=D =D RTU never gonna update fully.. it ll b in beta mode alws :p rtuexam.net is realy wat we can call a fake never believed a technical university website is vulnerable to so many of vulnerabilities so that can b hacked.. i wish it wud not b a govt univ :/ Now listing a list of vuln which i got during my free tym. :P =D --------------------------------------------------------------------------- + Target IP: 202.65.156.107 + Target Hostname: rtuexam.net + Target Port: 80 + Start Time: 2014-12-05 22:02:24 (GMT5.5) --------------------------------------------------------------------------- + Server: Apache/2.2.15 (Red Hat) + Server leaks inodes via ETags, header found with file /, inode: 36743349, size: 572, mtime: Thu Sep 26 18:59:30 2013 + The anti-clickjacking X-Frame-Options header is not present. + Apache/2.2.15 appears to be outdated (current is at least Apache/2.4.7). Apache 2.0.65 (final release) and 2.2.26 are also current. + Allowed HTTP Methods: GET, HEAD, POST, OPTIONS, TRACE + OSVDB-877: HTTP TRACE method is active, suggesting the host is vulnerable to XST + Retrieved x-powered-by header: PHP/5.6.0RC1 + Uncommon header x-webkit-csp found, with contents: default-src self ;script-src self unsafe-inline unsafe-eval;style-src self unsafe-inline ;img-src self data: *.tile.openstreetmap.org *.tile.opencyclemap.org ; + Uncommon header x-ob_mode found, with contents: 0 + Uncommon header content-security-policy found, with contents: default-src self ;script-src self unsafe-inline unsafe-eval ;;style-src self unsafe-inline ;img-src self data: *.tile.openstreetmap.org *.tile.opencyclemap.org ; + Uncommon header x-content-security-policy found, with contents: default-src self ;options inline-script eval-script;img-src self data: *.tile.openstreetmap.org *.tile.opencyclemap.org ; + OSVDB-3092: /phpMyAdmin/: phpMyAdmin is for managing MySQL databases, and should be protected or limited to authorized hosts. + OSVDB-3092: /manual/: Web server manual found. Dont take it in a silly way RTU... :)
Posted on: Fri, 05 Dec 2014 17:13:17 +0000
Recently Viewed Topics
© 2015