Cambodia

Banks:

canadiabank.com.kh
https://www.cnbebanking.com/
http://nbc.org.kh/
https://online.ftbbank.com/ibanking/
http://www.anzroyal.com/en/Personal/Ways-Bank/Internet-Banking/
http://www.acledabank.com.kh/kh/eng/index.php
http://www.abc.org.kh/abcorg/


Governments

mptc.gov.kh (202.178.113.40)    -->  It's a Windows 2008 R2 Web Server Edition with SP1. Running inside a VMware. It has filesharing/netbios over tcpip/SMB wide open (ports 139+445).
http://www.mfaic.gov.kh/
mail.nida.gov.kh
ns2.cpp.org.kh:53
ns2.analytics.cpp.org.kh
ns1.takeo.cpp.org.kh

www.cpp.org.kh <--- website of dictator's party website. Scan result available at: https://mega.co.nz/#!JNFBSBgD!BFhlwgUhN1YlmPM0c1EQ0jczm1k20xO9ANR4pnepmcI


www.phnompenh.gov.kh
www.cmaa.gov.kh
vss.eccc.gov.kh
www.mowram.gov.kh
www.socialprotection.gov.kh
www.cmac.gov.kh
www.ntb.gov.kh
www.nis.gov.kh
www.cambodiainvestment.gov.kh
www.card.gov.kh
www.interior.gov.kh
www.eccc.gov.kh
www.tpd.gov.kh
www.eccc.gov.kh
www.cambodia11msp.gov.kh
www.cambodia11msp.gov.kh
tpd.gov.kh
www.socialprotection.gov.kh
www.camcontrol.gov.kh
cncw.gov.kh
www.pressocm.gov.kh lells
http://evisa.mfaic.gov.kh/
http://www.cnv.org.kh/en/
http://www.cpp.org.kh
http://www.ccc.gov.kh
http://www.senate.gov.kh
http://www.national-assembly.org.kh  --> redirects to nac.org.kh which are multiple servers:
        www.nac.org.kh (175.100.110.148) IIS 7.0 (port 80 is the only open port)
                                      (175.100.110.146) Microsoft DNS 6.1.7601 (port 53 is the only open port)
        mail.nac.org.kh
             175.100.110.152    pop3    110    tcp    MDaemon pop3d 12.5.6
             175.100.110.152    imap    143    tcp    Alt-N MDaemon imapd 12.5.6
             175.100.110.152    http    1000    tcp    World Client WDaemon httpd 4.0 Alt-N MDaemon webmail    --> Webmail admin panel
             175.100.110.152    http    3000    tcp    World Client WDaemon httpd 4.0 Alt-N MDaemon webmail    --> Webmail client, vulnerable to metasploit exploit "mdaemon_worldclient_form2raw" (but payload gets detected by AV) ???
tc.com.kh

Media <-- DO NOT ATTACK MEDIA!! (even if state run)

http://www.dap-news.com/
http://www.cen.com.kh/
http://kohsantepheapdaily.com.kh/
http://cnc.com.kh/
www.kampucheathmey.com


Telco
metfone.com.kh (117.120.24.235)    -->  Is extremely safe. IIS 7.5. Port 80 is the only open port. Forms do have captchas (but don't require SSL). Password reset method is safe (validation code through email or SMS, will actually reset the password).
cellcard.com.kh

------------ maybe more possible targets (to be discussed first, also check for duplicates) -----------------
More targets:
ccc.gov.kh
cpp.org.kh
pressocm.gov.kh
necelect.org.kh
interior.gov.kh
phnompenh.gov.kh
immigration.gov.kh
police.gov.kh
tvk.gov.kh
tax.gov.kh
senate.gov.kh
information.gov.kh
acu.gov.kh
national-assembly.org.kh
http://cnv.org.kh/en/
http://cmac.gov.kh/
http://cnpa.gov.kh/
http://fid.mef.gov.kh/
http://fmis.mef.gov.kh/
http://krou.moeys.gov.kh/
http://mfaic.gov.kh/
http://www.akp.gov.kh/
http://www.camcontrol.gov.kh/
http://www.car.gov.kh/
http://www.card.gov.kh/
http://www.cljr.gov.kh/
http://www.cmaa.gov.kh/
http://www.cmac.gov.kh/
http://www.cnm.gov.kh/
http://www.cnmc.gov.kh/
http://www.dfggmoi.gov.kh/
http://www.dosh.gov.kh/
http://www.era.cambodia.gov.kh/
http://www.iric.gov.kh/
http://www.maff.gov.kh/
http://www.mlmupc.gov.kh/
http://www.moc.gov.kh/
http://www.mod.gov.kh/
http://www.mrd.gov.kh/
http://www.nac.gov.kh/
http://www.nea.gov.kh/
http://www.novctf.gov.kh/
http://www.ref.gov.kh/
http://www.rnk.gov.kh/
http://www.secc.gov.kh/
http://www.tonlesap.gov.kh
http://www.tpd.gov.kh
http://www.treasury.gov.kh/
http://www.nis.gov.kh/
http://www.acledabank.com.kh/kh/eng/index.php <--- donated $$$ to wife of dictator
https://www.cnbebanking.com/ and canadiabank.com.kh <--- keep dictator's money
sister bank of canadiabank.com.kh ---> https://online.ftbbank.com/ibanking/
http://www.trc.gov.kh/index.php/en/newsCategory/view?id=24' - looks like sqli