www.rsdnation.com exploits part two

http://www.rsdnation.com/  rsd second website. intel by Hacktivist_15 <3 Anonymous Familia <3 <3 <3
IP Address 72.52.148.109 <go daddy ip server address)

Name Server 	ns55.domaincontrol.com

Server Type 	Apache/2.2.15 (Red Hat)

470746-db3.rsdnation.com  (166.78.199.16)

USER DIR:
A user directory was found at: http://www.rsdnation.com/admin/. This information was found in the request with id 309.
GET http://www.rsdnation.com/admin/ HTTP/1.1
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0
Referer: http://www.rsdnation.com


WEB BACKDOOR:
A web backdoor was found at: "http://www.rsdnation.com/cmd.sh"; this could indicate that the server was hacked. This vulnerability was found in the request with id 598.
GET http://www.rsdnation.com/cmd.sh HTTP/1.1
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0


A web backdoor was found at: "http://www.rsdnation.com/list.sh"; this could indicate that the server was hacked. This vulnerability was found in the request with id 601.
GET http://www.rsdnation.com/list.sh HTTP/1.1
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0


A web backdoor was found at: "http://www.rsdnation.com/up.sh"; this could indicate that the server was hacked. This vulnerability was found in the request with id 602.
GET http://www.rsdnation.com/up.sh HTTP/1.1
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0

CLICK JACKING:
The whole target has no protection (X-Frame-Options header) against ClickJacking attack

PATH DISCLOSURE:
the URL: "http://www.rsdnation.com/" has a path disclosure vulnerability which discloses: "/lib/calendar-tas.css". This vulnerability was found in the request with id 1.
GET http://www.rsdnation.com/ HTTP/1.1
Host: www.rsdnation.com

STRANGE HEADERS:
The remote web server sent the HTTP header: "X-Mod-Pagespeed" with value: "1.8.31.5-4307". This information was found in the requests with ids 1, 16, 79 to 85, 87 to 118, 120 to 130, 144, 166, 168, 171 to 172, 175, 227, 429 and 1087.
GET http://www.rsdnation.com/ HTTP/1.1
Host: www.rsdnation.com

COOKIES:
The URL: "http://www.rsdnation.com/" sent the cookie: "SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0; expires=Tue, 17-Feb-2015 12:12:30 GMT; Max-Age=8640000; path=/; domain=.rsdnation.com". This information was found in the request with id 1.
GET http://www.rsdnation.com/ HTTP/1.1
Host: www.rsdnation.com

MAIL:
The mail account: "[email protected]" was found in: "http://www.google.com/[email protected]&start=20&sa=N&hl=en".
GET http://www.rsdnation.com/ HTTP/1.1
Host: www.rsdnation.com

ERROR PAGE SERVER:
An error page sent this Apache version: "<address>Apache/2.4.10 (Ubuntu) Server at www.rsdnation.com Port 80</address>". This information was found in the request with id 119.
TRACE http://www.rsdnation.com/ HTTP/1.1
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0


An error page sent this Apache version: "<address>Apache/2.4.10 (Ubuntu) Server at host.rsdnation.com Port 80</address>". This information was found in the request with id 131.
GET http://www.rsdnation.com/homepage HTTP/1.1
Lock-Token: gViZlIIJ
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0
Translate: tpBrdaxq
If: QxwYKNSz

DNS WILDCARD:
The target site has no DNS wildcard, and the contents of http://rsdnation.com/homepage differ from the contents of http://www.rsdnation.com. This information was found in the request with id 146.
GET http://www.rsdnation.com/homepage HTTP/1.1
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0

SERVER HEADER:
X-Powered-By" header for this HTTP server is: "PHP/5.5.12-2ubuntu4.1". This information was found in the request with id 143.
GET http://www.rsdnation.com/homepage HTTP/1.1
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0

DAV-METHOD:
The URL "http://www.rsdnation.com/" has the following allowed methods, which include DAV methods: *, ACL, BASELINE_CONTROL, CHECKIN, CHECKOUT, COPY, DEBUG, GET, HEAD, INDEX, INVALID, INVOKE, LABEL, LINK, LOCK, MERGE, MKACTIVITY, MKCOL, MKDIR, MKWORKSPACE, MOVE, NOTIFY, OPTIONS, PATCH, PIN, POLL, POST, PROPFIND, PROPPATCH, REPLY, REPORT, RMDIR, SEARCH, SHOWMETHOD, SPACEJUMP, SUBSCRIBE, SUBSCRIPTIONS, TEXTSEARCH, TRACK, UNCHECKOUT, UNLINK, UNLOCK, UNSUBSCRIBE, VERSION_CONTROL.
GET http://www.rsdnation.com/homepage HTTP/1.1
Host: www.rsdnation.com
Cookie: SESS0c43982ff5914ff9b05762f5f838161d=5rjbvaahdkh0gnr868asjdqog0

http://www.rsdnation.com/admin/
http://www.rsdnation.com/index.php

Nmap scan report for 470746-db3.rsdnation.com (166.78.199.16)
Host is up (0.086s latency).
PORT     STATE    SERVICE
21/tcp   filtered ftp
22/tcp   open     ssh
23/tcp   filtered telnet
25/tcp   filtered smtp
53/tcp   filtered domain
80/tcp   open     http
110/tcp  filtered pop3
111/tcp  filtered rpcbind
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
143/tcp  filtered imap
443/tcp  open     https
445/tcp  filtered microsoft-ds
993/tcp  filtered imaps
995/tcp  filtered pop3s
1723/tcp filtered pptp
3306/tcp filtered mysql
3389/tcp filtered ms-wbt-server
5900/tcp filtered vnc
8080/tcp filtered http-proxy