www.tacti

More documents

Recommendations

Info

Security Notes found on port/service "0 / tcp / " Status Plugin Pass (This does not affect your device compliance). "Additional DNS Hostnames" Category "General " Priority "Low Priority Synopsis Potential virtual hosts have been detected. Description Hostnames different from the current hostname have been collected by miscellaneous plugins. Different web servers may be hosted on name- based virtual hosts. See also: Risk factor NONE / CVSS BASE SCORE :0.0 null Plugin output http://en.wikipedia.org/wiki/Virtual_hosting The following hostnames point to the remote host: - takti.co.il - mail.takti.co.il - webmail.takti.co.il Solution If you want to test them, re-scan using the special vhost syntax, such as : <strong>www</strong>.example.com[192.0.32.10]
Security Notes found on port/service "8880 / tcp / <strong>www</strong>" Status Plugin Pass (This does not affect your device compliance). "HyperText Transfer Protocol (HTTP) Information" Category "Web Servers " Priority "Low Priority Synopsis Some information about the remote HTTP configuration can be extracted. Description This test gives some information about the remote HTTP protocol - the version used, whether HTTP Keep-Alive and HTTP pipelining are enabled, etc... This test is informational only and does not denote any security problem. Risk factor NONE / CVSS BASE SCORE :0.0 null Plugin output Protocol version : HTTP/1.1 SSL : no Keep-Alive : no Options allowed : (Not implemented) Headers : Server: sw-cp-server Date: Tue, 12 Jul 2016 08:05:19 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Expires: Fri, 28 May 1999 00:00:00 GMT Last-Modified: Tue, 12 Jul 2016 08:05:19 GMT Cache-Control: no-store, no-cache, must-revalidate Cache-Control: post-check=0, pre-check=0 Pragma: no-cache P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
Page 1 and 2: Scan Summary Customer company name
Page 3 and 4: 1 0291408&CNumber=&CardPrice=&Clubt
Page 5 and 6: framemode=&ItemID=&FromRec=&FF=&Dat
Page 7 and 8: Solution Consult the application's
Page 9 and 10: Solution Consult the application's
Page 12: Security Warning found on port/serv
Page 15 and 16: Kx={key exchange} Au={authenticatio
Page 17 and 18: Security Warning found on port/serv
Page 27 and 28: certificate authority : |-Subject :
Page 29 and 30: |-Subject : C=US/ST=Virginia/L=Hern
Page 31 and 32: |-Subject : C=US/ST=Virginia/L=Hern
Page 33: DES-CBC-SHA Kx=RSA Au=RSA Enc=DES-C
Page 37 and 38: Content-Type: text/html; charset=ut
Page 39 and 40: X-Permitted-Cross-Domain-Policies:
Page 41 and 42: Key Length: 2048 bits Public Key: 0
Page 43 and 44: Extension: Authority Information Ac
Page 45 and 46: Security Notes found on port/servic
Page 47 and 48: D0 91 64 EC E2 0B 0B 3D B6 90 98 2A
Page 49 and 50: Version: 1 Signature Algorithm: SHA
Page 85 and 86:
Security Notes found on port/servic
Page 87 and 88:
ECDHE-RSA-AES256-SHA384 Kx=ECDHE Au
Page 89 and 90:
CAMELLIA256-SHA Kx=RSA Au=RSA Enc=C
Page 91 and 92:
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA
Page 93 and 94:
Page 95 and 96:
DES-CBC3-SHA Kx=RSA Au=RSA Enc=3DES
Page 97 and 98:
RSA-AES256-SHA256 Kx=RSA Au=RSA Enc
Page 99 and 100:
Page 101 and 102:
RSA-AES128-SHA256 Kx=RSA Au=RSA Enc
Page 103 and 104:
High Strength Ciphers (>= 112-bit k
Page 105 and 106:
DES-CBC3-SHA Kx=RSA Au=RSA Enc=3DES
Page 107 and 108:
Page 109 and 110:
- https://www.takti.co.il/demo/inde
Page 111 and 112:
- http://www.takti.co.il/demo/index
Page 113 and 114:
Page 115 and 116:
Signature Length: 256 bytes / 2048
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
SSL/TLS version : TLSv1.0 Cipher su
Page 123 and 124:
Diffie-Hellman MODP size (bits) : 1
Page 125 and 126:
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=
Page 127 and 128:
administration /administrator /admi
Page 129 and 130:
webalizer Based on tests of each me
Page 131 and 132:
Page 133 and 134:
cgi-bin /mailman
Page 135 and 136:
Page 137 and 138:
Page 139 and 140:
Name : PHPSESSID Path : / Value : 4
Page 141 and 142:
Page 143 and 144:
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
State/Province: Virginia Locality:
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Page 173 and 174:
lind SQL injection (4 requests) : S
Page 175 and 176:
directory traversal (write access)
Page 177 and 178:
show all

www.tacti

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?