Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- http://www.whitehouse.gov/ intel by Hacktivist_15 <3 <3 <3 :) Hack the World <3
- IP Address 23.0.160.65
- DNS Records – WHITEHOUSE.GOV
- Record Type TTL Priority Content
- whitehouse.gov A 20 seconds 23.198.220.110 ()
- Name Servers – whitehouse.gov More Info
- Name Server IP Location
- usw6.akam.net 23.61.199.64
- usw5.akam.net 23.211.132.64
- ns1-145.akam.net 193.108.91.145
- zc.akam.net 184.26.160.66
- use6.akam.net 2.16.40.65
- usw1.akam.net 23.61.199.66
- ns1-176.akam.net 193.108.91.176
- asia9.akam.net 95.100.175.65
- Server:White House
- IP Address:65.112.85.72
- Port:443
- Hostname:www.whitehouse.gov
- <exploits>
- Server has not enabled HTTP Strict-Transport-Security
- Users may be exposed to man-in-the-middle attacks
- Server does not use secure renegotiation settings
- Site is more vulnerable to Denial of Service (DOS) attacks
- Server doesn’t prefer ciphers that enable forward secrecy.
- Encrypted communications captured today are at risk of being decrypted by an attacker in the future.
- HTTP Tests:
- Strict Transport Security:Fail
- Mixed Content (HTTP and HTTPS):Timed Out
- Domain name resolves to IPv4 address:Pass
- Domain name resolves to IPv6 address:Pass
- SSL Configuration
- SSL 2.0 Disabled:Pass
- SSL 3.0 Disabled:Fail
- TLS 1.0 Enabled:Pass
- TLS 1.1 Enabled:Pass
- TLS 1.2 Enabled:Pass
- Weak ciphersuites disabled:Pass
- Certificates configured correctly:Fail
- Secure renegotiation configured:Fail
- Session resumption configured:Pass
- BEAST Vulnerability:Pass
- OCSP Stapling:Fail
- PCI Compliant:Fail
- FIPS Compliant:Fail
- Forward Secrecy Supported:Fail
- Heartbleed Vulnerability:Pass
- Server:White House
- IP Address:65.112.85.58
- Port:443
- Hostname:www.whitehouse.gov
- <exploits>
- Server doesn’t prefer ciphers that enable forward secrecy.
- Encrypted communications captured today are at risk of being decrypted by an attacker in the future.
- Server has not enabled HTTP Strict-Transport-Security
- Users may be exposed to man-in-the-middle attacks
- Server does not use secure renegotiation settings
- Site is more vulnerable to Denial of Service (DOS) attacks
- Server configuration does not meet PCI/DSS guidelines
- This is a problem if you process credit card information
- ( this system is weak for a govt? you should be ashamed of yourself White house ) Lulz <3
Advertisement
Add Comment
Please, Sign In to add comment
