chaoshackerz.net

un_sll
Secure content can be accessed using the insecure protocol HTTP. The vulnerable URLs are: "https://www.chaoshackerz.net/"
"http://www.chaoshackerz.net/" .

This vulnerability was found in the requests with ids 43 and 55.

HTTP/1.1 403 Forbidden
content-encoding: gzip
transfer-encoding: chunked
expires: Thu, 15 Jan 2015 17:25:36 GMT
server: cloudflare-nginx
connection: keep-alive
cache-control: max-age=10
date: Thu, 15 Jan 2015 17:25:26 GMT
x-frame-options: SAMEORIGIN
content-type: text/html; charset=UTF-8
cf-ray: 1a93c5c5a0680491-CDG

<!DOCTYPE html>
<!--[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->
<!--[if IE 7]>    <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->
<!--[if IE 8]>    <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->
<!--[if gt IE 8]><!--> <html class="no-js" lang="en-US"> <!--<![endif]-->
<head>
<title>Access denied | www.chaoshackerz.net used CloudFlare to restrict access</title>
<meta charset="UTF-8" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" />
<meta name="robots" content="noindex, nofollow" />
<meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1" />
<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" type="text/css" media="screen,projection" />
<!--[if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" type="text/css" media="screen,projection" /><![endif]-->
<style type="text/css">body{margin:0;padding:0}</style>
<!--[if lte IE 9]><script type="text/javascript" src="/cdn-cgi/scripts/jquery.min.js"></script><![endif]-->
<!--[if gte IE 10]><!--><script type="text/javascript" src="/cdn-cgi/scripts/zepto.min.js"></script><!--<![endif]-->
<script type="text/javascript" src="/cdn-cgi/scripts/cf.common.js"></script>

</head>
<body>
  <div id="cf-wrapper">
    <div class="cf-alert cf-alert-error cf-cookie-error" id="cookie-alert" data-translate="enable_cookies">Please enable cookies.</div>
    <div id="cf-error-details" class="cf-error-details-wrapper">
      <div class="cf-wrapper cf-header cf-error-overview">
        <h1>
          <span class="cf-error-type" data-translate="error">Error</span>
          <span class="cf-error-code">1010</span>
          <small class="heading-ray-id">Ray ID: 1a93c5c5a0680491</small>
        </h1>
        <h2 class="cf-subheadline" data-translate="error_desc">Access denied</h2>
      </div><!-- /.header -->

      <section></section><!-- spacer -->

      <div class="cf-section cf-wrapper">
        <div class="cf-columns two">
          <div class="cf-column">
            <h2 data-translate="what_happened">What happened?</h2>
            <p>The owner of this website (www.chaoshackerz.net) has banned your access based on your browser's signature (1a93c5c5a0680491-ua56).</p>
          </div>


        </div>
      </div><!-- /.section -->

      <div class="cf-error-footer cf-wrapper">
  <p>
    <span class="cf-footer-item">CloudFlare Ray ID: <strong>1a93c5c5a0680491</strong></span>
    <span class="cf-footer-separator">&bull;</span>
    <span class="cf-footer-item"><span data-translate="your_ip">Your IP</span>: 84.97.178.201</span>
    <span class="cf-footer-separator">&bull;</span>
    <span class="cf-footer-item"><span data-translate="performance_security_by">Performance &amp; security by</span> <a data-orig-proto="https" data-orig-ref="www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">CloudFlare</a></span>
     </p>
</div><!-- /.error-footer -->

   </div><!-- /#cf-error-details -->
  </div><!-- /#cf-wrapper -->

  <script type="text/javascript">
  window._cf_translation = {};
    </script>
</body>
</html>

----------------------------------------------------------------------------------------------
click_jacking

http://www.chaoshackerz.net/_vti_bin/_vti_aut/author.dll
. This vulnerability was found in the request with id 49.

POST http://www.chaoshackerz.net/_vti_bin/_vti_aut/author.dll HTTP/1.1
Content-length: 158
Accept-encoding: gzip, deflate
Accept: */*
User-agent: w3af.org
Host: www.chaoshackerz.net
Cookie: __cfduid=d6b525b5458c5091e749f731d1804b4f51421342725
Content-type: application/x-www-form-urlencoded

method=put document:4.0.2.4715&service_name=&document=[document_name=/pDHfd.html;meta_info=[]]&put_option=overwrite&comment=&keep_checked_out=false
lmth.dfHDp

HTTP/1.1 400 Bad Request
content-length: 177
server: -nginx
connection: close
date: Thu, 15 Jan 2015 17:25:28 GMT
cf-ray: -
content-type: text/html

<html>
<head><title>400 Bad Request</title></head>
<body bgcolor="white">
<center><h1>400 Bad Request</h1></center>
<hr><center>cloudflare-nginx</center>
</body>
</html>

-----------------------------------------------------------------------------------------------------------------------------
CPanel

https://p3plcpnl033.prod.phx3.secureserver.net:2083/

------------------------------------------------------------------------------------------------------------------------------