[es] - www.dod.mil? OpenBSD?

bojan_bozovic

Član broj: 29028
Poruke: 3292
*.pat-pool.le.sbb.co.yu.

Sajt: angelstudio.org

+392 Profil

^{28.06.2006. u 20:46 - pre 217 meseci}

Citat:

erika: {7} /usr/pkg/bin/nmap -A defenselink.mil

Starting Nmap 4.01 ( http://www.insecure.org/nmap/ ) at 2006-06-28 23:31 CEST
Stats: 0:01:09 elapsed; 1 hosts completed (1 up), 1 undergoing Connect() Scan
Connect() Scan Timing: About 94.32% done; ETC: 23:33 (0:00:04 remaining)
Stats: 0:01:24 elapsed; 1 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 0.00% done; ETC: 20:04 (596:31:10 remaining)
Stats: 0:01:45 elapsed; 1 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 0.00% done; ETC: 20:04 (596:30:49 remaining)
Stats: 0:01:53 elapsed; 1 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 0.00% done; ETC: 20:04 (596:30:42 remaining)
Stats: 0:02:19 elapsed; 1 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 0.00% done; ETC: 20:04 (596:30:16 remaining)
Stats: 0:02:45 elapsed; 1 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 100.00% done; ETC: 23:34 (0:00:00 remaining)
Interesting ports on www.dod.mil (131.84.1.63):
(The 1671 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE VERSION
80/tcp open http?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port80-TCP:V=4.01%I=7%D=6/28%Time=44A2F598%P=i386--netbsdelf%r(GetReque
SF:st,50,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20http://www\.defenselin
SF:k\.mil/\r\nConnection:\x20close\r\n\r\n")%r(HTTPOptions,50,"HTTP/1\.0\x
SF:20302\x20Found\r\nLocation:\x20http://www\.defenselink\.mil/\r\nConnect
SF:ion:\x20close\r\n\r\n")%r(RTSPRequest,50,"HTTP/1\.0\x20302\x20Found\r\n
SF:Location:\x20http://www\.defenselink\.mil/\r\nConnection:\x20close\r\n\
SF:r\n");

Nmap finished: 1 IP address (1 host up) scanned in 165.532 seconds

Odgovor na temu

madamov
Milan Adamov
vlasnik
Adamov Konsultacije d.o.o.
Beograd, Srbija

SuperModerator
Član broj: 21939
Poruke: 4414
..shall-bg.customer.sbb.co.yu.

Sajt: www.adamov.rs

+138 Profil

Re: www.dod.mil? OpenBSD?

^{29.06.2006. u 16:40 - pre 217 meseci}

www.netcraft.com kaže da je NetWare !?!? Inače, www.army.mil se vrti na WebSTAR-u i Macu.

 Certified Trainer Mojave 101 macOS Support Essentials 10.14
http://www.adamov.co.rs http://milan.adamov.rs http://www.infinitum.rs

Odgovor na temu

bojan_bozovic

Član broj: 29028
Poruke: 3292
*.pat-pool.le.sbb.co.yu.

Sajt: angelstudio.org

+392 Profil

Re: www.dod.mil? OpenBSD?

^{29.06.2006. u 16:44 - pre 217 meseci}

Koji bre army.mil, gde je to?

Code:

erika: {1} /usr/pkg/bin/nmap -A army.mil

Starting Nmap 4.01 ( http://www.insecure.org/nmap/ ) at 2006-06-29 19:38 CEST
Failed to resolve given hostname/IP: army.mil.  Note that you can't use '/mask' AND '[1-4,7,100-]' style IP ranges
WARNING: No targets were specified, so 0 hosts scanned.
Nmap finished: 0 IP addresses (0 hosts up) scanned in 2.083 seconds
erika: {2} nslookup army.mil
Server:         82.117.223.2
Address:        82.117.223.2#53

Non-authoritative answer:
*** Can't find army.mil: No answer

nmap je alat za to, a ne neka skriptica na netcraftu koja je zbudzena na brzinu.

EDIT: Aha, na www.army.mil mislis, samo da nmap obavi posao ;-)

Citat:

erika: {5} /usr/pkg/bin/nmap -A www.army.mil

Starting Nmap 4.01 ( http://www.insecure.org/nmap/ ) at 2006-06-29 19:43 CEST
Stats: 0:01:24 elapsed; 1 hosts completed (1 up), 1 undergoing Connect() Scan
Connect() Scan Timing: About 27.72% done; ETC: 19:47 (0:03:20 remaining)
Stats: 0:01:52 elapsed; 1 hosts completed (1 up), 1 undergoing Connect() Scan
Connect() Scan Timing: About 61.24% done; ETC: 19:46 (0:01:06 remaining)
Stats: 0:01:56 elapsed; 1 hosts completed (1 up), 1 undergoing Connect() Scan
Connect() Scan Timing: About 68.39% done; ETC: 19:46 (0:00:50 remaining)
Stats: 0:02:21 elapsed; 1 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 0.00% done; ETC: 16:16 (596:31:17 remaining)
Stats: 0:03:31 elapsed; 1 hosts completed (1 up), 1 undergoing Service Scan
Service scan Timing: About 0.00% done; ETC: 16:16 (596:30:07 remaining)
Interesting ports on www.army.mil (140.183.234.10):
(The 1671 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE VERSION
80/tcp open http?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port80-TCP:V=4.01%I=7%D=6/29%Time=44A411C0%P=i386--netbsdelf%r(GetReque
SF:st,10F8,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Thu,\x2029\x20Jun\x202006\x
SF:2015:49:11\x20GMT\r\nServer:\x204D_WebSTAR_S/5\.3\.3\x20\(MacOS\x20X\)\
SF:r\nConnection:\x20Close\r\nAccept-Ranges:\x20bytes\r\nLast-Modified:\x2
SF:0Thu,\x2029\x20Jun\x202006\x2015:42:26\x20GMT\r\nContent-Length:\x20370
SF:35\r\nContent-Type:\x20text/html\r\n\r\n\x20\r\r\r<!DOCTYPE\x20HTML\x20PUBL
SF:IC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\">\r<html>\r<h
SF:ead>\r<title>The\x20United\x20States\x20Army\x20Home\x20Page</title>\r<
SF:meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charset=
SF:iso-8859-1\">\r<META\x20HTTP-EQUIV=\"PRAGMA\"\x20CONTENT=\"NO-CACHE\">\
SF:r<link\x20href=\"elements/CSS/stylesheet\.css\"\x20rel=\"stylesheet\"\x
SF:20type=\"text/css\">\r<link\x20rel=\"alternate\"\x20type=\"application/
SF:rss\+xml\"\x20title=\"Breaking\x20Army\x20News\x20Serivice\x20Feed\x20\
SF:[RSS\]\"\x20href=\"http://www4\.army\.mil/ocpa/rss/rss\.xml\">\r\r<scri
SF:pt\x20language=\"JavaScript\"\x20type=\"text/JavaScript\">\r<!--\rvar\x
SF:20win=null;\rfunction\x20NewWindow\(mypage,myname,w,h")%r(HTTPOptions,B
SF:E,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Thu,\x2029\x20Jun\x202006\x2015:4
SF:9:12\x20GMT\r\nServer:\x204D_WebSTAR_S/5\.3\.3\x20\(MacOS\x20X\)\r\nCon
SF:nection:\x20Close\r\nContent-Length:\x200\r\nAllow:\x20OPTIONS,\x20GET,
SF:\x20HEAD,\x20POST\r\nContent-Type:\x20text/html\r\n\r\n");

Nmap finished: 1 IP address (1 host up) scanned in 226.964 seconds

Of course it runs NetBSD, po naredjenju vise komande ;-)

Odgovor na temu

degojs

Član broj: 4716
Poruke: 5096

+51 Profil

Re: www.dod.mil? OpenBSD?

^{29.06.2006. u 17:25 - pre 217 meseci}

Ej hakeri.. da niste promašili forum?

Imate tih kupusara-foruma koliko hoćete na ES pa aj tamo impresionirajte ostatak odelenja..

Commercial-Free !!!

Odgovor na temu

bojan_bozovic

Član broj: 29028
Poruke: 3292
*.pat-pool.le.sbb.co.yu.

Sajt: angelstudio.org

+392 Profil

Re: www.dod.mil? OpenBSD?

^{29.06.2006. u 17:29 - pre 217 meseci}

@degojs

nasao si da flejmujes. a? Ovo je advocacy, i ako mogu da kazem koju lepu rec o sistemu koji koristim, hocu (degojs i windows, podseca li te to na nesto?) ;-) Jer je brzi od FreeBSD, vrlo dobar sistem, a i od FreeBSD i od OpenBSD dobija mnogo manje paznje (a o linuxu da ne govorim).

Odgovor na temu

NastyBoy
Bojan Nastic
UK

Član broj: 12041
Poruke: 895
*.plus.com.

+4 Profil

Re: www.dod.mil? OpenBSD?

^{12.07.2006. u 03:33 - pre 216 meseci}

Code:
4D_WebSTAR_S/5\.3\.3\x20\(MacOS\x20X\)\

Lepo ti reche chovek gore na chemu radi army.mil...

Odgovor na temu

bojan_bozovic

Član broj: 29028
Poruke: 3292
*.pat-pool.le.sbb.co.yu.

Sajt: angelstudio.org

+392 Profil

Re: www.dod.mil? OpenBSD?

^{12.07.2006. u 20:48 - pre 216 meseci}

Zasto onda nmap nalazi u paketima i386-netbsdelf? To da mi kazes.

Citat:

nmap -A -v www.apple.com

Starting Nmap 4.01 ( http://www.insecure.org/nmap/ ) at 2006-07-12 23:53 CEST
Machine 17.254.0.91 MIGHT actually be listening on probe port 80
DNS resolution of 1 IPs took 0.42s. Mode: Async [#: 2, OK: 1, NX: 0, DR: 0, SF: 0, TR: 1, CN: 0]
Initiating Connect() Scan against www.apple.com (17.254.0.91) [1672 ports] at 23:54
Discovered open port 443/tcp on 17.254.0.91
Discovered open port 80/tcp on 17.254.0.91
Connect() Scan Timing: About 3.09% done; ETC: 00:10 (0:15:55 remaining)
Stats: 0:04:41 elapsed; 1 hosts completed (1 up), 1 undergoing Connect() Scan
Connect() Scan Timing: About 28.75% done; ETC: 00:10 (0:11:34 remaining)
Connect() Scan Timing: About 66.19% done; ETC: 00:07 (0:04:28 remaining)
The Connect() Scan took 706.64s to scan 1672 total ports.
Initiating service scan against 2 services on www.apple.com (17.254.0.91) at 00:05
The service scan took 16.21s to scan 2 services on 1 host.
Host www.apple.com (17.254.0.91) appears to be up ... good.
Interesting ports on www.apple.com (17.254.0.91):
(The 1670 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 1.3.33 ((Darwin) PHP/4.3.10)
443/tcp open ssl/http Apache httpd 1.3.33 ((Darwin) PHP/4.3.10)

Nmap finished: 1 IP address (1 host up) scanned in 724.748 seconds

Ovako izgleda probe Darwin/OSX webservera - a o Netcraft skripti koja koristi server signature (koji za svaki virtualni webserver moze da se postavi na bilo koji string BTW) necu. Opa, ranjivi 1.3.33 webserver, da ga obaramo li? http://securitydot.net/xpl/exp...ties/articles/294/exploit.html

;-)

_{[Ovu poruku je menjao bojan_bozovic dana 12.07.2006. u 22:18 GMT+1]}

Odgovor na temu

NastyBoy
Bojan Nastic
UK

Član broj: 12041
Poruke: 895
*.plus.com.

+4 Profil

Re: www.dod.mil? OpenBSD?

^{12.07.2006. u 21:06 - pre 216 meseci}

Koliko vidim iz prilozhenog, HTTP server se fino predstavio kao WebSTAR na MacOSX-u?

Da nije taj NetBSD, koji se pominje u prvoj liniji sa sve default opcijama za scan, ustvari TVOJ fingerprint, jer vidim da si na Netbsd-u? ;)

Odgovor na temu

mkdsl

Član broj: 28910
Poruke: 796
212.62.46.*

+10 Profil

Re: www.dod.mil? OpenBSD?

^{12.07.2006. u 21:46 - pre 216 meseci}

I jeste njegov fingerprint, i ja kad nmap-ujem svoj ruter dobijam:

Citat:

root@leonida:~# nmap -A 192.168.0.1

Starting nmap 3.93 ( http://www.insecure.org/nmap/ ) at 2006-07-12 22:39 CEST
Interesting ports on 192.168.0.1:
(The 1666 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE VERSION
22/tcp open ssh Dropbear sshd 0.46 (protocol 2.0)
81/tcp open hosts2-ns?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port81-TCP:V=3.93%I=7%D=7/12%Time=44B55E0B%P=i486-slackware-linux-gnu%r
SF:(GetRequest,FE,"HTTP/1\.0\x20401\x20Unauthorized\nContent-type:\x20text
SF:/html\r\nDate:\x20Wed,\x2012\x20Jul\x202006\x2022:39:44\x20GMT\r\nConne
SF:ction:\x20close\r\nWWW-Authenticate:\x20Basic\x20realm=\"Wireless\x20AP
SF:\x20Configuration\"\r\n\r\n<HEAD><TITLE>401\x20Unauthorized</TITLE></HE
SF:AD>\n<BODY><H1>401\x20Unauthorized</H1>\n\n</BODY>\n")%r(HTTPOptions,10
SF:2,"HTTP/1\.0\x20501\x20Not\x20Implemented\nContent-type:\x20text/html\r
SF:\nDate:\x20Wed,\x2012\x20Jul\x202006\x2022:39:49\x20GMT\r\nConnection:\
SF:x20close\r\n\r\n<HEAD><TITLE>501\x20Not\x20Implemented</TITLE></HEAD>\n
SF:<BODY><H1>501\x20Not\x20Implemented</H1>\nThe\x20requested\x20method\x2
SF:0is\x20not\x20recognized\x20by\x20this\x20server\.\n</BODY>\n")%r(RTSPR
SF:equest,102,"HTTP/1\.0\x20501\x20Not\x20Implemented\nContent-type:\x20te
SF:xt/html\r\nDate:\x20Wed,\x2012\x20Jul\x202006\x2022:39:49\x20GMT\r\nCon
SF:nection:\x20close\r\n\r\n<HEAD><TITLE>501\x20Not\x20Implemented</TITLE>
SF:</HEAD>\n<BODY><H1>501\x20Not\x20Implemented</H1>\nThe\x20requested\x20
SF:method\x20is\x20not\x20recognized\x20by\x20this\x20server\.\n</BODY>\n"
SF:)%r(Help,D3,"HTTP/1\.0\x20400\x20Bad\x20Request\nContent-type:\x20text/
SF:html\r\nDate:\x20Wed,\x2012\x20Jul\x202006\x2022:39:59\x20GMT\r\nConnec
SF:tion:\x20close\r\n\r\n<HEAD><TITLE>400\x20Bad\x20Request</TITLE></HEAD>
SF:\n<BODY><H1>400\x20Bad\x20Request</H1>\nUnsupported\x20method\.\n</BODY
SF:>\n")%r(SSLSessionReq,D3,"HTTP/1\.0\x20400\x20Bad\x20Request\nContent-t
SF:ype:\x20text/html\r\nDate:\x20Wed,\x2012\x20Jul\x202006\x2022:39:59\x20
SF:GMT\r\nConnection:\x20close\r\n\r\n<HEAD><TITLE>400\x20Bad\x20Request</
SF:TITLE></HEAD>\n<BODY><H1>400\x20Bad\x20Request</H1>\nUnsupported\x20met
SF:hod\.\n</BODY>\n")%r(LPDString,D3,"HTTP/1\.0\x20400\x20Bad\x20Request\n
SF:Content-type:\x20text/html\r\nDate:\x20Wed,\x2012\x20Jul\x202006\x2022:
SF:40:09\x20GMT\r\nConnection:\x20close\r\n\r\n<HEAD><TITLE>400\x20Bad\x20
SF:Request</TITLE></HEAD>\n<BODY><H1>400\x20Bad\x20Request</H1>\nUnsupport
SF:ed\x20method\.\n</BODY>\n");
MAC Address: 00:E0:98:C5:9B:A8 (AboCom Systems)
Device type: general purpose
Running: Linux 2.4.X|2.5.X
OS details: Linux 2.4.0 - 2.5.20
Uptime 0.308 days (since Wed Jul 12 15:16:52 2006)

Nmap finished: 1 IP address (1 host up) scanned in 70.185 seconds

... a u pitanju je Ovislink :)

Odgovor na temu