | https://en.hmb.gov.tr:443/Copy (2) of manifest.json
  3280. | https://en.hmb.gov.tr:443/manifest.json.1
  3281. | https://en.hmb.gov.tr:443/manifest.json.~1~
  3282. | https://en.hmb.gov.tr:443/assets/hmb-frontend-2c611e0d3ec71128aed8724251b0a93a.bak
  3283. | https://en.hmb.gov.tr:443/assets/hmb-frontend-2c611e0d3ec71128aed8724251b0a93a.css~
  3284. | https://en.hmb.gov.tr:443/assets/hmb-frontend-2c611e0d3ec71128aed8724251b0a93a copy.css
  3285. | https://en.hmb.gov.tr:443/assets/Copy of hmb-frontend-2c611e0d3ec71128aed8724251b0a93a.css
  3286. | https://en.hmb.gov.tr:443/assets/Copy (2) of hmb-frontend-2c611e0d3ec71128aed8724251b0a93a.css
  3287. | https://en.hmb.gov.tr:443/assets/hmb-frontend-2c611e0d3ec71128aed8724251b0a93a.css.1
  3288. | https://en.hmb.gov.tr:443/assets/hmb-frontend-2c611e0d3ec71128aed8724251b0a93a.css.~1~
  3289. | https://en.hmb.gov.tr:443/assets/vendor-2874a984551b4c780366c120d51dd084.bak
  3290. | https://en.hmb.gov.tr:443/assets/vendor-2874a984551b4c780366c120d51dd084.css~
  3291. | https://en.hmb.gov.tr:443/assets/vendor-2874a984551b4c780366c120d51dd084 copy.css
  3292. | https://en.hmb.gov.tr:443/assets/Copy of vendor-2874a984551b4c780366c120d51dd084.css
  3293. | https://en.hmb.gov.tr:443/assets/Copy (2) of vendor-2874a984551b4c780366c120d51dd084.css
  3294. | https://en.hmb.gov.tr:443/assets/vendor-2874a984551b4c780366c120d51dd084.css.1
  3295. | https://en.hmb.gov.tr:443/assets/vendor-2874a984551b4c780366c120d51dd084.css.~1~
  3296. | https://en.hmb.gov.tr:443/favicon.bak
  3297. | https://en.hmb.gov.tr:443/favicon.ico~
  3298. | https://en.hmb.gov.tr:443/favicon copy.ico
  3299. | https://en.hmb.gov.tr:443/Copy of favicon.ico
  3300. | https://en.hmb.gov.tr:443/Copy (2) of favicon.ico
  3301. | https://en.hmb.gov.tr:443/favicon.ico.1
  3302. |_ https://en.hmb.gov.tr:443/favicon.ico.~1~
  3303. | http-brute:
  3304. |_ Path "/" does not require authentication
  3305. | http-cakephp-version: Version of codebase: 1.3.x
  3306. | Version of icons: 1.3.x
  3307. |_Default stylesheet has an unknown hash: b91692eed697bfce6e07bd7c3b7b7df1
  3308. |_http-chrono: Request times for /; avg: 1197.10ms; min: 1143.56ms; max: 1268.02ms
  3309. |_http-config-backup: ERROR: Script execution failed (use -d to debug)
  3310. |_http-csrf: Couldn't find any CSRF vulnerabilities.
  3311. |_http-date: Fri, 11 Oct 2019 04:08:09 GMT; -40s from local time.
  3312. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
  3313. |_http-dombased-xss: Couldn't find any DOM based XSS.
  3314. |_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
  3315. |_http-errors: Couldn't find any error pages.
  3316. |_http-feed: Couldn't find any feeds.
  3317. |_http-fetch: Please enter the complete path of the directory to save data in.
  3318. | http-headers:
  3319. | Server: nginx
  3320. | Date: Fri, 11 Oct 2019 04:08:15 GMT
  3321. | Content-Type: text/html
  3322. | Content-Length: 6199
  3323. | Last-Modified: Mon, 07 Oct 2019 13:24:44 GMT
  3324. | Connection: close
  3325. | ETag: "5d9b3c9c-1837"
  3326. | Accept-Ranges: bytes
  3327. |
  3328. |_ (Request type: HEAD)
  3329. |_http-jsonp-detection: Couldn't find any JSONP endpoints.
  3330. |_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
  3331. | http-methods:
  3332. |_ Supported Methods: GET HEAD
  3333. |_http-mobileversion-checker: No mobile version detected.
  3334. | http-php-version: Logo query returned unknown hash b91692eed697bfce6e07bd7c3b7b7df1
  3335. |_Credits query returned unknown hash b91692eed697bfce6e07bd7c3b7b7df1
  3336. | http-security-headers:
  3337. | Strict_Transport_Security:
  3338. |_ HSTS not configured in HTTPS Server
  3339. | http-sitemap-generator:
  3340. | Directory structure:
  3341. | /
  3342. | Other: 1; json: 1; png: 15
  3343. | /assets/
  3344. | css: 1; js: 2
  3345. | Longest directory structure:
  3346. | Depth: 1
  3347. | Dir: /assets/
  3348. | Total files found (by extension):
  3349. |_ Other: 1; css: 1; js: 2; json: 1; png: 15
  3350. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
  3351. |_http-title: 400 The plain HTTP request was sent to HTTPS port
  3352. |_http-trane-info: Problem with XML parsing of /evox/about
  3353. |_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test
  3354. | http-vhosts:
  3355. |_127 names had status 200
  3356. | http-vuln-cve2010-0738:
  3357. |_ /jmx-console/: Authentication was not required
  3358. | http-vuln-cve2011-3192:
  3359. | VULNERABLE:
  3360. | Apache byterange filter DoS
  3361. | State: VULNERABLE
  3362. | IDs: BID:49303 CVE:CVE-2011-3192
  3363. | The Apache web server is vulnerable to a denial of service attack when numerous
  3364. | overlapping byte ranges are requested.
  3365. | Disclosure date: 2011-08-19
  3366. | References:
  3367. | https://seclists.org/fulldisclosure/2011/Aug/175
  3368. | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192
  3369. | https://www.tenable.com/plugins/nessus/55976
  3370. |_ https://www.securityfocus.com/bid/49303
  3371. |_http-vuln-cve2017-1001000: ERROR: Script execution failed (use -d to debug)
  3372. | http-wordpress-enum:
  3373. | Search limited to top 100 themes/plugins
  3374. | plugins
  3375. | akismet
  3376. | contact-form-7
  3377. | wordpress-seo
  3378. | jetpack
  3379. | all-in-one-seo-pack
  3380. | wordfence
  3381. | woocommerce
  3382. | google-sitemap-generator
  3383. | wordpress-importer
  3384. | nextgen-gallery
  3385. | google-analytics-for-wordpress
  3386. | wp-super-cache
  3387. | tinymce-advanced
  3388. | wptouch
  3389. | better-wp-security
  3390. | siteorigin-panels
  3391. | updraftplus
  3392. | w3-total-cache
  3393. | google-analytics-dashboard-for-wp
  3394. | wp-pagenavi
  3395. | si-contact-form
  3396. | advanced-custom-fields
  3397. | mailchimp-for-wp
  3398. | the-events-calendar
  3399. | add-to-any
  3400. | duplicator
  3401. | wysija-newsletters
  3402. | ninja-forms
  3403. | wp-smushit
  3404. | buddypress
  3405. | ewww-image-optimizer
  3406. | so-widgets-bundle
  3407. | really-simple-captcha
  3408. | ml-slider
  3409. | black-studio-tinymce-widget
  3410. | photo-gallery
  3411. | broken-link-checker
  3412. | regenerate-thumbnails
  3413. | google-analyticator
  3414. | redirection
  3415. | captcha
  3416. | duplicate-post
  3417. | breadcrumb-navxt
  3418. | backwpup
  3419. | user-role-editor
  3420. | yet-another-related-posts-plugin
  3421. | contact-form-plugin
  3422. | newsletter
  3423. | bbpress
  3424. | all-in-one-wp-security-and-firewall
  3425. | disable-comments
  3426. | social-networks-auto-poster-facebook-twitter-g
  3427. | wp-optimize
  3428. | addthis
  3429. | wp-statistics
  3430. | wp-e-commerce
  3431. | all-in-one-wp-migration
  3432. | backupwordpress
  3433. | si-captcha-for-wordpress
  3434. | wp-slimstat
  3435. | wp-google-maps
  3436. | wp-spamshield
  3437. | wp-maintenance-mode
  3438. | googleanalytics
  3439. | worker
  3440. | yith-woocommerce-wishlist
  3441. | wp-multibyte-patch
  3442. | wp-to-twitter
  3443. | image-widget
  3444. | wp-db-backup
  3445. | shortcodes-ultimate
  3446. | ultimate-tinymce
  3447. | share-this
  3448. | disqus-comment-system
  3449. | gallery-bank
  3450. | types
  3451. | wp-polls
  3452. | custom-post-type-ui
  3453. | shareaholic
  3454. | polylang
  3455. | post-types-order
  3456. | gtranslate
  3457. | bulletproof-security
  3458. | wp-fastest-cache
  3459. | facebook
  3460. | sociable
  3461. | iwp-client
  3462. | nextgen-facebook
  3463. | seo-ultimate
  3464. | wp-postviews
  3465. | formidable
  3466. | squirrly-seo
  3467. | wp-mail-smtp
  3468. | tablepress
  3469. | redux-framework
  3470. | page-links-to
  3471. | youtube-embed-plus
  3472. | contact-bank
  3473. | maintenance
  3474. | wp-retina-2x
  3475. | themes
  3476. | twentyeleven
  3477. | twentytwelve
  3478. | twentyten
  3479. | twentythirteen
  3480. | twentyfourteen
  3481. | twentyfifteen
  3482. | responsive
  3483. | customizr
  3484. | zerif-lite
  3485. | virtue
  3486. | storefront
  3487. | atahualpa
  3488. | twentysixteen
  3489. | vantage
  3490. | hueman
  3491. | spacious
  3492. | evolve
  3493. | colorway
  3494. | graphene
  3495. | sydney
  3496. | ifeature
  3497. | mh-magazine-lite
  3498. | generatepress
  3499. | mantra
  3500. | omega
  3501. | onetone
  3502. | coraline
  3503. | pinboard
  3504. | thematic
  3505. | sparkling
  3506. | catch-box
  3507. | make
  3508. | colormag
  3509. | enigma
  3510. | custom-community
  3511. | mystique
  3512. | alexandria
  3513. | delicate
  3514. | lightword
  3515. | attitude
  3516. | inove
  3517. | magazine-basic
  3518. | raindrops
  3519. | minamaze
  3520. | zbench
  3521. | point
  3522. | eclipse
  3523. | portfolio-press
  3524. | twentyseventeen
  3525. | travelify
  3526. | swift-basic
  3527. | iconic-one
  3528. | arcade-basic
  3529. | bouquet
  3530. | pixel
  3531. | sliding-door
  3532. | pilcrow
  3533. | simple-catch
  3534. | tempera
  3535. | destro
  3536. | p2
  3537. | sunspot
  3538. | sundance
  3539. | dusk-to-dawn
  3540. | onepress
  3541. | moesia
  3542. | dynamic-news-lite
  3543. | parabola
  3544. | parament
  3545. | dazzling
  3546. | accesspress-lite
  3547. | optimizer
  3548. | one-page
  3549. | chaostheory
  3550. | business-lite
  3551. | duster
  3552. | constructor
  3553. | nirvana
  3554. | sixteen
  3555. | esquire
  3556. | beach
  3557. | next-saturday
  3558. | flat
  3559. | hatch
  3560. | minimatica
  3561. | radiate
  3562. | accelerate
  3563. | oxygen
  3564. | accesspress-parallax
  3565. | swift
  3566. | spun
  3567. | wp-creativix
  3568. | suevafree
  3569. | hemingway
  3570. | pink-touch-2
  3571. | motion
  3572. | fruitful
  3573. | steira
  3574. | news
  3575. |_ llorix-one-lite
  3576. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
  3577. |_http-xssed: No previously reported XSS vuln.
  3578. | vulscan: VulDB - https://vuldb.com:
  3579. | [133852] Sangfor Sundray WLAN Controller up to 3.7.4.2 Cookie Header nginx_webconsole.php Code Execution
  3580. | [132132] SoftNAS Cloud 4.2.0/4.2.1 Nginx privilege escalation
  3581. | [131858] Puppet Discovery up to 1.3.x Nginx Container weak authentication
  3582. | [130644] Nginx Unit up to 1.7.0 Router Process Request Heap-based memory corruption
  3583. | [127759] VeryNginx 0.3.3 Web Application Firewall privilege escalation
  3584. | [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
  3585. | [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
  3586. | [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
  3587. | [119845] Pivotal Operations Manager up to 2.0.13/2.1.5 Nginx privilege escalation
  3588. | [114368] SuSE Portus 2.3 Nginx Certificate weak authentication
  3589. | [103517] nginx up to 1.13.2 Range Filter Request Integer Overflow memory corruption
  3590. | [89849] nginx RFC 3875 Namespace Conflict Environment Variable Open Redirect
  3591. | [87719] nginx up to 1.11.0 ngx_files.c ngx_chain_to_iovec denial of service
  3592. | [80760] nginx 0.6.18/1.9.9 DNS CNAME Record Crash denial of service
  3593. | [80759] nginx 0.6.18/1.9.9 DNS CNAME Record Use-After-Free denial of service
  3594. | [80758] nginx 0.6.18/1.9.9 DNS UDP Packet Crash denial of service
  3595. | [67677] nginx up to 1.7.3 SSL weak authentication
  3596. | [67296] nginx up to 1.7.3 SMTP Proxy ngx_mail_smtp_starttls privilege escalation
  3597. | [12822] nginx up to 1.5.11 SPDY SPDY Request Heap-based memory corruption
  3598. | [12824] nginx 1.5.10 on 32-bit SPDY memory corruption
  3599. | [11237] nginx up to 1.5.6 URI String Bypass privilege escalation
  3600. | [65364] nginx up to 1.1.13 Default Configuration information disclosure
  3601. | [8671] nginx up to 1.4 proxy_pass denial of service
  3602. | [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
  3603. | [7247] nginx 1.2.6 Proxy Function spoofing
  3604. | [61434] nginx 1.2.0/1.3.0 on Windows Access Restriction privilege escalation
  3605. | [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
  3606. | [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
  3607. | [59645] nginx up to 0.8.9 Heap-based memory corruption
  3608. | [53592] nginx 0.8.36 memory corruption
  3609. | [53590] nginx up to 0.8.9 unknown vulnerability
  3610. | [51533] nginx 0.7.64 Terminal privilege escalation
  3611. | [50905] nginx up to 0.8.9 directory traversal
  3612. | [50903] nginx up to 0.8.10 NULL Pointer Dereference denial of service
  3613. | [50043] nginx up to 0.8.10 memory corruption
  3614. |
  3615. | MITRE CVE - https://cve.mitre.org:
  3616. | [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
  3617. | [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
  3618. | [CVE-2012-3380] Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
  3619. | [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
  3620. | [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
  3621. | [CVE-2011-4963] nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
  3622. | [CVE-2011-4315] Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
  3623. | [CVE-2010-2266] nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
  3624. | [CVE-2010-2263] nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
  3625. | [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
  3626. | [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
  3627. | [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
  3628. | [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
  3629. |
  3630. | SecurityFocus - https://www.securityfocus.com/bid/:
  3631. | [99534] Nginx CVE-2017-7529 Remote Integer Overflow Vulnerability
  3632. | [93903] Nginx CVE-2016-1247 Remote Privilege Escalation Vulnerability
  3633. | [91819] Nginx CVE-2016-1000105 Security Bypass Vulnerability
  3634. | [90967] nginx CVE-2016-4450 Denial of Service Vulnerability
  3635. | [82230] nginx Multiple Denial of Service Vulnerabilities
  3636. | [78928] Nginx CVE-2010-2266 Denial-Of-Service Vulnerability
  3637. | [70025] nginx CVE-2014-3616 SSL Session Fixation Vulnerability
  3638. | [69111] nginx SMTP Proxy Remote Command Injection Vulnerability
  3639. | [67507] nginx SPDY Implementation CVE-2014-0088 Arbitrary Code Execution Vulnerability
  3640. | [66537] nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability
  3641. | [63814] nginx CVE-2013-4547 URI Processing Security Bypass Vulnerability
  3642. | [59824] Nginx CVE-2013-2070 Remote Security Vulnerability
  3643. | [59699] nginx 'ngx_http_parse.c' Stack Buffer Overflow Vulnerability
  3644. | [59496] nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability
  3645. | [59323] nginx NULL-Byte Arbitrary Code Execution Vulnerability
  3646. | [58105] Nginx 'access.log' Insecure File Permissions Vulnerability
  3647. | [57139] nginx CVE-2011-4968 Man in The Middle Vulnerability
  3648. | [55920] nginx CVE-2011-4963 Security Bypass Vulnerability
  3649. | [54331] Nginx Naxsi Module 'nx_extract.py' Script Remote File Disclosure Vulnerability
  3650. | [52999] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  3651. | [52578] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  3652. | [50710] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  3653. | [40760] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  3654. | [40434] nginx Space String Remote Source Code Disclosure Vulnerability
  3655. | [40420] nginx Directory Traversal Vulnerability
  3656. | [37711] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  3657. | [36839] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  3658. | [36490] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  3659. | [36438] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  3660. | [36384] nginx HTTP Request Remote Buffer Overflow Vulnerability
  3661. |
  3662. | IBM X-Force - https://exchange.xforce.ibmcloud.com:
  3663. | [84623] Phusion Passenger gem for Ruby with nginx configuration insecure permissions
  3664. | [84172] nginx denial of service
  3665. | [84048] nginx buffer overflow
  3666. | [83923] nginx ngx_http_close_connection() integer overflow
  3667. | [83688] nginx null byte code execution
  3668. | [83103] Naxsi module for Nginx naxsi_unescape_uri() function security bypass
  3669. | [82319] nginx access.log information disclosure
  3670. | [80952] nginx SSL spoofing
  3671. | [77244] nginx and Microsoft Windows request security bypass
  3672. | [76778] Naxsi module for Nginx nx_extract.py directory traversal
  3673. | [74831] nginx ngx_http_mp4_module.c buffer overflow
  3674. | [74191] nginx ngx_cpystrn() information disclosure
  3675. | [74045] nginx header response information disclosure
  3676. | [71355] nginx ngx_resolver_copy() buffer overflow
  3677. | [59370] nginx characters denial of service
  3678. | [59369] nginx DATA source code disclosure
  3679. | [59047] nginx space source code disclosure
  3680. | [58966] nginx unspecified directory traversal
  3681. | [54025] nginx ngx_http_parse.c denial of service
  3682. | [53431] nginx WebDAV component directory traversal
  3683. | [53328] Nginx CRC-32 cached domain name spoofing
  3684. | [53250] Nginx ngx_http_parse_complex_uri() function code execution
  3685. |
  3686. | Exploit-DB - https://www.exploit-db.com:
  3687. | [26737] nginx 1.3.9/1.4.0 x86 Brute Force Remote Exploit
  3688. | [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
  3689. | [25499] nginx 1.3.9-1.4.0 DoS PoC
  3690. | [24967] nginx 0.6.x Arbitrary Code Execution NullByte Injection
  3691. | [14830] nginx 0.6.38 - Heap Corruption Exploit
  3692. | [13822] Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability
  3693. | [13818] Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities
  3694. | [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
  3695. | [9901] nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC
  3696. | [9829] nginx 0.7.61 WebDAV directory traversal
  3697. |
  3698. | OpenVAS (Nessus) - http://www.openvas.org:
  3699. | [864418] Fedora Update for nginx FEDORA-2012-3846
  3700. | [864310] Fedora Update for nginx FEDORA-2012-6238
  3701. | [864209] Fedora Update for nginx FEDORA-2012-6411
  3702. | [864204] Fedora Update for nginx FEDORA-2012-6371
  3703. | [864121] Fedora Update for nginx FEDORA-2012-4006
  3704. | [864115] Fedora Update for nginx FEDORA-2012-3991
  3705. | [864065] Fedora Update for nginx FEDORA-2011-16075
  3706. | [863654] Fedora Update for nginx FEDORA-2011-16110
  3707. | [861232] Fedora Update for nginx FEDORA-2007-1158
  3708. | [850180] SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
  3709. | [831680] Mandriva Update for nginx MDVSA-2012:043 (nginx)
  3710. | [802045] 64-bit Debian Linux Rootkit with nginx Doing iFrame Injection
  3711. | [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
  3712. | [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  3713. | [103469] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  3714. | [103344] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  3715. | [100676] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  3716. | [100659] nginx Directory Traversal Vulnerability
  3717. | [100658] nginx Space String Remote Source Code Disclosure Vulnerability
  3718. | [100441] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  3719. | [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  3720. | [100277] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  3721. | [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
  3722. | [100275] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  3723. | [71574] Gentoo Security Advisory GLSA 201206-07 (nginx)
  3724. | [71308] Gentoo Security Advisory GLSA 201203-22 (nginx)
  3725. | [71297] FreeBSD Ports: nginx
  3726. | [71276] FreeBSD Ports: nginx
  3727. | [71239] Debian Security Advisory DSA 2434-1 (nginx)
  3728. | [66451] Fedora Core 11 FEDORA-2009-12782 (nginx)
  3729. | [66450] Fedora Core 10 FEDORA-2009-12775 (nginx)
  3730. | [66449] Fedora Core 12 FEDORA-2009-12750 (nginx)
  3731. | [64924] Gentoo Security Advisory GLSA 200909-18 (nginx)
  3732. | [64912] Fedora Core 10 FEDORA-2009-9652 (nginx)
  3733. | [64911] Fedora Core 11 FEDORA-2009-9630 (nginx)
  3734. | [64894] FreeBSD Ports: nginx
  3735. | [64869] Debian Security Advisory DSA 1884-1 (nginx)
  3736. |
  3737. | SecurityTracker - https://www.securitytracker.com:
  3738. | [1028544] nginx Bug Lets Remote Users Deny Service or Obtain Potentially Sensitive Information
  3739. | [1028519] nginx Stack Overflow Lets Remote Users Execute Arbitrary Code
  3740. | [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
  3741. | [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
  3742. |
  3743. | OSVDB - http://www.osvdb.org:
  3744. | [94864] cPnginx Plugin for cPanel nginx Configuration Manipulation Arbitrary File Access
  3745. | [93282] nginx proxy_pass Crafted Upstream Proxied Server Response Handling Worker Process Memory Disclosure
  3746. | [93037] nginx /http/ngx_http_parse.c Worker Process Crafted Request Handling Remote Overflow
  3747. | [92796] nginx ngx_http_close_connection Function Crafted r-&gt
  3748. | [92634] nginx ngx_http_request.h zero_in_uri URL Null Byte Handling Remote Code Execution
  3749. | [90518] nginx Log Directory Permission Weakness Local Information Disclosure
  3750. | [88910] nginx Proxy Functionality SSL Certificate Validation MitM Spoofing Weakness
  3751. | [84339] nginx/Windows Multiple Request Sequence Parsing Arbitrary File Access
  3752. | [83617] Naxsi Module for Nginx naxsi-ui/ nx_extract.py Traversal Arbitrary File Access
  3753. | [81339] nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
  3754. | [80124] nginx HTTP Header Response Parsing Freed Memory Information Disclosure
  3755. | [77184] nginx ngx_resolver.c ngx_resolver_copy() Function DNS Response Parsing Remote Overflow
  3756. | [65531] nginx on Windows URI ::$DATA Append Arbitrary File Access
  3757. | [65530] nginx Encoded Traversal Sequence Memory Corruption Remote DoS
  3758. | [65294] nginx on Windows Encoded Space Request Remote Source Disclosure
  3759. | [63136] nginx on Windows 8.3 Filename Alias Request Access Rules / Authentication Bypass
  3760. | [62617] nginx Internal DNS Cache Poisoning Weakness
  3761. | [61779] nginx HTTP Request Escape Sequence Terminal Command Injection
  3762. | [59278] nginx src/http/ngx_http_parse.c ngx_http_process_request_headers() Function URL Handling NULL Dereference DoS
  3763. | [58328] nginx WebDAV Multiple Method Traversal Arbitrary File Write
  3764. | [58128] nginx ngx_http_parse_complex_uri() Function Underflow
  3765. | [44447] nginx (engine x) msie_refresh Directive Unspecified XSS
  3766. | [44446] nginx (engine x) ssl_verify_client Directive HTTP/0.9 Protocol Bypass
  3767. | [44445] nginx (engine x) ngx_http_realip_module satisfy_any Directive Unspecified Access Bypass
  3768. | [44444] nginx (engine x) X-Accel-Redirect Header Unspecified Traversal
  3769. | [44443] nginx (engine x) rtsig Method Signal Queue Overflow
  3770. | [44442] nginx (engine x) Worker Process Millisecond Timers Unspecified Overflow
  3771. |_
  3772. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  3773. Device type: general purpose
  3774. Running: Linux 3.X
  3775. OS CPE: cpe:/o:linux:linux_kernel:3
  3776. OS details: Linux 3.10 - 3.12
  3777. Uptime guess: 11.874 days (since Sun Sep 29 03:14:49 2019)
  3778. Network Distance: 24 hops
  3779. TCP Sequence Prediction: Difficulty=254 (Good luck!)
  3780. IP ID Sequence Generation: All zeros
  3781.  
  3782. TRACEROUTE (using port 443/tcp)
  3783. HOP RTT ADDRESS
  3784. 1 56.19 ms 10.249.204.1
  3785. 2 86.01 ms 104.245.145.161
  3786. 3 85.95 ms te0-0-2-1.225.nr11.b010988-1.yyz02.atlas.cogentco.com (38.104.156.9)
  3787. 4 86.01 ms te0-0-0-1.agr13.yyz02.atlas.cogentco.com (154.24.54.37)
  3788. 5 86.05 ms te0-9-0-9.ccr32.yyz02.atlas.cogentco.com (154.54.43.153)
  3789. 6 86.10 ms be2994.ccr22.cle04.atlas.cogentco.com (154.54.31.233)
  3790. 7 86.13 ms be2717.ccr41.ord01.atlas.cogentco.com (154.54.6.221)
  3791. 8 86.16 ms be2765.ccr41.ord03.atlas.cogentco.com (154.54.45.18)
  3792. 9 86.19 ms ae-11.r08.chcgil09.us.bb.gin.ntt.net (129.250.9.121)
  3793. 10 86.25 ms ae-0.r21.chcgil09.us.bb.gin.ntt.net (129.250.2.205)
  3794. 11 80.78 ms ae-1.r23.asbnva02.us.bb.gin.ntt.net (129.250.2.138)
  3795. 12 254.70 ms ae-2.r25.amstnl02.nl.bb.gin.ntt.net (129.250.6.163)
  3796. 13 254.59 ms ae-5.r02.amstnl02.nl.bb.gin.ntt.net (129.250.2.179)
  3797. 14 180.70 ms ae-0.turk-telekom.amstnl02.nl.bb.gin.ntt.net (81.20.64.102)
  3798. 15 254.63 ms 06-ebgp-ulus1-k---302-ams-col-3.statik.turktelekom.com.tr (212.156.102.114)
  3799. 16 254.74 ms 212.156.117.186.29-gumushane-t3-1.25-erzurum-t2-1.statik.turktelekom.com.tr (212.156.117.186)
  3800. 17 254.70 ms 06-ulus-xrs-t2-1---06-ebgp-ulus1-k.statik.turktelekom.com.tr (81.212.197.36)
  3801. 18 254.64 ms 81.212.215.188.static.turktelekom.com.tr (81.212.215.188)
  3802. 19 254.59 ms mta4-v14.buaslanmis.com (212.174.117.78)
  3803. 20 254.63 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  3804. 21 258.51 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  3805. 22 226.66 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  3806. 23 233.72 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  3807. 24 233.59 ms 212.174.188.50
  3808.  
  3809. NSE: Script Post-scanning.
  3810. Initiating NSE at 00:13
  3811. Completed NSE at 00:13, 0.00s elapsed
  3812. Initiating NSE at 00:13
  3813. Completed NSE at 00:13, 0.00s elapsed
  3814. Read data files from: /usr/bin/../share/nmap
  3815. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  3816. Nmap done: 1 IP address (1 host up) scanned in 330.78 seconds
  3817. #######################################################################################################################################
  3818. Version: 1.11.13-static
  3819. OpenSSL 1.0.2-chacha (1.0.2g-dev)
  3820.  
  3821. Connected to 212.174.188.50
  3822.  
  3823. Testing SSL server en.hmb.gov.tr on port 443 using SNI name en.hmb.gov.tr
  3824.  
  3825. TLS Fallback SCSV:
  3826. Server supports TLS Fallback SCSV
  3827.  
  3828. TLS renegotiation:
  3829. Session renegotiation not supported
  3830.  
  3831. TLS Compression:
  3832. Compression disabled
  3833.  
  3834. Heartbleed:
  3835. TLS 1.2 not vulnerable to heartbleed
  3836. TLS 1.1 not vulnerable to heartbleed
  3837. TLS 1.0 not vulnerable to heartbleed
  3838.  
  3839. Supported Server Cipher(s):
  3840. Preferred TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-384 DHE 384
  3841. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-384 DHE 384
  3842.  
  3843. SSL Certificate:
  3844. Signature Algorithm: sha256WithRSAEncryption
  3845. RSA Key Strength: 2048
  3846.  
  3847. Subject: *.hmb.gov.tr
  3848. Altnames: DNS:*.hmb.gov.tr, DNS:hmb.gov.tr
  3849. Issuer: GlobalSign Organization Validation CA - SHA256 - G2
  3850.  
  3851. Not valid before: Oct 5 16:39:41 2018 GMT
  3852. Not valid after: Oct 5 16:39:41 2020 GMT
  3853. #######################################################################################################################################
  3854. ------------------------------------------------------------------------------------------------------------------------
  3855.  
  3856. [ ! ] Starting SCANNER INURLBR 2.1 at [11-10-2019 00:14:19]
  3857. [ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
  3858. It is the end user's responsibility to obey all applicable local, state and federal laws.
  3859. Developers assume no liability and are not responsible for any misuse or damage caused by this program
  3860.  
  3861. [ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/loot/workspace/en.hmb.gov.tr/output/inurlbr-en.hmb.gov.tr ]
  3862. [ INFO ][ DORK ]::[ site:en.hmb.gov.tr ]
  3863. [ INFO ][ SEARCHING ]:: {
  3864. [ INFO ][ ENGINE ]::[ GOOGLE - www.google.ro ]
  3865.  
  3866. [ INFO ][ SEARCHING ]::
  3867. -[:::]
  3868. [ INFO ][ ENGINE ]::[ GOOGLE API ]
  3869.  
  3870. [ INFO ][ SEARCHING ]::
  3871. -[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
  3872. [ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.co.mz ID: 010479943387663786936:wjwf2xkhfmq ]
  3873.  
  3874. [ INFO ][ SEARCHING ]::
  3875. -[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
  3876.  
  3877. [ INFO ][ TOTAL FOUND VALUES ]:: [ 100 ]
  3878.  
  3879.  
  3880. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3881. |_[ + ] [ 0 / 100 ]-[00:14:33] [ - ]
  3882. |_[ + ] Target:: [ https://en.hmb.gov.tr/ ]
  3883. |_[ + ] Exploit::
  3884. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3885. |_[ + ] More details:: / - / , ISP:
  3886. |_[ + ] Found:: UNIDENTIFIED
  3887.  
  3888. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3889. |_[ + ] [ 1 / 100 ]-[00:14:35] [ - ]
  3890. |_[ + ] Target:: [ https://en.hmb.gov.tr/awards ]
  3891. |_[ + ] Exploit::
  3892. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3893. |_[ + ] More details:: / - / , ISP:
  3894. |_[ + ] Found:: UNIDENTIFIED
  3895.  
  3896. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3897. |_[ + ] [ 2 / 100 ]-[00:14:36] [ - ]
  3898. |_[ + ] Target:: [ https://en.hmb.gov.tr/contact ]
  3899. |_[ + ] Exploit::
  3900. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3901. |_[ + ] More details:: / - / , ISP:
  3902. |_[ + ] Found:: UNIDENTIFIED
  3903.  
  3904. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3905. |_[ + ] [ 3 / 100 ]-[00:14:38] [ - ]
  3906. |_[ + ] Target:: [ https://en.hmb.gov.tr/municipalities ]
  3907. |_[ + ] Exploit::
  3908. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3909. |_[ + ] More details:: / - / , ISP:
  3910. |_[ + ] Found:: UNIDENTIFIED
  3911.  
  3912. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3913. |_[ + ] [ 4 / 100 ]-[00:14:39] [ - ]
  3914. |_[ + ] Target:: [ https://en.hmb.gov.tr/departments ]
  3915. |_[ + ] Exploit::
  3916. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3917. |_[ + ] More details:: / - / , ISP:
  3918. |_[ + ] Found:: UNIDENTIFIED
  3919.  
  3920. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3921. |_[ + ] [ 5 / 100 ]-[00:14:41] [ - ]
  3922. |_[ + ] Target:: [ https://en.hmb.gov.tr/disclaimer ]
  3923. |_[ + ] Exploit::
  3924. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3925. |_[ + ] More details:: / - / , ISP:
  3926. |_[ + ] Found:: UNIDENTIFIED
  3927.  
  3928. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3929. |_[ + ] [ 6 / 100 ]-[00:14:42] [ - ]
  3930. |_[ + ] Target:: [ https://en.hmb.gov.tr/insurance ]
  3931. |_[ + ] Exploit::
  3932. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3933. |_[ + ] More details:: / - / , ISP:
  3934. |_[ + ] Found:: UNIDENTIFIED
  3935.  
  3936. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3937. |_[ + ] [ 7 / 100 ]-[00:14:43] [ - ]
  3938. |_[ + ] Target:: [ https://en.hmb.gov.tr/mtp ]
  3939. |_[ + ] Exploit::
  3940. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3941. |_[ + ] More details:: / - / , ISP:
  3942. |_[ + ] Found:: UNIDENTIFIED
  3943.  
  3944. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3945. |_[ + ] [ 8 / 100 ]-[00:14:45] [ - ]
  3946. |_[ + ] Target:: [ https://en.hmb.gov.tr/minister ]
  3947. |_[ + ] Exploit::
  3948. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3949. |_[ + ] More details:: / - / , ISP:
  3950. |_[ + ] Found:: UNIDENTIFIED
  3951.  
  3952. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3953. |_[ + ] [ 9 / 100 ]-[00:14:46] [ - ]
  3954. |_[ + ] Target:: [ https://en.hmb.gov.tr/links ]
  3955. |_[ + ] Exploit::
  3956. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3957. |_[ + ] More details:: / - / , ISP:
  3958. |_[ + ] Found:: UNIDENTIFIED
  3959.  
  3960. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3961. |_[ + ] [ 10 / 100 ]-[00:14:48] [ - ]
  3962. |_[ + ] Target:: [ https://en.hmb.gov.tr/exchange ]
  3963. |_[ + ] Exploit::
  3964. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3965. |_[ + ] More details:: / - / , ISP:
  3966. |_[ + ] Found:: UNIDENTIFIED
  3967.  
  3968. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3969. |_[ + ] [ 11 / 100 ]-[00:14:49] [ - ]
  3970. |_[ + ] Target:: [ https://en.hmb.gov.tr/foreign-offices ]
  3971. |_[ + ] Exploit::
  3972. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3973. |_[ + ] More details:: / - / , ISP:
  3974. |_[ + ] Found:: UNIDENTIFIED
  3975.  
  3976. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3977. |_[ + ] [ 12 / 100 ]-[00:14:51] [ - ]
  3978. |_[ + ] Target:: [ https://en.hmb.gov.tr/iro-newsletter ]
  3979. |_[ + ] Exploit::
  3980. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3981. |_[ + ] More details:: / - / , ISP:
  3982. |_[ + ] Found:: UNIDENTIFIED
  3983.  
  3984. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3985. |_[ + ] [ 13 / 100 ]-[00:14:52] [ - ]
  3986. |_[ + ] Target:: [ https://en.hmb.gov.tr/public-finance ]
  3987. |_[ + ] Exploit::
  3988. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3989. |_[ + ] More details:: / - / , ISP:
  3990. |_[ + ] Found:: UNIDENTIFIED
  3991.  
  3992. _[ - ]::--------------------------------------------------------------------------------------------------------------
  3993. |_[ + ] [ 14 / 100 ]-[00:14:54] [ - ]
  3994. |_[ + ] Target:: [ https://en.hmb.gov.tr/imf-relations ]
  3995. |_[ + ] Exploit::
  3996. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  3997. |_[ + ] More details:: / - / , ISP:
  3998. |_[ + ] Found:: UNIDENTIFIED
  3999.  
  4000. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4001. |_[ + ] [ 15 / 100 ]-[00:14:55] [ - ]
  4002. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-typologies ]
  4003. |_[ + ] Exploit::
  4004. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4005. |_[ + ] More details:: / - / , ISP:
  4006. |_[ + ] Found:: UNIDENTIFIED
  4007.  
  4008. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4009. |_[ + ] [ 16 / 100 ]-[00:14:57] [ - ]
  4010. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-sanctions ]
  4011. |_[ + ] Exploit::
  4012. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4013. |_[ + ] More details:: / - / , ISP:
  4014. |_[ + ] Found:: UNIDENTIFIED
  4015.  
  4016. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4017. |_[ + ] [ 17 / 100 ]-[00:14:58] [ - ]
  4018. |_[ + ] Target:: [ https://en.hmb.gov.tr/central-government ]
  4019. |_[ + ] Exploit::
  4020. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4021. |_[ + ] More details:: / - / , ISP:
  4022. |_[ + ] Found:: UNIDENTIFIED
  4023.  
  4024. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4025. |_[ + ] [ 18 / 100 ]-[00:15:00] [ - ]
  4026. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-guidelines ]
  4027. |_[ + ] Exploit::
  4028. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4029. |_[ + ] More details:: / - / , ISP:
  4030. |_[ + ] Found:: UNIDENTIFIED
  4031.  
  4032. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4033. |_[ + ] [ 19 / 100 ]-[00:15:01] [ - ]
  4034. |_[ + ] Target:: [ https://en.hmb.gov.tr/iro-announcements ]
  4035. |_[ + ] Exploit::
  4036. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4037. |_[ + ] More details:: / - / , ISP:
  4038. |_[ + ] Found:: UNIDENTIFIED
  4039.  
  4040. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4041. |_[ + ] [ 20 / 100 ]-[00:15:03] [ - ]
  4042. |_[ + ] Target:: [ https://en.hmb.gov.tr/iro-subscription ]
  4043. |_[ + ] Exploit::
  4044. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4045. |_[ + ] More details:: / - / , ISP:
  4046. |_[ + ] Found:: UNIDENTIFIED
  4047.  
  4048. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4049. |_[ + ] [ 21 / 100 ]-[00:15:04] [ - ]
  4050. |_[ + ] Target:: [ https://en.hmb.gov.tr/insurance-reports ]
  4051. |_[ + ] Exploit::
  4052. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4053. |_[ + ] More details:: / - / , ISP:
  4054. |_[ + ] Found:: UNIDENTIFIED
  4055.  
  4056. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4057. |_[ + ] [ 22 / 100 ]-[00:15:06] [ - ]
  4058. |_[ + ] Target:: [ https://en.hmb.gov.tr/treasury-law ]
  4059. |_[ + ] Exploit::
  4060. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4061. |_[ + ] More details:: / - / , ISP:
  4062. |_[ + ] Found:: UNIDENTIFIED
  4063.  
  4064. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4065. |_[ + ] [ 23 / 100 ]-[00:15:07] [ - ]
  4066. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-presentation ]
  4067. |_[ + ] Exploit::
  4068. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4069. |_[ + ] More details:: / - / , ISP:
  4070. |_[ + ] Found:: UNIDENTIFIED
  4071.  
  4072. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4073. |_[ + ] [ 24 / 100 ]-[00:15:09] [ - ]
  4074. |_[ + ] Target:: [ https://en.hmb.gov.tr/economic-indicators ]
  4075. |_[ + ] Exploit::
  4076. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4077. |_[ + ] More details:: / - / , ISP:
  4078. |_[ + ] Found:: UNIDENTIFIED
  4079.  
  4080. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4081. |_[ + ] [ 25 / 100 ]-[00:15:10] [ - ]
  4082. |_[ + ] Target:: [ https://en.hmb.gov.tr/credit-ratings ]
  4083. |_[ + ] Exploit::
  4084. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4085. |_[ + ] More details:: / - / , ISP:
  4086. |_[ + ] Found:: UNIDENTIFIED
  4087.  
  4088. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4089. |_[ + ] [ 26 / 100 ]-[00:15:11] [ - ]
  4090. |_[ + ] Target:: [ https://en.hmb.gov.tr/general-government ]
  4091. |_[ + ] Exploit::
  4092. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4093. |_[ + ] More details:: / - / , ISP:
  4094. |_[ + ] Found:: UNIDENTIFIED
  4095.  
  4096. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4097. |_[ + ] [ 27 / 100 ]-[00:15:13] [ - ]
  4098. |_[ + ] Target:: [ https://en.hmb.gov.tr/control-contacts ]
  4099. |_[ + ] Exploit::
  4100. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4101. |_[ + ] More details:: / - / , ISP:
  4102. |_[ + ] Found:: UNIDENTIFIED
  4103.  
  4104. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4105. |_[ + ] [ 28 / 100 ]-[00:15:14] [ - ]
  4106. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-dictionary ]
  4107. |_[ + ] Exploit::
  4108. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4109. |_[ + ] More details:: / - / , ISP:
  4110. |_[ + ] Found:: UNIDENTIFIED
  4111.  
  4112. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4113. |_[ + ] [ 29 / 100 ]-[00:15:16] [ - ]
  4114. |_[ + ] Target:: [ https://en.hmb.gov.tr/local-government ]
  4115. |_[ + ] Exploit::
  4116. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4117. |_[ + ] More details:: / - / , ISP:
  4118. |_[ + ] Found:: UNIDENTIFIED
  4119.  
  4120. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4121. |_[ + ] [ 30 / 100 ]-[00:15:18] [ - ]
  4122. |_[ + ] Target:: [ https://en.hmb.gov.tr/control-history ]
  4123. |_[ + ] Exploit::
  4124. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4125. |_[ + ] More details:: / - / , ISP:
  4126. |_[ + ] Found:: UNIDENTIFIED
  4127.  
  4128. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4129. |_[ + ] [ 31 / 100 ]-[00:15:19] [ - ]
  4130. |_[ + ] Target:: [ https://en.hmb.gov.tr/contact-us ]
  4131. |_[ + ] Exploit::
  4132. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4133. |_[ + ] More details:: / - / , ISP:
  4134. |_[ + ] Found:: UNIDENTIFIED
  4135.  
  4136. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4137. |_[ + ] [ 32 / 100 ]-[00:15:21] [ - ]
  4138. |_[ + ] Target:: [ https://en.hmb.gov.tr/sec-registrations ]
  4139. |_[ + ] Exploit::
  4140. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4141. |_[ + ] More details:: / - / , ISP:
  4142. |_[ + ] Found:: UNIDENTIFIED
  4143.  
  4144. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4145. |_[ + ] [ 33 / 100 ]-[00:15:22] [ - ]
  4146. |_[ + ] Target:: [ https://en.hmb.gov.tr/secondary-legislation ]
  4147. |_[ + ] Exploit::
  4148. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4149. |_[ + ] More details:: / - / , ISP:
  4150. |_[ + ] Found:: UNIDENTIFIED
  4151.  
  4152. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4153. |_[ + ] [ 34 / 100 ]-[00:15:24] [ - ]
  4154. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-str ]
  4155. |_[ + ] Exploit::
  4156. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4157. |_[ + ] More details:: / - / , ISP:
  4158. |_[ + ] Found:: UNIDENTIFIED
  4159.  
  4160. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4161. |_[ + ] [ 35 / 100 ]-[00:15:25] [ - ]
  4162. |_[ + ] Target:: [ https://en.hmb.gov.tr/insurance-legislation ]
  4163. |_[ + ] Exploit::
  4164. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4165. |_[ + ] More details:: / - / , ISP:
  4166. |_[ + ] Found:: UNIDENTIFIED
  4167.  
  4168. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4169. |_[ + ] [ 36 / 100 ]-[00:15:27] [ - ]
  4170. |_[ + ] Target:: [ https://en.hmb.gov.tr/metropolitan-municipalities ]
  4171. |_[ + ] Exploit::
  4172. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4173. |_[ + ] More details:: / - / , ISP:
  4174. |_[ + ] Found:: UNIDENTIFIED
  4175.  
  4176. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4177. |_[ + ] [ 37 / 100 ]-[00:15:28] [ - ]
  4178. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-projects ]
  4179. |_[ + ] Exploit::
  4180. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4181. |_[ + ] More details:: / - / , ISP:
  4182. |_[ + ] Found:: UNIDENTIFIED
  4183.  
  4184. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4185. |_[ + ] [ 38 / 100 ]-[00:15:30] [ - ]
  4186. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-chronology ]
  4187. |_[ + ] Exploit::
  4188. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4189. |_[ + ] More details:: / - / , ISP:
  4190. |_[ + ] Found:: UNIDENTIFIED
  4191.  
  4192. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4193. |_[ + ] [ 39 / 100 ]-[00:15:31] [ - ]
  4194. |_[ + ] Target:: [ https://en.hmb.gov.tr/iacb-projects ]
  4195. |_[ + ] Exploit::
  4196. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4197. |_[ + ] More details:: / - / , ISP:
  4198. |_[ + ] Found:: UNIDENTIFIED
  4199.  
  4200. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4201. |_[ + ] [ 40 / 100 ]-[00:15:33] [ - ]
  4202. |_[ + ] Target:: [ https://en.hmb.gov.tr/exchange-legislation ]
  4203. |_[ + ] Exploit::
  4204. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4205. |_[ + ] More details:: / - / , ISP:
  4206. |_[ + ] Found:: UNIDENTIFIED
  4207.  
  4208. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4209. |_[ + ] [ 41 / 100 ]-[00:15:34] [ - ]
  4210. |_[ + ] Target:: [ https://en.hmb.gov.tr/bulent-aksu ]
  4211. |_[ + ] Exploit::
  4212. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4213. |_[ + ] More details:: / - / , ISP:
  4214. |_[ + ] Found:: UNIDENTIFIED
  4215.  
  4216. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4217. |_[ + ] [ 42 / 100 ]-[00:15:36] [ - ]
  4218. |_[ + ] Target:: [ https://en.hmb.gov.tr/development-agencies ]
  4219. |_[ + ] Exploit::
  4220. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4221. |_[ + ] More details:: / - / , ISP:
  4222. |_[ + ] Found:: UNIDENTIFIED
  4223.  
  4224. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4225. |_[ + ] [ 43 / 100 ]-[00:15:37] [ - ]
  4226. |_[ + ] Target:: [ https://en.hmb.gov.tr/extrabudegetary-funds ]
  4227. |_[ + ] Exploit::
  4228. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4229. |_[ + ] More details:: / - / , ISP:
  4230. |_[ + ] Found:: UNIDENTIFIED
  4231.  
  4232. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4233. |_[ + ] [ 44 / 100 ]-[00:15:39] [ - ]
  4234. |_[ + ] Target:: [ https://en.hmb.gov.tr/control-tasks ]
  4235. |_[ + ] Exploit::
  4236. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4237. |_[ + ] More details:: / - / , ISP:
  4238. |_[ + ] Found:: UNIDENTIFIED
  4239.  
  4240. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4241. |_[ + ] [ 45 / 100 ]-[00:15:40] [ - ]
  4242. |_[ + ] Target:: [ https://en.hmb.gov.tr/iacb-publications ]
  4243. |_[ + ] Exploit::
  4244. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4245. |_[ + ] More details:: / - / , ISP:
  4246. |_[ + ] Found:: UNIDENTIFIED
  4247.  
  4248. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4249. |_[ + ] [ 46 / 100 ]-[00:15:42] [ - ]
  4250. |_[ + ] Target:: [ https://en.hmb.gov.tr/social-facilities ]
  4251. |_[ + ] Exploit::
  4252. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4253. |_[ + ] More details:: / - / , ISP:
  4254. |_[ + ] Found:: UNIDENTIFIED
  4255.  
  4256. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4257. |_[ + ] [ 47 / 100 ]-[00:15:43] [ - ]
  4258. |_[ + ] Target:: [ https://en.hmb.gov.tr/national-standarts ]
  4259. |_[ + ] Exploit::
  4260. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4261. |_[ + ] More details:: / - / , ISP:
  4262. |_[ + ] Found:: UNIDENTIFIED
  4263.  
  4264. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4265. |_[ + ] [ 48 / 100 ]-[00:15:45] [ - ]
  4266. |_[ + ] Target:: [ https://en.hmb.gov.tr/primary-legislation ]
  4267. |_[ + ] Exploit::
  4268. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4269. |_[ + ] More details:: / - / , ISP:
  4270. |_[ + ] Found:: UNIDENTIFIED
  4271.  
  4272. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4273. |_[ + ] [ 49 / 100 ]-[00:15:47] [ - ]
  4274. |_[ + ] Target:: [ https://en.hmb.gov.tr/investors-guides ]
  4275. |_[ + ] Exploit::
  4276. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4277. |_[ + ] More details:: / - / , ISP:
  4278. |_[ + ] Found:: UNIDENTIFIED
  4279.  
  4280. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4281. |_[ + ] [ 50 / 100 ]-[00:15:48] [ - ]
  4282. |_[ + ] Target:: [ https://en.hmb.gov.tr/tertiary-legislation ]
  4283. |_[ + ] Exploit::
  4284. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4285. |_[ + ] More details:: / - / , ISP:
  4286. |_[ + ] Found:: UNIDENTIFIED
  4287.  
  4288. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4289. |_[ + ] [ 51 / 100 ]-[00:15:50] [ - ]
  4290. |_[ + ] Target:: [ https://en.hmb.gov.tr/revolving-funds ]
  4291. |_[ + ] Exploit::
  4292. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4293. |_[ + ] More details:: / - / , ISP:
  4294. |_[ + ] Found:: UNIDENTIFIED
  4295.  
  4296. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4297. |_[ + ] [ 52 / 100 ]-[00:15:51] [ - ]
  4298. |_[ + ] Target:: [ https://en.hmb.gov.tr/osman-dincbas ]
  4299. |_[ + ] Exploit::
  4300. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4301. |_[ + ] More details:: / - / , ISP:
  4302. |_[ + ] Found:: UNIDENTIFIED
  4303.  
  4304. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4305. |_[ + ] [ 53 / 100 ]-[00:15:53] [ - ]
  4306. |_[ + ] Target:: [ https://en.hmb.gov.tr/control-communication ]
  4307. |_[ + ] Exploit::
  4308. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4309. |_[ + ] More details:: / - / , ISP:
  4310. |_[ + ] Found:: UNIDENTIFIED
  4311.  
  4312. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4313. |_[ + ] [ 54 / 100 ]-[00:15:54] [ - ]
  4314. |_[ + ] Target:: [ https://en.hmb.gov.tr/wb-relations ]
  4315. |_[ + ] Exploit::
  4316. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4317. |_[ + ] More details:: / - / , ISP:
  4318. |_[ + ] Found:: UNIDENTIFIED
  4319.  
  4320. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4321. |_[ + ] [ 55 / 100 ]-[00:15:56] [ - ]
  4322. |_[ + ] Target:: [ https://en.hmb.gov.tr/duyuru/growth ]
  4323. |_[ + ] Exploit::
  4324. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4325. |_[ + ] More details:: / - / , ISP:
  4326. |_[ + ] Found:: UNIDENTIFIED
  4327.  
  4328. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4329. |_[ + ] [ 56 / 100 ]-[00:15:57] [ - ]
  4330. |_[ + ] Target:: [ https://en.hmb.gov.tr/international-relations ]
  4331. |_[ + ] Exploit::
  4332. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4333. |_[ + ] More details:: / - / , ISP:
  4334. |_[ + ] Found:: UNIDENTIFIED
  4335.  
  4336. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4337. |_[ + ] [ 57 / 100 ]-[00:15:59] [ - ]
  4338. |_[ + ] Target:: [ https://en.hmb.gov.tr/debt-indicators ]
  4339. |_[ + ] Exploit::
  4340. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4341. |_[ + ] More details:: / - / , ISP:
  4342. |_[ + ] Found:: UNIDENTIFIED
  4343.  
  4344. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4345. |_[ + ] [ 58 / 100 ]-[00:16:00] [ - ]
  4346. |_[ + ] Target:: [ https://en.hmb.gov.tr/coordination-board ]
  4347. |_[ + ] Exploit::
  4348. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4349. |_[ + ] More details:: / - / , ISP:
  4350. |_[ + ] Found:: UNIDENTIFIED
  4351.  
  4352. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4353. |_[ + ] [ 59 / 100 ]-[00:16:02] [ - ]
  4354. |_[ + ] Target:: [ https://en.hmb.gov.tr/iacb-legislations ]
  4355. |_[ + ] Exploit::
  4356. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4357. |_[ + ] More details:: / - / , ISP:
  4358. |_[ + ] Found:: UNIDENTIFIED
  4359.  
  4360. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4361. |_[ + ] [ 60 / 100 ]-[00:16:03] [ - ]
  4362. |_[ + ] Target:: [ https://en.hmb.gov.tr/provincial-special-administrations ]
  4363. |_[ + ] Exploit::
  4364. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4365. |_[ + ] More details:: / - / , ISP:
  4366. |_[ + ] Found:: UNIDENTIFIED
  4367.  
  4368. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4369. |_[ + ] [ 61 / 100 ]-[00:16:04] [ - ]
  4370. |_[ + ] Target:: [ https://en.hmb.gov.tr/conference-and-seminars ]
  4371. |_[ + ] Exploit::
  4372. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4373. |_[ + ] More details:: / - / , ISP:
  4374. |_[ + ] Found:: UNIDENTIFIED
  4375.  
  4376. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4377. |_[ + ] [ 62 / 100 ]-[00:16:06] [ - ]
  4378. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-obliged-parties ]
  4379. |_[ + ] Exploit::
  4380. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4381. |_[ + ] More details:: / - / , ISP:
  4382. |_[ + ] Found:: UNIDENTIFIED
  4383.  
  4384. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4385. |_[ + ] [ 63 / 100 ]-[00:16:07] [ - ]
  4386. |_[ + ] Target:: [ https://en.hmb.gov.tr/investor-relations-office ]
  4387. |_[ + ] Exploit::
  4388. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4389. |_[ + ] More details:: / - / , ISP:
  4390. |_[ + ] Found:: UNIDENTIFIED
  4391.  
  4392. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4393. |_[ + ] [ 64 / 100 ]-[00:16:09] [ - ]
  4394. |_[ + ] Target:: [ https://en.hmb.gov.tr/general-budget-institutions ]
  4395. |_[ + ] Exploit::
  4396. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4397. |_[ + ] More details:: / - / , ISP:
  4398. |_[ + ] Found:: UNIDENTIFIED
  4399.  
  4400. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4401. |_[ + ] [ 65 / 100 ]-[00:16:10] [ - ]
  4402. |_[ + ] Target:: [ https://en.hmb.gov.tr/twinning-project-2 ]
  4403. |_[ + ] Exploit::
  4404. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4405. |_[ + ] More details:: / - / , ISP:
  4406. |_[ + ] Found:: UNIDENTIFIED
  4407.  
  4408. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4409. |_[ + ] [ 66 / 100 ]-[00:16:12] [ - ]
  4410. |_[ + ] Target:: [ https://en.hmb.gov.tr/data-release-calendar ]
  4411. |_[ + ] Exploit::
  4412. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4413. |_[ + ] More details:: / - / , ISP:
  4414. |_[ + ] Found:: UNIDENTIFIED
  4415.  
  4416. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4417. |_[ + ] [ 67 / 100 ]-[00:16:13] [ - ]
  4418. |_[ + ] Target:: [ https://en.hmb.gov.tr/social-security-institutions ]
  4419. |_[ + ] Exploit::
  4420. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4421. |_[ + ] More details:: / - / , ISP:
  4422. |_[ + ] Found:: UNIDENTIFIED
  4423.  
  4424. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4425. |_[ + ] [ 68 / 100 ]-[00:16:15] [ - ]
  4426. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-duties-powers ]
  4427. |_[ + ] Exploit::
  4428. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4429. |_[ + ] More details:: / - / , ISP:
  4430. |_[ + ] Found:: UNIDENTIFIED
  4431.  
  4432. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4433. |_[ + ] [ 69 / 100 ]-[00:16:16] [ - ]
  4434. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-activity-reports ]
  4435. |_[ + ] Exploit::
  4436. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4437. |_[ + ] More details:: / - / , ISP:
  4438. |_[ + ] Found:: UNIDENTIFIED
  4439.  
  4440. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4441. |_[ + ] [ 70 / 100 ]-[00:16:18] [ - ]
  4442. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-national-legistation ]
  4443. |_[ + ] Exploit::
  4444. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4445. |_[ + ] More details:: / - / , ISP:
  4446. |_[ + ] Found:: UNIDENTIFIED
  4447.  
  4448. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4449. |_[ + ] [ 71 / 100 ]-[00:16:20] [ - ]
  4450. |_[ + ] Target:: [ https://en.hmb.gov.tr/confidentiality-of-reporting ]
  4451. |_[ + ] Exploit::
  4452. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4453. |_[ + ] More details:: / - / , ISP:
  4454. |_[ + ] Found:: UNIDENTIFIED
  4455.  
  4456. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4457. |_[ + ] [ 72 / 100 ]-[00:16:21] [ - ]
  4458. |_[ + ] Target:: [ https://en.hmb.gov.tr/about-public-finance ]
  4459. |_[ + ] Exploit::
  4460. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4461. |_[ + ] More details:: / - / , ISP:
  4462. |_[ + ] Found:: UNIDENTIFIED
  4463.  
  4464. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4465. |_[ + ] [ 73 / 100 ]-[00:16:23] [ - ]
  4466. |_[ + ] Target:: [ https://en.hmb.gov.tr/special-budget-institutions ]
  4467. |_[ + ] Exploit::
  4468. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4469. |_[ + ] More details:: / - / , ISP:
  4470. |_[ + ] Found:: UNIDENTIFIED
  4471.  
  4472. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4473. |_[ + ] [ 74 / 100 ]-[00:16:24] [ - ]
  4474. |_[ + ] Target:: [ https://en.hmb.gov.tr/iro-main-indicator ]
  4475. |_[ + ] Exploit::
  4476. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4477. |_[ + ] More details:: / - / , ISP:
  4478. |_[ + ] Found:: UNIDENTIFIED
  4479.  
  4480. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4481. |_[ + ] [ 75 / 100 ]-[00:16:25] [ - ]
  4482. |_[ + ] Target:: [ https://en.hmb.gov.tr/information-for-investors ]
  4483. |_[ + ] Exploit::
  4484. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4485. |_[ + ] More details:: / - / , ISP:
  4486. |_[ + ] Found:: UNIDENTIFIED
  4487.  
  4488. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4489. |_[ + ] [ 76 / 100 ]-[00:16:27] [ - ]
  4490. |_[ + ] Target:: [ https://en.hmb.gov.tr/frequently-asked-questions ]
  4491. |_[ + ] Exploit::
  4492. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4493. |_[ + ] More details:: / - / , ISP:
  4494. |_[ + ] Found:: UNIDENTIFIED
  4495.  
  4496. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4497. |_[ + ] [ 77 / 100 ]-[00:16:29] [ - ]
  4498. |_[ + ] Target:: [ https://en.hmb.gov.tr/suspicious-transactions-types ]
  4499. |_[ + ] Exploit::
  4500. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4501. |_[ + ] More details:: / - / , ISP:
  4502. |_[ + ] Found:: UNIDENTIFIED
  4503.  
  4504. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4505. |_[ + ] [ 78 / 100 ]-[00:16:30] [ - ]
  4506. |_[ + ] Target:: [ https://en.hmb.gov.tr/investor-protection-measures ]
  4507. |_[ + ] Exploit::
  4508. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4509. |_[ + ] More details:: / - / , ISP:
  4510. |_[ + ] Found:: UNIDENTIFIED
  4511.  
  4512. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4513. |_[ + ] [ 79 / 100 ]-[00:16:32] [ - ]
  4514. |_[ + ] Target:: [ https://en.hmb.gov.tr/government-finance-statistics ]
  4515. |_[ + ] Exploit::
  4516. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4517. |_[ + ] More details:: / - / , ISP:
  4518. |_[ + ] Found:: UNIDENTIFIED
  4519.  
  4520. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4521. |_[ + ] [ 80 / 100 ]-[00:16:33] [ - ]
  4522. |_[ + ] Target:: [ https://en.hmb.gov.tr/it-modernization-program ]
  4523. |_[ + ] Exploit::
  4524. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4525. |_[ + ] More details:: / - / , ISP:
  4526. |_[ + ] Found:: UNIDENTIFIED
  4527.  
  4528. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4529. |_[ + ] [ 81 / 100 ]-[00:16:35] [ - ]
  4530. |_[ + ] Target:: [ https://en.hmb.gov.tr/local-government-unions ]
  4531. |_[ + ] Exploit::
  4532. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4533. |_[ + ] More details:: / - / , ISP:
  4534. |_[ + ] Found:: UNIDENTIFIED
  4535.  
  4536. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4537. |_[ + ] [ 82 / 100 ]-[00:16:36] [ - ]
  4538. |_[ + ] Target:: [ https://en.hmb.gov.tr/primary-dealership-system ]
  4539. |_[ + ] Exploit::
  4540. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4541. |_[ + ] More details:: / - / , ISP:
  4542. |_[ + ] Found:: UNIDENTIFIED
  4543.  
  4544. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4545. |_[ + ] [ 83 / 100 ]-[00:16:38] [ - ]
  4546. |_[ + ] Target:: [ https://en.hmb.gov.tr/duyuru/duty-losses ]
  4547. |_[ + ] Exploit::
  4548. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4549. |_[ + ] More details:: / - / , ISP:
  4550. |_[ + ] Found:: UNIDENTIFIED
  4551.  
  4552. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4553. |_[ + ] [ 84 / 100 ]-[00:16:39] [ - ]
  4554. |_[ + ] Target:: [ https://en.hmb.gov.tr/state-owned-enterprises ]
  4555. |_[ + ] Exploit::
  4556. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4557. |_[ + ] More details:: / - / , ISP:
  4558. |_[ + ] Found:: UNIDENTIFIED
  4559.  
  4560. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4561. |_[ + ] [ 85 / 100 ]-[00:16:41] [ - ]
  4562. |_[ + ] Target:: [ https://en.hmb.gov.tr/extrabudegetary-other-institutions ]
  4563. |_[ + ] Exploit::
  4564. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4565. |_[ + ] More details:: / - / , ISP:
  4566. |_[ + ] Found:: UNIDENTIFIED
  4567.  
  4568. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4569. |_[ + ] [ 86 / 100 ]-[00:16:42] [ - ]
  4570. |_[ + ] Target:: [ https://en.hmb.gov.tr/duyuru/press-statement ]
  4571. |_[ + ] Exploit::
  4572. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4573. |_[ + ] More details:: / - / , ISP:
  4574. |_[ + ] Found:: UNIDENTIFIED
  4575.  
  4576. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4577. |_[ + ] [ 87 / 100 ]-[00:16:44] [ - ]
  4578. |_[ + ] Target:: [ https://en.hmb.gov.tr/fcib-vision-mission ]
  4579. |_[ + ] Exploit::
  4580. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4581. |_[ + ] More details:: / - / , ISP:
  4582. |_[ + ] Found:: UNIDENTIFIED
  4583.  
  4584. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4585. |_[ + ] [ 88 / 100 ]-[00:16:45] [ - ]
  4586. |_[ + ] Target:: [ https://en.hmb.gov.tr/duyuru/2017-financing_program ]
  4587. |_[ + ] Exploit::
  4588. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4589. |_[ + ] More details:: / - / , ISP:
  4590. |_[ + ] Found:: UNIDENTIFIED
  4591.  
  4592. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4593. |_[ + ] [ 89 / 100 ]-[00:16:47] [ - ]
  4594. |_[ + ] Target:: [ https://en.hmb.gov.tr/internal-control-standarts ]
  4595. |_[ + ] Exploit::
  4596. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4597. |_[ + ] More details:: / - / , ISP:
  4598. |_[ + ] Found:: UNIDENTIFIED
  4599.  
  4600. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4601. |_[ + ] [ 90 / 100 ]-[00:16:48] [ - ]
  4602. |_[ + ] Target:: [ https://en.hmb.gov.tr/internal-audit-standarts ]
  4603. |_[ + ] Exploit::
  4604. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4605. |_[ + ] More details:: / - / , ISP:
  4606. |_[ + ] Found:: UNIDENTIFIED
  4607.  
  4608. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4609. |_[ + ] [ 91 / 100 ]-[00:16:50] [ - ]
  4610. |_[ + ] Target:: [ https://en.hmb.gov.tr/en-US/Mainpage ]
  4611. |_[ + ] Exploit::
  4612. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4613. |_[ + ] More details:: / - / , ISP:
  4614. |_[ + ] Found:: UNIDENTIFIED
  4615.  
  4616. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4617. |_[ + ] [ 92 / 100 ]-[00:16:51] [ - ]
  4618. |_[ + ] Target:: [ https://en.hmb.gov.tr/phd-nureddin-nebati ]
  4619. |_[ + ] Exploit::
  4620. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4621. |_[ + ] More details:: / - / , ISP:
  4622. |_[ + ] Found:: UNIDENTIFIED
  4623.  
  4624. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4625. |_[ + ] [ 93 / 100 ]-[00:16:53] [ - ]
  4626. |_[ + ] Target:: [ https://en.hmb.gov.tr/debt-management-legislation ]
  4627. |_[ + ] Exploit::
  4628. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4629. |_[ + ] More details:: / - / , ISP:
  4630. |_[ + ] Found:: UNIDENTIFIED
  4631.  
  4632. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4633. |_[ + ] [ 94 / 100 ]-[00:16:54] [ - ]
  4634. |_[ + ] Target:: [ https://en.hmb.gov.tr/world-bank-projects ]
  4635. |_[ + ] Exploit::
  4636. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4637. |_[ + ] More details:: / - / , ISP:
  4638. |_[ + ] Found:: UNIDENTIFIED
  4639.  
  4640. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4641. |_[ + ] [ 95 / 100 ]-[00:16:56] [ - ]
  4642. |_[ + ] Target:: [ https://en.hmb.gov.tr/business-angel-scheme ]
  4643. |_[ + ] Exploit::
  4644. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4645. |_[ + ] More details:: / - / , ISP:
  4646. |_[ + ] Found:: UNIDENTIFIED
  4647.  
  4648. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4649. |_[ + ] [ 96 / 100 ]-[00:16:57] [ - ]
  4650. |_[ + ] Target:: [ https://en.hmb.gov.tr/turkish-economy ]
  4651. |_[ + ] Exploit::
  4652. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4653. |_[ + ] More details:: / - / , ISP:
  4654. |_[ + ] Found:: UNIDENTIFIED
  4655.  
  4656. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4657. |_[ + ] [ 97 / 100 ]-[00:16:59] [ - ]
  4658. |_[ + ] Target:: [ https://en.hmb.gov.tr/experience-sharing-program ]
  4659. |_[ + ] Exploit::
  4660. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4661. |_[ + ] More details:: / - / , ISP:
  4662. |_[ + ] Found:: UNIDENTIFIED
  4663.  
  4664. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4665. |_[ + ] [ 98 / 100 ]-[00:17:00] [ - ]
  4666. |_[ + ] Target:: [ https://en.hmb.gov.tr/public-debt-management-reports ]
  4667. |_[ + ] Exploit::
  4668. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4669. |_[ + ] More details:: / - / , ISP:
  4670. |_[ + ] Found:: UNIDENTIFIED
  4671.  
  4672. _[ - ]::--------------------------------------------------------------------------------------------------------------
  4673. |_[ + ] [ 99 / 100 ]-[00:17:02] [ - ]
  4674. |_[ + ] Target:: [ https://en.hmb.gov.tr/foreign-economic-relations-legislation ]
  4675. |_[ + ] Exploit::
  4676. |_[ + ] Information Server:: HTTP/1.1 200 OK, Server: nginx , IP:212.174.188.50:443
  4677. |_[ + ] More details:: / - / , ISP:
  4678. |_[ + ] Found:: UNIDENTIFIED
  4679.  
  4680. [ INFO ] [ Shutting down ]
  4681. [ INFO ] [ End of process INURLBR at [11-10-2019 00:17:02]
  4682. [ INFO ] [ TOTAL FILTERED VALUES ]:: [ 0 ]
  4683. [ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/loot/workspace/en.hmb.gov.tr/output/inurlbr-en.hmb.gov.tr ]
  4684. |_________________________________________________________________________________________
  4685.  
  4686. \_________________________________________________________________________________________/
  4687. #######################################################################################################################################
  4688. --------------------------------------------------------
  4689. <<<Yasuo discovered following vulnerable applications>>>
  4690. --------------------------------------------------------
  4691. +-------------------+-----------------------------------------+-----------------------------------------------------+----------+----------+
  4692. | App Name | URL to Application | Potential Exploit | Username | Password |
  4693. +-------------------+-----------------------------------------+-----------------------------------------------------+----------+----------+
  4694. | JBoss jmx-console | https://212.174.188.50:443/jmx-console/ | ./exploit/multi/http/jboss_deploymentfilerepository | None | None |
  4695. +-------------------+-----------------------------------------+-----------------------------------------------------+----------+----------+
  4696. #######################################################################################################################################
  4697. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-10 23:35 EDT
  4698. Stats: 0:00:00 elapsed; 0 hosts completed (0 up), 0 undergoing Host Discovery
  4699. Parallel DNS resolution of 1 host. Timing: About 0.00% done
  4700. Nmap scan report for 212.174.188.50
  4701. Host is up (0.16s latency).
  4702. Not shown: 995 filtered ports, 3 closed ports
  4703. Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
  4704. PORT STATE SERVICE
  4705. 80/tcp open http
  4706. 443/tcp open https
  4707.  
  4708. Nmap done: 1 IP address (1 host up) scanned in 25.45 seconds
  4709. #######################################################################################################################################
  4710. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-10 23:35 EDT
  4711. Nmap scan report for 212.174.188.50
  4712. Host is up (0.097s latency).
  4713. Not shown: 2 filtered ports
  4714. PORT STATE SERVICE
  4715. 53/udp open|filtered domain
  4716. 67/udp open|filtered dhcps
  4717. 68/udp open|filtered dhcpc
  4718. 69/udp open|filtered tftp
  4719. 88/udp open|filtered kerberos-sec
  4720. 123/udp open|filtered ntp
  4721. 139/udp open|filtered netbios-ssn
  4722. 161/udp open|filtered snmp
  4723. 162/udp open|filtered snmptrap
  4724. 389/udp open|filtered ldap
  4725. 500/udp open|filtered isakmp
  4726. 520/udp open|filtered route
  4727. 2049/udp open|filtered nfs
  4728.  
  4729. Nmap done: 1 IP address (1 host up) scanned in 13.21 seconds
  4730.  
  4731. #######################################################################################################################################
  4732. HTTP/1.1 301 Moved Permanently
  4733. Server: nginx
  4734. Date: Fri, 11 Oct 2019 03:35:03 GMT
  4735. Content-Type: text/html
  4736. Content-Length: 178
  4737. Connection: keep-alive
  4738. Location: https://www.hmb.gov.tr
  4739. #######################################################################################################################################
  4740. http://212.174.188.50 [301 Moved Permanently] Country[TURKEY][TR], HTTPServer[nginx], IP[212.174.188.50], RedirectLocation[https://www.hmb.gov.tr], Title[301 Moved Permanently], nginx
  4741. https://www.hmb.gov.tr [200 OK] Country[TURKEY][TR], HTML5, HTTPServer[nginx], IP[212.174.188.50], Script, Title[T.C. Hazine ve Maliye Bakanlığı], X-UA-Compatible[IE=edge], nginx
  4742. ######################################################################################################################################
  4743. wig - WebApp Information Gatherer
  4744.  
  4745.  
  4746. Scanning https://www.hmb.gov.tr...
  4747. _____________________ SITE INFO ______________________
  4748. IP Title
  4749. 212.174.188.50 T.C. Hazine ve Maliye Bakanlığı
  4750.  
  4751. ______________________ VERSION _______________________
  4752. Name Versions Type
  4753. nginx Platform
  4754.  
  4755. ____________________ INTERESTING _____________________
  4756. URL Note Type
  4757. /robots.txt robots.txt index Interesting
  4758.  
  4759. ______________________________________________________
  4760. Time: 146.9 sec Urls: 629 Fingerprints: 40401
  4761. #######################################################################################################################################
  4762. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-10 23:38 EDT
  4763. NSE: Loaded 163 scripts for scanning.
  4764. NSE: Script Pre-scanning.
  4765. Initiating NSE at 23:38
  4766. Completed NSE at 23:38, 0.00s elapsed
  4767. Initiating NSE at 23:38
  4768. Completed NSE at 23:38, 0.00s elapsed
  4769. Initiating Parallel DNS resolution of 1 host. at 23:38
  4770. Completed Parallel DNS resolution of 1 host. at 23:38, 10.30s elapsed
  4771. Initiating SYN Stealth Scan at 23:38
  4772. Scanning 212.174.188.50 [1 port]
  4773. Discovered open port 80/tcp on 212.174.188.50
  4774. Completed SYN Stealth Scan at 23:38, 0.25s elapsed (1 total ports)
  4775. Initiating Service scan at 23:38
  4776. Scanning 1 service on 212.174.188.50
  4777. Completed Service scan at 23:38, 6.44s elapsed (1 service on 1 host)
  4778. Initiating OS detection (try #1) against 212.174.188.50
  4779. Retrying OS detection (try #2) against 212.174.188.50
  4780. Initiating Traceroute at 23:38
  4781. Completed Traceroute at 23:38, 3.10s elapsed
  4782. Initiating Parallel DNS resolution of 16 hosts. at 23:38
  4783. Completed Parallel DNS resolution of 16 hosts. at 23:39, 6.19s elapsed
  4784. NSE: Script scanning 212.174.188.50.
  4785. Initiating NSE at 23:39
  4786. Completed NSE at 23:39, 49.20s elapsed
  4787. Initiating NSE at 23:39
  4788. Completed NSE at 23:39, 1.08s elapsed
  4789. Nmap scan report for 212.174.188.50
  4790. Host is up (0.21s latency).
  4791.  
  4792. PORT STATE SERVICE VERSION
  4793. 80/tcp open http nginx
  4794. | http-brute:
  4795. |_ Path "/" does not require authentication
  4796. |_http-chrono: ERROR: Script execution failed (use -d to debug)
  4797. |_http-csrf: Couldn't find any CSRF vulnerabilities.
  4798. |_http-date: Fri, 11 Oct 2019 03:38:30 GMT; -40s from local time.
  4799. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
  4800. |_http-dombased-xss: Couldn't find any DOM based XSS.
  4801. |_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
  4802. |_http-errors: Couldn't find any error pages.
  4803. |_http-feed: Couldn't find any feeds.
  4804. |_http-fetch: Please enter the complete path of the directory to save data in.
  4805. | http-headers:
  4806. | Server: nginx
  4807. | Date: Fri, 11 Oct 2019 03:38:34 GMT
  4808. | Content-Type: text/html
  4809. | Content-Length: 178
  4810. | Connection: close
  4811. | Location: https://www.hmb.gov.tr
  4812. |
  4813. |_ (Request type: GET)
  4814. | http-internal-ip-disclosure:
  4815. |_ Internal IP Leaked: 10.128.10.36
  4816. |_http-jsonp-detection: Couldn't find any JSONP endpoints.
  4817. | http-methods:
  4818. |_ Supported Methods: GET HEAD POST OPTIONS
  4819. |_http-mobileversion-checker: No mobile version detected.
  4820. |_http-passwd: ERROR: Script execution failed (use -d to debug)
  4821. |_http-security-headers:
  4822. | http-sitemap-generator:
  4823. | Directory structure:
  4824. | Longest directory structure:
  4825. | Depth: 0
  4826. | Dir: /
  4827. | Total files found (by extension):
  4828. |_
  4829. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
  4830. |_http-title: Did not follow redirect to https://www.hmb.gov.tr
  4831. | http-vhosts:
  4832. |_127 names had status 200
  4833. |_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
  4834. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
  4835. |_http-xssed: No previously reported XSS vuln.
  4836. | vulscan: VulDB - https://vuldb.com:
  4837. | [133852] Sangfor Sundray WLAN Controller up to 3.7.4.2 Cookie Header nginx_webconsole.php Code Execution
  4838. | [132132] SoftNAS Cloud 4.2.0/4.2.1 Nginx privilege escalation
  4839. | [131858] Puppet Discovery up to 1.3.x Nginx Container weak authentication
  4840. | [130644] Nginx Unit up to 1.7.0 Router Process Request Heap-based memory corruption
  4841. | [127759] VeryNginx 0.3.3 Web Application Firewall privilege escalation
  4842. | [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
  4843. | [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
  4844. | [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
  4845. | [119845] Pivotal Operations Manager up to 2.0.13/2.1.5 Nginx privilege escalation
  4846. | [114368] SuSE Portus 2.3 Nginx Certificate weak authentication
  4847. | [103517] nginx up to 1.13.2 Range Filter Request Integer Overflow memory corruption
  4848. | [89849] nginx RFC 3875 Namespace Conflict Environment Variable Open Redirect
  4849. | [87719] nginx up to 1.11.0 ngx_files.c ngx_chain_to_iovec denial of service
  4850. | [80760] nginx 0.6.18/1.9.9 DNS CNAME Record Crash denial of service
  4851. | [80759] nginx 0.6.18/1.9.9 DNS CNAME Record Use-After-Free denial of service
  4852. | [80758] nginx 0.6.18/1.9.9 DNS UDP Packet Crash denial of service
  4853. | [67677] nginx up to 1.7.3 SSL weak authentication
  4854. | [67296] nginx up to 1.7.3 SMTP Proxy ngx_mail_smtp_starttls privilege escalation
  4855. | [12822] nginx up to 1.5.11 SPDY SPDY Request Heap-based memory corruption
  4856. | [12824] nginx 1.5.10 on 32-bit SPDY memory corruption
  4857. | [11237] nginx up to 1.5.6 URI String Bypass privilege escalation
  4858. | [65364] nginx up to 1.1.13 Default Configuration information disclosure
  4859. | [8671] nginx up to 1.4 proxy_pass denial of service
  4860. | [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
  4861. | [7247] nginx 1.2.6 Proxy Function spoofing
  4862. | [61434] nginx 1.2.0/1.3.0 on Windows Access Restriction privilege escalation
  4863. | [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
  4864. | [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
  4865. | [59645] nginx up to 0.8.9 Heap-based memory corruption
  4866. | [53592] nginx 0.8.36 memory corruption
  4867. | [53590] nginx up to 0.8.9 unknown vulnerability
  4868. | [51533] nginx 0.7.64 Terminal privilege escalation
  4869. | [50905] nginx up to 0.8.9 directory traversal
  4870. | [50903] nginx up to 0.8.10 NULL Pointer Dereference denial of service
  4871. | [50043] nginx up to 0.8.10 memory corruption
  4872. |
  4873. | MITRE CVE - https://cve.mitre.org:
  4874. | [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
  4875. | [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
  4876. | [CVE-2012-3380] Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
  4877. | [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
  4878. | [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
  4879. | [CVE-2011-4963] nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
  4880. | [CVE-2011-4315] Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
  4881. | [CVE-2010-2266] nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
  4882. | [CVE-2010-2263] nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
  4883. | [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
  4884. | [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
  4885. | [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
  4886. | [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
  4887. |
  4888. | SecurityFocus - https://www.securityfocus.com/bid/:
  4889. | [99534] Nginx CVE-2017-7529 Remote Integer Overflow Vulnerability
  4890. | [93903] Nginx CVE-2016-1247 Remote Privilege Escalation Vulnerability
  4891. | [91819] Nginx CVE-2016-1000105 Security Bypass Vulnerability
  4892. | [90967] nginx CVE-2016-4450 Denial of Service Vulnerability
  4893. | [82230] nginx Multiple Denial of Service Vulnerabilities
  4894. | [78928] Nginx CVE-2010-2266 Denial-Of-Service Vulnerability
  4895. | [70025] nginx CVE-2014-3616 SSL Session Fixation Vulnerability
  4896. | [69111] nginx SMTP Proxy Remote Command Injection Vulnerability
  4897. | [67507] nginx SPDY Implementation CVE-2014-0088 Arbitrary Code Execution Vulnerability
  4898. | [66537] nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability
  4899. | [63814] nginx CVE-2013-4547 URI Processing Security Bypass Vulnerability
  4900. | [59824] Nginx CVE-2013-2070 Remote Security Vulnerability
  4901. | [59699] nginx 'ngx_http_parse.c' Stack Buffer Overflow Vulnerability
  4902. | [59496] nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability
  4903. | [59323] nginx NULL-Byte Arbitrary Code Execution Vulnerability
  4904. | [58105] Nginx 'access.log' Insecure File Permissions Vulnerability
  4905. | [57139] nginx CVE-2011-4968 Man in The Middle Vulnerability
  4906. | [55920] nginx CVE-2011-4963 Security Bypass Vulnerability
  4907. | [54331] Nginx Naxsi Module 'nx_extract.py' Script Remote File Disclosure Vulnerability
  4908. | [52999] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  4909. | [52578] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  4910. | [50710] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  4911. | [40760] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  4912. | [40434] nginx Space String Remote Source Code Disclosure Vulnerability
  4913. | [40420] nginx Directory Traversal Vulnerability
  4914. | [37711] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  4915. | [36839] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  4916. | [36490] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  4917. | [36438] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  4918. | [36384] nginx HTTP Request Remote Buffer Overflow Vulnerability
  4919. |
  4920. | IBM X-Force - https://exchange.xforce.ibmcloud.com:
  4921. | [84623] Phusion Passenger gem for Ruby with nginx configuration insecure permissions
  4922. | [84172] nginx denial of service
  4923. | [84048] nginx buffer overflow
  4924. | [83923] nginx ngx_http_close_connection() integer overflow
  4925. | [83688] nginx null byte code execution
  4926. | [83103] Naxsi module for Nginx naxsi_unescape_uri() function security bypass
  4927. | [82319] nginx access.log information disclosure
  4928. | [80952] nginx SSL spoofing
  4929. | [77244] nginx and Microsoft Windows request security bypass
  4930. | [76778] Naxsi module for Nginx nx_extract.py directory traversal
  4931. | [74831] nginx ngx_http_mp4_module.c buffer overflow
  4932. | [74191] nginx ngx_cpystrn() information disclosure
  4933. | [74045] nginx header response information disclosure
  4934. | [71355] nginx ngx_resolver_copy() buffer overflow
  4935. | [59370] nginx characters denial of service
  4936. | [59369] nginx DATA source code disclosure
  4937. | [59047] nginx space source code disclosure
  4938. | [58966] nginx unspecified directory traversal
  4939. | [54025] nginx ngx_http_parse.c denial of service
  4940. | [53431] nginx WebDAV component directory traversal
  4941. | [53328] Nginx CRC-32 cached domain name spoofing
  4942. | [53250] Nginx ngx_http_parse_complex_uri() function code execution
  4943. |
  4944. | Exploit-DB - https://www.exploit-db.com:
  4945. | [26737] nginx 1.3.9/1.4.0 x86 Brute Force Remote Exploit
  4946. | [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
  4947. | [25499] nginx 1.3.9-1.4.0 DoS PoC
  4948. | [24967] nginx 0.6.x Arbitrary Code Execution NullByte Injection
  4949. | [14830] nginx 0.6.38 - Heap Corruption Exploit
  4950. | [13822] Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability
  4951. | [13818] Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities
  4952. | [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
  4953. | [9901] nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC
  4954. | [9829] nginx 0.7.61 WebDAV directory traversal
  4955. |
  4956. | OpenVAS (Nessus) - http://www.openvas.org:
  4957. | [864418] Fedora Update for nginx FEDORA-2012-3846
  4958. | [864310] Fedora Update for nginx FEDORA-2012-6238
  4959. | [864209] Fedora Update for nginx FEDORA-2012-6411
  4960. | [864204] Fedora Update for nginx FEDORA-2012-6371
  4961. | [864121] Fedora Update for nginx FEDORA-2012-4006
  4962. | [864115] Fedora Update for nginx FEDORA-2012-3991
  4963. | [864065] Fedora Update for nginx FEDORA-2011-16075
  4964. | [863654] Fedora Update for nginx FEDORA-2011-16110
  4965. | [861232] Fedora Update for nginx FEDORA-2007-1158
  4966. | [850180] SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
  4967. | [831680] Mandriva Update for nginx MDVSA-2012:043 (nginx)
  4968. | [802045] 64-bit Debian Linux Rootkit with nginx Doing iFrame Injection
  4969. | [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
  4970. | [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  4971. | [103469] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  4972. | [103344] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  4973. | [100676] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  4974. | [100659] nginx Directory Traversal Vulnerability
  4975. | [100658] nginx Space String Remote Source Code Disclosure Vulnerability
  4976. | [100441] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  4977. | [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  4978. | [100277] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  4979. | [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
  4980. | [100275] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  4981. | [71574] Gentoo Security Advisory GLSA 201206-07 (nginx)
  4982. | [71308] Gentoo Security Advisory GLSA 201203-22 (nginx)
  4983. | [71297] FreeBSD Ports: nginx
  4984. | [71276] FreeBSD Ports: nginx
  4985. | [71239] Debian Security Advisory DSA 2434-1 (nginx)
  4986. | [66451] Fedora Core 11 FEDORA-2009-12782 (nginx)
  4987. | [66450] Fedora Core 10 FEDORA-2009-12775 (nginx)
  4988. | [66449] Fedora Core 12 FEDORA-2009-12750 (nginx)
  4989. | [64924] Gentoo Security Advisory GLSA 200909-18 (nginx)
  4990. | [64912] Fedora Core 10 FEDORA-2009-9652 (nginx)
  4991. | [64911] Fedora Core 11 FEDORA-2009-9630 (nginx)
  4992. | [64894] FreeBSD Ports: nginx
  4993. | [64869] Debian Security Advisory DSA 1884-1 (nginx)
  4994. |
  4995. | SecurityTracker - https://www.securitytracker.com:
  4996. | [1028544] nginx Bug Lets Remote Users Deny Service or Obtain Potentially Sensitive Information
  4997. | [1028519] nginx Stack Overflow Lets Remote Users Execute Arbitrary Code
  4998. | [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
  4999. | [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
  5000. |
  5001. | OSVDB - http://www.osvdb.org:
  5002. | [94864] cPnginx Plugin for cPanel nginx Configuration Manipulation Arbitrary File Access
  5003. | [93282] nginx proxy_pass Crafted Upstream Proxied Server Response Handling Worker Process Memory Disclosure
  5004. | [93037] nginx /http/ngx_http_parse.c Worker Process Crafted Request Handling Remote Overflow
  5005. | [92796] nginx ngx_http_close_connection Function Crafted r-&gt
  5006. | [92634] nginx ngx_http_request.h zero_in_uri URL Null Byte Handling Remote Code Execution
  5007. | [90518] nginx Log Directory Permission Weakness Local Information Disclosure
  5008. | [88910] nginx Proxy Functionality SSL Certificate Validation MitM Spoofing Weakness
  5009. | [84339] nginx/Windows Multiple Request Sequence Parsing Arbitrary File Access
  5010. | [83617] Naxsi Module for Nginx naxsi-ui/ nx_extract.py Traversal Arbitrary File Access
  5011. | [81339] nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
  5012. | [80124] nginx HTTP Header Response Parsing Freed Memory Information Disclosure
  5013. | [77184] nginx ngx_resolver.c ngx_resolver_copy() Function DNS Response Parsing Remote Overflow
  5014. | [65531] nginx on Windows URI ::$DATA Append Arbitrary File Access
  5015. | [65530] nginx Encoded Traversal Sequence Memory Corruption Remote DoS
  5016. | [65294] nginx on Windows Encoded Space Request Remote Source Disclosure
  5017. | [63136] nginx on Windows 8.3 Filename Alias Request Access Rules / Authentication Bypass
  5018. | [62617] nginx Internal DNS Cache Poisoning Weakness
  5019. | [61779] nginx HTTP Request Escape Sequence Terminal Command Injection
  5020. | [59278] nginx src/http/ngx_http_parse.c ngx_http_process_request_headers() Function URL Handling NULL Dereference DoS
  5021. | [58328] nginx WebDAV Multiple Method Traversal Arbitrary File Write
  5022. | [58128] nginx ngx_http_parse_complex_uri() Function Underflow
  5023. | [44447] nginx (engine x) msie_refresh Directive Unspecified XSS
  5024. | [44446] nginx (engine x) ssl_verify_client Directive HTTP/0.9 Protocol Bypass
  5025. | [44445] nginx (engine x) ngx_http_realip_module satisfy_any Directive Unspecified Access Bypass
  5026. | [44444] nginx (engine x) X-Accel-Redirect Header Unspecified Traversal
  5027. | [44443] nginx (engine x) rtsig Method Signal Queue Overflow
  5028. | [44442] nginx (engine x) Worker Process Millisecond Timers Unspecified Overflow
  5029. |_
  5030. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  5031. Device type: general purpose
  5032. Running (JUST GUESSING): Linux 3.X|2.6.X|4.X (98%)
  5033. OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.0
  5034. Aggressive OS guesses: Linux 3.10 - 3.12 (98%), Linux 2.6.32 (90%), Linux 3.10 - 3.16 (90%), Linux 4.0 (90%), Linux 4.4 (89%), Linux 3.10 (88%)
  5035. No exact OS matches for host (test conditions non-ideal).
  5036. Uptime guess: 11.851 days (since Sun Sep 29 03:14:49 2019)
  5037. Network Distance: 24 hops
  5038. TCP Sequence Prediction: Difficulty=263 (Good luck!)
  5039. IP ID Sequence Generation: All zeros
  5040.  
  5041. TRACEROUTE (using port 80/tcp)
  5042. HOP RTT ADDRESS
  5043. 1 81.50 ms 10.249.204.1
  5044. 2 81.56 ms 104.245.145.161
  5045. 3 81.59 ms te0-0-2-1.225.nr11.b010988-1.yyz02.atlas.cogentco.com (38.104.156.9)
  5046. 4 81.61 ms te0-0-0-1.agr14.yyz02.atlas.cogentco.com (154.24.54.41)
  5047. 5 81.64 ms te0-9-1-9.ccr31.yyz02.atlas.cogentco.com (154.54.43.161)
  5048. 6 81.67 ms be2993.ccr21.cle04.atlas.cogentco.com (154.54.31.225)
  5049. 7 81.73 ms be2717.ccr41.ord01.atlas.cogentco.com (154.54.6.221)
  5050. 8 81.73 ms be2765.ccr41.ord03.atlas.cogentco.com (154.54.45.18)
  5051. 9 81.72 ms ae-11.r08.chcgil09.us.bb.gin.ntt.net (129.250.9.121)
  5052. 10 81.79 ms ae-0.r20.chcgil09.us.bb.gin.ntt.net (129.250.2.191)
  5053. 11 111.67 ms ae-0.r25.nycmny01.us.bb.gin.ntt.net (129.250.2.167)
  5054. 12 171.08 ms ae-9.r24.frnkge08.de.bb.gin.ntt.net (129.250.2.5)
  5055. 13 171.02 ms ae-1.r01.frnkge13.de.bb.gin.ntt.net (129.250.2.85)
  5056. 14 ... 19
  5057. 20 230.77 ms mta4-v14.buaslanmis.com (212.174.117.78)
  5058. 21 203.76 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  5059. 22 215.47 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  5060. 23 215.40 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  5061. 24 217.68 ms 212.174.188.50
  5062.  
  5063. NSE: Script Post-scanning.
  5064. Initiating NSE at 23:39
  5065. Completed NSE at 23:39, 0.00s elapsed
  5066. Initiating NSE at 23:39
  5067. Completed NSE at 23:39, 0.00s elapsed
  5068. Read data files from: /usr/bin/../share/nmap
  5069. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  5070. Nmap done: 1 IP address (1 host up) scanned in 83.39 seconds
  5071. ######################################################################################################################################
  5072. https://212.174.188.50 [301 Moved Permanently] Country[TURKEY][TR], HTTPServer[nginx], IP[212.174.188.50], RedirectLocation[https://www.hmb.gov.tr], Title[301 Moved Permanently], nginx
  5073. https://www.hmb.gov.tr [200 OK] Country[TURKEY][TR], HTML5, HTTPServer[nginx], IP[212.174.188.50], Script, Title[T.C. Hazine ve Maliye Bakanlığı], X-UA-Compatible[IE=edge], nginx
  5074. ######################################################################################################################################
  5075. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-10 23:40 EDT
  5076. NSE: Loaded 163 scripts for scanning.
  5077. NSE: Script Pre-scanning.
  5078. Initiating NSE at 23:40
  5079. Completed NSE at 23:40, 0.00s elapsed
  5080. Initiating NSE at 23:40
  5081. Completed NSE at 23:40, 0.00s elapsed
  5082. Initiating Parallel DNS resolution of 1 host. at 23:40
  5083. Completed Parallel DNS resolution of 1 host. at 23:40, 10.33s elapsed
  5084. Initiating SYN Stealth Scan at 23:40
  5085. Scanning 212.174.188.50 [1 port]
  5086. Discovered open port 443/tcp on 212.174.188.50
  5087. Completed SYN Stealth Scan at 23:40, 0.27s elapsed (1 total ports)
  5088. Initiating Service scan at 23:40
  5089. Scanning 1 service on 212.174.188.50
  5090. Completed Service scan at 23:40, 13.35s elapsed (1 service on 1 host)
  5091. Initiating OS detection (try #1) against 212.174.188.50
  5092. Initiating Traceroute at 23:40
  5093. Completed Traceroute at 23:40, 0.55s elapsed
  5094. Initiating Parallel DNS resolution of 22 hosts. at 23:40
  5095. Completed Parallel DNS resolution of 22 hosts. at 23:40, 10.37s elapsed
  5096. NSE: Script scanning 212.174.188.50.
  5097. Initiating NSE at 23:40
  5098. Completed NSE at 23:45, 271.09s elapsed
  5099. Initiating NSE at 23:45
  5100. Completed NSE at 23:45, 2.30s elapsed
  5101. Nmap scan report for 212.174.188.50
  5102. Host is up (0.22s latency).
  5103.  
  5104. PORT STATE SERVICE VERSION
  5105. 443/tcp open ssl/http nginx
  5106. | http-brute:
  5107. |_ Path "/" does not require authentication
  5108. |_http-chrono: ERROR: Script execution failed (use -d to debug)
  5109. |_http-csrf: Couldn't find any CSRF vulnerabilities.
  5110. |_http-date: Fri, 11 Oct 2019 03:40:30 GMT; -40s from local time.
  5111. | http-default-accounts:
  5112. | [Arris 2307] at /logo_t.gif
  5113. |_ <blank>:<blank>
  5114. |_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
  5115. |_http-dombased-xss: Couldn't find any DOM based XSS.
  5116. |_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
  5117. |_http-errors: Couldn't find any error pages.
  5118. |_http-feed: Couldn't find any feeds.
  5119. |_http-fetch: Please enter the complete path of the directory to save data in.
  5120. | http-headers:
  5121. | Server: nginx
  5122. | Date: Fri, 11 Oct 2019 03:40:34 GMT
  5123. | Content-Type: text/html
  5124. | Content-Length: 178
  5125. | Connection: close
  5126. | Location: https://www.hmb.gov.tr
  5127. |
  5128. |_ (Request type: GET)
  5129. |_http-jsonp-detection: Couldn't find any JSONP endpoints.
  5130. | http-methods:
  5131. |_ Supported Methods: GET HEAD POST OPTIONS
  5132. |_http-mobileversion-checker: No mobile version detected.
  5133. |_http-passwd: ERROR: Script execution failed (use -d to debug)
  5134. | http-security-headers:
  5135. | Strict_Transport_Security:
  5136. |_ HSTS not configured in HTTPS Server
  5137. | http-sitemap-generator:
  5138. | Directory structure:
  5139. | Longest directory structure:
  5140. | Depth: 0
  5141. | Dir: /
  5142. | Total files found (by extension):
  5143. |_
  5144. |_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
  5145. |_http-title: Did not follow redirect to https://www.hmb.gov.tr
  5146. | http-traceroute:
  5147. | HTML title
  5148. | Hop #1: 400 The plain HTTP request was sent to HTTPS port
  5149. | Hop #2: 301 Moved Permanently
  5150. | Hop #3: 301 Moved Permanently
  5151. | Status Code
  5152. | Hop #1: 400
  5153. | Hop #2: 301
  5154. | Hop #3: 301
  5155. | content-length
  5156. | Hop #1: 264
  5157. | Hop #2: 178
  5158. | Hop #3: 178
  5159. | location
  5160. | Hop #1
  5161. | Hop #2: https://www.hmb.gov.tr
  5162. |_ Hop #3: https://www.hmb.gov.tr
  5163. |_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test
  5164. | http-vhosts:
  5165. | 125 names had status 200
  5166. | sip : 400
  5167. |_administration : 400
  5168. | http-wordpress-enum:
  5169. | Search limited to top 100 themes/plugins
  5170. | plugins
  5171. | akismet
  5172. | contact-form-7
  5173. | wordpress-seo
  5174. | jetpack
  5175. | all-in-one-seo-pack
  5176. | wordfence
  5177. | woocommerce
  5178. | google-sitemap-generator
  5179. | wordpress-importer
  5180. | nextgen-gallery
  5181. | google-analytics-for-wordpress
  5182. | wp-super-cache
  5183. | tinymce-advanced
  5184. | wptouch
  5185. | better-wp-security
  5186. | siteorigin-panels
  5187. | updraftplus
  5188. | w3-total-cache
  5189. | google-analytics-dashboard-for-wp
  5190. | wp-pagenavi
  5191. | si-contact-form
  5192. | advanced-custom-fields
  5193. | mailchimp-for-wp
  5194. | the-events-calendar
  5195. | add-to-any
  5196. | duplicator
  5197. | wysija-newsletters
  5198. | ninja-forms
  5199. | wp-smushit
  5200. | buddypress
  5201. | ewww-image-optimizer
  5202. | so-widgets-bundle
  5203. | really-simple-captcha
  5204. | ml-slider
  5205. | black-studio-tinymce-widget
  5206. | photo-gallery
  5207. | broken-link-checker
  5208. | regenerate-thumbnails
  5209. | google-analyticator
  5210. | redirection
  5211. | captcha
  5212. | duplicate-post
  5213. | breadcrumb-navxt
  5214. | backwpup
  5215. | user-role-editor
  5216. | yet-another-related-posts-plugin
  5217. | contact-form-plugin
  5218. | newsletter
  5219. | bbpress
  5220. | all-in-one-wp-security-and-firewall
  5221. | disable-comments
  5222. | social-networks-auto-poster-facebook-twitter-g
  5223. | wp-optimize
  5224. | addthis
  5225. | wp-statistics
  5226. | wp-e-commerce
  5227. | all-in-one-wp-migration
  5228. | backupwordpress
  5229. | si-captcha-for-wordpress
  5230. | wp-slimstat
  5231. | wp-google-maps
  5232. | wp-spamshield
  5233. | wp-maintenance-mode
  5234. | googleanalytics
  5235. | worker
  5236. | yith-woocommerce-wishlist
  5237. | wp-multibyte-patch
  5238. | wp-to-twitter
  5239. | image-widget
  5240. | wp-db-backup
  5241. | shortcodes-ultimate
  5242. | ultimate-tinymce
  5243. | share-this
  5244. | disqus-comment-system
  5245. | gallery-bank
  5246. | types
  5247. | wp-polls
  5248. | custom-post-type-ui
  5249. | shareaholic
  5250. | polylang
  5251. | post-types-order
  5252. | gtranslate
  5253. | bulletproof-security
  5254. | wp-fastest-cache
  5255. | facebook
  5256. | sociable
  5257. | iwp-client
  5258. | nextgen-facebook
  5259. | seo-ultimate
  5260. | wp-postviews
  5261. | formidable
  5262. | squirrly-seo
  5263. | wp-mail-smtp
  5264. | tablepress
  5265. | redux-framework
  5266. | page-links-to
  5267. | youtube-embed-plus
  5268. | contact-bank
  5269. | maintenance
  5270. | wp-retina-2x
  5271. | themes
  5272. | twentyeleven
  5273. | twentytwelve
  5274. | twentyten
  5275. | twentythirteen
  5276. | twentyfourteen
  5277. | twentyfifteen
  5278. | responsive
  5279. | customizr
  5280. | zerif-lite
  5281. | virtue
  5282. | storefront
  5283. | atahualpa
  5284. | twentysixteen
  5285. | vantage
  5286. | hueman
  5287. | spacious
  5288. | evolve
  5289. | colorway
  5290. | graphene
  5291. | sydney
  5292. | ifeature
  5293. | mh-magazine-lite
  5294. | generatepress
  5295. | mantra
  5296. | omega
  5297. | onetone
  5298. | coraline
  5299. | pinboard
  5300. | thematic
  5301. | sparkling
  5302. | catch-box
  5303. | make
  5304. | colormag
  5305. | enigma
  5306. | custom-community
  5307. | mystique
  5308. | alexandria
  5309. | delicate
  5310. | lightword
  5311. | attitude
  5312. | inove
  5313. | magazine-basic
  5314. | raindrops
  5315. | minamaze
  5316. | zbench
  5317. | point
  5318. | eclipse
  5319. | portfolio-press
  5320. | twentyseventeen
  5321. | travelify
  5322. | swift-basic
  5323. | iconic-one
  5324. | arcade-basic
  5325. | bouquet
  5326. | pixel
  5327. | sliding-door
  5328. | pilcrow
  5329. | simple-catch
  5330. | tempera
  5331. | destro
  5332. | p2
  5333. | sunspot
  5334. | sundance
  5335. | dusk-to-dawn
  5336. | onepress
  5337. | moesia
  5338. | dynamic-news-lite
  5339. | parabola
  5340. | parament
  5341. | dazzling
  5342. | accesspress-lite
  5343. | optimizer
  5344. | one-page
  5345. | chaostheory
  5346. | business-lite
  5347. | duster
  5348. | constructor
  5349. | nirvana
  5350. | sixteen
  5351. | esquire
  5352. | beach
  5353. | next-saturday
  5354. | flat
  5355. | hatch
  5356. | minimatica
  5357. | radiate
  5358. | accelerate
  5359. | oxygen
  5360. | accesspress-parallax
  5361. | swift
  5362. | spun
  5363. | wp-creativix
  5364. | suevafree
  5365. | hemingway
  5366. | pink-touch-2
  5367. | motion
  5368. | fruitful
  5369. | steira
  5370. | news
  5371. |_ llorix-one-lite
  5372. |_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
  5373. |_http-xssed: No previously reported XSS vuln.
  5374. | vulscan: VulDB - https://vuldb.com:
  5375. | [133852] Sangfor Sundray WLAN Controller up to 3.7.4.2 Cookie Header nginx_webconsole.php Code Execution
  5376. | [132132] SoftNAS Cloud 4.2.0/4.2.1 Nginx privilege escalation
  5377. | [131858] Puppet Discovery up to 1.3.x Nginx Container weak authentication
  5378. | [130644] Nginx Unit up to 1.7.0 Router Process Request Heap-based memory corruption
  5379. | [127759] VeryNginx 0.3.3 Web Application Firewall privilege escalation
  5380. | [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
  5381. | [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
  5382. | [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
  5383. | [119845] Pivotal Operations Manager up to 2.0.13/2.1.5 Nginx privilege escalation
  5384. | [114368] SuSE Portus 2.3 Nginx Certificate weak authentication
  5385. | [103517] nginx up to 1.13.2 Range Filter Request Integer Overflow memory corruption
  5386. | [89849] nginx RFC 3875 Namespace Conflict Environment Variable Open Redirect
  5387. | [87719] nginx up to 1.11.0 ngx_files.c ngx_chain_to_iovec denial of service
  5388. | [80760] nginx 0.6.18/1.9.9 DNS CNAME Record Crash denial of service
  5389. | [80759] nginx 0.6.18/1.9.9 DNS CNAME Record Use-After-Free denial of service
  5390. | [80758] nginx 0.6.18/1.9.9 DNS UDP Packet Crash denial of service
  5391. | [67677] nginx up to 1.7.3 SSL weak authentication
  5392. | [67296] nginx up to 1.7.3 SMTP Proxy ngx_mail_smtp_starttls privilege escalation
  5393. | [12822] nginx up to 1.5.11 SPDY SPDY Request Heap-based memory corruption
  5394. | [12824] nginx 1.5.10 on 32-bit SPDY memory corruption
  5395. | [11237] nginx up to 1.5.6 URI String Bypass privilege escalation
  5396. | [65364] nginx up to 1.1.13 Default Configuration information disclosure
  5397. | [8671] nginx up to 1.4 proxy_pass denial of service
  5398. | [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
  5399. | [7247] nginx 1.2.6 Proxy Function spoofing
  5400. | [61434] nginx 1.2.0/1.3.0 on Windows Access Restriction privilege escalation
  5401. | [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
  5402. | [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
  5403. | [59645] nginx up to 0.8.9 Heap-based memory corruption
  5404. | [53592] nginx 0.8.36 memory corruption
  5405. | [53590] nginx up to 0.8.9 unknown vulnerability
  5406. | [51533] nginx 0.7.64 Terminal privilege escalation
  5407. | [50905] nginx up to 0.8.9 directory traversal
  5408. | [50903] nginx up to 0.8.10 NULL Pointer Dereference denial of service
  5409. | [50043] nginx up to 0.8.10 memory corruption
  5410. |
  5411. | MITRE CVE - https://cve.mitre.org:
  5412. | [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
  5413. | [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
  5414. | [CVE-2012-3380] Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
  5415. | [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
  5416. | [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
  5417. | [CVE-2011-4963] nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
  5418. | [CVE-2011-4315] Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
  5419. | [CVE-2010-2266] nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
  5420. | [CVE-2010-2263] nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
  5421. | [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
  5422. | [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
  5423. | [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
  5424. | [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
  5425. |
  5426. | SecurityFocus - https://www.securityfocus.com/bid/:
  5427. | [99534] Nginx CVE-2017-7529 Remote Integer Overflow Vulnerability
  5428. | [93903] Nginx CVE-2016-1247 Remote Privilege Escalation Vulnerability
  5429. | [91819] Nginx CVE-2016-1000105 Security Bypass Vulnerability
  5430. | [90967] nginx CVE-2016-4450 Denial of Service Vulnerability
  5431. | [82230] nginx Multiple Denial of Service Vulnerabilities
  5432. | [78928] Nginx CVE-2010-2266 Denial-Of-Service Vulnerability
  5433. | [70025] nginx CVE-2014-3616 SSL Session Fixation Vulnerability
  5434. | [69111] nginx SMTP Proxy Remote Command Injection Vulnerability
  5435. | [67507] nginx SPDY Implementation CVE-2014-0088 Arbitrary Code Execution Vulnerability
  5436. | [66537] nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability
  5437. | [63814] nginx CVE-2013-4547 URI Processing Security Bypass Vulnerability
  5438. | [59824] Nginx CVE-2013-2070 Remote Security Vulnerability
  5439. | [59699] nginx 'ngx_http_parse.c' Stack Buffer Overflow Vulnerability
  5440. | [59496] nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability
  5441. | [59323] nginx NULL-Byte Arbitrary Code Execution Vulnerability
  5442. | [58105] Nginx 'access.log' Insecure File Permissions Vulnerability
  5443. | [57139] nginx CVE-2011-4968 Man in The Middle Vulnerability
  5444. | [55920] nginx CVE-2011-4963 Security Bypass Vulnerability
  5445. | [54331] Nginx Naxsi Module 'nx_extract.py' Script Remote File Disclosure Vulnerability
  5446. | [52999] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  5447. | [52578] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  5448. | [50710] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  5449. | [40760] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  5450. | [40434] nginx Space String Remote Source Code Disclosure Vulnerability
  5451. | [40420] nginx Directory Traversal Vulnerability
  5452. | [37711] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  5453. | [36839] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  5454. | [36490] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  5455. | [36438] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  5456. | [36384] nginx HTTP Request Remote Buffer Overflow Vulnerability
  5457. |
  5458. | IBM X-Force - https://exchange.xforce.ibmcloud.com:
  5459. | [84623] Phusion Passenger gem for Ruby with nginx configuration insecure permissions
  5460. | [84172] nginx denial of service
  5461. | [84048] nginx buffer overflow
  5462. | [83923] nginx ngx_http_close_connection() integer overflow
  5463. | [83688] nginx null byte code execution
  5464. | [83103] Naxsi module for Nginx naxsi_unescape_uri() function security bypass
  5465. | [82319] nginx access.log information disclosure
  5466. | [80952] nginx SSL spoofing
  5467. | [77244] nginx and Microsoft Windows request security bypass
  5468. | [76778] Naxsi module for Nginx nx_extract.py directory traversal
  5469. | [74831] nginx ngx_http_mp4_module.c buffer overflow
  5470. | [74191] nginx ngx_cpystrn() information disclosure
  5471. | [74045] nginx header response information disclosure
  5472. | [71355] nginx ngx_resolver_copy() buffer overflow
  5473. | [59370] nginx characters denial of service
  5474. | [59369] nginx DATA source code disclosure
  5475. | [59047] nginx space source code disclosure
  5476. | [58966] nginx unspecified directory traversal
  5477. | [54025] nginx ngx_http_parse.c denial of service
  5478. | [53431] nginx WebDAV component directory traversal
  5479. | [53328] Nginx CRC-32 cached domain name spoofing
  5480. | [53250] Nginx ngx_http_parse_complex_uri() function code execution
  5481. |
  5482. | Exploit-DB - https://www.exploit-db.com:
  5483. | [26737] nginx 1.3.9/1.4.0 x86 Brute Force Remote Exploit
  5484. | [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
  5485. | [25499] nginx 1.3.9-1.4.0 DoS PoC
  5486. | [24967] nginx 0.6.x Arbitrary Code Execution NullByte Injection
  5487. | [14830] nginx 0.6.38 - Heap Corruption Exploit
  5488. | [13822] Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability
  5489. | [13818] Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities
  5490. | [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
  5491. | [9901] nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC
  5492. | [9829] nginx 0.7.61 WebDAV directory traversal
  5493. |
  5494. | OpenVAS (Nessus) - http://www.openvas.org:
  5495. | [864418] Fedora Update for nginx FEDORA-2012-3846
  5496. | [864310] Fedora Update for nginx FEDORA-2012-6238
  5497. | [864209] Fedora Update for nginx FEDORA-2012-6411
  5498. | [864204] Fedora Update for nginx FEDORA-2012-6371
  5499. | [864121] Fedora Update for nginx FEDORA-2012-4006
  5500. | [864115] Fedora Update for nginx FEDORA-2012-3991
  5501. | [864065] Fedora Update for nginx FEDORA-2011-16075
  5502. | [863654] Fedora Update for nginx FEDORA-2011-16110
  5503. | [861232] Fedora Update for nginx FEDORA-2007-1158
  5504. | [850180] SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
  5505. | [831680] Mandriva Update for nginx MDVSA-2012:043 (nginx)
  5506. | [802045] 64-bit Debian Linux Rootkit with nginx Doing iFrame Injection
  5507. | [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
  5508. | [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  5509. | [103469] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  5510. | [103344] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  5511. | [100676] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  5512. | [100659] nginx Directory Traversal Vulnerability
  5513. | [100658] nginx Space String Remote Source Code Disclosure Vulnerability
  5514. | [100441] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  5515. | [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  5516. | [100277] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  5517. | [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
  5518. | [100275] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  5519. | [71574] Gentoo Security Advisory GLSA 201206-07 (nginx)
  5520. | [71308] Gentoo Security Advisory GLSA 201203-22 (nginx)
  5521. | [71297] FreeBSD Ports: nginx
  5522. | [71276] FreeBSD Ports: nginx
  5523. | [71239] Debian Security Advisory DSA 2434-1 (nginx)
  5524. | [66451] Fedora Core 11 FEDORA-2009-12782 (nginx)
  5525. | [66450] Fedora Core 10 FEDORA-2009-12775 (nginx)
  5526. | [66449] Fedora Core 12 FEDORA-2009-12750 (nginx)
  5527. | [64924] Gentoo Security Advisory GLSA 200909-18 (nginx)
  5528. | [64912] Fedora Core 10 FEDORA-2009-9652 (nginx)
  5529. | [64911] Fedora Core 11 FEDORA-2009-9630 (nginx)
  5530. | [64894] FreeBSD Ports: nginx
  5531. | [64869] Debian Security Advisory DSA 1884-1 (nginx)
  5532. |
  5533. | SecurityTracker - https://www.securitytracker.com:
  5534. | [1028544] nginx Bug Lets Remote Users Deny Service or Obtain Potentially Sensitive Information
  5535. | [1028519] nginx Stack Overflow Lets Remote Users Execute Arbitrary Code
  5536. | [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
  5537. | [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
  5538. |
  5539. | OSVDB - http://www.osvdb.org:
  5540. | [94864] cPnginx Plugin for cPanel nginx Configuration Manipulation Arbitrary File Access
  5541. | [93282] nginx proxy_pass Crafted Upstream Proxied Server Response Handling Worker Process Memory Disclosure
  5542. | [93037] nginx /http/ngx_http_parse.c Worker Process Crafted Request Handling Remote Overflow
  5543. | [92796] nginx ngx_http_close_connection Function Crafted r-&gt
  5544. | [92634] nginx ngx_http_request.h zero_in_uri URL Null Byte Handling Remote Code Execution
  5545. | [90518] nginx Log Directory Permission Weakness Local Information Disclosure
  5546. | [88910] nginx Proxy Functionality SSL Certificate Validation MitM Spoofing Weakness
  5547. | [84339] nginx/Windows Multiple Request Sequence Parsing Arbitrary File Access
  5548. | [83617] Naxsi Module for Nginx naxsi-ui/ nx_extract.py Traversal Arbitrary File Access
  5549. | [81339] nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
  5550. | [80124] nginx HTTP Header Response Parsing Freed Memory Information Disclosure
  5551. | [77184] nginx ngx_resolver.c ngx_resolver_copy() Function DNS Response Parsing Remote Overflow
  5552. | [65531] nginx on Windows URI ::$DATA Append Arbitrary File Access
  5553. | [65530] nginx Encoded Traversal Sequence Memory Corruption Remote DoS
  5554. | [65294] nginx on Windows Encoded Space Request Remote Source Disclosure
  5555. | [63136] nginx on Windows 8.3 Filename Alias Request Access Rules / Authentication Bypass
  5556. | [62617] nginx Internal DNS Cache Poisoning Weakness
  5557. | [61779] nginx HTTP Request Escape Sequence Terminal Command Injection
  5558. | [59278] nginx src/http/ngx_http_parse.c ngx_http_process_request_headers() Function URL Handling NULL Dereference DoS
  5559. | [58328] nginx WebDAV Multiple Method Traversal Arbitrary File Write
  5560. | [58128] nginx ngx_http_parse_complex_uri() Function Underflow
  5561. | [44447] nginx (engine x) msie_refresh Directive Unspecified XSS
  5562. | [44446] nginx (engine x) ssl_verify_client Directive HTTP/0.9 Protocol Bypass
  5563. | [44445] nginx (engine x) ngx_http_realip_module satisfy_any Directive Unspecified Access Bypass
  5564. | [44444] nginx (engine x) X-Accel-Redirect Header Unspecified Traversal
  5565. | [44443] nginx (engine x) rtsig Method Signal Queue Overflow
  5566. | [44442] nginx (engine x) Worker Process Millisecond Timers Unspecified Overflow
  5567. |_
  5568. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  5569. Device type: general purpose
  5570. Running: Linux 3.X
  5571. OS CPE: cpe:/o:linux:linux_kernel:3
  5572. OS details: Linux 3.10 - 3.12
  5573. Uptime guess: 11.855 days (since Sun Sep 29 03:14:49 2019)
  5574. Network Distance: 24 hops
  5575. TCP Sequence Prediction: Difficulty=263 (Good luck!)
  5576. IP ID Sequence Generation: All zeros
  5577.  
  5578. TRACEROUTE (using port 443/tcp)
  5579. HOP RTT ADDRESS
  5580. 1 97.07 ms 10.249.204.1
  5581. 2 132.90 ms 104.245.145.161
  5582. 3 132.98 ms te0-0-2-1.225.nr11.b010988-1.yyz02.atlas.cogentco.com (38.104.156.9)
  5583. 4 133.00 ms te0-0-0-1.agr14.yyz02.atlas.cogentco.com (154.24.54.41)
  5584. 5 132.98 ms te0-9-1-9.ccr32.yyz02.atlas.cogentco.com (154.54.43.169)
  5585. 6 133.04 ms be2994.ccr22.cle04.atlas.cogentco.com (154.54.31.233)
  5586. 7 133.07 ms be2718.ccr42.ord01.atlas.cogentco.com (154.54.7.129)
  5587. 8 133.12 ms be2766.ccr41.ord03.atlas.cogentco.com (154.54.46.178)
  5588. 9 133.11 ms ae-11.r08.chcgil09.us.bb.gin.ntt.net (129.250.9.121)
  5589. 10 133.18 ms ae-0.r20.chcgil09.us.bb.gin.ntt.net (129.250.2.191)
  5590. 11 70.53 ms ae-0.r25.nycmny01.us.bb.gin.ntt.net (129.250.2.167)
  5591. 12 188.25 ms ae-9.r24.frnkge08.de.bb.gin.ntt.net (129.250.2.5)
  5592. 13 188.23 ms ae-1.r01.frnkge13.de.bb.gin.ntt.net (129.250.2.85)
  5593. 14 188.23 ms nmf-0.r04.frnkge02.de.bb.gin.ntt.net (213.198.52.90)
  5594. 15 219.82 ms 34-acibadem-xrs-t2-1---301-fra-col-2.statik.turktelekom.com.tr (212.156.101.65)
  5595. 16 219.77 ms 212.156.120.184.static.turktelekom.com.tr (212.156.120.184)
  5596. 17 219.80 ms 00-gayrettepe-xrs-t2-1---00-ebgp-gayrettepe-k.statik.turktelekom.com.tr (81.212.201.194)
  5597. 18 219.82 ms 06-ulus-xrs-t2-1---34-acibadem-xrs-t2-1.statik.turktelekom.com.tr (195.175.166.207)
  5598. 19 219.79 ms 81.212.215.188.static.turktelekom.com.tr (81.212.215.188)
  5599. 20 219.77 ms mta4-v14.buaslanmis.com (212.174.117.78)
  5600. 21 287.18 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  5601. 22 207.71 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  5602. 23 207.77 ms 212.175.34.34.static.ttnet.com.tr (212.175.34.34)
  5603. 24 207.72 ms 212.174.188.50
  5604.  
  5605. NSE: Script Post-scanning.
  5606. Initiating NSE at 23:45
  5607. Completed NSE at 23:45, 0.00s elapsed
  5608. Initiating NSE at 23:45
  5609. Completed NSE at 23:45, 0.00s elapsed
  5610. Read data files from: /usr/bin/../share/nmap
  5611. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  5612. Nmap done: 1 IP address (1 host up) scanned in 312.06 seconds
  5613. #######################################################################################################################################
  5614. Version: 1.11.13-static
  5615. OpenSSL 1.0.2-chacha (1.0.2g-dev)
  5616.  
  5617. Connected to 212.174.188.50
  5618.  
  5619. Testing SSL server 212.174.188.50 on port 443 using SNI name 212.174.188.50
  5620.  
  5621. TLS Fallback SCSV:
  5622. Server supports TLS Fallback SCSV
  5623.  
  5624. TLS renegotiation:
  5625. Session renegotiation not supported
  5626.  
  5627. TLS Compression:
  5628. Compression disabled
  5629.  
  5630. Heartbleed:
  5631. TLS 1.2 not vulnerable to heartbleed
  5632. TLS 1.1 not vulnerable to heartbleed
  5633. TLS 1.0 not vulnerable to heartbleed
  5634.  
  5635. Supported Server Cipher(s):
  5636. Preferred TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-384 DHE 384
  5637. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-384 DHE 384
  5638.  
  5639. SSL Certificate:
  5640. Signature Algorithm: sha256WithRSAEncryption
  5641. RSA Key Strength: 2048
  5642.  
  5643. Subject: *.hmb.gov.tr
  5644. Altnames: DNS:*.hmb.gov.tr, DNS:hmb.gov.tr
  5645. Issuer: GlobalSign Organization Validation CA - SHA256 - G2
  5646.  
  5647. Not valid before: Oct 5 16:39:41 2018 GMT
  5648. Not valid after: Oct 5 16:39:41 2020 GMT
  5649. #######################################################################################################################################
  5650. <<<Yasuo discovered following vulnerable applications>>>
  5651. --------------------------------------------------------
  5652. +-------------------+-----------------------------------------+-----------------------------------------------------+----------+----------+
  5653. | App Name | URL to Application | Potential Exploit | Username | Password |
  5654. +-------------------+-----------------------------------------+-----------------------------------------------------+----------+----------+
  5655. | JBoss jmx-console | https://212.174.188.50:443/jmx-console/ | ./exploit/multi/http/jboss_deploymentfilerepository | None | None |
  5656. +-------------------+-----------------------------------------+-----------------------------------------------------+----------+----------+
  5657. #######################################################################################################################################
  5658. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-10 23:48 EDT
  5659. NSE: Loaded 47 scripts for scanning.
  5660. NSE: Script Pre-scanning.
  5661. Initiating NSE at 23:49
  5662. Completed NSE at 23:49, 0.00s elapsed
  5663. Initiating NSE at 23:49
  5664. Completed NSE at 23:49, 0.00s elapsed
  5665. Initiating Ping Scan at 23:49
  5666. Scanning 212.174.188.50 [4 ports]
  5667. Completed Ping Scan at 23:49, 0.24s elapsed (1 total hosts)
  5668. Initiating Parallel DNS resolution of 1 host. at 23:49
  5669. Completed Parallel DNS resolution of 1 host. at 23:49, 10.36s elapsed
  5670. Initiating SYN Stealth Scan at 23:49
  5671. Scanning 212.174.188.50 [65535 ports]
  5672. Discovered open port 80/tcp on 212.174.188.50
  5673. Discovered open port 443/tcp on 212.174.188.50
  5674. SYN Stealth Scan Timing: About 2.31% done; ETC: 00:11 (0:21:49 remaining)
  5675. SYN Stealth Scan Timing: About 13.48% done; ETC: 23:56 (0:06:32 remaining)
  5676. Discovered open port 18825/tcp on 212.174.188.50
  5677. Discovered open port 33789/tcp on 212.174.188.50
  5678. Discovered open port 53123/tcp on 212.174.188.50
  5679. Discovered open port 27429/tcp on 212.174.188.50
  5680. Discovered open port 7462/tcp on 212.174.188.50
  5681. Discovered open port 32803/tcp on 212.174.188.50
  5682. Discovered open port 32726/tcp on 212.174.188.50
  5683. Discovered open port 33688/tcp on 212.174.188.50
  5684. Discovered open port 46995/tcp on 212.174.188.50
  5685. Discovered open port 49097/tcp on 212.174.188.50
  5686. Discovered open port 30369/tcp on 212.174.188.50
  5687. Discovered open port 49693/tcp on 212.174.188.50
  5688. Discovered open port 59083/tcp on 212.174.188.50
  5689. Discovered open port 61861/tcp on 212.174.188.50
  5690. Discovered open port 45695/tcp on 212.174.188.50
  5691. Discovered open port 43401/tcp on 212.174.188.50
  5692. Discovered open port 20457/tcp on 212.174.188.50
  5693. Discovered open port 32876/tcp on 212.174.188.50
  5694. Discovered open port 15557/tcp on 212.174.188.50
  5695. Discovered open port 39006/tcp on 212.174.188.50
  5696. Discovered open port 11086/tcp on 212.174.188.50
  5697. Discovered open port 52299/tcp on 212.174.188.50
  5698. Discovered open port 15670/tcp on 212.174.188.50
  5699. Discovered open port 48932/tcp on 212.174.188.50
  5700. Discovered open port 18985/tcp on 212.174.188.50
  5701. Discovered open port 54484/tcp on 212.174.188.50
  5702. Discovered open port 1996/tcp on 212.174.188.50
  5703. Discovered open port 28728/tcp on 212.174.188.50
  5704. Discovered open port 15601/tcp on 212.174.188.50
  5705. Discovered open port 14878/tcp on 212.174.188.50
  5706. Discovered open port 10785/tcp on 212.174.188.50
  5707. Discovered open port 1012/tcp on 212.174.188.50
  5708. Discovered open port 7019/tcp on 212.174.188.50
  5709. Discovered open port 60345/tcp on 212.174.188.50
  5710. Discovered open port 50714/tcp on 212.174.188.50
  5711. Discovered open port 35234/tcp on 212.174.188.50
  5712. Discovered open port 24946/tcp on 212.174.188.50
  5713. Discovered open port 47415/tcp on 212.174.188.50
  5714. Discovered open port 46391/tcp on 212.174.188.50
  5715. Discovered open port 35974/tcp on 212.174.188.50
  5716. Discovered open port 23516/tcp on 212.174.188.50
  5717. Discovered open port 41424/tcp on 212.174.188.50
  5718. Discovered open port 2663/tcp on 212.174.188.50
  5719. Discovered open port 38957/tcp on 212.174.188.50
  5720. Discovered open port 47796/tcp on 212.174.188.50
  5721. Discovered open port 56976/tcp on 212.174.188.50
  5722. Discovered open port 47766/tcp on 212.174.188.50
  5723. Discovered open port 25365/tcp on 212.174.188.50
  5724. Increasing send delay for 212.174.188.50 from 0 to 5 due to 32 out of 106 dropped probes since last increase.
  5725. Discovered open port 45430/tcp on 212.174.188.50
  5726. Discovered open port 21697/tcp on 212.174.188.50
  5727. Discovered open port 64833/tcp on 212.174.188.50
  5728. Discovered open port 7220/tcp on 212.174.188.50
  5729. Discovered open port 64396/tcp on 212.174.188.50
  5730. Discovered open port 61166/tcp on 212.174.188.50
  5731. Discovered open port 30285/tcp on 212.174.188.50
  5732. Discovered open port 29674/tcp on 212.174.188.50
  5733. Discovered open port 26048/tcp on 212.174.188.50
  5734. Discovered open port 38397/tcp on 212.174.188.50
  5735. Discovered open port 44428/tcp on 212.174.188.50
  5736. Discovered open port 49996/tcp on 212.174.188.50
  5737. Discovered open port 46979/tcp on 212.174.188.50
  5738. Discovered open port 63352/tcp on 212.174.188.50
  5739. Discovered open port 27991/tcp on 212.174.188.50
  5740. Discovered open port 14570/tcp on 212.174.188.50
  5741. Discovered open port 41727/tcp on 212.174.188.50
  5742. Discovered open port 46427/tcp on 212.174.188.50
  5743. Discovered open port 36363/tcp on 212.174.188.50
  5744. Discovered open port 35394/tcp on 212.174.188.50
  5745. Discovered open port 15044/tcp on 212.174.188.50
  5746. Discovered open port 42400/tcp on 212.174.188.50
  5747. Discovered open port 36130/tcp on 212.174.188.50
  5748. Discovered open port 13412/tcp on 212.174.188.50
  5749. Discovered open port 18372/tcp on 212.174.188.50
  5750. Discovered open port 60595/tcp on 212.174.188.50
  5751. Discovered open port 32835/tcp on 212.174.188.50
  5752. Discovered open port 58529/tcp on 212.174.188.50
  5753. Discovered open port 6830/tcp on 212.174.188.50
  5754. Discovered open port 18497/tcp on 212.174.188.50
  5755. Discovered open port 36382/tcp on 212.174.188.50
  5756. Discovered open port 7048/tcp on 212.174.188.50
  5757. Discovered open port 36436/tcp on 212.174.188.50
  5758. Discovered open port 65116/tcp on 212.174.188.50
  5759. Discovered open port 54461/tcp on 212.174.188.50
  5760. Discovered open port 59477/tcp on 212.174.188.50
  5761. Discovered open port 22743/tcp on 212.174.188.50
  5762. Discovered open port 13728/tcp on 212.174.188.50
  5763. Discovered open port 45764/tcp on 212.174.188.50
  5764. Discovered open port 48954/tcp on 212.174.188.50
  5765. Discovered open port 53801/tcp on 212.174.188.50
  5766. Discovered open port 36515/tcp on 212.174.188.50
  5767. Discovered open port 14339/tcp on 212.174.188.50
  5768. Discovered open port 11494/tcp on 212.174.188.50
  5769. Discovered open port 24618/tcp on 212.174.188.50
  5770. Discovered open port 23170/tcp on 212.174.188.50
  5771. Discovered open port 27110/tcp on 212.174.188.50
  5772. Discovered open port 33437/tcp on 212.174.188.50
  5773. Discovered open port 9177/tcp on 212.174.188.50
  5774. Discovered open port 26346/tcp on 212.174.188.50
  5775. Discovered open port 64592/tcp on 212.174.188.50
  5776. Discovered open port 4884/tcp on 212.174.188.50
  5777. Discovered open port 42870/tcp on 212.174.188.50
  5778. Discovered open port 60686/tcp on 212.174.188.50
  5779. Discovered open port 4300/tcp on 212.174.188.50
  5780. Discovered open port 64752/tcp on 212.174.188.50
  5781. Discovered open port 61904/tcp on 212.174.188.50
  5782. Discovered open port 32719/tcp on 212.174.188.50
  5783. Discovered open port 49622/tcp on 212.174.188.50
  5784. Discovered open port 22019/tcp on 212.174.188.50
  5785. Discovered open port 48008/tcp on 212.174.188.50
  5786. Discovered open port 61161/tcp on 212.174.188.50
  5787. Discovered open port 58350/tcp on 212.174.188.50
  5788. Discovered open port 45874/tcp on 212.174.188.50
  5789. Discovered open port 18982/tcp on 212.174.188.50
  5790. Discovered open port 28970/tcp on 212.174.188.50
  5791. Discovered open port 45305/tcp on 212.174.188.50
  5792. Discovered open port 33107/tcp on 212.174.188.50
  5793. Discovered open port 19885/tcp on 212.174.188.50
  5794. Discovered open port 61830/tcp on 212.174.188.50
  5795. Discovered open port 47227/tcp on 212.174.188.50
  5796. Discovered open port 49013/tcp on 212.174.188.50
  5797. Discovered open port 45313/tcp on 212.174.188.50
  5798. Discovered open port 32942/tcp on 212.174.188.50
  5799. Discovered open port 29097/tcp on 212.174.188.50
  5800. Discovered open port 17984/tcp on 212.174.188.50
  5801. Discovered open port 37813/tcp on 212.174.188.50
  5802. Discovered open port 45795/tcp on 212.174.188.50
  5803. Discovered open port 55788/tcp on 212.174.188.50
  5804. Discovered open port 46707/tcp on 212.174.188.50
  5805. Discovered open port 48194/tcp on 212.174.188.50
  5806. Discovered open port 63785/tcp on 212.174.188.50
  5807. Discovered open port 14725/tcp on 212.174.188.50
  5808. Discovered open port 11958/tcp on 212.174.188.50
  5809. Discovered open port 22672/tcp on 212.174.188.50
  5810. Discovered open port 64707/tcp on 212.174.188.50
  5811. Discovered open port 26586/tcp on 212.174.188.50
  5812. Discovered open port 44838/tcp on 212.174.188.50
  5813. Discovered open port 23731/tcp on 212.174.188.50
  5814. Discovered open port 30034/tcp on 212.174.188.50
  5815. Discovered open port 60146/tcp on 212.174.188.50
  5816. Discovered open port 46449/tcp on 212.174.188.50
  5817. Discovered open port 19566/tcp on 212.174.188.50
  5818. Discovered open port 39062/tcp on 212.174.188.50
  5819. Discovered open port 61557/tcp on 212.174.188.50
  5820. Discovered open port 145/tcp on 212.174.188.50
  5821. Discovered open port 50111/tcp on 212.174.188.50
  5822. SYN Stealth Scan Timing: About 17.80% done; ETC: 23:57 (0:07:00 remaining)
  5823. SYN Stealth Scan Timing: About 20.00% done; ETC: 23:59 (0:08:04 remaining)
  5824. SYN Stealth Scan Timing: About 22.21% done; ETC: 00:00 (0:08:49 remaining)
  5825. SYN Stealth Scan Timing: About 24.86% done; ETC: 00:01 (0:09:25 remaining)
  5826. SYN Stealth Scan Timing: About 28.57% done; ETC: 00:03 (0:10:03 remaining)
  5827. SYN Stealth Scan Timing: About 46.35% done; ETC: 00:06 (0:09:20 remaining)
  5828. SYN Stealth Scan Timing: About 53.23% done; ETC: 00:07 (0:08:27 remaining)
  5829. SYN Stealth Scan Timing: About 59.42% done; ETC: 00:07 (0:07:31 remaining)
  5830. SYN Stealth Scan Timing: About 65.25% done; ETC: 00:08 (0:06:35 remaining)
  5831. SYN Stealth Scan Timing: About 70.90% done; ETC: 00:08 (0:05:37 remaining)
  5832. SYN Stealth Scan Timing: About 76.36% done; ETC: 00:08 (0:04:37 remaining)
  5833. SYN Stealth Scan Timing: About 81.66% done; ETC: 00:08 (0:03:37 remaining)
  5834. SYN Stealth Scan Timing: About 86.91% done; ETC: 00:09 (0:02:37 remaining)
  5835. SYN Stealth Scan Timing: About 92.08% done; ETC: 00:09 (0:01:36 remaining)
  5836. SYN Stealth Scan Timing: About 97.12% done; ETC: 00:09 (0:00:35 remaining)
  5837. Completed SYN Stealth Scan at 00:09, 1220.59s elapsed (65535 total ports)
  5838. Initiating Service scan at 00:09
  5839. Scanning 147 services on 212.174.188.50
  5840. Completed Service scan at 00:10, 40.02s elapsed (147 services on 1 host)
  5841. Initiating OS detection (try #1) against 212.174.188.50
  5842. Retrying OS detection (try #2) against 212.174.188.50
  5843. Initiating Traceroute at 00:10
  5844. Completed Traceroute at 00:10, 0.13s elapsed
  5845. Initiating Parallel DNS resolution of 2 hosts. at 00:10
  5846. Completed Parallel DNS resolution of 2 hosts. at 00:10, 6.08s elapsed
  5847. NSE: Script scanning 212.174.188.50.
  5848. Initiating NSE at 00:10
  5849. Completed NSE at 00:10, 12.95s elapsed
  5850. Initiating NSE at 00:10
  5851. Completed NSE at 00:10, 2.46s elapsed
  5852. Nmap scan report for 212.174.188.50
  5853. Host is up (0.100s latency).
  5854. Not shown: 65385 filtered ports
  5855. PORT STATE SERVICE VERSION
  5856. 25/tcp closed smtp
  5857. 80/tcp open http nginx
  5858. | vulscan: VulDB - https://vuldb.com:
  5859. | [133852] Sangfor Sundray WLAN Controller up to 3.7.4.2 Cookie Header nginx_webconsole.php Code Execution
  5860. | [132132] SoftNAS Cloud 4.2.0/4.2.1 Nginx privilege escalation
  5861. | [131858] Puppet Discovery up to 1.3.x Nginx Container weak authentication
  5862. | [130644] Nginx Unit up to 1.7.0 Router Process Request Heap-based memory corruption
  5863. | [127759] VeryNginx 0.3.3 Web Application Firewall privilege escalation
  5864. | [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
  5865. | [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
  5866. | [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
  5867. | [119845] Pivotal Operations Manager up to 2.0.13/2.1.5 Nginx privilege escalation
  5868. | [114368] SuSE Portus 2.3 Nginx Certificate weak authentication
  5869. | [103517] nginx up to 1.13.2 Range Filter Request Integer Overflow memory corruption
  5870. | [89849] nginx RFC 3875 Namespace Conflict Environment Variable Open Redirect
  5871. | [87719] nginx up to 1.11.0 ngx_files.c ngx_chain_to_iovec denial of service
  5872. | [80760] nginx 0.6.18/1.9.9 DNS CNAME Record Crash denial of service
  5873. | [80759] nginx 0.6.18/1.9.9 DNS CNAME Record Use-After-Free denial of service
  5874. | [80758] nginx 0.6.18/1.9.9 DNS UDP Packet Crash denial of service
  5875. | [67677] nginx up to 1.7.3 SSL weak authentication
  5876. | [67296] nginx up to 1.7.3 SMTP Proxy ngx_mail_smtp_starttls privilege escalation
  5877. | [12822] nginx up to 1.5.11 SPDY SPDY Request Heap-based memory corruption
  5878. | [12824] nginx 1.5.10 on 32-bit SPDY memory corruption
  5879. | [11237] nginx up to 1.5.6 URI String Bypass privilege escalation
  5880. | [65364] nginx up to 1.1.13 Default Configuration information disclosure
  5881. | [8671] nginx up to 1.4 proxy_pass denial of service
  5882. | [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
  5883. | [7247] nginx 1.2.6 Proxy Function spoofing
  5884. | [61434] nginx 1.2.0/1.3.0 on Windows Access Restriction privilege escalation
  5885. | [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
  5886. | [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
  5887. | [59645] nginx up to 0.8.9 Heap-based memory corruption
  5888. | [53592] nginx 0.8.36 memory corruption
  5889. | [53590] nginx up to 0.8.9 unknown vulnerability
  5890. | [51533] nginx 0.7.64 Terminal privilege escalation
  5891. | [50905] nginx up to 0.8.9 directory traversal
  5892. | [50903] nginx up to 0.8.10 NULL Pointer Dereference denial of service
  5893. | [50043] nginx up to 0.8.10 memory corruption
  5894. |
  5895. | MITRE CVE - https://cve.mitre.org:
  5896. | [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
  5897. | [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
  5898. | [CVE-2012-3380] Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
  5899. | [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
  5900. | [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
  5901. | [CVE-2011-4963] nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
  5902. | [CVE-2011-4315] Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
  5903. | [CVE-2010-2266] nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
  5904. | [CVE-2010-2263] nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
  5905. | [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
  5906. | [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
  5907. | [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
  5908. | [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
  5909. |
  5910. | SecurityFocus - https://www.securityfocus.com/bid/:
  5911. | [99534] Nginx CVE-2017-7529 Remote Integer Overflow Vulnerability
  5912. | [93903] Nginx CVE-2016-1247 Remote Privilege Escalation Vulnerability
  5913. | [91819] Nginx CVE-2016-1000105 Security Bypass Vulnerability
  5914. | [90967] nginx CVE-2016-4450 Denial of Service Vulnerability
  5915. | [82230] nginx Multiple Denial of Service Vulnerabilities
  5916. | [78928] Nginx CVE-2010-2266 Denial-Of-Service Vulnerability
  5917. | [70025] nginx CVE-2014-3616 SSL Session Fixation Vulnerability
  5918. | [69111] nginx SMTP Proxy Remote Command Injection Vulnerability
  5919. | [67507] nginx SPDY Implementation CVE-2014-0088 Arbitrary Code Execution Vulnerability
  5920. | [66537] nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability
  5921. | [63814] nginx CVE-2013-4547 URI Processing Security Bypass Vulnerability
  5922. | [59824] Nginx CVE-2013-2070 Remote Security Vulnerability
  5923. | [59699] nginx 'ngx_http_parse.c' Stack Buffer Overflow Vulnerability
  5924. | [59496] nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability
  5925. | [59323] nginx NULL-Byte Arbitrary Code Execution Vulnerability
  5926. | [58105] Nginx 'access.log' Insecure File Permissions Vulnerability
  5927. | [57139] nginx CVE-2011-4968 Man in The Middle Vulnerability
  5928. | [55920] nginx CVE-2011-4963 Security Bypass Vulnerability
  5929. | [54331] Nginx Naxsi Module 'nx_extract.py' Script Remote File Disclosure Vulnerability
  5930. | [52999] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  5931. | [52578] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  5932. | [50710] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  5933. | [40760] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  5934. | [40434] nginx Space String Remote Source Code Disclosure Vulnerability
  5935. | [40420] nginx Directory Traversal Vulnerability
  5936. | [37711] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  5937. | [36839] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  5938. | [36490] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  5939. | [36438] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  5940. | [36384] nginx HTTP Request Remote Buffer Overflow Vulnerability
  5941. |
  5942. | IBM X-Force - https://exchange.xforce.ibmcloud.com:
  5943. | [84623] Phusion Passenger gem for Ruby with nginx configuration insecure permissions
  5944. | [84172] nginx denial of service
  5945. | [84048] nginx buffer overflow
  5946. | [83923] nginx ngx_http_close_connection() integer overflow
  5947. | [83688] nginx null byte code execution
  5948. | [83103] Naxsi module for Nginx naxsi_unescape_uri() function security bypass
  5949. | [82319] nginx access.log information disclosure
  5950. | [80952] nginx SSL spoofing
  5951. | [77244] nginx and Microsoft Windows request security bypass
  5952. | [76778] Naxsi module for Nginx nx_extract.py directory traversal
  5953. | [74831] nginx ngx_http_mp4_module.c buffer overflow
  5954. | [74191] nginx ngx_cpystrn() information disclosure
  5955. | [74045] nginx header response information disclosure
  5956. | [71355] nginx ngx_resolver_copy() buffer overflow
  5957. | [59370] nginx characters denial of service
  5958. | [59369] nginx DATA source code disclosure
  5959. | [59047] nginx space source code disclosure
  5960. | [58966] nginx unspecified directory traversal
  5961. | [54025] nginx ngx_http_parse.c denial of service
  5962. | [53431] nginx WebDAV component directory traversal
  5963. | [53328] Nginx CRC-32 cached domain name spoofing
  5964. | [53250] Nginx ngx_http_parse_complex_uri() function code execution
  5965. |
  5966. | Exploit-DB - https://www.exploit-db.com:
  5967. | [26737] nginx 1.3.9/1.4.0 x86 Brute Force Remote Exploit
  5968. | [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
  5969. | [25499] nginx 1.3.9-1.4.0 DoS PoC
  5970. | [24967] nginx 0.6.x Arbitrary Code Execution NullByte Injection
  5971. | [14830] nginx 0.6.38 - Heap Corruption Exploit
  5972. | [13822] Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability
  5973. | [13818] Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities
  5974. | [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
  5975. | [9901] nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC
  5976. | [9829] nginx 0.7.61 WebDAV directory traversal
  5977. |
  5978. | OpenVAS (Nessus) - http://www.openvas.org:
  5979. | [864418] Fedora Update for nginx FEDORA-2012-3846
  5980. | [864310] Fedora Update for nginx FEDORA-2012-6238
  5981. | [864209] Fedora Update for nginx FEDORA-2012-6411
  5982. | [864204] Fedora Update for nginx FEDORA-2012-6371
  5983. | [864121] Fedora Update for nginx FEDORA-2012-4006
  5984. | [864115] Fedora Update for nginx FEDORA-2012-3991
  5985. | [864065] Fedora Update for nginx FEDORA-2011-16075
  5986. | [863654] Fedora Update for nginx FEDORA-2011-16110
  5987. | [861232] Fedora Update for nginx FEDORA-2007-1158
  5988. | [850180] SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
  5989. | [831680] Mandriva Update for nginx MDVSA-2012:043 (nginx)
  5990. | [802045] 64-bit Debian Linux Rootkit with nginx Doing iFrame Injection
  5991. | [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
  5992. | [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  5993. | [103469] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  5994. | [103344] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  5995. | [100676] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  5996. | [100659] nginx Directory Traversal Vulnerability
  5997. | [100658] nginx Space String Remote Source Code Disclosure Vulnerability
  5998. | [100441] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  5999. | [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  6000. | [100277] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  6001. | [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
  6002. | [100275] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  6003. | [71574] Gentoo Security Advisory GLSA 201206-07 (nginx)
  6004. | [71308] Gentoo Security Advisory GLSA 201203-22 (nginx)
  6005. | [71297] FreeBSD Ports: nginx
  6006. | [71276] FreeBSD Ports: nginx
  6007. | [71239] Debian Security Advisory DSA 2434-1 (nginx)
  6008. | [66451] Fedora Core 11 FEDORA-2009-12782 (nginx)
  6009. | [66450] Fedora Core 10 FEDORA-2009-12775 (nginx)
  6010. | [66449] Fedora Core 12 FEDORA-2009-12750 (nginx)
  6011. | [64924] Gentoo Security Advisory GLSA 200909-18 (nginx)
  6012. | [64912] Fedora Core 10 FEDORA-2009-9652 (nginx)
  6013. | [64911] Fedora Core 11 FEDORA-2009-9630 (nginx)
  6014. | [64894] FreeBSD Ports: nginx
  6015. | [64869] Debian Security Advisory DSA 1884-1 (nginx)
  6016. |
  6017. | SecurityTracker - https://www.securitytracker.com:
  6018. | [1028544] nginx Bug Lets Remote Users Deny Service or Obtain Potentially Sensitive Information
  6019. | [1028519] nginx Stack Overflow Lets Remote Users Execute Arbitrary Code
  6020. | [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
  6021. | [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
  6022. |
  6023. | OSVDB - http://www.osvdb.org:
  6024. | [94864] cPnginx Plugin for cPanel nginx Configuration Manipulation Arbitrary File Access
  6025. | [93282] nginx proxy_pass Crafted Upstream Proxied Server Response Handling Worker Process Memory Disclosure
  6026. | [93037] nginx /http/ngx_http_parse.c Worker Process Crafted Request Handling Remote Overflow
  6027. | [92796] nginx ngx_http_close_connection Function Crafted r-&gt
  6028. | [92634] nginx ngx_http_request.h zero_in_uri URL Null Byte Handling Remote Code Execution
  6029. | [90518] nginx Log Directory Permission Weakness Local Information Disclosure
  6030. | [88910] nginx Proxy Functionality SSL Certificate Validation MitM Spoofing Weakness
  6031. | [84339] nginx/Windows Multiple Request Sequence Parsing Arbitrary File Access
  6032. | [83617] Naxsi Module for Nginx naxsi-ui/ nx_extract.py Traversal Arbitrary File Access
  6033. | [81339] nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
  6034. | [80124] nginx HTTP Header Response Parsing Freed Memory Information Disclosure
  6035. | [77184] nginx ngx_resolver.c ngx_resolver_copy() Function DNS Response Parsing Remote Overflow
  6036. | [65531] nginx on Windows URI ::$DATA Append Arbitrary File Access
  6037. | [65530] nginx Encoded Traversal Sequence Memory Corruption Remote DoS
  6038. | [65294] nginx on Windows Encoded Space Request Remote Source Disclosure
  6039. | [63136] nginx on Windows 8.3 Filename Alias Request Access Rules / Authentication Bypass
  6040. | [62617] nginx Internal DNS Cache Poisoning Weakness
  6041. | [61779] nginx HTTP Request Escape Sequence Terminal Command Injection
  6042. | [59278] nginx src/http/ngx_http_parse.c ngx_http_process_request_headers() Function URL Handling NULL Dereference DoS
  6043. | [58328] nginx WebDAV Multiple Method Traversal Arbitrary File Write
  6044. | [58128] nginx ngx_http_parse_complex_uri() Function Underflow
  6045. | [44447] nginx (engine x) msie_refresh Directive Unspecified XSS
  6046. | [44446] nginx (engine x) ssl_verify_client Directive HTTP/0.9 Protocol Bypass
  6047. | [44445] nginx (engine x) ngx_http_realip_module satisfy_any Directive Unspecified Access Bypass
  6048. | [44444] nginx (engine x) X-Accel-Redirect Header Unspecified Traversal
  6049. | [44443] nginx (engine x) rtsig Method Signal Queue Overflow
  6050. | [44442] nginx (engine x) Worker Process Millisecond Timers Unspecified Overflow
  6051. |_
  6052. 139/tcp closed netbios-ssn
  6053. 145/tcp open tcpwrapped
  6054. 443/tcp open ssl/http nginx
  6055. | vulscan: VulDB - https://vuldb.com:
  6056. | [133852] Sangfor Sundray WLAN Controller up to 3.7.4.2 Cookie Header nginx_webconsole.php Code Execution
  6057. | [132132] SoftNAS Cloud 4.2.0/4.2.1 Nginx privilege escalation
  6058. | [131858] Puppet Discovery up to 1.3.x Nginx Container weak authentication
  6059. | [130644] Nginx Unit up to 1.7.0 Router Process Request Heap-based memory corruption
  6060. | [127759] VeryNginx 0.3.3 Web Application Firewall privilege escalation
  6061. | [126525] nginx up to 1.14.0/1.15.5 ngx_http_mp4_module Loop denial of service
  6062. | [126524] nginx up to 1.14.0/1.15.5 HTTP2 CPU Exhaustion denial of service
  6063. | [126523] nginx up to 1.14.0/1.15.5 HTTP2 Memory Consumption denial of service
  6064. | [119845] Pivotal Operations Manager up to 2.0.13/2.1.5 Nginx privilege escalation
  6065. | [114368] SuSE Portus 2.3 Nginx Certificate weak authentication
  6066. | [103517] nginx up to 1.13.2 Range Filter Request Integer Overflow memory corruption
  6067. | [89849] nginx RFC 3875 Namespace Conflict Environment Variable Open Redirect
  6068. | [87719] nginx up to 1.11.0 ngx_files.c ngx_chain_to_iovec denial of service
  6069. | [80760] nginx 0.6.18/1.9.9 DNS CNAME Record Crash denial of service
  6070. | [80759] nginx 0.6.18/1.9.9 DNS CNAME Record Use-After-Free denial of service
  6071. | [80758] nginx 0.6.18/1.9.9 DNS UDP Packet Crash denial of service
  6072. | [67677] nginx up to 1.7.3 SSL weak authentication
  6073. | [67296] nginx up to 1.7.3 SMTP Proxy ngx_mail_smtp_starttls privilege escalation
  6074. | [12822] nginx up to 1.5.11 SPDY SPDY Request Heap-based memory corruption
  6075. | [12824] nginx 1.5.10 on 32-bit SPDY memory corruption
  6076. | [11237] nginx up to 1.5.6 URI String Bypass privilege escalation
  6077. | [65364] nginx up to 1.1.13 Default Configuration information disclosure
  6078. | [8671] nginx up to 1.4 proxy_pass denial of service
  6079. | [8618] nginx 1.3.9/1.4.0 http/ngx_http_parse.c ngx_http_parse_chunked() memory corruption
  6080. | [7247] nginx 1.2.6 Proxy Function spoofing
  6081. | [61434] nginx 1.2.0/1.3.0 on Windows Access Restriction privilege escalation
  6082. | [5293] nginx up to 1.1.18 ngx_http_mp4_module MP4 File memory corruption
  6083. | [4843] nginx up to 1.0.13/1.1.16 HTTP Header Response Parser ngx_http_parse.c information disclosure
  6084. | [59645] nginx up to 0.8.9 Heap-based memory corruption
  6085. | [53592] nginx 0.8.36 memory corruption
  6086. | [53590] nginx up to 0.8.9 unknown vulnerability
  6087. | [51533] nginx 0.7.64 Terminal privilege escalation
  6088. | [50905] nginx up to 0.8.9 directory traversal
  6089. | [50903] nginx up to 0.8.10 NULL Pointer Dereference denial of service
  6090. | [50043] nginx up to 0.8.10 memory corruption
  6091. |
  6092. | MITRE CVE - https://cve.mitre.org:
  6093. | [CVE-2013-2070] http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (crash) and obtain sensitive information from worker process memory via a crafted proxy response, a similar vulnerability to CVE-2013-2028.
  6094. | [CVE-2013-2028] The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.
  6095. | [CVE-2012-3380] Directory traversal vulnerability in naxsi-ui/nx_extract.py in the Naxsi module before 0.46-1 for Nginx allows local users to read arbitrary files via unspecified vectors.
  6096. | [CVE-2012-2089] Buffer overflow in ngx_http_mp4_module.c in the ngx_http_mp4_module module in nginx 1.0.7 through 1.0.14 and 1.1.3 through 1.1.18, when the mp4 directive is used, allows remote attackers to cause a denial of service (memory overwrite) or possibly execute arbitrary code via a crafted MP4 file.
  6097. | [CVE-2012-1180] Use-after-free vulnerability in nginx before 1.0.14 and 1.1.x before 1.1.17 allows remote HTTP servers to obtain sensitive information from process memory via a crafted backend response, in conjunction with a client request.
  6098. | [CVE-2011-4963] nginx/Windows 1.3.x before 1.3.1 and 1.2.x before 1.2.1 allows remote attackers to bypass intended access restrictions and access restricted files via (1) a trailing . (dot) or (2) certain "$index_allocation" sequences in a request.
  6099. | [CVE-2011-4315] Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long response.
  6100. | [CVE-2010-2266] nginx 0.8.36 allows remote attackers to cause a denial of service (crash) via certain encoded directory traversal sequences that trigger memory corruption, as demonstrated using the "%c0.%c0." sequence.
  6101. | [CVE-2010-2263] nginx 0.8 before 0.8.40 and 0.7 before 0.7.66, when running on Windows, allows remote attackers to obtain source code or unparsed content of arbitrary files under the web document root by appending ::$DATA to the URI.
  6102. | [CVE-2009-4487] nginx 0.7.64 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
  6103. | [CVE-2009-3898] Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
  6104. | [CVE-2009-3896] src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
  6105. | [CVE-2009-2629] Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.15 allows remote attackers to execute arbitrary code via crafted HTTP requests.
  6106. |
  6107. | SecurityFocus - https://www.securityfocus.com/bid/:
  6108. | [99534] Nginx CVE-2017-7529 Remote Integer Overflow Vulnerability
  6109. | [93903] Nginx CVE-2016-1247 Remote Privilege Escalation Vulnerability
  6110. | [91819] Nginx CVE-2016-1000105 Security Bypass Vulnerability
  6111. | [90967] nginx CVE-2016-4450 Denial of Service Vulnerability
  6112. | [82230] nginx Multiple Denial of Service Vulnerabilities
  6113. | [78928] Nginx CVE-2010-2266 Denial-Of-Service Vulnerability
  6114. | [70025] nginx CVE-2014-3616 SSL Session Fixation Vulnerability
  6115. | [69111] nginx SMTP Proxy Remote Command Injection Vulnerability
  6116. | [67507] nginx SPDY Implementation CVE-2014-0088 Arbitrary Code Execution Vulnerability
  6117. | [66537] nginx SPDY Implementation Heap Based Buffer Overflow Vulnerability
  6118. | [63814] nginx CVE-2013-4547 URI Processing Security Bypass Vulnerability
  6119. | [59824] Nginx CVE-2013-2070 Remote Security Vulnerability
  6120. | [59699] nginx 'ngx_http_parse.c' Stack Buffer Overflow Vulnerability
  6121. | [59496] nginx 'ngx_http_close_connection()' Remote Integer Overflow Vulnerability
  6122. | [59323] nginx NULL-Byte Arbitrary Code Execution Vulnerability
  6123. | [58105] Nginx 'access.log' Insecure File Permissions Vulnerability
  6124. | [57139] nginx CVE-2011-4968 Man in The Middle Vulnerability
  6125. | [55920] nginx CVE-2011-4963 Security Bypass Vulnerability
  6126. | [54331] Nginx Naxsi Module 'nx_extract.py' Script Remote File Disclosure Vulnerability
  6127. | [52999] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  6128. | [52578] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  6129. | [50710] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  6130. | [40760] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  6131. | [40434] nginx Space String Remote Source Code Disclosure Vulnerability
  6132. | [40420] nginx Directory Traversal Vulnerability
  6133. | [37711] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  6134. | [36839] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  6135. | [36490] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  6136. | [36438] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  6137. | [36384] nginx HTTP Request Remote Buffer Overflow Vulnerability
  6138. |
  6139. | IBM X-Force - https://exchange.xforce.ibmcloud.com:
  6140. | [84623] Phusion Passenger gem for Ruby with nginx configuration insecure permissions
  6141. | [84172] nginx denial of service
  6142. | [84048] nginx buffer overflow
  6143. | [83923] nginx ngx_http_close_connection() integer overflow
  6144. | [83688] nginx null byte code execution
  6145. | [83103] Naxsi module for Nginx naxsi_unescape_uri() function security bypass
  6146. | [82319] nginx access.log information disclosure
  6147. | [80952] nginx SSL spoofing
  6148. | [77244] nginx and Microsoft Windows request security bypass
  6149. | [76778] Naxsi module for Nginx nx_extract.py directory traversal
  6150. | [74831] nginx ngx_http_mp4_module.c buffer overflow
  6151. | [74191] nginx ngx_cpystrn() information disclosure
  6152. | [74045] nginx header response information disclosure
  6153. | [71355] nginx ngx_resolver_copy() buffer overflow
  6154. | [59370] nginx characters denial of service
  6155. | [59369] nginx DATA source code disclosure
  6156. | [59047] nginx space source code disclosure
  6157. | [58966] nginx unspecified directory traversal
  6158. | [54025] nginx ngx_http_parse.c denial of service
  6159. | [53431] nginx WebDAV component directory traversal
  6160. | [53328] Nginx CRC-32 cached domain name spoofing
  6161. | [53250] Nginx ngx_http_parse_complex_uri() function code execution
  6162. |
  6163. | Exploit-DB - https://www.exploit-db.com:
  6164. | [26737] nginx 1.3.9/1.4.0 x86 Brute Force Remote Exploit
  6165. | [25775] Nginx HTTP Server 1.3.9-1.4.0 Chuncked Encoding Stack Buffer Overflow
  6166. | [25499] nginx 1.3.9-1.4.0 DoS PoC
  6167. | [24967] nginx 0.6.x Arbitrary Code Execution NullByte Injection
  6168. | [14830] nginx 0.6.38 - Heap Corruption Exploit
  6169. | [13822] Nginx <= 0.7.65 / 0.8.39 (dev) Source Disclosure / Download Vulnerability
  6170. | [13818] Nginx 0.8.36 Source Disclosure and DoS Vulnerabilities
  6171. | [12804] nginx [engine x] http server <= 0.6.36 Path Draversal
  6172. | [9901] nginx 0.7.0-0.7.61, 0.6.0-0.6.38, 0.5.0-0.5.37, 0.4.0-0.4.14 PoC
  6173. | [9829] nginx 0.7.61 WebDAV directory traversal
  6174. |
  6175. | OpenVAS (Nessus) - http://www.openvas.org:
  6176. | [864418] Fedora Update for nginx FEDORA-2012-3846
  6177. | [864310] Fedora Update for nginx FEDORA-2012-6238
  6178. | [864209] Fedora Update for nginx FEDORA-2012-6411
  6179. | [864204] Fedora Update for nginx FEDORA-2012-6371
  6180. | [864121] Fedora Update for nginx FEDORA-2012-4006
  6181. | [864115] Fedora Update for nginx FEDORA-2012-3991
  6182. | [864065] Fedora Update for nginx FEDORA-2011-16075
  6183. | [863654] Fedora Update for nginx FEDORA-2011-16110
  6184. | [861232] Fedora Update for nginx FEDORA-2007-1158
  6185. | [850180] SuSE Update for nginx openSUSE-SU-2012:0237-1 (nginx)
  6186. | [831680] Mandriva Update for nginx MDVSA-2012:043 (nginx)
  6187. | [802045] 64-bit Debian Linux Rootkit with nginx Doing iFrame Injection
  6188. | [801636] nginx HTTP Request Remote Buffer Overflow Vulnerability
  6189. | [103470] nginx 'ngx_http_mp4_module.c' Buffer Overflow Vulnerability
  6190. | [103469] nginx 'ngx_cpystrn()' Information Disclosure Vulnerability
  6191. | [103344] nginx DNS Resolver Remote Heap Buffer Overflow Vulnerability
  6192. | [100676] nginx Remote Source Code Disclosure and Denial of Service Vulnerabilities
  6193. | [100659] nginx Directory Traversal Vulnerability
  6194. | [100658] nginx Space String Remote Source Code Disclosure Vulnerability
  6195. | [100441] nginx Terminal Escape Sequence in Logs Command Injection Vulnerability
  6196. | [100321] nginx 'ngx_http_process_request_headers()' Remote Buffer Overflow Vulnerability
  6197. | [100277] nginx Proxy DNS Cache Domain Spoofing Vulnerability
  6198. | [100276] nginx HTTP Request Remote Buffer Overflow Vulnerability
  6199. | [100275] nginx WebDAV Multiple Directory Traversal Vulnerabilities
  6200. | [71574] Gentoo Security Advisory GLSA 201206-07 (nginx)
  6201. | [71308] Gentoo Security Advisory GLSA 201203-22 (nginx)
  6202. | [71297] FreeBSD Ports: nginx
  6203. | [71276] FreeBSD Ports: nginx
  6204. | [71239] Debian Security Advisory DSA 2434-1 (nginx)
  6205. | [66451] Fedora Core 11 FEDORA-2009-12782 (nginx)
  6206. | [66450] Fedora Core 10 FEDORA-2009-12775 (nginx)
  6207. | [66449] Fedora Core 12 FEDORA-2009-12750 (nginx)
  6208. | [64924] Gentoo Security Advisory GLSA 200909-18 (nginx)
  6209. | [64912] Fedora Core 10 FEDORA-2009-9652 (nginx)
  6210. | [64911] Fedora Core 11 FEDORA-2009-9630 (nginx)
  6211. | [64894] FreeBSD Ports: nginx
  6212. | [64869] Debian Security Advisory DSA 1884-1 (nginx)
  6213. |
  6214. | SecurityTracker - https://www.securitytracker.com:
  6215. | [1028544] nginx Bug Lets Remote Users Deny Service or Obtain Potentially Sensitive Information
  6216. | [1028519] nginx Stack Overflow Lets Remote Users Execute Arbitrary Code
  6217. | [1026924] nginx Buffer Overflow in ngx_http_mp4_module Lets Remote Users Execute Arbitrary Code
  6218. | [1026827] nginx HTTP Response Processing Lets Remote Users Obtain Portions of Memory Contents
  6219. |
  6220. | OSVDB - http://www.osvdb.org:
  6221. | [94864] cPnginx Plugin for cPanel nginx Configuration Manipulation Arbitrary File Access
  6222. | [93282] nginx proxy_pass Crafted Upstream Proxied Server Response Handling Worker Process Memory Disclosure
  6223. | [93037] nginx /http/ngx_http_parse.c Worker Process Crafted Request Handling Remote Overflow
  6224. | [92796] nginx ngx_http_close_connection Function Crafted r-&gt
  6225. | [92634] nginx ngx_http_request.h zero_in_uri URL Null Byte Handling Remote Code Execution
  6226. | [90518] nginx Log Directory Permission Weakness Local Information Disclosure
  6227. | [88910] nginx Proxy Functionality SSL Certificate Validation MitM Spoofing Weakness
  6228. | [84339] nginx/Windows Multiple Request Sequence Parsing Arbitrary File Access
  6229. | [83617] Naxsi Module for Nginx naxsi-ui/ nx_extract.py Traversal Arbitrary File Access
  6230. | [81339] nginx ngx_http_mp4_module Module Atom MP4 File Handling Remote Overflow
  6231. | [80124] nginx HTTP Header Response Parsing Freed Memory Information Disclosure
  6232. | [77184] nginx ngx_resolver.c ngx_resolver_copy() Function DNS Response Parsing Remote Overflow
  6233. | [65531] nginx on Windows URI ::$DATA Append Arbitrary File Access
  6234. | [65530] nginx Encoded Traversal Sequence Memory Corruption Remote DoS
  6235. | [65294] nginx on Windows Encoded Space Request Remote Source Disclosure
  6236. | [63136] nginx on Windows 8.3 Filename Alias Request Access Rules / Authentication Bypass
  6237. | [62617] nginx Internal DNS Cache Poisoning Weakness
  6238. | [61779] nginx HTTP Request Escape Sequence Terminal Command Injection
  6239. | [59278] nginx src/http/ngx_http_parse.c ngx_http_process_request_headers() Function URL Handling NULL Dereference DoS
  6240. | [58328] nginx WebDAV Multiple Method Traversal Arbitrary File Write
  6241. | [58128] nginx ngx_http_parse_complex_uri() Function Underflow
  6242. | [44447] nginx (engine x) msie_refresh Directive Unspecified XSS
  6243. | [44446] nginx (engine x) ssl_verify_client Directive HTTP/0.9 Protocol Bypass
  6244. | [44445] nginx (engine x) ngx_http_realip_module satisfy_any Directive Unspecified Access Bypass
  6245. | [44444] nginx (engine x) X-Accel-Redirect Header Unspecified Traversal
  6246. | [44443] nginx (engine x) rtsig Method Signal Queue Overflow
  6247. | [44442] nginx (engine x) Worker Process Millisecond Timers Unspecified Overflow
  6248. |_
  6249. 445/tcp closed microsoft-ds
  6250. 1012/tcp open tcpwrapped
  6251. 1996/tcp open tcpwrapped
  6252. 2663/tcp open tcpwrapped
  6253. 4300/tcp open tcpwrapped
  6254. 4884/tcp open tcpwrapped
  6255. 6830/tcp open tcpwrapped
  6256. 7019/tcp open tcpwrapped
  6257. 7048/tcp open tcpwrapped
  6258. 7220/tcp open tcpwrapped
  6259. 7462/tcp open tcpwrapped
  6260. 9177/tcp open tcpwrapped
  6261. 10785/tcp open tcpwrapped
  6262. 11086/tcp open tcpwrapped
  6263. 11494/tcp open tcpwrapped
  6264. 11958/tcp open tcpwrapped
  6265. 13412/tcp open tcpwrapped
  6266. 13728/tcp open tcpwrapped
  6267. 14339/tcp open tcpwrapped
  6268. 14570/tcp open tcpwrapped
  6269. 14725/tcp open tcpwrapped
  6270. 14878/tcp open tcpwrapped
  6271. 15044/tcp open tcpwrapped
  6272. 15557/tcp open tcpwrapped
  6273. 15601/tcp open tcpwrapped
  6274. 15670/tcp open tcpwrapped
  6275. 17984/tcp open tcpwrapped
  6276. 18372/tcp open tcpwrapped
  6277. 18497/tcp open tcpwrapped
  6278. 18825/tcp open tcpwrapped
  6279. 18982/tcp open tcpwrapped
  6280. 18985/tcp open tcpwrapped
  6281. 19566/tcp open tcpwrapped
  6282. 19885/tcp open tcpwrapped
  6283. 20457/tcp open tcpwrapped
  6284. 21697/tcp open tcpwrapped
  6285. 22019/tcp open tcpwrapped
  6286. 22672/tcp open tcpwrapped
  6287. 22743/tcp open tcpwrapped
  6288. 23170/tcp open tcpwrapped
  6289. 23516/tcp open tcpwrapped
  6290. 23731/tcp open tcpwrapped
  6291. 24618/tcp open tcpwrapped
  6292. 24946/tcp open tcpwrapped
  6293. 25365/tcp open tcpwrapped
  6294. 26048/tcp open tcpwrapped
  6295. 26346/tcp open tcpwrapped
  6296. 26586/tcp open tcpwrapped
  6297. 27110/tcp open tcpwrapped
  6298. 27429/tcp open tcpwrapped
  6299. 27991/tcp open tcpwrapped
  6300. 28728/tcp open tcpwrapped
  6301. 28970/tcp open tcpwrapped
  6302. 29097/tcp open tcpwrapped
  6303. 29674/tcp open tcpwrapped
  6304. 30034/tcp open tcpwrapped
  6305. 30285/tcp open tcpwrapped
  6306. 30369/tcp open tcpwrapped
  6307. 32719/tcp open tcpwrapped
  6308. 32726/tcp open tcpwrapped
  6309. 32803/tcp open tcpwrapped
  6310. 32835/tcp open tcpwrapped
  6311. 32876/tcp open tcpwrapped
  6312. 32942/tcp open tcpwrapped
  6313. 33107/tcp open tcpwrapped
  6314. 33437/tcp open tcpwrapped
  6315. 33688/tcp open tcpwrapped
  6316. 33789/tcp open tcpwrapped
  6317. 35234/tcp open tcpwrapped
  6318. 35394/tcp open tcpwrapped
  6319. 35974/tcp open tcpwrapped
  6320. 36130/tcp open tcpwrapped
  6321. 36363/tcp open tcpwrapped
  6322. 36382/tcp open tcpwrapped
  6323. 36436/tcp open tcpwrapped
  6324. 36515/tcp open tcpwrapped
  6325. 37813/tcp open tcpwrapped
  6326. 38397/tcp open tcpwrapped
  6327. 38957/tcp open tcpwrapped
  6328. 39006/tcp open tcpwrapped
  6329. 39062/tcp open tcpwrapped
  6330. 41424/tcp open tcpwrapped
  6331. 41727/tcp open tcpwrapped
  6332. 42400/tcp open tcpwrapped
  6333. 42870/tcp open tcpwrapped
  6334. 43401/tcp open tcpwrapped
  6335. 44428/tcp open tcpwrapped
  6336. 44838/tcp open tcpwrapped
  6337. 45305/tcp open tcpwrapped
  6338. 45313/tcp open tcpwrapped
  6339. 45430/tcp open tcpwrapped
  6340. 45695/tcp open tcpwrapped
  6341. 45764/tcp open tcpwrapped
  6342. 45795/tcp open tcpwrapped
  6343. 45874/tcp open tcpwrapped
  6344. 46391/tcp open tcpwrapped
  6345. 46427/tcp open tcpwrapped
  6346. 46449/tcp open tcpwrapped
  6347. 46707/tcp open tcpwrapped
  6348. 46979/tcp open tcpwrapped
  6349. 46995/tcp open tcpwrapped
  6350. 47227/tcp open tcpwrapped
  6351. 47415/tcp open tcpwrapped
  6352. 47766/tcp open tcpwrapped
  6353. 47796/tcp open tcpwrapped
  6354. 48008/tcp open tcpwrapped
  6355. 48194/tcp open tcpwrapped
  6356. 48932/tcp open tcpwrapped
  6357. 48954/tcp open tcpwrapped
  6358. 49013/tcp open tcpwrapped
  6359. 49097/tcp open tcpwrapped
  6360. 49622/tcp open tcpwrapped
  6361. 49693/tcp open tcpwrapped
  6362. 49996/tcp open tcpwrapped
  6363. 50111/tcp open tcpwrapped
  6364. 50714/tcp open tcpwrapped
  6365. 52299/tcp open tcpwrapped
  6366. 53123/tcp open tcpwrapped
  6367. 53801/tcp open tcpwrapped
  6368. 54461/tcp open tcpwrapped
  6369. 54484/tcp open tcpwrapped
  6370. 55788/tcp open tcpwrapped
  6371. 56976/tcp open tcpwrapped
  6372. 58350/tcp open tcpwrapped
  6373. 58529/tcp open tcpwrapped
  6374. 59083/tcp open tcpwrapped
  6375. 59477/tcp open tcpwrapped
  6376. 60146/tcp open tcpwrapped
  6377. 60345/tcp open tcpwrapped
  6378. 60595/tcp open tcpwrapped
  6379. 60686/tcp open tcpwrapped
  6380. 61161/tcp open tcpwrapped
  6381. 61166/tcp open tcpwrapped
  6382. 61557/tcp open tcpwrapped
  6383. 61830/tcp open tcpwrapped
  6384. 61861/tcp open tcpwrapped
  6385. 61904/tcp open tcpwrapped
  6386. 63352/tcp open tcpwrapped
  6387. 63785/tcp open tcpwrapped
  6388. 64396/tcp open tcpwrapped
  6389. 64592/tcp open tcpwrapped
  6390. 64707/tcp open tcpwrapped
  6391. 64752/tcp open tcpwrapped
  6392. 64833/tcp open tcpwrapped
  6393. 65116/tcp open tcpwrapped
  6394. Device type: general purpose
  6395. Running (JUST GUESSING): Linux 3.X|2.6.X|4.X (94%)
  6396. OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:4.4
  6397. Aggressive OS guesses: Linux 3.10 - 3.12 (94%), Linux 2.6.18 - 2.6.22 (91%), Linux 2.6.32 - 3.1 (89%), Linux 2.6.32 (88%), Linux 4.4 (86%), Linux 3.10 (86%), Linux 3.10 - 3.16 (86%), Linux 3.10 - 4.11 (85%), Linux 3.5 (85%), Linux 4.0 (85%)
  6398. No exact OS matches for host (test conditions non-ideal).
  6399. Uptime guess: 11.872 days (since Sun Sep 29 03:14:49 2019)
  6400. Network Distance: 2 hops
  6401. TCP Sequence Prediction: Difficulty=259 (Good luck!)
  6402. IP ID Sequence Generation: All zeros
  6403.  
  6404. TRACEROUTE (using port 445/tcp)
  6405. HOP RTT ADDRESS
  6406. 1 115.68 ms 10.249.204.1
  6407. 2 115.66 ms 212.174.188.50
  6408.  
  6409. NSE: Script Post-scanning.
  6410. Initiating NSE at 00:10
  6411. Completed NSE at 00:10, 0.00s elapsed
  6412. Initiating NSE at 00:10
  6413. Completed NSE at 00:10, 0.00s elapsed
  6414. Read data files from: /usr/bin/../share/nmap
  6415. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  6416. Nmap done: 1 IP address (1 host up) scanned in 1300.30 seconds
  6417. Raw packets sent: 262906 (11.573MB) | Rcvd: 34214 (6.175MB)
  6418. #######################################################################################################################################
  6419. Starting Nmap 7.80 ( https://nmap.org ) at 2019-10-11 00:10 EDT
  6420. NSE: Loaded 47 scripts for scanning.
  6421. NSE: Script Pre-scanning.
  6422. Initiating NSE at 00:10
  6423. Completed NSE at 00:10, 0.00s elapsed
  6424. Initiating NSE at 00:10
  6425. Completed NSE at 00:10, 0.00s elapsed
  6426. Initiating Parallel DNS resolution of 1 host. at 00:10
  6427. Completed Parallel DNS resolution of 1 host. at 00:10, 10.44s elapsed
  6428. Initiating UDP Scan at 00:10
  6429. Scanning 212.174.188.50 [15 ports]
  6430. Completed UDP Scan at 00:10, 2.08s elapsed (15 total ports)
  6431. Initiating Service scan at 00:10
  6432. Scanning 13 services on 212.174.188.50
  6433. Service scan Timing: About 7.69% done; ETC: 00:31 (0:19:24 remaining)
  6434. Completed Service scan at 00:12, 102.58s elapsed (13 services on 1 host)
  6435. Initiating OS detection (try #1) against 212.174.188.50
  6436. Retrying OS detection (try #2) against 212.174.188.50
  6437. Initiating Traceroute at 00:12
  6438. Completed Traceroute at 00:12, 7.07s elapsed
  6439. Initiating Parallel DNS resolution of 1 host. at 00:12
  6440. Completed Parallel DNS resolution of 1 host. at 00:12, 0.00s elapsed
  6441. NSE: Script scanning 212.174.188.50.
  6442. Initiating NSE at 00:12
  6443. Completed NSE at 00:12, 7.14s elapsed
  6444. Initiating NSE at 00:12
  6445. Completed NSE at 00:12, 1.01s elapsed
  6446. Nmap scan report for 212.174.188.50
  6447. Host is up (0.060s latency).
  6448.  
  6449. PORT STATE SERVICE VERSION
  6450. 53/udp open|filtered domain
  6451. 67/udp open|filtered dhcps
  6452. 68/udp open|filtered dhcpc
  6453. 69/udp open|filtered tftp
  6454. 88/udp open|filtered kerberos-sec
  6455. 123/udp open|filtered ntp
  6456. 137/udp filtered netbios-ns
  6457. 138/udp filtered netbios-dgm
  6458. 139/udp open|filtered netbios-ssn
  6459. 161/udp open|filtered snmp
  6460. 162/udp open|filtered snmptrap
  6461. 389/udp open|filtered ldap
  6462. 500/udp open|filtered isakmp
  6463. |_ike-version: ERROR: Script execution failed (use -d to debug)
  6464. 520/udp open|filtered route
  6465. 2049/udp open|filtered nfs
  6466. Too many fingerprints match this host to give specific OS details
  6467.  
  6468. TRACEROUTE (using port 138/udp)
  6469. HOP RTT ADDRESS
  6470. 1 38.17 ms 10.249.204.1
  6471. 2 ... 3
  6472. 4 33.52 ms 10.249.204.1
  6473. 5 121.15 ms 10.249.204.1
  6474. 6 121.15 ms 10.249.204.1
  6475. 7 121.15 ms 10.249.204.1
  6476. 8 121.14 ms 10.249.204.1
  6477. 9 121.13 ms 10.249.204.1
  6478. 10 45.15 ms 10.249.204.1
  6479. 11 ... 18
  6480. 19 91.58 ms 10.249.204.1
  6481. 20 36.04 ms 10.249.204.1
  6482. 21 ... 28
  6483. 29 74.28 ms 10.249.204.1
  6484. 30 32.07 ms 10.249.204.1
  6485.  
  6486. NSE: Script Post-scanning.
  6487. Initiating NSE at 00:12
  6488. Completed NSE at 00:12, 0.00s elapsed
  6489. Initiating NSE at 00:12
  6490. Completed NSE at 00:12, 0.00s elapsed
  6491. Read data files from: /usr/bin/../share/nmap
  6492. OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  6493. Nmap done: 1 IP address (1 host up) scanned in 134.14 seconds
  6494. Raw packets sent: 149 (10.404KB) | Rcvd: 228 (54.772KB)
  6495. #######################################################################################################################################
  6496. Hosts
  6497. =====
  6498.  
  6499. address mac name os_name os_flavor os_sp purpose info comments
  6500. ------- --- ---- ------- --------- ----- ------- ---- --------
  6501. 212.174.188.50 Linux 3.X server
  6502.  
  6503. Services
  6504. ========
  6505.  
  6506. host port proto name state info
  6507. ---- ---- ----- ---- ----- ----
  6508. 212.174.188.50 25 tcp smtp closed
  6509. 212.174.188.50 53 udp domain unknown
  6510. 212.174.188.50 67 udp dhcps unknown
  6511. 212.174.188.50 68 udp dhcpc unknown
  6512. 212.174.188.50 69 udp tftp unknown
  6513. 212.174.188.50 80 tcp http open nginx
  6514. 212.174.188.50 88 udp kerberos-sec unknown
  6515. 212.174.188.50 123 udp ntp unknown
  6516. 212.174.188.50 137 udp netbios-ns filtered
  6517. 212.174.188.50 138 udp netbios-dgm filtered
  6518. 212.174.188.50 139 tcp netbios-ssn closed
  6519. 212.174.188.50 139 udp netbios-ssn unknown
  6520. 212.174.188.50 145 tcp tcpwrapped open
  6521. 212.174.188.50 161 udp snmp unknown
  6522. 212.174.188.50 162 udp snmptrap unknown
  6523. 212.174.188.50 389 udp ldap unknown
  6524. 212.174.188.50 443 tcp ssl/http open nginx
  6525. 212.174.188.50 445 tcp microsoft-ds closed
  6526. 212.174.188.50 500 udp isakmp unknown
  6527. 212.174.188.50 520 udp route unknown
  6528. 212.174.188.50 1012 tcp tcpwrapped open
  6529. 212.174.188.50 1996 tcp tcpwrapped open
  6530. 212.174.188.50 2049 udp nfs unknown
  6531. 212.174.188.50 2663 tcp tcpwrapped open
  6532. 212.174.188.50 4300 tcp tcpwrapped open
  6533. 212.174.188.50 4884 tcp tcpwrapped open
  6534. 212.174.188.50 6830 tcp tcpwrapped open
  6535. 212.174.188.50 7019 tcp tcpwrapped open
  6536. 212.174.188.50 7048 tcp tcpwrapped open
  6537. 212.174.188.50 7220 tcp tcpwrapped open
  6538. 212.174.188.50 7462 tcp tcpwrapped open
  6539. 212.174.188.50 9177 tcp tcpwrapped open
  6540. 212.174.188.50 10785 tcp tcpwrapped open
  6541. 212.174.188.50 11086 tcp tcpwrapped open
  6542. 212.174.188.50 11494 tcp tcpwrapped open
  6543. 212.174.188.50 11958 tcp tcpwrapped open
  6544. 212.174.188.50 13412 tcp tcpwrapped open
  6545. 212.174.188.50 13728 tcp tcpwrapped open
  6546. 212.174.188.50 14339 tcp tcpwrapped open
  6547. 212.174.188.50 14570 tcp tcpwrapped open
  6548. 212.174.188.50 14725 tcp tcpwrapped open
  6549. 212.174.188.50 14878 tcp tcpwrapped open
  6550. 212.174.188.50 15044 tcp tcpwrapped open
  6551. 212.174.188.50 15557 tcp tcpwrapped open
  6552. 212.174.188.50 15601 tcp tcpwrapped open
  6553. 212.174.188.50 15670 tcp tcpwrapped open
  6554. 212.174.188.50 17984 tcp tcpwrapped open
  6555. 212.174.188.50 18372 tcp tcpwrapped open
  6556. 212.174.188.50 18497 tcp tcpwrapped open
  6557. 212.174.188.50 18825 tcp tcpwrapped open
  6558. 212.174.188.50 18982 tcp tcpwrapped open
  6559. 212.174.188.50 18985 tcp tcpwrapped open
  6560. 212.174.188.50 19566 tcp tcpwrapped open
  6561. 212.174.188.50 19885 tcp tcpwrapped open
  6562. 212.174.188.50 20457 tcp tcpwrapped open
  6563. 212.174.188.50 21697 tcp tcpwrapped open
  6564. 212.174.188.50 22019 tcp tcpwrapped open
  6565. 212.174.188.50 22672 tcp tcpwrapped open
  6566. 212.174.188.50 22743 tcp tcpwrapped open
  6567. 212.174.188.50 23170 tcp tcpwrapped open
  6568. 212.174.188.50 23516 tcp tcpwrapped open
  6569. 212.174.188.50 23731 tcp tcpwrapped open
  6570. 212.174.188.50 24618 tcp tcpwrapped open
  6571. 212.174.188.50 24946 tcp tcpwrapped open
  6572. 212.174.188.50 25365 tcp tcpwrapped open
  6573. 212.174.188.50 26048 tcp tcpwrapped open
  6574. 212.174.188.50 26346 tcp tcpwrapped open
  6575. 212.174.188.50 26586 tcp tcpwrapped open
  6576. 212.174.188.50 27110 tcp tcpwrapped open
  6577. 212.174.188.50 27429 tcp tcpwrapped open
  6578. 212.174.188.50 27991 tcp tcpwrapped open
  6579. 212.174.188.50 28728 tcp tcpwrapped open
  6580. 212.174.188.50 28970 tcp tcpwrapped open
  6581. 212.174.188.50 29097 tcp tcpwrapped open
  6582. 212.174.188.50 29674 tcp tcpwrapped open
  6583. 212.174.188.50 30034 tcp tcpwrapped open
  6584. 212.174.188.50 30285 tcp tcpwrapped open
  6585. 212.174.188.50 30369 tcp tcpwrapped open
  6586. 212.174.188.50 32719 tcp tcpwrapped open
  6587. 212.174.188.50 32726 tcp tcpwrapped open
  6588. 212.174.188.50 32803 tcp tcpwrapped open
  6589. 212.174.188.50 32835 tcp tcpwrapped open
  6590. 212.174.188.50 32876 tcp tcpwrapped open
  6591. 212.174.188.50 32942 tcp tcpwrapped open
  6592. 212.174.188.50 33107 tcp tcpwrapped open
  6593. 212.174.188.50 33437 tcp tcpwrapped open
  6594. 212.174.188.50 33688 tcp tcpwrapped open
  6595. 212.174.188.50 33789 tcp tcpwrapped open
  6596. 212.174.188.50 35234 tcp tcpwrapped open
  6597. 212.174.188.50 35394 tcp tcpwrapped open
  6598. 212.174.188.50 35974 tcp tcpwrapped open
  6599. 212.174.188.50 36130 tcp tcpwrapped open
  6600. 212.174.188.50 36363 tcp tcpwrapped open
  6601. 212.174.188.50 36382 tcp tcpwrapped open
  6602. 212.174.188.50 36436 tcp tcpwrapped open
  6603. 212.174.188.50 36515 tcp tcpwrapped open
  6604. 212.174.188.50 37813 tcp tcpwrapped open
  6605. 212.174.188.50 38397 tcp tcpwrapped open
  6606. 212.174.188.50 38957 tcp tcpwrapped open
  6607. 212.174.188.50 39006 tcp tcpwrapped open
  6608. 212.174.188.50 39062 tcp tcpwrapped open
  6609. 212.174.188.50 41424 tcp tcpwrapped open
  6610. 212.174.188.50 41727 tcp tcpwrapped open
  6611. 212.174.188.50 42400 tcp tcpwrapped open
  6612. 212.174.188.50 42870 tcp tcpwrapped open
  6613. 212.174.188.50 43401 tcp tcpwrapped open
  6614. 212.174.188.50 44428 tcp tcpwrapped open
  6615. 212.174.188.50 44838 tcp tcpwrapped open
  6616. 212.174.188.50 45305 tcp tcpwrapped open
  6617. 212.174.188.50 45313 tcp tcpwrapped open
  6618. 212.174.188.50 45430 tcp tcpwrapped open
  6619. 212.174.188.50 45695 tcp tcpwrapped open
  6620. 212.174.188.50 45764 tcp tcpwrapped open
  6621. 212.174.188.50 45795 tcp tcpwrapped open
  6622. 212.174.188.50 45874 tcp tcpwrapped open
  6623. 212.174.188.50 46391 tcp tcpwrapped open
  6624. 212.174.188.50 46427 tcp tcpwrapped open
  6625. 212.174.188.50 46449 tcp tcpwrapped open
  6626. 212.174.188.50 46707 tcp tcpwrapped open
  6627. 212.174.188.50 46979 tcp tcpwrapped open
  6628. 212.174.188.50 46995 tcp tcpwrapped open
  6629. 212.174.188.50 47227 tcp tcpwrapped open
  6630. 212.174.188.50 47415 tcp tcpwrapped open
  6631. 212.174.188.50 47766 tcp tcpwrapped open
  6632. 212.174.188.50 47796 tcp tcpwrapped open
  6633. 212.174.188.50 48008 tcp tcpwrapped open
  6634. 212.174.188.50 48194 tcp tcpwrapped open
  6635. 212.174.188.50 48932 tcp tcpwrapped open
  6636. 212.174.188.50 48954 tcp tcpwrapped open
  6637. 212.174.188.50 49013 tcp tcpwrapped open
  6638. 212.174.188.50 49097 tcp tcpwrapped open
  6639. 212.174.188.50 49622 tcp tcpwrapped open
  6640. 212.174.188.50 49693 tcp tcpwrapped open
  6641. 212.174.188.50 49996 tcp tcpwrapped open
  6642. 212.174.188.50 50111 tcp tcpwrapped open
  6643. 212.174.188.50 50714 tcp tcpwrapped open
  6644. 212.174.188.50 52299 tcp tcpwrapped open
  6645. 212.174.188.50 53123 tcp tcpwrapped open
  6646. 212.174.188.50 53801 tcp tcpwrapped open
  6647. 212.174.188.50 54461 tcp tcpwrapped open
  6648. 212.174.188.50 54484 tcp tcpwrapped open
  6649. 212.174.188.50 55788 tcp tcpwrapped open
  6650. 212.174.188.50 56976 tcp tcpwrapped open
  6651. 212.174.188.50 58350 tcp tcpwrapped open
  6652. 212.174.188.50 58529 tcp tcpwrapped open
  6653. 212.174.188.50 59083 tcp tcpwrapped open
  6654. 212.174.188.50 59477 tcp tcpwrapped open
  6655. 212.174.188.50 60146 tcp tcpwrapped open
  6656. 212.174.188.50 60345 tcp tcpwrapped open
  6657. 212.174.188.50 60595 tcp tcpwrapped open
  6658. 212.174.188.50 60686 tcp tcpwrapped open
  6659. 212.174.188.50 61161 tcp tcpwrapped open
  6660. 212.174.188.50 61166 tcp tcpwrapped open
  6661. 212.174.188.50 61557 tcp tcpwrapped open
  6662. 212.174.188.50 61830 tcp tcpwrapped open
  6663. 212.174.188.50 61861 tcp tcpwrapped open
  6664. 212.174.188.50 61904 tcp tcpwrapped open
  6665. 212.174.188.50 63352 tcp tcpwrapped open
  6666. 212.174.188.50 63785 tcp tcpwrapped open
  6667. 212.174.188.50 64396 tcp tcpwrapped open
  6668. 212.174.188.50 64592 tcp tcpwrapped open
  6669. 212.174.188.50 64707 tcp tcpwrapped open
  6670. 212.174.188.50 64752 tcp tcpwrapped open
  6671. 212.174.188.50 64833 tcp tcpwrapped open
  6672. 212.174.188.50 65116 tcp tcpwrapped open
  6673. #######################################################################################################################################
  6674. Anonymous JTSEC #OpTurkey Full Recon 2
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!