API tools faq
paste
Advertisement
Guest User

Anonymous #brizureoreo JTSEC feat Ghostdog full recon #1

a guest
Mar 10th, 2018
648
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 45.67 KB | None | 0 0
raw download clone embed print report
  1. #######################################################################################################################################
  2. Hostname baby-delice.com ISP SafeBrands S.A.S. (AS34173)
  3. Continent Europe Flag
  4. FR
  5. Country France Country Code FR (FRA)
  6. Region B8 Local time 09 Mar 2018 19:40 CET
  7. Metropolis Unknown Postal Code 13400
  8. City Aubagne Latitude 43.291
  9. IP Address 195.64.164.147 Longitude 5.587
  10. ######################################################################################################################################
  11. [i] Scanning Site: http://baby-delice.com
  12.  
  13.  
  14.  
  15. B A S I C I N F O
  16. ======================================================================================================================================
  17.  
  18.  
  19. [+] Site Title: Baby Délice : Best Original Sweets - Le plaisir du Bonbon et du Chocolat
  20. [+] IP address: 195.64.164.147
  21. [+] Web Server: Apache
  22. [+] CMS: Could Not Detect
  23. [+] Cloudflare: Not Detected
  24. [+] Robots File: Found But Empty!
  25.  
  26.  
  27.  
  28. W H O I S L O O K U P
  29. ======================================================================================================================================
  30.  
  31. Domain Name: BABY-DELICE.COM
  32. Registry Domain ID: 74813450_DOMAIN_COM-VRSN
  33. Registrar WHOIS Server: whois.gandi.net
  34. Registrar URL: http://www.gandi.net
  35. Updated Date: 2017-10-03T15:00:15Z
  36. Creation Date: 2001-07-09T11:00:25Z
  37. Registry Expiry Date: 2018-07-09T11:00:25Z
  38. Registrar: Gandi SAS
  39. Registrar IANA ID: 81
  40. Registrar Abuse Contact Email: abuse@support.gandi.net
  41. Registrar Abuse Contact Phone: +33.170377661
  42. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  43. Name Server: NS1.BDM.MICROSOFTONLINE.COM
  44. Name Server: NS2.BDM.MICROSOFTONLINE.COM
  45. Name Server: NS3.BDM.MICROSOFTONLINE.COM
  46. Name Server: NS4.BDM.MICROSOFTONLINE.COM
  47. Name Server: NS5.GANDI.NET
  48. Name Server: NS6.GANDI.NET
  49. Name Server: NS7.GANDI.NET
  50. DNSSEC: unsigned
  51. URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
  52. >>> Last update of whois database: 2018-03-09T18:43:53Z <<<
  53.  
  54. For more information on Whois status codes, please visit https://icann.org/epp
  55.  
  56.  
  57.  
  58. The Registry database contains ONLY .COM, .NET, .EDU domains and
  59. Registrars.
  60.  
  61.  
  62.  
  63.  
  64. G E O I P L O O K U P
  65. =======================================================================================================================================
  66.  
  67. [i] IP Address: 195.64.164.147
  68. [i] Country: FR
  69. [i] State: Provence-Alpes-Cote d'Azur
  70. [i] City: Aubagne
  71. [i] Latitude: 43.292801
  72. [i] Longitude: 5.570700
  73.  
  74.  
  75.  
  76.  
  77. H T T P H E A D E R S
  78. ======================================================================================================================================
  79.  
  80.  
  81. [i] HTTP/1.1 200 OK
  82. [i] Date: Fri, 09 Mar 2018 18:44:10 GMT
  83. [i] Server: Apache
  84. [i] Expires: Thu, 19 Nov 1981 08:52:00 GMT
  85. [i] Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
  86. [i] Pragma: no-cache
  87. [i] Set-Cookie: PHPSESSID=1c744q3clt6acdvi8bg5jjdjc1; path=/
  88. [i] X-Powered-By: PleskLin
  89. [i] Connection: close
  90. [i] Content-Type: text/html; charset=UTF-8
  91.  
  92.  
  93.  
  94.  
  95. D N S L O O K U P
  96. =======================================================================================================================================
  97.  
  98. ;; Truncated, retrying in TCP mode.
  99. baby-delice.com. 86400 IN NS ns2.bdm.microsoftonline.com.
  100. baby-delice.com. 86400 IN NS ns3.bdm.microsoftonline.com.
  101. baby-delice.com. 86400 IN NS ns4.bdm.microsoftonline.com.
  102. baby-delice.com. 86400 IN NS ns1.bdm.microsoftonline.com.
  103. baby-delice.com. 3600 IN SOA ns1.bdm.microsoftonline.com. msnhst.microsoft.com. 2007070100 10800 1800 691200 3600
  104. baby-delice.com. 3600 IN MX 0 babydelice-com01b.mail.protection.outlook.com.
  105.  
  106.  
  107.  
  108.  
  109. S U B N E T C A L C U L A T I O N
  110. ======================================================================================================================================
  111.  
  112. Address = 195.64.164.147
  113. Network = 195.64.164.147 / 32
  114. Netmask = 255.255.255.255
  115. Broadcast = not needed on Point-to-Point links
  116. Wildcard Mask = 0.0.0.0
  117. Hosts Bits = 0
  118. Max. Hosts = 1 (2^0 - 0)
  119. Host Range = { 195.64.164.147 - 195.64.164.147 }
  120.  
  121.  
  122.  
  123. N M A P P O R T S C A N
  124. =======================================================================================================================================
  125.  
  126.  
  127. Starting Nmap 7.01 ( https://nmap.org ) at 2018-03-09 18:44 UTC
  128. Nmap scan report for baby-delice.com (195.64.164.147)
  129. Host is up (0.093s latency).
  130. rDNS record for 195.64.164.147: phoenix3.safebrands.com
  131. PORT STATE SERVICE VERSION
  132. 21/tcp open ftp ProFTPD 1.3.4c
  133. 22/tcp filtered ssh
  134. 23/tcp filtered telnet
  135. 25/tcp open smtp Postfix smtpd
  136. 80/tcp open http Apache httpd
  137. 110/tcp open pop3 Courier pop3d
  138. 143/tcp open imap Courier Imapd (released 2011)
  139. 443/tcp open ssl/ssl Apache httpd (SSL-only mode)
  140. 445/tcp closed microsoft-ds
  141. 3389/tcp filtered ms-wbt-server
  142. Service Info: Hosts: phoenix3.safebrands.com, localhost.localdomain; OS: Unix
  143.  
  144. Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
  145. Nmap done: 1 IP address (1 host up) scanned in 15.39 seconds
  146. #######################################################################################################################################
  147.  
  148. HostIP:195.64.164.147
  149. HostName:baby-delice.com
  150.  
  151. Gathered Inet-whois information for 195.64.164.147
  152. ---------------------------------------------------------------------------------------------------------------------------------------
  153.  
  154.  
  155. inetnum: 195.64.164.0 - 195.64.165.255
  156. netname: FR-SAFEBRANDS
  157. country: FR
  158. org: ORG-MS122-RIPE
  159. admin-c: TC1087-RIPE
  160. tech-c: TC1087-RIPE
  161. status: ASSIGNED PI
  162. mnt-by: RIPE-NCC-END-MNT
  163. mnt-by: MAILCLUB-MNT
  164. mnt-routes: JAGUAR-MNT
  165. mnt-routes: MAILCLUB-MNT
  166. mnt-domains: JAGUAR-MNT
  167. mnt-domains: MAILCLUB-MNT
  168. created: 2006-06-12T14:05:54Z
  169. last-modified: 2016-04-14T08:14:05Z
  170. source: RIPE # Filtered
  171.  
  172. organisation: ORG-MS122-RIPE
  173. org-name: SafeBrands S.A.S.
  174. org-type: LIR
  175. address: Pole Media de la Belle de Mai 37, rue Guibal
  176. address: 13356
  177. address: Marseille
  178. address: FRANCE
  179. phone: +33488662222
  180. fax-no: +33488662220
  181. admin-c: ODUM-RIPE
  182. admin-c: EHUM-RIPE
  183. admin-c: ENGE-RIPE
  184. abuse-c: MCB-RIPE
  185. mnt-ref: RIPE-NCC-HM-MNT
  186. mnt-ref: MAILCLUB-MNT
  187. mnt-by: RIPE-NCC-HM-MNT
  188. mnt-by: MAILCLUB-MNT
  189. created: 2011-07-28T08:44:17Z
  190. last-modified: 2016-05-19T12:38:50Z
  191. source: RIPE # Filtered
  192.  
  193. person: TINE Charles
  194. address: Mailclub
  195. address: Pole Media de la Belle de Mai
  196. address: 37, rue Guibal
  197. address: 13356 Marseille Cedex 3
  198. address: France
  199. phone: +33 4 88 66 22 22
  200. fax-no: +33 4 88 66 22 20
  201. nic-hdl: TC1087-RIPE
  202. mnt-by: JAGUAR-MNT
  203. created: 2004-10-25T14:01:50Z
  204. last-modified: 2008-04-21T12:12:40Z
  205. source: RIPE # Filtered
  206.  
  207. % Information related to '195.64.164.0/23AS34173'
  208.  
  209. route: 195.64.164.0/23
  210. descr: Mailclub - Planete Marseille
  211. origin: AS34173
  212. mnt-by: JAGUAR-MNT
  213. created: 2006-06-12T17:27:30Z
  214. last-modified: 2006-06-12T17:27:30Z
  215. source: RIPE
  216.  
  217. % This query was served by the RIPE Database Query Service version 1.90 (BLAARKOP)
  218.  
  219.  
  220.  
  221. Gathered Inic-whois information for baby-delice.com
  222. ---------------------------------------------------------------------------------------------------------------------------------------
  223. Domain Name: BABY-DELICE.COM
  224. Registry Domain ID: 74813450_DOMAIN_COM-VRSN
  225. Registrar WHOIS Server: whois.gandi.net
  226. Registrar URL: http://www.gandi.net
  227. Updated Date: 2017-10-03T15:00:15Z
  228. Creation Date: 2001-07-09T11:00:25Z
  229. Registry Expiry Date: 2018-07-09T11:00:25Z
  230. Registrar: Gandi SAS
  231. Registrar IANA ID: 81
  232. Registrar Abuse Contact Email: abuse@support.gandi.net
  233. Registrar Abuse Contact Phone: +33.170377661
  234. Domain Status: clientTransferProhibited https�U@//ica�,H�nn�.org/e��bl�ppU@#clie��bl�nt�U@Trans�������ferProh�U@ibited
  235. Name Server: NS1.BDM.MICROSOFTONLINE.COM
  236. Name Server: NS2.BDM.MICROSOFTONLINE.COM
  237. Name Server: NS3.BDM.MICROSOFTONLINE.COM
  238. Name Server: NS4.BDM.MICROSOFTONLINE.COM
  239. Name Server: NS5.GANDI.NET
  240. Name Server: NS6.GANDI.NET
  241. Name Server: NS7.GANDI.NET
  242. DNSSEC: unsigned
  243. URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
  244. >>> Last update of whois database: 2018-03-09T19:41:24Z <<<
  245.  
  246. For more information on Whois status codes, pleajV@se viF,H�si�t https��bl�:/iV@/ican��bl�n.pV@org/e��������pp
  247.  
  248. NOTICE: The expiration date displayed in this record is the date the
  249. registrar's sponsorship of the domain name registration in the registry is
  250. currently set to expire. This date does not necessarily reflect the expiration
  251. date of the domain name registrant's agreement w�U@ith t�,H�heP sponso��bl�riU@ng
  252. registrar. Users may consult the sponsoring registrar's Whois database to
  253. view the registrar's reported date of expiration for this registration.
  254.  
  255. TERMS OF USE: You are not authorized to access or query our Whois
  256. database through the use of electronic processes that are high-volume and
  257. automated except as reasonably necessary to register domain names or
  258. modify existing registrations; the Data in VeriSign Global Registry
  259. Services' ("VeriSign") Whois database is provide�U@d by �,H�Ve�riSign ��bl�foU@r
  260. information purposes only, and to assist persons in obtaining information
  261. about or related to a domain name registration record. VeriSign does not
  262. guarantee its accuracy. By submitting a Whois query, you agree to abide
  263. by the following terms of use: You agree that you may use this Data only
  264. for lawful purposes and that under no circumstances will you use this Data
  265. to: (1) allow, enable, or otherwise support the transmission of mass
  266. a e-ma<�bl�ilU@, telB�bl�ep�U@hone,��������itat�U@ions �,H�vi
  267. or facsimile; or (2) enable high volume, automated, electronic processes
  268. that apply to VeriSign (or its computer systems). The compilation,
  269. repackaging, dissemination or other use of this Data is expressly
  270. prohibited without the prior written consent of VeriSign. You agree not to
  271. use electronic processes that are automated and high-volume to access or
  272. query the Whois database except as reasonably necessary to register
  273. domain names or modify existing registrations. V�U@eriSi�,H�gn reservѪbl�esU@ the תbl�ri�U@ght
  274. to restrict your access to the Whois database in its sole discretion to ensure
  275. operational stability. VeriSign may restrict or terminate your access to the
  276. Whois database for failure to abide by these terms of use. VeriSign
  277. reserves the right to modify these terms at any time.
  278.  
  279. The Registry database contains ONLY .COM, .NET, .EDU domains and
  280. Registrars.
  281.  
  282. Gathered Netcraft information for baby-delice.com
  283. ---------------------------------------------------------------------------------------------------------------------------------------
  284.  
  285. Retrieving Netcraft.com information for baby-delice.com
  286. Netcraft.com Information gathered
  287.  
  288. Gathered Subdomain information for baby-delice.com
  289. ---------------------------------------------------------------------------------------------------------------------------------------
  290. Searching Google.com:80...
  291. Searching Altavista.com:80...
  292. Found 0 possible subdomain(s) for host baby-delice.com, Searched 0 pages containing 0 results
  293.  
  294. Gathered E-Mail information for baby-delice.com
  295. ---------------------------------------------------------------------------------------------------------------------------------------
  296. Searching Google.com:80...
  297. Searching Altavista.com:80...
  298. Found 0 E-Mail(s) for host baby-delice.com, Searched 0 pages containing 0 results
  299.  
  300. Gathered TCP Port information for 195.64.164.147
  301. ---------------------------------------------------------------------------------------------------------------------------------------
  302.  
  303. Port State
  304.  
  305. 21/tcp open
  306. 80/tcp open
  307.  
  308. Portscan Finished: Scanned 150 ports, 0 ports were in state closed
  309.  
  310. #######################################################################################################################################
  311. [!] IP Address : 195.64.164.147
  312. [!] Server: Apache
  313. [!] Powered By: PleskLin
  314. [+] Clickjacking protection is not in place.
  315. [!] baby-delice.com doesn't seem to use a CMS
  316. [+] Honeypot Probabilty: 30%
  317. ---------------------------------------------------------------------------------------------------------------------------------------
  318. [~] Trying to gather whois information for baby-delice.com
  319. [+] Whois information found
  320. Updated Date : 2017-10-03 15:00:15, 2017-10-19 10:35:45
  321. Status : clientTransferProhibited https://icann.org/epp#clientTransferProhibited, clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
  322. Name : Marc MAULIN
  323. Dnssec : unsigned, Unsigned
  324. City : Saint Victoret
  325. Expiration Date : 2018-07-09 11:00:25
  326. Address : 987 boulevard Ferrisse
  327. Zipcode : 13730
  328. Domain Name : BABY-DELICE.COM, baby-delice.com
  329. Whois Server : whois.gandi.net
  330. State : None
  331. Registrar : GANDI SAS
  332. Referral Url : None
  333. Country : FR
  334. Name Servers : NS1.BDM.MICROSOFTONLINE.COM, NS2.BDM.MICROSOFTONLINE.COM, NS3.BDM.MICROSOFTONLINE.COM, NS4.BDM.MICROSOFTONLINE.COM, NS5.GANDI.NET, NS6.GANDI.NET, NS7.GANDI.NET
  335. Org : Baby Delice SA
  336. Creation Date : 2001-07-09 11:00:25
  337. Emails : abuse@support.gandi.net, domaine@cristeal.com, ebarreyre@e-partenaire.fr
  338. --------------------------------------------------------------------------------------------------------------------------------------
  339. PORT STATE SERVICE VERSION
  340. 21/tcp open ftp ProFTPD 1.3.4c
  341. 22/tcp filtered ssh
  342. 23/tcp filtered telnet
  343. 25/tcp open smtp Postfix smtpd
  344. 80/tcp open http Apache httpd
  345. 110/tcp open pop3 Courier pop3d
  346. 143/tcp open imap Courier Imapd (released 2011)
  347. 443/tcp open ssl/http Apache httpd
  348. 445/tcp closed microsoft-ds
  349. 3389/tcp filtered ms-wbt-server
  350. ---------------------------------------------------------------------------------------------------------------------------------------
  351.  
  352. [+] DNS Records
  353. ns2.bdm.microsoftonline.com. (157.56.81.41) AS8075 Microsoft Corporation United States
  354. ns1.bdm.microsoftonline.com. (207.46.15.59) AS8075 Microsoft Corporation United States
  355. ns4.bdm.microsoftonline.com. (157.55.45.9) AS8075 Microsoft Corporation Netherlands
  356. ns6.gandi.net. (217.70.177.40) AS29169 GANDI SAS France
  357. ns3.bdm.microsoftonline.com. (191.232.83.138) AS8075 Microsoft Corporation Brazil
  358.  
  359. [+] MX Records
  360. 0 (213.199.154.138) AS8075 Microsoft Corporation United Kingdom
  361.  
  362. [+] Host Records (A)
  363. baby-delice.comHTTPS: (phoenix3.safebrands.com) (195.64.164.147) AS34173 SafeBrands S.A.S. France
  364.  
  365. [+] TXT Records
  366. "mscid=ICw/JFz47Kkwyq8ZBqJr4F+1M36MI+YX2mrAVINTfjj6w1cFWOwrvFRspUPqkO54Am/e3VJjdNOzZ1RbiCP9NA=="
  367. "v=spf1 include:spf.protection.outlook.com -all"
  368.  
  369. [+] DNS Map: https://dnsdumpster.com/static/map/baby-delice.com.png
  370.  
  371. [>] Initiating 3 intel modules
  372. [>] Loading Alpha module (1/3)
  373. [>] Beta module deployed (2/3)
  374. [>] Gamma module initiated (3/3)
  375.  
  376.  
  377. [+] Emails found:
  378. ---------------------------------------------------------------------------------------------------------------------------------------
  379. contact@baby-delice.com
  380. direction@baby-delice.com
  381. pixel-1520630272290797-web-@baby-delice.com
  382. pixel-152063027661744-web-@baby-delice.com
  383.  
  384. [+] Hosts found in search engines:
  385. --------------------------------------------------------------------------------------------------------------------------------------
  386. [-] Resolving hostnames IPs...
  387. 195.64.164.147:www.baby-delice.com
  388. [+] Virtual hosts:
  389. --------------------------------------------------------------------------------------------------------------------------------------
  390. 195.64.164.147 graines-caillard.com
  391. 195.64.164.147 viande-charolaise.com
  392. 195.64.164.147 chateaubeauchene.fr
  393. 195.64.164.147 graines-lepaysan.com
  394. 195.64.164.147 velo-porquerolles.fr
  395. [~] Crawling the target for fuzzable URLs
  396. ######################################################################################################################################
  397. Ip Address Status Type Domain Name Server
  398. ---------- ------ ---- ----------- ------
  399. 195.64.164.147 200 host www.baby-delice.com Apache
  400. #####################################################################################################################################
  401. Original* baby-delice.com 195.64.164.147 NS:ns1.bdm.microsoftonline.com MX:babydelice-com01b.mail.protection.outlook.com
  402. Addition baby-delices.com 195.64.164.87 NS:a.ns.mailclub.fr MX:mx0.site-internet.com
  403. Bitsquatting baby-felice.com 183.90.253.16 NS:ns1.xserver.jp MX:baby-felice.com
  404. Bitsquatting baby-dalice.com 162.255.119.225 NS:dns1.registrar-servers.com MX:mx1.privateemail.com
  405. Homoglyph baby-délice.com 195.64.164.87 NS:a.ns.mailclub.fr MX:mail.xn--baby-dlice-g7a.com
  406. Omission babydelice.com 195.64.164.87 NS:a.ns.mailclub.fr MX:mx0.site-internet.com
  407. Subdomain baby-de.lice.com 69.172.201.153 NS:ns1.uniregistrymarket.link
  408. Subdomain baby-deli.ce.com 72.52.4.122 NS:ns1.sedoparking.com MX:localhost
  409. #######################################################################################################################################
  410. ======================================================================================================================================
  411. | Domain: http://baby-delice.com/
  412. | Server: Apache
  413. | IP: 195.64.164.147
  414. ======================================================================================================================================
  415. |
  416. | Directory check:
  417. | [+] CODE: 200 URL: http://baby-delice.com/smartphone/
  418. ======================================================================================================================================
  419. |
  420. | File check:
  421. | [+] CODE: 200 URL: http://baby-delice.com/cgi-bin/test/test.cgi
  422. | [+] CODE: 200 URL: http://baby-delice.com/favicon.ico
  423. | [+] CODE: 200 URL: http://baby-delice.com/index.htm
  424. | [+] CODE: 200 URL: http://baby-delice.com/index.html
  425. | [+] CODE: 200 URL: http://baby-delice.com/index.shtml
  426. | [+] CODE: 200 URL: http://baby-delice.com/index.php
  427. | [+] CODE: 200 URL: http://baby-delice.com/robots.txt
  428. | [+] CODE: 200 URL: http://baby-delice.com/sitemap.xml
  429. =======================================================================================================================================
  430. |
  431. | Check robots.txt:
  432. |
  433. | Check sitemap.xml:
  434. =======================================================================================================================================
  435. |
  436. | Crawler Started:
  437. | Plugin name: FCKeditor upload test v.1 Loaded.
  438. | Plugin name: Code Disclosure v.1.1 Loaded.
  439. | Plugin name: External Host Detect v.1.2 Loaded.
  440. | Plugin name: Web Backdoor Disclosure v.1.1 Loaded.
  441. | Plugin name: E-mail Detection v.1.1 Loaded.
  442. | Plugin name: Timthumb <= 1.32 vulnerability v.1 Loaded.
  443. | Plugin name: phpinfo() Disclosure v.1 Loaded.
  444. | Plugin name: Upload Form Detect v.1.1 Loaded.
  445. | [+] Crawling finished, 1269 URL's found!
  446. |
  447. | FCKeditor File Upload:
  448. |
  449. | Source Code Disclosure:
  450. |
  451. | External hosts:
  452. | [+] External Host Found: https://www.google.com
  453. | [+] External Host Found: https://ajax.googleapis.com
  454. |
  455. | Web Backdoors:
  456. |
  457. | E-mails:
  458. | [+] E-mail Found: contact@baby-delice.com
  459. | [+] E-mail Found: contact@e-partenaire.fr
  460. | [+] E-mail Found: confiserie@baby-delice.com
  461. |
  462. | Timthumb:
  463. |
  464. | PHPinfo() Disclosure:
  465. |
  466. | File Upload Forms:
  467. |
  468. | Ignored Files:
  469. =======================================================================================================================================
  470. | Dynamic tests:
  471. | Plugin name: Learning New Directories v.1.2 Loaded.
  472. | Plugin name: FCKedior tests v.1.1 Loaded.
  473. | Plugin name: Timthumb <= 1.32 vulnerability v.1 Loaded.
  474. | Plugin name: Find Backup Files v.1.2 Loaded.
  475. | Plugin name: Blind SQL-injection tests v.1.3 Loaded.
  476. | Plugin name: Local File Include tests v.1.1 Loaded.
  477. | Plugin name: PHP CGI Argument Injection v.1.1 Loaded.
  478. | Plugin name: Remote Command Execution tests v.1.1 Loaded.
  479. | Plugin name: Remote File Include tests v.1.2 Loaded.
  480. | Plugin name: SQL-injection tests v.1.2 Loaded.
  481. | Plugin name: Cross-Site Scripting tests v.1.2 Loaded.
  482. | Plugin name: Web Shell Finder v.1.3 Loaded.
  483. | [+] 0 New directories added
  484. |
  485. |
  486. | FCKeditor tests:
  487. |
  488. |
  489. | Timthumb < 1.33 vulnerability:
  490. |
  491. |
  492. | Backup Files:
  493. |
  494. |
  495. | Blind SQL Injection:
  496. |
  497. |
  498. | Local File Include:
  499. |
  500. |
  501. | PHP CGI Argument Injection:
  502. |
  503. |
  504. | Remote Command Execution:
  505. |
  506. |
  507. | Remote File Include:
  508. |
  509. |
  510. | SQL Injection:
  511. |
  512. |
  513. | Cross-Site Scripting (XSS):
  514. |
  515. |
  516. | Web Shell Finder:
  517. ======================================================================================================================================
  518. | Static tests:
  519. | Plugin name: Local File Include tests v.1.1 Loaded.
  520. | Plugin name: Remote Command Execution tests v.1.1 Loaded.
  521. | Plugin name: Remote File Include tests v.1.1 Loaded.
  522. |
  523. |
  524. | Local File Include:
  525. |
  526. |
  527. | Remote Command Execution:
  528. |
  529. |
  530. | Remote File Include:
  531. =======================================================================================================================================
  532. #######################################################################################################################################
  533.  
  534. Target: http://baby-delice.com
  535.  
  536. Server: Apache
  537. X-Powered-By: PleskLin
  538.  
  539.  
  540. ## NOTE: The Administrator URL was renamed. Bruteforce it. ##
  541. ## None of /administrator, /admin, /manage ##
  542.  
  543.  
  544. ## Checking if the target has deployed an Anti-Scanner measure
  545.  
  546. [!] Scanning Passed ..... OK
  547.  
  548.  
  549. ## Detecting Joomla! based Firewall ...
  550.  
  551. [!] .htaccess shipped with Joomla! is being deployed for SEO purpose
  552. [!] It contains some defensive mod_rewrite rules
  553. [!] Payloads that contain strings (mosConfig,base64_encode,<script>
  554. GLOBALS,_REQUEST) wil be responsed with 403.
  555.  
  556.  
  557. ## Fingerprinting in progress ...
  558.  
  559. ~Unable to detect the version. Is it sure a Joomla?
  560.  
  561. ## Fingerprinting done.
  562. ######################################################################################################################################
  563. ====================================================================================
  564.  RUNNING NSLOOKUP 
  565. ====================================================================================
  566. Server: 10.211.254.254
  567. Address: 10.211.254.254#53
  568.  
  569. Non-authoritative answer:
  570. Name: baby-delice.com
  571. Address: 195.64.164.147
  572.  
  573. baby-delice.com has address 195.64.164.147
  574. baby-delice.com mail is handled by 0 babydelice-com01b.mail.protection.outlook.com.
  575. ====================================================================================
  576.  CHECKING OS FINGERPRINT 
  577. ====================================================================================
  578.  
  579. Xprobe2 v.0.3 Copyright (c) 2002-2005 fyodor@o0o.nu, ofir@sys-security.com, meder@o0o.nu
  580.  
  581. [+] Target is baby-delice.com
  582. [+] Loading modules.
  583. [+] Following modules are loaded:
  584. [x] [1] ping:icmp_ping - ICMP echo discovery module
  585. [x] [2] ping:tcp_ping - TCP-based ping discovery module
  586. [x] [3] ping:udp_ping - UDP-based ping discovery module
  587. [x] [4] infogather:ttl_calc - TCP and UDP based TTL distance calculation
  588. [x] [5] infogather:portscan - TCP and UDP PortScanner
  589. [x] [6] fingerprint:icmp_echo - ICMP Echo request fingerprinting module
  590. [x] [7] fingerprint:icmp_tstamp - ICMP Timestamp request fingerprinting module
  591. [x] [8] fingerprint:icmp_amask - ICMP Address mask request fingerprinting module
  592. [x] [9] fingerprint:icmp_port_unreach - ICMP port unreachable fingerprinting module
  593. [x] [10] fingerprint:tcp_hshake - TCP Handshake fingerprinting module
  594. [x] [11] fingerprint:tcp_rst - TCP RST fingerprinting module
  595. [x] [12] fingerprint:smb - SMB fingerprinting module
  596. [x] [13] fingerprint:snmp - SNMPv2c fingerprinting module
  597. [+] 13 modules registered
  598. [+] Initializing scan engine
  599. [+] Running scan engine
  600. [-] ping:tcp_ping module: no closed/open TCP ports known on 195.64.164.147. Module test failed
  601. [-] ping:udp_ping module: no closed/open UDP ports known on 195.64.164.147. Module test failed
  602. [-] No distance calculation. 195.64.164.147 appears to be dead or no ports known
  603. [+] Host: 195.64.164.147 is up (Guess probability: 50%)
  604. [+] Target: 195.64.164.147 is alive. Round-Trip Time: 1.01166 sec
  605. [+] Selected safe Round-Trip Time value is: 2.02333 sec
  606. [-] fingerprint:tcp_hshake Module execution aborted (no open TCP ports known)
  607. [-] fingerprint:smb need either TCP port 139 or 445 to run
  608. [+] Primary guess:
  609. [+] Host 195.64.164.147 Running OS: €üóáU (Guess probability: 100%)
  610. [+] Other guesses:
  611. [+] Host 195.64.164.147 Running OS: àYýóáU (Guess probability: 100%)
  612. [+] Host 195.64.164.147 Running OS: àYýóáU (Guess probability: 100%)
  613. [+] Host 195.64.164.147 Running OS: àYýóáU (Guess probability: 100%)
  614. [+] Host 195.64.164.147 Running OS: €üóáU (Guess probability: 100%)
  615. [+] Host 195.64.164.147 Running OS: àYýóáU (Guess probability: 100%)
  616. [+] Host 195.64.164.147 Running OS: €üóáU (Guess probability: 100%)
  617. [+] Host 195.64.164.147 Running OS: àYýóáU (Guess probability: 100%)
  618. [+] Host 195.64.164.147 Running OS: àYýóáU (Guess probability: 100%)
  619. [+] Host 195.64.164.147 Running OS: àYýóáU (Guess probability: 100%)
  620. [+] Cleaning up scan engine
  621. [+] Modules deinitialized
  622. [+] Execution completed.
  623. ====================================================================================
  624.  GATHERING WHOIS INFO 
  625. ====================================================================================
  626. Domain Name: BABY-DELICE.COM
  627. Registry Domain ID: 74813450_DOMAIN_COM-VRSN
  628. Registrar WHOIS Server: whois.gandi.net
  629. Registrar URL: http://www.gandi.net
  630. Updated Date: 2017-10-03T15:00:15Z
  631. Creation Date: 2001-07-09T11:00:25Z
  632. Registry Expiry Date: 2018-07-09T11:00:25Z
  633. Registrar: Gandi SAS
  634. Registrar IANA ID: 81
  635. Registrar Abuse Contact Email: abuse@support.gandi.net
  636. Registrar Abuse Contact Phone: +33.170377661
  637. Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
  638. Name Server: NS1.BDM.MICROSOFTONLINE.COM
  639. Name Server: NS2.BDM.MICROSOFTONLINE.COM
  640. Name Server: NS3.BDM.MICROSOFTONLINE.COM
  641. Name Server: NS4.BDM.MICROSOFTONLINE.COM
  642. Name Server: NS5.GANDI.NET
  643. Name Server: NS6.GANDI.NET
  644. Name Server: NS7.GANDI.NET
  645. DNSSEC: unsigned
  646. URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
  647. >>> Last update of whois database: 2018-03-11T03:23:42Z <<<
  648.  
  649. For more information on Whois status codes, please visit https://icann.org/epp
  650.  
  651. NOTICE: The expiration date displayed in this record is the date the
  652. registrar's sponsorship of the domain name registration in the registry is
  653. currently set to expire. This date does not necessarily reflect the expiration
  654. date of the domain name registrant's agreement with the sponsoring
  655. registrar. Users may consult the sponsoring registrar's Whois database to
  656. view the registrar's reported date of expiration for this registration.
  657.  
  658. TERMS OF USE: You are not authorized to access or query our Whois
  659. database through the use of electronic processes that are high-volume and
  660. automated except as reasonably necessary to register domain names or
  661. modify existing registrations; the Data in VeriSign Global Registry
  662. Services' ("VeriSign") Whois database is provided by VeriSign for
  663. information purposes only, and to assist persons in obtaining information
  664. about or related to a domain name registration record. VeriSign does not
  665. guarantee its accuracy. By submitting a Whois query, you agree to abide
  666. by the following terms of use: You agree that you may use this Data only
  667. for lawful purposes and that under no circumstances will you use this Data
  668. to: (1) allow, enable, or otherwise support the transmission of mass
  669. unsolicited, commercial advertising or solicitations via e-mail, telephone,
  670. or facsimile; or (2) enable high volume, automated, electronic processes
  671. that apply to VeriSign (or its computer systems). The compilation,
  672. repackaging, dissemination or other use of this Data is expressly
  673. prohibited without the prior written consent of VeriSign. You agree not to
  674. use electronic processes that are automated and high-volume to access or
  675. query the Whois database except as reasonably necessary to register
  676. domain names or modify existing registrations. VeriSign reserves the right
  677. to restrict your access to the Whois database in its sole discretion to ensure
  678. operational stability. VeriSign may restrict or terminate your access to the
  679. Whois database for failure to abide by these terms of use. VeriSign
  680. reserves the right to modify these terms at any time.
  681.  
  682. The Registry database contains ONLY .COM, .NET, .EDU domains and
  683. Registrars.
  684. Domain Name: baby-delice.com
  685. Registry Domain ID: 74813450_DOMAIN_COM-VRSN
  686. Registrar WHOIS Server: whois.gandi.net
  687. Registrar URL: http://www.gandi.net
  688. Updated Date: 2017-10-19T10:35:45Z
  689. Creation Date: 2001-07-09T11:00:25Z
  690. Registrar Registration Expiration Date: 2018-07-09T11:00:25Z
  691. Registrar: GANDI SAS
  692. Registrar IANA ID: 81
  693. Registrar Abuse Contact Email: abuse@support.gandi.net
  694. Registrar Abuse Contact Phone: +33.170377661
  695. Reseller: e-partenaire
  696. Domain Status: clientTransferProhibited http://www.icann.org/epp#clientTransferProhibited
  697. Domain Status:
  698. Domain Status:
  699. Domain Status:
  700. Domain Status:
  701. Registry Registrant ID:
  702. Registrant Name: Marc MAULIN
  703. Registrant Organization: Baby Delice SA
  704. Registrant Street: 987 boulevard Ferrisse
  705. Registrant City: Saint Victoret
  706. Registrant State/Province:
  707. Registrant Postal Code: 13730
  708. Registrant Country: FR
  709. Registrant Phone: +33.442468207
  710. Registrant Phone Ext:
  711. Registrant Fax:
  712. Registrant Fax Ext:
  713. Registrant Email: domaine@cristeal.com
  714. Registry Admin ID:
  715. Admin Name: emmanuelle barreyre
  716. Admin Organization: e-partenaire
  717. Admin Street: bat poincaré
  718. avenue louis philibert
  719. domaine du petit arbois
  720. Admin City: aix en provence
  721. Admin State/Province:
  722. Admin Postal Code: 13100
  723. Admin Country: FR
  724. Admin Phone: +33.486870307
  725. Admin Phone Ext:
  726. Admin Fax: +33.486870302
  727. Admin Fax Ext:
  728. Admin Email: ebarreyre@e-partenaire.fr
  729. Registry Tech ID:
  730. Tech Name: emmanuelle barreyre
  731. Tech Organization: e-partenaire
  732. Tech Street: bat poincaré
  733. avenue louis philibert
  734. domaine du petit arbois
  735. Tech City: aix en provence
  736. Tech State/Province:
  737. Tech Postal Code: 13100
  738. Tech Country: FR
  739. Tech Phone: +33.486870307
  740. Tech Phone Ext:
  741. Tech Fax: +33.486870302
  742. Tech Fax Ext:
  743. Tech Email: ebarreyre@e-partenaire.fr
  744. Name Server: NS1.BDM.MICROSOFTONLINE.COM
  745. Name Server: NS2.BDM.MICROSOFTONLINE.COM
  746. Name Server: NS3.BDM.MICROSOFTONLINE.COM
  747. Name Server: NS4.BDM.MICROSOFTONLINE.COM
  748. Name Server: NS5.GANDI.NET
  749. Name Server: NS6.GANDI.NET
  750. Name Server: NS7.GANDI.NET
  751. Name Server:
  752. Name Server:
  753. Name Server:
  754. DNSSEC: Unsigned
  755. URL of the ICANN WHOIS Data Problem Reporting System: http://wdprs.internic.net/
  756. >>> Last update of WHOIS database: 2018-03-11T03:23:59Z <<<
  757.  
  758. For more information on Whois status codes, please visit
  759. https://www.icann.org/epp
  760.  
  761. Reseller Email:
  762. Reseller URL:
  763.  
  764. Personal data access and use are governed by French law, any use for the purpose of unsolicited mass commercial advertising as well as any mass or automated inquiries (for any intent other than the registration or modification of a domain name) are strictly forbidden. Copy of whole or part of our database without Gandi's endorsement is strictly forbidden. <br />
  765. A dispute over the ownership of a domain name may be subject to the alternate procedure established by the Registry in question or brought before the courts. <br />
  766. For additional information, please contact us via the following form:<br />
  767. https://www.gandi.net/support/contacter/mail/
  768. ====================================================================================
  769.  GATHERING OSINT INFO 
  770. ====================================================================================
  771.  
  772. *******************************************************************
  773. * *
  774. * | |_| |__ ___ /\ /\__ _ _ ____ _____ ___| |_ ___ _ __ *
  775. * | __| '_ \ / _ \ / /_/ / _` | '__\ \ / / _ \/ __| __/ _ \ '__| *
  776. * | |_| | | | __/ / __ / (_| | | \ V / __/\__ \ || __/ | *
  777. * \__|_| |_|\___| \/ /_/ \__,_|_| \_/ \___||___/\__\___|_| *
  778. * *
  779. * TheHarvester Ver. 2.7 *
  780. * Coded by Christian Martorella *
  781. * Edge-Security Research *
  782. * cmartorella@edge-security.com *
  783. *******************************************************************
  784.  
  785.  
  786. Full harvest..
  787. [-] Searching in Google..
  788. Searching 0 results...
  789. [-] Searching in PGP Key server..
  790. [-] Searching in Bing..
  791. Searching 50 results...
  792. [-] Searching in Exalead..
  793. Searching 50 results...
  794.  
  795.  
  796. [+] Emails found:
  797. ------------------
  798. contact@baby-delice.com
  799. direction@baby-delice.com
  800. pixel-1520738654171021-web-@baby-delice.com
  801.  
  802. [+] Hosts found in search engines:
  803. ------------------------------------
  804. [-] Resolving hostnames IPs...
  805. 195.64.164.147:www.baby-delice.com
  806. [+] Virtual hosts:
  807. ==================
  808. 195.64.164.147 es.marteau-lemarie.net
  809. 195.64.164.147 kinoptik.com
  810. 195.64.164.147 provulco-bande-transporteuse.com
  811. 195.64.164.147 www.marteau-lemarie.net
  812. 195.64.164.147 velo-porquerolles.fr
  813. 195.64.164.147 cavejamet.com
  814. 195.64.164.147 www.kinoptik.com
  815. 195.64.164.147 www.cavejamet.com
  816. 195.64.164.147 www.bolze-associes.com
  817. 195.64.164.147 m3psolar
  818. 195.64.164.147 chateaubeauchene.fr
  819. 195.64.164.147 cz.marteau-lemarie.net
  820. 195.64.164.147 vannier-kinoptik.fr
  821. 195.64.164.147 www.chateaubeauchene.fr
  822. 195.64.164.147 en.gilep-event.com
  823. 195.64.164.147 www.pipe-organs-manufacturer.com
  824. 195.64.164.147 www.pipe-organs-manufacturer
  825. 195.64.164.147 revelette.fr
  826. 195.64.164.147 renovation-cuir-habillage-siege.com
  827. 195.64.164.147 casalini1962.com
  828. 195.64.164.147 www.cybeleconseil.fr
  829. 195.64.164.147 ambiancepack.com
  830. 195.64.164.147 materiel-peinture.fr
  831. 195.64.164.147 www.promatfrance.com
  832. 195.64.164.147 viande-charolaise.com
  833. 195.64.164.147 afriquemultimedias.com
  834. 195.64.164.147 baby-delice.com
  835. 195.64.164.147 grante-hopmann-avocats.com
  836. 195.64.164.147 sibell-chips-snacks.fr
  837. 195.64.164.147 www.klavocats.fr
  838. 195.64.164.147 barthelaw.com
  839. 195.64.164.147 graines-caillard.com
  840. 195.64.164.147 graines-lepaysan.com
  841. 195.64.164.147 sudembal.com
  842. 195.64.164.147 alessandri.fr
  843. 195.64.164.147 www.caviste-orleans.fr
  844. #######################################################################################################################################
  845. ====================================================================================
  846.  GATHERING DNS INFO 
  847. ====================================================================================
  848.  
  849. ; <<>> DiG 9.11.2-P1-1-Debian <<>> -x baby-delice.com
  850. ;; global options: +cmd
  851. ;; Got answer:
  852. ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45286
  853. ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
  854.  
  855. ;; OPT PSEUDOSECTION:
  856. ; EDNS: version: 0, flags:; udp: 4096
  857. ;; QUESTION SECTION:
  858. ;com.baby-delice.in-addr.arpa. IN PTR
  859.  
  860. ;; AUTHORITY SECTION:
  861. in-addr.arpa. 3600 IN SOA b.in-addr-servers.arpa. nstld.iana.org. 2018013209 1800 900 604800 3600
  862.  
  863. ;; Query time: 675 msec
  864. ;; SERVER: 10.211.254.254#53(10.211.254.254)
  865. ;; WHEN: Sat Mar 10 22:24:35 EST 2018
  866. ;; MSG SIZE rcvd: 125
  867.  
  868. dnsenum VERSION:1.2.4
  869. 
  870. ----- baby-delice.com -----
  871. 
  872.  
  873. Host's addresses:
  874. __________________
  875.  
  876. baby-delice.com. 501 IN A 195.64.164.147
  877. 
  878.  
  879. Name Servers:
  880. ______________
  881.  
  882. ns1.bdm.microsoftonline.com. 51042 IN A 207.46.15.59
  883. ns2.bdm.microsoftonline.com. 51042 IN A 157.56.81.41
  884. ns3.bdm.microsoftonline.com. 51042 IN A 191.232.83.138
  885. ns4.bdm.microsoftonline.com. 51042 IN A 157.55.45.9
  886. 
  887.  
  888. Mail (MX) Servers:
  889. ___________________
  890.  
  891. babydelice-com01b.mail.protection.outlook.com. 10 IN A 213.199.154.106
  892. babydelice-com01b.mail.protection.outlook.com. 10 IN A 94.245.120.74
  893. 
  894.  
  895. Trying Zone Transfers and getting Bind Versions:
  896. _________________________________________________
  897.  
  898. 
  899. Trying Zone Transfer for baby-delice.com on ns4.bdm.microsoftonline.com ...
  900.  
  901. Trying Zone Transfer for baby-delice.com on ns3.bdm.microsoftonline.com ...
  902.  
  903. Trying Zone Transfer for baby-delice.com on ns1.bdm.microsoftonline.com ...
  904.  
  905. Trying Zone Transfer for baby-delice.com on ns2.bdm.microsoftonline.com ...
  906.  
  907. brute force file not specified, bay.
  908. ====================================================================================
  909.  GATHERING DNS SUBDOMAINS 
  910. ====================================================================================
  911. 
  912. ____ _ _ _ _ _____
  913. / ___| _ _| |__ | (_)___| |_|___ / _ __
  914. \___ \| | | | '_ \| | / __| __| |_ \| '__|
  915. ___) | |_| | |_) | | \__ \ |_ ___) | |
  916. |____/ \__,_|_.__/|_|_|___/\__|____/|_|
  917.  
  918. # Coded By Ahmed Aboul-Ela - @aboul3la
  919.  
  920. [-] Enumerating subdomains now for baby-delice.com
  921. [-] verbosity is enabled, will show the subdomains results in realtime
  922. [-] Searching now in Baidu..
  923. [-] Searching now in Yahoo..
  924. [-] Searching now in Google..
  925. [-] Searching now in Bing..
  926. [-] Searching now in Ask..
  927. [-] Searching now in Netcraft..
  928. [-] Searching now in DNSdumpster..
  929. [-] Searching now in Virustotal..
  930. [-] Searching now in ThreatCrowd..
  931. [-] Searching now in SSL Certificates..
  932. [-] Searching now in PassiveDNS..
  933. Virustotal: remote.baby-delice.com
  934. [-] Saving results to file: /usr/share/sniper/loot/domains/domains-baby-delice.com.txt
  935. [-] Total Unique Subdomains Found: 1
  936. remote.baby-delice.com
  937.  
  938. #######################################################################################################################################
  939. ____ _____ ___ ______ _/ /_____ ____ ___
  940. / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
  941. / /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
  942. \__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
  943. /_/ discover v0.5.0 - by @michenriksen
  944.  
  945. Identifying nameservers for baby-delice.com... Done
  946. Using nameservers:
  947.  
  948. - 191.232.83.138
  949. - 157.56.81.41
  950. - 157.55.45.9
  951. - 207.46.15.59
  952.  
  953. Checking for wildcard DNS... Done
  954.  
  955. Running collector: Certificate Search... Done (0 hosts)
  956. Running collector: VirusTotal... Skipped
  957.  -> Key 'virustotal' has not been set
  958. Running collector: Dictionary... Done (27 hosts)
  959. Running collector: Google Transparency Report... Done (0 hosts)
  960. Running collector: Censys... Skipped
  961.  -> Key 'censys_secret' has not been set
  962. Running collector: Wayback Machine... Done (1 host)
  963. Running collector: Riddler... Skipped
  964.  -> Key 'riddler_username' has not been set
  965. Running collector: PTRArchive... Error
  966.  -> PTRArchive returned unexpected response code: 502
  967. Running collector: Threat Crowd... Done (0 hosts)
  968. Running collector: HackerTarget... Done (1 host)
  969. Running collector: PassiveTotal... Skipped
  970.  -> Key 'passivetotal_key' has not been set
  971. Running collector: Netcraft... Done (0 hosts)
  972. Running collector: Shodan... Skipped
  973.  -> Key 'shodan' has not been set
  974. Running collector: DNSDB... Done (1 host)
  975. Running collector: PublicWWW... Done (1 host)
  976.  
  977. Resolving 30 unique hosts...
  978. 195.64.164.147 .baby-delice.com
  979. 195.64.164.147 baby-delice.com
  980.  
  981. 
  982. Found subnets:
  983.  
  984. - 195.64.164.0-255 : 2 hosts
  985.  
  986. Wrote 2 hosts to:
  987.  
  988. - file:///root/aquatone/baby-delice.com/hosts.txt
  989. - file:///root/aquatone/baby-delice.com/hosts.json
  990. __
  991. ____ _____ ___ ______ _/ /_____ ____ ___
  992. / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
  993. / /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
  994. \__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
  995. /_/ takeover v0.5.0 - by @michenriksen
  996.  
  997. Loaded 2 hosts from /root/aquatone/baby-delice.com/hosts.json
  998. Loaded 25 domain takeover detectors
  999.  
  1000. Identifying nameservers for baby-delice.com... Done
  1001. Using nameservers:
  1002.  
  1003. - 157.55.45.9
  1004. - 191.232.83.138
  1005. - 157.56.81.41
  1006. - 207.46.15.59
  1007.  
  1008. Checking hosts for domain takeover vulnerabilities...
  1009.  
  1010. Finished checking hosts:
  1011.  
  1012. - Vulnerable : 0
  1013. - Not Vulnerable : 2
  1014.  
  1015. Wrote 0 potential subdomain takeovers to:
  1016.  
  1017. - file:///root/aquatone/baby-delice.com/takeovers.json
  1018.  
  1019. __
  1020. ____ _____ ___ ______ _/ /_____ ____ ___
  1021. / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
  1022. / /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
  1023. \__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
  1024. /_/ scan v0.5.0 - by @michenriksen
  1025.  
  1026. Loaded 2 hosts from /root/aquatone/baby-delice.com/hosts.json
  1027.  
  1028. Probing 2 ports...
  1029.  
  1030. Wrote open ports to file:///root/aquatone/baby-delice.com/open_ports.txt
  1031. Wrote URLs to file:///root/aquatone/baby-delice.com/urls.txt
  1032. __
  1033. ____ _____ ___ ______ _/ /_____ ____ ___
  1034. / __ `/ __ `/ / / / __ `/ __/ __ \/ __ \/ _ \
  1035. / /_/ / /_/ / /_/ / /_/ / /_/ /_/ / / / / __/
  1036. \__,_/\__, /\__,_/\__,_/\__/\____/_/ /_/\___/
  1037. /_/ gather v0.5.0 - by @michenriksen
  1038.  
  1039. Processing 0 pages...
  1040.  
  1041. Finished processing pages:
  1042.  
  1043. - Successful : 0
  1044. - Failed : 0
  1045.  
  1046. Generating report...done
  1047. Report pages generated:
  1048. #######################################################################################################################################
  1049. Anonymous #brizureoreo JTSEC feat Ghostdog full recon #1
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!