Guest User

Anonymous #OpIsrael JTSEC Full Recon #6 2018

a guest
May 15th, 2018
466
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 19.62 KB | None | 0 0
  1. #######################################################################################################################################
  2. Nom de l'hôte www.shabak.gov.il FAI Tehila Project - Prime Minister Office's
  3. Continent Asie Drapeau
  4. IL
  5. Pays Israël Code du pays IL
  6. Région Inconnu Heure locale 15 May 2018 13:28 IDT
  7. Ville Inconnu Code Postal Inconnu
  8. Adresse IP 147.237.1.239 Latitude 31.5
  9. Longitude 34.75
  10. #######################################################################################################################################
  11. HostIP:147.237.1.239
  12. HostName:shabak.gov.il
  13.  
  14. Gathered Inet-whois information for 147.237.1.239
  15. ---------------------------------------------------------------------------------------------------------------------------------------
  16.  
  17.  
  18. inetnum: 147.237.0.0 - 147.237.255.255
  19. netname: IL-GOVT-NET
  20. descr: Israeli Government Network
  21. country: IL
  22. admin-c: AT979-RIPE
  23. tech-c: TT441-RIPE
  24. status: LEGACY
  25. remarks: For information on "status:" attribute read https://www.ripe.net/data-tools/db/faq/faq-status-values-legacy-resources
  26. mnt-by: GOV-IL-DNS
  27. mnt-lower: GOV-IL-DNS
  28. mnt-routes: AS8867-MNT ANY
  29. mnt-routes: AS9116-MNT { 147.237.232.0/24^24-24 }
  30. created: 1970-01-01T00:00:00Z
  31. last-modified: 2015-05-05T01:38:51Z
  32. source: RIPE # Filtered
  33.  
  34. person: Admin Tehila
  35. address: Israel Ministry Of Finance
  36. address: 1 Netanel Lorech st
  37. address: Jerusalem Israel
  38. phone: +972 2 6664666
  39. fax-no: +972 2 6664650
  40. remarks: For ABUSE and security issues please contact
  41. remarks: email: [email protected]
  42. remarks: or contact CERT.gov.il at [email protected]
  43. nic-hdl: AT979-RIPE
  44. created: 2002-06-02T08:31:21Z
  45. last-modified: 2016-04-06T03:26:29Z
  46. mnt-by: RIPE-NCC-LOCKED-MNT
  47. source: RIPE # Filtered
  48.  
  49. person: Tech Tehila
  50. address: Israeli Ministry of Finance
  51. address: 1 Netanel Lorech st. , Jerusalem 91008, Israel
  52. phone: +972 2 6664666
  53. fax-no: +972 2 6664650
  54. remarks: For ABUSE and security issues please contact
  55. remarks: email: [email protected]
  56. remarks: or contact CERT.gov.il at [email protected]
  57. nic-hdl: TT441-RIPE
  58. created: 2002-06-02T08:31:22Z
  59. last-modified: 2016-04-06T03:26:28Z
  60. mnt-by: RIPE-NCC-LOCKED-MNT
  61. source: RIPE # Filtered
  62.  
  63. % Information related to '147.237.0.0/16AS8867'
  64.  
  65. route: 147.237.0.0/16
  66. descr: IL-GOVT-BLOCK
  67. origin: AS8867
  68. mnt-by: AS8867-MNT
  69. mnt-routes: AS8867-MNT ANY
  70. mnt-routes: AS9116-MNT { 147.237.232.0/24^24-24 }
  71. created: 1970-01-01T00:00:00Z
  72. last-modified: 2013-05-29T13:30:11Z
  73. source: RIPE
  74.  
  75. % This query was served by the RIPE Database Query Service version 1.91.2 (WAGYU)
  76.  
  77.  
  78.  
  79. Gathered Inic-whois information for shabak.gov.il
  80. ---------------------------------------------------------------------------------------------------------------------------------------
  81. domain: shabak.gov.il
  82.  
  83. descr: Tech Tehila
  84. descr: 1 Netanel Lorech st
  85. descr: Jerusalem
  86. descr: 91911
  87. descr: Israel
  88. e-mail: hostmaster AT tehila.gov.il
  89. admin-c: GV-TT3128-IL
  90. tech-c: GV-TT3128-IL
  91. zone-c: GV-TT3128-IL
  92. nserver: dns.gov.il
  93. nserver: dns3.gov.il
  94. validity: N/A
  95. DNSSEC: unsigned
  96. status: Transfer Allowed
  97. changed: domain-registrar AT isoc.org.il 20jV@11102F��P�7 �(Assignde���d)iV@
  98. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  99.  
  100. person: Tech Tehila
  101. address: Prime minister office
  102. address: 1 Netanel Lorech st
  103. address: Jerusalem
  104. address: 91039
  105. address: Israel
  106. phone: +972 2 6664666
  107. fax-no: +972 2 6664650
  108. e-mail: Hostmaster AT tehila.gov.il
  109. nic-hdl: GV-TT3128-IL
  110. changed: Managing Registrar 20111027
  111. changed: Managing Registrar 20150122
  112.  
  113. registrar name: Israel Government
  114. registrar info:
  115.  
  116. % Rights to the data above are restricted by copyright.
  117.  
  118. Gathered Netcraft information for shabak.gov.il
  119. ---------------------------------------------------------------------------------------------------------------------------------------
  120.  
  121. Retrieving Netcraft.com information for shabak.gov.il
  122. Netcraft.com Information gathered
  123.  
  124. Gathered Subdomain information for shabak.gov.il
  125. --------------------------------------------------------------------------------------------------------------------------------------
  126. Searching Google.com:80...
  127. Searching Altavista.com:80...
  128. Found 0 possible subdomain(s) for host shabak.gov.il, Searched 0 pages containing 0 results
  129.  
  130. Gathered E-Mail information for shabak.gov.il
  131. ---------------------------------------------------------------------------------------------------------------------------------------
  132. Searching Google.com:80...
  133. Searching Altavista.com:80...
  134. Found 0 E-Mail(s) for host shabak.gov.il, Searched 0 pages containing 0 results
  135.  
  136. Gathered TCP Port information for 147.237.1.239
  137. --------------------------------------------------------------------------------------------------------------------------------------
  138.  
  139. Port State
  140.  
  141. 1/tcp open
  142. 2/tcp open
  143. 3/tcp open
  144. 4/tcp open
  145. 5/tcp open
  146. 6/tcp open
  147. 7/tcp open
  148. 8/tcp open
  149. 9/tcp open
  150. 10/tcp open
  151. 11/tcp open
  152. 12/tcp open
  153. 13/tcp open
  154. 14/tcp open
  155. 15/tcp open
  156. 16/tcp open
  157. 17/tcp open
  158. 18/tcp open
  159. 19/tcp open
  160. 20/tcp open
  161. 21/tcp open
  162. 22/tcp open
  163. 23/tcp open
  164. 24/tcp open
  165. 26/tcp open
  166. 27/tcp open
  167. 28/tcp open
  168. 29/tcp open
  169. 30/tcp open
  170. 31/tcp open
  171. 32/tcp open
  172. 33/tcp open
  173. 34/tcp open
  174. 35/tcp open
  175. 36/tcp open
  176. 37/tcp open
  177. 38/tcp open
  178. 39/tcp open
  179. 40/tcp open
  180. 41/tcp open
  181. 42/tcp open
  182. 43/tcp open
  183. 44/tcp open
  184. 45/tcp open
  185. 46/tcp open
  186. 47/tcp open
  187. 48/tcp open
  188. 49/tcp open
  189. 50/tcp open
  190. 51/tcp open
  191. 52/tcp open
  192. 53/tcp open
  193. 54/tcp open
  194. 55/tcp open
  195. 56/tcp open
  196. 57/tcp open
  197. 58/tcp open
  198. 59/tcp open
  199. 60/tcp open
  200. 61/tcp open
  201. 62/tcp open
  202. 63/tcp open
  203. 64/tcp open
  204. 65/tcp open
  205. 66/tcp open
  206. 67/tcp open
  207. 68/tcp open
  208. 69/tcp open
  209. 70/tcp open
  210. 71/tcp open
  211. 72/tcp open
  212. 73/tcp open
  213. 74/tcp open
  214. 75/tcp open
  215. 76/tcp open
  216. 77/tcp open
  217. 78/tcp open
  218. 79/tcp open
  219. 80/tcp open
  220. 81/tcp open
  221. 82/tcp open
  222. 83/tcp open
  223. 84/tcp open
  224. 85/tcp open
  225. 86/tcp open
  226. 87/tcp open
  227. 88/tcp open
  228. 89/tcp open
  229. 90/tcp open
  230. 91/tcp open
  231. 92/tcp open
  232. 93/tcp open
  233. 94/tcp open
  234. 95/tcp open
  235. 96/tcp open
  236. 97/tcp open
  237. 98/tcp open
  238. 99/tcp open
  239. 100/tcp open
  240. 101/tcp open
  241. 102/tcp open
  242. 103/tcp open
  243. 104/tcp open
  244. 105/tcp open
  245. 106/tcp open
  246. 107/tcp open
  247. 108/tcp open
  248. 109/tcp open
  249. 110/tcp open
  250. 111/tcp open
  251. 112/tcp open
  252. 113/tcp open
  253. 114/tcp open
  254. 115/tcp open
  255. 116/tcp open
  256. 117/tcp open
  257. 118/tcp open
  258. 119/tcp open
  259. 120/tcp open
  260. 121/tcp open
  261. 122/tcp open
  262. 123/tcp open
  263. 124/tcp open
  264. 125/tcp open
  265. 126/tcp open
  266. 127/tcp open
  267. 128/tcp open
  268. 129/tcp open
  269. 130/tcp open
  270. 131/tcp open
  271. 132/tcp open
  272. 133/tcp open
  273. 134/tcp open
  274. 140/tcp open
  275. 141/tcp open
  276. 142/tcp open
  277. 143/tcp open
  278. 144/tcp open
  279. 145/tcp open
  280. 146/tcp open
  281. 147/tcp open
  282. 148/tcp open
  283. 149/tcp open
  284.  
  285. Portscan Finished: Scanned 150 ports, 0 ports were in state closed
  286. #######################################################################################################################################
  287. [i] Scanning Site: https://shabak.gov.il
  288.  
  289.  
  290.  
  291. B A S I C I N F O
  292. =======================================================================================================================================
  293.  
  294.  
  295. [+] Site Title:
  296. [+] IP address: 147.237.1.239
  297. [+] Web Server: Could Not Detect
  298. [+] CMS: Could Not Detect
  299. [+] Cloudflare: Not Detected
  300. [+] Robots File: Could NOT Find robots.txt!
  301.  
  302.  
  303.  
  304.  
  305. W H O I S L O O K U P
  306. =======================================================================================================================================
  307.  
  308.  
  309. % The data in the WHOIS database of the .il registry is provided
  310. % by ISOC-IL for information purposes, and to assist persons in
  311. % obtaining information about or related to a domain name
  312. % registration record. ISOC-IL does not guarantee its accuracy.
  313. % By submitting a WHOIS query, you agree that you will use this
  314. % Data only for lawful purposes and that, under no circumstances
  315. % will you use this Data to: (1) allow, enable, or otherwise
  316. % support the transmission of mass unsolicited, commercial
  317. % advertising or solicitations via e-mail (spam);
  318. % or (2) enable high volume, automated, electronic processes that
  319. % apply to ISOC-IL (or its systems).
  320. % ISOC-IL reserves the right to modify these terms at any time.
  321. % By submitting this query, you agree to abide by this policy.
  322.  
  323. query: shabak.gov.il
  324.  
  325. reg-name: shabak
  326. domain: shabak.gov.il
  327.  
  328. descr: Tech Tehila
  329. descr: 1 Netanel Lorech st
  330. descr: Jerusalem
  331. descr: 91911
  332. descr: Israel
  333. e-mail: hostmaster AT tehila.gov.il
  334. admin-c: GV-TT3128-IL
  335. tech-c: GV-TT3128-IL
  336. zone-c: GV-TT3128-IL
  337. nserver: dns.gov.il
  338. nserver: dns3.gov.il
  339. validity: N/A
  340. DNSSEC: unsigned
  341. status: Transfer Allowed
  342. changed: domain-registrar AT isoc.org.il 20111027 (Assigned)
  343. changed: domain-registrar AT isoc.org.il 20150122 (Changed)
  344.  
  345. person: Tech Tehila
  346. address: Prime minister office
  347. address: 1 Netanel Lorech st
  348. address: Jerusalem
  349. address: 91039
  350. address: Israel
  351. phone: +972 2 6664666
  352. fax-no: +972 2 6664650
  353. e-mail: Hostmaster AT tehila.gov.il
  354. nic-hdl: GV-TT3128-IL
  355. changed: Managing Registrar 20111027
  356. changed: Managing Registrar 20150122
  357.  
  358. registrar name: Israel Government
  359. registrar info:
  360.  
  361. % Rights to the data above are restricted by copyright.
  362.  
  363.  
  364.  
  365.  
  366. G E O I P L O O K U P
  367. =======================================================================================================================================
  368.  
  369. [i] IP Address: 147.237.1.239
  370. [i] Country: IL
  371. [i] State: N/A
  372. [i] City: N/A
  373. [i] Latitude: 31.500000
  374. [i] Longitude: 34.750000
  375.  
  376.  
  377.  
  378. S U B N E T C A L C U L A T I O N
  379. =======================================================================================================================================
  380.  
  381. Address = 147.237.1.239
  382. Network = 147.237.1.239 / 32
  383. Netmask = 255.255.255.255
  384. Broadcast = not needed on Point-to-Point links
  385. Wildcard Mask = 0.0.0.0
  386. Hosts Bits = 0
  387. Max. Hosts = 1 (2^0 - 0)
  388. Host Range = { 147.237.1.239 - 147.237.1.239 }
  389.  
  390.  
  391.  
  392. N M A P P O R T S C A N
  393. =======================================================================================================================================
  394.  
  395.  
  396. Starting Nmap 7.01 ( https://nmap.org ) at 2018-05-15 10:33 UTC
  397. Nmap scan report for shabak.gov.il (147.237.1.239)
  398. Host is up (0.14s latency).
  399. PORT STATE SERVICE VERSION
  400. 21/tcp filtered ftp
  401. 22/tcp filtered ssh
  402. 23/tcp filtered telnet
  403. 25/tcp filtered smtp
  404. 80/tcp open http?
  405. 110/tcp filtered pop3
  406. 143/tcp filtered imap
  407. 443/tcp open ssl/https?
  408. 445/tcp filtered microsoft-ds
  409. 3389/tcp filtered ms-wbt-server
  410. 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
  411.  
  412.  
  413. S U B - D O M A I N F I N D E R
  414. =======================================================================================================================================
  415.  
  416.  
  417. [i] Total Subdomains Found : 2
  418.  
  419. [+] Subdomain: e.shabak.gov.il
  420. [-] IP: 147.237.72.165
  421.  
  422. [+] Subdomain: et.shabak.gov.il
  423. [-] IP: 147.237.77.25
  424. #######################################################################################################################################
  425. [!] IP Address : 147.237.1.239
  426. [!] Server:
  427. [!] www.shabak.gov.il doesn't seem to use a CMS
  428. [+] Honeypot Probabilty: 0%
  429. --------------------------------------------------------------------------------------------------------------------------------------
  430. [~] Trying to gather whois information for www.shabak.gov.il
  431. [+] Whois information found
  432. Registrant Name : Tech Tehila
  433. Status : Transfer Allowed
  434. Dnssec : unsigned
  435. Expiration Date : N/A
  436. Domain Name : shabak.gov.il
  437. Phone : +972 2 6664666
  438. Registrar : Israel Government
  439. Referral Url : None
  440. Name Servers : dns.gov.il, dns3.gov.il
  441. ---------------------------------------------------------------------------------------------------------------------------------------
  442. PORT STATE SERVICE VERSION
  443. 21/tcp filtered ftp
  444. 22/tcp filtered ssh
  445. 23/tcp filtered telnet
  446. 25/tcp filtered smtp
  447. 80/tcp open http?
  448. 110/tcp filtered pop3
  449. 143/tcp filtered imap
  450. 443/tcp open ssl/https?
  451. 445/tcp filtered microsoft-ds
  452. 3389/tcp filtered ms-wbt-server
  453. 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
  454.  
  455.  
  456. [+] DNS Records
  457. ns1-111.akam.net. (193.108.91.111) AS21342 Akamai International B.V. Europe
  458. dns3.gov.il. (62.219.20.20) AS8551 Bezeq International Israel
  459. usw2.akam.net. (184.26.161.64) AS21342 Akamai International B.V. United States
  460. asia3.akam.net. (23.211.61.64) AS21342 Akamai International B.V. Netherlands
  461. use4.akam.net. (23.211.133.65) AS21342 Akamai International B.V. Netherlands
  462. asia4.akam.net. (184.85.248.64) AS21342 Akamai International B.V. Netherlands
  463. eur2.akam.net. (95.100.173.64) AS21342 Akamai International B.V. Europe
  464. dns.gov.il. (147.237.71.1) AS8867 Tehila Project - Prime Minister Office's Israel
  465. ns1-69.akam.net. (193.108.91.69) AS21342 Akamai International B.V. Europe
  466. eur6.akam.net. (2.22.230.64) AS21342 Akamai International B.V. Spain
  467.  
  468. [+] Host Records (A)
  469. www.shabak.gov.il (147.237.1.239) AS8867 Tehila Project - Prime Minister Office's Israel
  470.  
  471. [+] TXT Records
  472.  
  473. [+] DNS Map: https://dnsdumpster.com/static/map/shabak.gov.il.png
  474.  
  475. [>] Initiating 3 intel modules
  476. [>] Loading Alpha module (1/3)
  477. [>] Beta module deployed (2/3)
  478. [>] Gamma module initiated (3/3)
  479. #######################################################################################################################################
  480. *] Performing General Enumeration of Domain: shabak.gov.il
  481. [-] DNSSEC is not configured for shabak.gov.il
  482. [*] SOA dns.gov.il 147.237.71.1
  483. [*] NS ns1-111.akam.net 193.108.91.111
  484. [*] NS ns1-111.akam.net 2600:1401:2::6f
  485. [*] NS eur2.akam.net 95.100.173.64
  486. [*] NS dns3.gov.il 62.219.20.20
  487. [*] NS ns1-69.akam.net 193.108.91.69
  488. [*] NS ns1-69.akam.net 2600:1401:2::45
  489. [*] NS asia4.akam.net 184.85.248.64
  490. [*] NS asia3.akam.net 23.211.61.64
  491. [*] NS usw2.akam.net 184.26.161.64
  492. [*] NS dns.gov.il 147.237.71.1
  493. [*] NS use4.akam.net 23.211.133.65
  494. [*] NS eur6.akam.net 2.22.230.64
  495. [-] Could not Resolve MX Records for shabak.gov.il
  496. [*] Enumerating SRV Records
  497. [-] No SRV Records Found for shabak.gov.il
  498. #######################################################################################################################################
  499. [*] Processing domain shabak.gov.il
  500. [+] Getting nameservers
  501.  
  502. 23.211.133.65 - use4.akam.net
  503. 147.237.71.1 - dns.gov.il
  504. 23.211.61.64 - asia3.akam.net
  505. 184.85.248.64 - asia4.akam.net
  506. 2.22.230.64 - eur6.akam.net
  507. 193.108.91.69 - ns1-69.akam.net
  508. 184.26.161.64 - usw2.akam.net
  509. 95.100.173.64 - eur2.akam.net
  510. 62.219.20.20 - dns3.gov.il
  511. 193.108.91.111 - ns1-111.akam.net
  512. [-] Zone transfer failed
  513.  
  514. [*] Scanning shabak.gov.il for A records
  515. 147.237.1.239 - shabak.gov.il
  516. 147.237.72.165 - e.shabak.gov.il
  517. 147.237.72.77 - old.shabak.gov.il
  518. 147.237.1.239 - www.shabak.gov.il
  519. #######################################################################################################################################
  520. Ip Address Status Type Domain Name Server
  521. ---------- ------ ---- ----------- ------
  522. 147.237.72.165 host e.shabak.gov.il
  523. 147.237.77.25 host et.shabak.gov.il
  524. 147.237.72.77 host old.shabak.gov.il
  525. 147.237.1.239 307 alias www.shabak.gov.il
  526. 147.237.1.239 307 host shabak.gov.il
  527. ######################################################################################################################################
  528. Original* shabak.gov.il 147.237.1.239 NS:asia3.akam.net
  529. ######################################################################################################################################
  530. Connected to 147.237.1.239
  531.  
  532. Testing SSL server shabak.gov.il on port 443 using SNI name shabak.gov.il
  533.  
  534. TLS Fallback SCSV:
  535. Server supports TLS Fallback SCSV
  536.  
  537. TLS renegotiation:
  538. Secure session renegotiation supported
  539.  
  540. TLS Compression:
  541. Compression disabled
  542.  
  543. Heartbleed:
  544. TLS 1.2 not vulnerable to heartbleed
  545. TLS 1.1 not vulnerable to heartbleed
  546. TLS 1.0 not vulnerable to heartbleed
  547.  
  548. Supported Server Cipher(s):
  549. Preferred TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve P-256 DHE 256
  550. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA384 Curve P-256 DHE 256
  551. Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
  552. Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve P-256 DHE 256
  553. Preferred TLSv1.1 256 bits ECDHE-RSA-AES256-SHA Curve P-256 DHE 256
  554.  
  555. SSL Certificate:
  556. Signature Algorithm: sha256WithRSAEncryption
  557. RSA Key Strength: 2048
  558.  
  559. Subject: shabak.gov.il
  560. Altnames: DNS:shabak.gov.il, DNS:www.shabak.gov.il
  561. Issuer: Thawte RSA CA 2018
  562. #######################################################################################################################################
  563. [+] Emails found:
  564. ------------------
  565.  
  566. [+] Hosts found in search engines:
  567. ---------------------------------------------------------------------------------------------------------------------------------------
  568.  
  569. Total hosts: 2
  570.  
  571. [-] Resolving hostnames IPs...
  572.  
  573. .shabak.gov.il : empty
  574. www.shabak.gov.il : 147.237.1.239
  575. ######################################################################################################################################
  576. ; <<>> DiG 9.11.3-1-Debian <<>> shabak.gov.il +dnssec
  577. ;; global options: +cmd
  578. ;; Got answer:
  579. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3977
  580. ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
  581.  
  582. ;; OPT PSEUDOSECTION:
  583. ; EDNS: version: 0, flags: do; udp: 512
  584. ;; QUESTION SECTION:
  585. ;shabak.gov.il. IN A
  586.  
  587. ;; ANSWER SECTION:
  588. shabak.gov.il. 1470 IN A 147.237.1.239
  589.  
  590. ;; Query time: 307 msec
  591. ;; SERVER: 10.211.254.254#53(10.211.254.254)
  592. ;; WHEN: Tue May 15 07:07:30 EDT 2018
  593. ;; MSG SIZE rcvd: 58
  594.  
  595. #######################################################################################################################################
  596. 30 - DNS Network Mapper by pagvac (gnucitizen.org)
  597.  
  598. [+] searching (sub)domains for shabak.gov.il using built-in wordlist
  599. [+] using maximum random delay of 10 millisecond(s) between requests
  600.  
  601. e.shabak.gov.il
  602. IP address #1: 147.237.72.165
  603.  
  604. et.shabak.gov.il
  605. IP address #1: 147.237.77.25
  606.  
  607. www.shabak.gov.il
  608. IP address #1: 147.237.1.239
  609.  
  610. [+] 3 (sub)domains and 3 IP address(es) found
  611.  
  612. #######################################################################################################################################
  613. Anonymous #OpIsrael JTSEC Full Recon #6 2018
Advertisement
Add Comment
Please, Sign In to add comment