[Tenaxium]

So, I was running a website scanner, with a pretty uncommon dork, and a .gov. site shows up. The part I believe is the country. So erm, I confirmed its vulnerable (Using a proxy of course :P). I have not requested the database yet and do not plan to.

Are these kind of things kinda rare? Or no?

EDIT: Site is http://www.cbs.gov.sd ... don't exploit it, please. Just want to put it here if anyone wants to share these 2 cents or if you care ._.

[Goodies]

Not really, no. There was recently an SMTP spoofing attack on a MAJOR .gov site... I want to say fbi.gov or ira.gov or some 3-letter agency...

They're just sites. Most sites have some sort of vulnerability or another...

[Tenaxium]

Pretty sure its some third world country as I have never heard of it. Not even going to bother reporting it, im going to post it here though.

http://www.cbs.gov.sd

(Please don't exploit this site, just want it known here if anyone cares)

[Black Hippy]

Pretty sure its some third world country as I have never heard of it. Not even going to bother reporting it, im going to post it here though.

http://www.cbs.gov.sd

(Please don't exploit this site, just want it known here if anyone cares)

This is a Central Bureau of Statistics for the country of Sudan, their site admin login was compromised by [censored] a while back

[Nitro G]

I've been wondering this too. A friend of mine has one of the US Department of Energy site, (XSS). He doesn't know what to do with it.

[Sky]

Government websites have some of the worst security I've seen.

~Arcane 🤝

[Kyle1995]

I've been wondering this too. A friend of mine has one of the US Department of Energy site, (XSS). He doesn't know what to do with it.

Its just a website, most .gov sites don't have a ton of traffic and its much worse getting caught.

[Skorp]

Yep, as mentioned, government sites have terrible security.

[DARPA]

Jolly good show old chap, just make the GDP increase by 700% p.a. and you will help humanity.

[Ρain]

What dorks did you use exactly? Id love to see.

[Th3PonyWizard]

Am I the only one realizing the irony at using a website scanner to check for vulnerabilities at government websites, and only then using a proxy to verify them?

[Nitro G]

Am I the only one realizing the irony at using a website scanner to check for vulnerabilities at government websites, and only then using a proxy to verify them?

Skids will be skids.

Welcome to HackForums.

[John_Gacy]

Am I the only one realizing the irony at using a website scanner to check for vulnerabilities at government websites, and only then using a proxy to verify them?

Just don't worry about it. 🤣

[NotCoolBro]

Gov's are nothing special. Hacking a site like CISCO is impressive. not GOVs

[Im gone brah]

Government websites have some of the worst security I've seen.

~Arcane 🤝

NUCLEAR YOU'RE VERY NUCLEAR🎉