+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: .Gov site is vulnerable (/showthread.php?tid=4088931)
Pages: Pages
1
2
.Gov site is vulnerable - Tenaxium - Feb 28, 2014
So, I was running a website scanner, with a pretty uncommon dork, and a .gov. site shows up. The part I believe is the country. So erm, I confirmed its vulnerable (Using a proxy of course :P). I have not requested the database yet and do not plan to.
Are these kind of things kinda rare? Or no?
EDIT: Site is http://www.cbs.gov.sd ... don't exploit it, please. Just want to put it here if anyone wants to share these 2 cents or if you care ._.
* - Goodies - Feb 28, 2014
Not really, no. There was recently an SMTP spoofing attack on a MAJOR .gov site... I want to say fbi.gov or ira.gov or some 3-letter agency...
They're just sites. Most sites have some sort of vulnerability or another...
* - Tenaxium - Feb 28, 2014
Pretty sure its some third world country as I have never heard of it. Not even going to bother reporting it, im going to post it here though.
http://www.cbs.gov.sd
(Please don't exploit this site, just want it known here if anyone cares)
* - Black Hippy - Feb 28, 2014
(Feb 28, 2014 06:23 PM)Tᴇɴᴀxɪᴜᴍ Wrote: Pretty sure its some third world country as I have never heard of it. Not even going to bother reporting it, im going to post it here though.
http://www.cbs.gov.sd
(Please don't exploit this site, just want it known here if anyone cares)
This is a Central Bureau of Statistics for the country of Sudan, their site admin login was compromised by [censored] a while back
* - Nitro G - Mar 1, 2014
I've been wondering this too. A friend of mine has one of the US Department of Energy site, (XSS). He doesn't know what to do with it.
* - Sky - Mar 1, 2014
Government websites have some of the worst security I've seen.
~Arcane 🤝
* - Kyle1995 - Mar 1, 2014
(Mar 1, 2014 09:59 PM)Nitro G Wrote: I've been wondering this too. A friend of mine has one of the US Department of Energy site, (XSS). He doesn't know what to do with it.Its just a website, most .gov sites don't have a ton of traffic and its much worse getting caught.
* - Skorp - Mar 2, 2014
Yep, as mentioned, government sites have terrible security.
* - DARPA - Mar 2, 2014
Jolly good show old chap, just make the GDP increase by 700% p.a. and you will help humanity.
* - Ρain - Mar 2, 2014
What dorks did you use exactly? Id love to see.
* - Th3PonyWizard - Mar 2, 2014
Am I the only one realizing the irony at using a website scanner to check for vulnerabilities at government websites, and only then using a proxy to verify them?
* - Nitro G - Mar 2, 2014
(Mar 2, 2014 08:56 AM)Th3PonyWizard Wrote: Am I the only one realizing the irony at using a website scanner to check for vulnerabilities at government websites, and only then using a proxy to verify them?
Skids will be skids.
Welcome to HackForums.
* - John_Gacy - Mar 2, 2014
(Mar 2, 2014 08:56 AM)Th3PonyWizard Wrote: Am I the only one realizing the irony at using a website scanner to check for vulnerabilities at government websites, and only then using a proxy to verify them?
Just don't worry about it. 🤣
* - NotCoolBro - Mar 2, 2014
Gov's are nothing special. Hacking a site like CISCO is impressive. not GOVs
* - Im gone brah - Mar 2, 2014
(Mar 1, 2014 11:10 PM)Arcane Sky Wrote: Government websites have some of the worst security I've seen.
~Arcane 🤝
NUCLEAR YOU'RE VERY NUCLEAR🎉