API tools faq
paste
marys

exploits/generaldynamics

marys
Dec 17th, 2014
384
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.81 KB | None | 0 0
raw download clone embed print report
  1. EXPLOITATION & VULNERABILITY TEST 'BY ANON-NINJA-CAT' CONTACT CONE-CAT FOR CLEARANCE 'WHO WILL CONTACT INFOSEC-CAT TO ACCESS THE CYBER-HIVE DEEP IN THE MATRIX. (GHOST-CAT WILL BE TRACKING YOU AS YOU APPLY )
  2.  
  3. I AM AVAILABLE FOR FREE LANCE WORK / WORLD-WIDE .
  4.  
  5. WE ARE ANONYMOUS
  6. WE ARE LEGION
  7. WE ARE GHOSTS OF THE CYBER-HIVE
  8. WE OWN THE MATRIX
  9. EXPECT US
  10.  
  11. http://www.generaldynamics.com/ GRADE C / SYSTEM @47%
  12.  
  13. General Dynamics is an aerospace and defense company that offers a broad portfolio of products and services in business aviation;combat vehicles, weapons systems and munitions;shipbuilding;and communication and information technology systems and solutions.
  14.  
  15. IP Address 192.48.40.53
  16.  
  17. HTTP/1.1 200 OK
  18. Content-Type: text/html;charset=UTF-8
  19. Server: Microsoft-IIS/7.5
  20. X-Powered-By: ASP.NET
  21.  
  22. Name Servers – generaldynamics.com
  23.  
  24. ns1.gendyn.com 192.48.40.8 Falls Church, VA, US
  25.  
  26. ns2.gendyn.com 192.48.40.9 Falls Church, VA, US
  27.  
  28. ns3.gendyn.com. [192.48.64.8]
  29.  
  30. 192.48.40.53
  31.  
  32. 7 site(s) hosted on ip 192.48.40.53
  33. Location: Falls Church,United States
  34.  
  35. rDNS record for 192.48.40.53: riskmanagement.gdyn.net
  36.  
  37. MX IP addresses
  38. 23.40.48.192.in-addr.arpa <--> gw.gendyn.com.
  39. 10.4.173.137.in-addr.arpa <--> mx2.gendyn.com.
  40.  
  41.  
  42. report for riskmanagement.gdyn.net (53.40.48.192)
  43. Host is up (0.0056s latency).
  44. 80/tcp open http
  45.  
  46. Reverse DNS results for 192.48.40.53
  47. 53.40.48.192.in-addr.arpa domain name pointer riskmanagement.gdyn.com.
  48.  
  49. traceroute to www.generaldynamics.com (192.48.40.53), 30 hops max, 60 byte packets
  50. 1 obfuscated.internal.network.com (0.0.0.0) 0.000 ms 0.000 ms 0.000 ms
  51. 2 obfuscated.internal.network.com (0.0.0.0) 1.000 ms 1.000 ms 1.000 ms
  52. 3 66.231.176.253 (66.231.176.253) 10.090 ms 10.404 ms 10.492 ms
  53. 4 xe-10-0-1.was14.ip4.gtt.net (216.221.158.245) 10.688 ms 10.792 ms 10.886 ms
  54. 5 213.200.84.122 (213.200.84.122) 9.340 ms 10.111 ms 10.206 ms
  55. 6 gc-comunicacoes-do-brasil-ltda.gigabitethernet2-5.asr1.gru1.gblx.net (159.63.20.94) 20.347 ms 20.303 ms 19.492 ms
  56.  
  57. generaldynamics.com 192.48.40.53 US,UNITED STATES mx1.gendyn.com com
  58.  
  59. The remote network has an active filter.
  60.  
  61. The server header for the remote web server is: "Microsoft-HTTPAPI/2.0"
  62.  
  63. The contents of http://192.48.40.53 differ from the contents of http://www.generaldynamics.com.
  64.  
  65. "X-Powered-By" header for this HTTP server is: "ASP.NET"
  66. GET http://www.generaldynamics.com/ HTTP/1.1
  67. Host: www.generaldynamics.com
  68. Cookie: CFTOKEN=7a859f1535abd752-07BC435F-D55D-FE6A-D943FB76076F3511; CFID=3091323; JSESSIONID=EBF2A2CAB23694C44A2BC9CCE84694AB.cfusion
  69.  
  70. The server header for the remote web server is: "Microsoft-IIS/7.5"
  71. GET http://www.generaldynamics.com/ HTTP/1.1
  72. Host: www.generaldynamics.com
  73. Cookie: CFTOKEN=7a859f1535abd752-07BC435F-D55D-FE6A-D943FB76076F3511; CFID=3091323; JSESSIONID=EBF2A2CAB23694C44A2BC9CCE84694AB.cfusion
  74.  
  75. The URL "http://www.generaldynamics.com/" has the following allowed methods: GET, HEAD, OPTIONS, POST, TRACE
  76. OPTIONS http://www.generaldynamics.com/ HTTP/1.1
  77. Host: www.generaldynamics.com
  78. Cookie: CFTOKEN=7a859f1535abd752-07BC435F-D55D-FE6A-D943FB76076F3511; CFID=3091323; JSESSIONID=EBF2A2CAB23694C44A2BC9CCE84694AB.cfusion
  79.  
  80. The remote web server seems to have a reverse proxy installed.
  81. GET http://www.generaldynamics.com/ HTTP/1.1
  82. Host: www.generaldynamics.com
  83. Cookie: ASPSESSIONIDQAASTQRB=DNJDDIPCPFONKMGMCIILPCMD; CFTOKEN=8323d8d4fe7a899d-08007BB1-9548-6CC0-9E4DE44B1202C2E9; CFID=3091356
  84.  
  85. The mail account: "[email protected]" was found in: "http://www.google.com/[email protected]&start=0&sa=N&hl=en".
  86.  
  87. EXPLOITS:
  88.  
  89. The whole target has no protection (X-Frame-Options header) against ClickJacking attack
  90.  
  91. An unidentified vulnerability was found at: "http://www.generaldynamics.com/zoomsearch/search.asp", using HTTP method GET. The sent data was: "zoom_query=search&zoom_categories=-1&zoom_results_per_page=15&zoom_and=d'kc"z'gj'"%2A%2A5%2A(((%3B-%2A%60)". The modified parameter was "zoom_and".
  92.  
  93. GET http://www.generaldynamics.com/zoomsearch/search.asp?zoom_query=search&zoom_categories=-1&zoom_results_per_page=15&zoom_and=1 HTTP/1.1
  94. Host: www.generaldynamics.com
  95. Cookie: CFTOKEN=7a859f1535abd752-07BC435F-D55D-FE6A-D943FB76076F3511; Expires=Tue, 16-Dec-2014 10:51:30 GMT; Path=/
  96.  
  97. An unidentified web application error (HTTP response code 500) was found at: "http://www.generaldynamics.com/zoomsearch/search.asp". E
  98. GET http://www.generaldynamics.com/zoomsearch/search.asp?zoom_query=search&zoom_categories=-1&zoom_results_per_page=15&zoom_and=71984711 HTTP/1.1
  99. Host: www.generaldynamics.com
  100. Cookie: CFTOKEN=7a859f1535abd752-07BC435F-D55D-FE6A-D943FB76076F3511; Expires=Tue, 16-Dec-2014 10:51:30 GMT; Path=
  101.  
  102. The URL: "http://www.generaldynamics.com/" sent the cookie: "CFTOKEN=7dfd7bb332423f-081CC973-9FE2-60D9-0BE26CB176FDC19A; Expires=Tue, 16-Dec-2014 11:02:02 GMT; Path=/; HttpOnly".
  103.  
  104. HTTP/1.1 200 OK
  105. Via: 1.1 BC3-TSPN
  106. X-Powered-By: ASP.NET
  107. Transfer-Encoding: chunked
  108. Set-Cookie: CFTOKEN=7dfd7bb332423f-081CC973-9FE2-60D9-0BE26CB176FDC19A; Expires=Tue, 16-Dec-2014 11:02:02 GMT; Path=/; HttpOnly
  109. Server: Microsoft-IIS/7.5
  110. Connection: Keep-Alive
  111. Content-Type: text/html;charset=UTF-8
  112.  
  113. [ .NET Configuration Analysis ]
  114.  
  115. Server -> Microsoft-IIS/7.5
  116. AppTrace -> LocalOnly
  117. ASPXSSBypass1 -> ASP XSS Bypass 1 Successful (http://michaeldaw.org/news/news-030407/)
  118. Application -> /
  119. ADNVersion -> 2.0.50727
  120.  
  121. matches -> 2.0.50727.07 Version 2.0 (Visual Studio.NET 2005 CTP) Aug 2005
  122. matches -> 2.0.50727.26 Version 2.0 (Visual Studio.NET 2005 RC / SQL Server 2005 CTP) Sep 2005
  123. matches -> 2.0.50727.42 Version 2.0 RTM (Visual Studio.NET 2005 RTM / SQL Server 2005 RTM) Nov 2005
  124.  
  125. ---------------------------------------------------------------------------------------------------------------------------------------------------------
  126. Cross Site Request Forgery / x 194
  127.  
  128. URL http://www.generaldynamics.com/about/
  129.  
  130. URL http://www.generaldynamics.com/zoomsearch/search.asp?zoom_categories=-1&zoom_and=1&zoom_results_per_page=15&zoom_query=
  131.  
  132. URL http://www.generaldynamics.com/suppliers/
  133.  
  134. URL http://www.generaldynamics.com/about/corporate-overview/
  135.  
  136. URL http://www.generaldynamics.com/about/about-our-ethics/
  137. --------------------------------------------------------------------------------------------------------------------------------------------------------
  138. X-Frame-Options header not set / x 216
  139.  
  140. URL http://www.generaldynamics.com/careers/
  141.  
  142. URL http://www.generaldynamics.com/business-groups/
  143.  
  144. URL http://www.generaldynamics.com/suppliers/
  145.  
  146. URL http://www.generaldynamics.com/about/corporate-overview/
  147.  
  148. URL http://www.generaldynamics.com/about/about-our-ethics/
  149. --------------------------------------------------------------------------------------------------------------------------------------------------------
  150. Cookie set without HttpOnly flag / x 18
  151.  
  152. URL http://www.generaldynamics.com/zoomsearch/search.asp?zoom_categories=-1&zoom_and=1&zoom_results_per_page=15&zoom_query=search
  153.  
  154. ------------------------------------------------------------------------------------------------------------------------------------------------------
  155. Information disclosure - debug error messages / x 4
  156.  
  157. URL http://www.generaldynamics.com/news/press-releases/detail.cfm?customel_dataPageID_1811=19639
  158.  
  159. Parameter Under construction
  160.  
  161. -------------------------------------------------------------------------------------------------------------------------------------------------------
  162.  
  163. THIS WILL BE MY LAST PUBLIC PASTE ' ALL OTHER PASTES WILL BE PRIVATE ' I HOPE YOU HAVE ENJOYED READING WHAT HAS BEEN PRESENTED TO YOU 'WITH WORLD WIDE OPERATIONS IN FULL EFFECT 'PARTS OF THE MATRIX WILL BE DESTROYED & REDESIGNED BY ANONYMOUS-CAT-NINJA'S & CONE-CAT-CREW & INFOSEC-CAT-CREW & GHOST-CAT-CREW & LULZ-CAT-CREW 'WORLD-WIDE. A IDEA IS FOR EVER .
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!