Title:           SEAGATE/EXPLOITATION
Author:          Sneakyone12
Pastebin link:   http://pastebin.com/xYg0csna
First Edit:      Thursday 19th of February 2015 04:40:14 AM CDT
Last Edit:       Thursday 19th of February 2015 04:40:14 AM CDT

WE ARE ANONYMOUS
WE ARE LEGION
WE DO NOT FORGIVE
WE DO NOT FORGET
EXPECT US
 
RISE OF THE HACKTIVIST .
-------------------------------------------------
 
Seagate.com  you sold out >>
 
http://www.seagate.com <<scan report for www.seagate.com (23.5.180.134)<<  a23-5-180-134.deploy.static.akamaitechnologies.com
PORT     STATE    SERVICE
80/tcp   open     http
443/tcp  open     https
---
HTTP Headers for www.seagate.com
==============
 
HTTP/1.1 302 Moved Temporarily
Server: AkamaiGHost
Content-Length: 0
Location: http://www.seagate.com/au/en/
Date: Thu, 19 Feb 2015 06:09:25 GMT
Connection: close
Set-Cookie: permanentLocaleCookie=en-au; expires=Mon, 20-Apr-2015 06:09:25 GMT; path=/; domain=seagate.com
Set-Cookie: userSelectedLocaleCookie=en-au; path=/; domain=seagate.com
Set-Cookie: ecommSessionCookie=en-au; path=/; domain=seagate.com
Set-Cookie: ecommLocaleCookie=en-au; expires=Mon, 20-Apr-2015 06:09:25 GMT; path=/; domain=seagate.com
Set-Cookie: stxEdgescape=country_code=AU,region_code=VIC,city=MOOROOLBARK,lat=-37.78,long=145.30,timezone=GMT+10,zip=,continent=OC,throughput=vhigh,asnum=29713,network=,network_type=,proxy=,pmsa=,msa=,area_code=,county=,fips=; path=/; domain=seagate.com
================
 
IP Address      104.68.139.145 << a104-68-139-145.deploy.static.akamaitechnologies.com (104.68.139.145)
PORT     STATE    SERVICE
80/tcp   open     http
443/tcp  open     https
 
Server Type     Apache/2.2.26 (Unix) DAV/2
----
[*]      CNAME www.seagate.com www.seagate.com.edgekey.net
[*]      CNAME www.seagate.com.edgekey.net e1078.b.akamaiedge.net
[*]      A e1078.b.akamaiedge.net 23.5.180.134
----
MD5 sum of host name:    9da187e80bef2f79705f1c16f1f646ea
SHA1 sum of host name:   b705c358bdc0907ad49276ca79541f33ce44994b
SHA256 sum of host name: e253f68fe38fa5cbbab404634fdd466a847e950297a2453d1d10ba9ff1b4b982
----
Which IP numbers does the hostname seagate.com point to? 134.204.240.122 )
scan report for seagate.com (134.204.240.122)
PORT     STATE    SERVICE
80/tcp   open     http
 
======
EXPLOITATION:
 
X-Powered-By" header for this HTTP server is: "Servlet/2.5 JSP/2.1
---
The URL "http://www.seagate.com/" has the following allowed methods: *, BASELINE_CONTROL, CHECKIN, CHECKOUT, CONNECT, DEBUG, GET, HEAD, INDEX, INVALID, INVOKE, LABEL, LINK, MERGE, MKACTIVITY, MKDIR, MKWORKSPACE, NOTIFY, PIN, POLL, POST, REPLY, RMDIR, SEARCH, SHOWMETHOD, SPACEJUMP, SUBSCRIBE, SUBSCRIPTIONS, TEXTSEARCH, TRACK, UNCHECKOUT, UNLINK, UNSUBSCRIBE, VERSION_CONTROL.
---
The remote network has an active filter.
---
The whole target has no protection (X-Frame-Options header) against ClickJacking attack
======
 
Information disclosure - sensitive informations in URL . X 2.
 
URL: http://ad.360yield.com/match?publisher_dsp_id=5&external_user_id=663554e5-b03e-4100-a6fe-24d6e91c3261
 
Parameter: the URL contains sensitive informations. Parameter: external_user_id, value: 663554e5-b03e-4100-a6fe-24d6e91c3261
---
URL: http://bs.serving-sys.com/BurstingPipe/ActivityServer.bs?cn=as&ActivityID=483733&rnd=837082.6014228746&Session=%5BSessionID%5D
 
Parameter: the URL contains sensitive informations. Parameter: Session, value: [SessionID]
======
 
Cookie set without HttpOnly flag. X 1422.
 
URL: http://e.nexac.com/e/media_math_sync.xgi?na_exid=663554e5-b03e-4100-a6fe-24d6e91c3261
 
Parameter: na_tc=Y; expires=Sun, 30-Nov-2016 22:00:00 GMT; domain=.nexac.com; path=/
---
URL: http://ih.adscale.de/adscale-ih/tpui?tpid=39&tpuid=663554e5-b03e-4100-a6fe-24d6e91c3261&cburl=http%3A%2F%2Fcotads.adscale.de%2Fads%2Fpixel%2F1by1.png
 
Parameter: uu=414071424339015586; Domain=.adscale.de; Expires=Wed, 17-Feb-2016 02:10:15 GMT; Path=/
---
URL: http://ih.adscale.de/adscale-ih/tpui?tpid=39&tpuid=663554e5-b03e-4100-a6fe-24d6e91c3261&cburl=http%3A%2F%2Fcotads.adscale.de%2Fads%2Fpixel%2F1by1.png
 
Parameter: VAR=zs20/63Lqs2rKxHz8iDnR63u72GUHoBV; path=/; domain=ih.adscale.de
---
URL: http://p.acxiom-online.com/pixel/ddp?pid=3006&ord=1000&uid=663554e5-b03e-4100-a6fe-24d6e91c3261&ot=pixel&redir=http%3A%2F%2Fpixel.mathtag.com%2Fload%2Fimg%3Fmt_segld2%3D%23DATTRIBUTES%23%26mt_exid%3D10018%26mt_pi%3Dax%26mt_exuid%3D%23COOKIEID%23
 
Parameter: ACX_COUNT=0;Domain=.acxiom-online.com;Path=/;Max-Age=31536000;Expires=Fri, 19 Feb 2016 09:43:39 GMT
---
URL: http://p.acxiom-online.com/pixel/ddp?pid=3006&ord=1000&uid=663554e5-b03e-4100-a6fe-24d6e91c3261&ot=pixel&redir=http%3A%2F%2Fpixel.mathtag.com%2Fload%2Fimg%3Fmt_segld2%3D%23DATTRIBUTES%23%26mt_exid%3D10018%26mt_pi%3Dax%26mt_exuid%3D%23COOKIEID%23
 
Parameter: ACXID="CASHID=&V=3&ID=b3ab2b9f-343f-4fe7-b0d3-a6932c7dcb48";Domain=.acxiom-online.com;Path=/;Max-Age=31536000;Expires=Fri, 19 Feb 2016 09:43:39 GMT
====
 
Cross Site Request Forgery. X 8.
 
URL: http://www.seagate.com/au/en/
--
URL: http://www.seagate.com
--
URL: http://www.seagate.com/ww
--
URL: http://www.seagate.com/au/en/consumer-login/
====
 
X-Frame-Options header not set. X 95.
 
URL: http://www.seagate.com/au/en/consumer-login/
--
URL: http://www.seagate.com/au/en/partners/
--
URL: http://www.seagate.com/au/en/products/desktop-storage/desktop-external-drives
--
URL: http://www.seagate.com/au/en/about/investors
====
 
Name Servers – seagate.com
 
Name Server                 IP                 Location
ns1.seagate.com         192.55.4.49            Scotts Valley, CA, US      
PORT     STATE    SERVICE
53/tcp   open     domain
80/tcp   open     http
443/tcp  open     https << SSL CERT
----   
ns2.seagate.com         192.55.20.49           Oklahoma City, OK, US
PORT     STATE    SERVICE
53/tcp   open     domain
80/tcp   open     http
----   
ns3.seagate.com         192.55.4.51            Scotts Valley, CA, US
PORT     STATE    SERVICE
53/tcp   open     domain
80/tcp   open     http
443/tcp  open     https <<< SSL CERT
----   
ns4.seagate.com         192.55.20.50           Oklahoma City, OK, US
PORT     STATE    SERVICE
80/tcp   open     http
----   
ns5.seagate.com         192.55.14.49           Minneapolis, MN, US
PORT     STATE    SERVICE
53/tcp   open     domain
80/tcp   open     http
=======
 
www.seagate.com (23.203.208.143)<< a23-203-208-143.deploy.static.akamaitechnologies.com (23.203.208.143) GRADE C CERT.
PORT     STATE    SERVICE
80/tcp   open     http
443/tcp  open     https
----
Server:Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1g DAV/2
IP Address:23.203.208.143
Port:443
Hostname:www.seagate.com
----
EXPLOITS:
 
Sessions may be vulnerable to BEAST attack
Attackers may be able to decrypt the encrypted SSL traffic
 
Server has not enabled HTTP Strict-Transport-Security
Users may be exposed to man-in-the-middle attacks
 
Server doesn’t prefer ciphers that enable forward secrecy.
Encrypted communications captured today are at risk of being decrypted by an attacker in the future.
 
Server has SSL v3 enabled
SSL v3 should be disabled if compatibility with older mobile clients is not required
 
SSL 2.0 Disabled:Pass
SSL 3.0 Disabled:Fail
TLS 1.0 Enabled:Pass
TLS 1.1 Enabled:Pass
TLS 1.2 Enabled:Pass
Weak ciphersuites disabled:Pass
Certificates configured correctly:Pass
Secure renegotiation configured:Pass
Session resumption configured:Pass
BEAST Vulnerability:Fail
OCSP Stapling:Fail
PCI Compliant:Pass
FIPS Compliant:Fail
Forward Secrecy Supported:Fail
Heartbleed Vulnerability:Pass
 
Strict Transport Security:Fail
Mixed Content (HTTP and HTTPS):Timed Out
Domain name resolves to IPv4 address:Pass
Domain name resolves to IPv6 address:Fail
====
Testing SSL server 23.203.208.143 on port 443
 
Accepted  SSLv3  256 bits  AES256-SHA
Accepted  SSLv3  128 bits  AES128-SHA
Accepted  SSLv3  168 bits  DES-CBC3-SHA
Accepted  TLSv1  256 bits  AES256-SHA
Accepted  TLSv1  168 bits  DES-CBC3-SHA
 
Prefered Server Cipher(s):
    SSLv3  256 bits  AES256-SHA
    TLSv1  256 bits  AES256-SHA
 
 SSL Certificate:
    Version: 2
    Serial Number: -4294967295
    Signature Algorithm: sha1WithRSAEncryption
    Issuer: /C=NL/L=Amsterdam/O=Verizon Enterprise Solutions/OU=Cybertrust/CN=Verizon Akamai SureServer CA G14-SHA1
    Not valid before: Jan  6 23:15:26 2015 GMT
    Not valid after: Jan  6 23:15:25 2016 GMT
    Subject: /C=US/ST=CA/L=Scotts Valley/O=Seagate Technology LLC/OU=Information Technology/CN=www.seagate.com
    Public Key Algorithm: rsaEncryption
    RSA Public Key: (2048 bit)
      Modulus (2048 bit):
          00:b3:2a:d2:bd:ff:73:48:04:cf:7d:ef:04:b6:73:
          9d:95:b4:c5:61:0e:3e:9c:f6:a4:20:91:53:77:3d:
          0b:23:64:33:87:de:f5:e3:80:ba:69:0c:73:9c:52:
          e5:f4:cd:59:9d:06:4e:71:21:90:66:87:c0:c4:5a:
          bd:a1:1f:06:77:06:10:0f:5e:5f:52:b1:c5:65:37:
          1b:33:c6:50:94:9a:97:cb:78:22:b2:cc:1e:c5:6f:
          1f:02:df:c8:1c:6b:9b:ed:0b:2f:c2:5c:9a:66:c9:
          6d:4f:5f:76:cc:76:44:62:56:6e:1f:58:b0:ba:5d:
          bf:9e:9f:0c:89:72:30:6f:11:9e:5b:6f:9c:43:67:
          8d:b4:3d:0b:e3:45:24:15:25:61:d7:0d:28:b9:fe:
          05:58:4a:a3:7d:33:b3:58:d9:da:d2:15:78:3c:3c:
          33:3e:9b:7c:63:5a:88:16:04:b5:c1:4b:ac:39:9b:
          e7:d2:02:b8:3a:db:21:1a:6f:bc:ca:26:7f:2f:ba:
          c7:4c:14:dd:07:bc:95:fe:f4:ba:03:54:f6:67:e1:
          db:3b:a0:1f:0b:ff:7d:e9:7b:da:c6:3d:60:20:3b:
          9b:0d:71:4d:e6:84:36:01:1c:82:1b:73:fc:39:eb:
          fc:0c:85:03:40:f3:19:90:37:e8:56:c3:db:9f:6f:
          e7:af
      Exponent: 65537 (0x10001)
    X509v3 Extensions:
      X509v3 Basic Constraints: critical
        CA:FALSE
      X509v3 Certificate Policies:
        Policy: 1.3.6.1.4.1.6334.1.50
          CPS: https://secure.omniroot.com/repository
 
      Authority Information Access:
        OCSP - URI:http://vassg141.ocsp.omniroot.com
        CA Issuers - URI:https://cacert.a.omniroot.com/vassg141.crt
        CA Issuers - URI:https://cacert.a.omniroot.com/vassg141.der
 
      X509v3 Subject Alternative Name:
        DNS:www.seagate.com
      X509v3 Key Usage: critical
        Digital Signature, Key Encipherment
      X509v3 Extended Key Usage:
        TLS Web Server Authentication, TLS Web Client Authentication
      X509v3 Authority Key Identifier:
        keyid:DD:6C:80:7C:BA:B5:32:17:A5:84:41:40:F0:D2:04:66:13:2F:A9:90
==================
 
www.seagate.com (134.204.240.122) << seagate.com (134.204.240.122) GRADE F CERT.
PORT     STATE    SERVICE
80/tcp   open     http
---
Server:Apache/2.2.26 (Unix) mod_ssl/2.2.26 OpenSSL/1.0.1g DAV/2
IP Address:134.204.240.122
Port:443
Hostname:www.seagate.com
---
EXPLOITS:
 
Server does not use secure renegotiation settings
Site is more vulnerable to Denial of Service (DOS) attacks
 
Sessions may be vulnerable to BEAST attack
Attackers may be able to decrypt the encrypted SSL traffic
 
Hostname in certificate and DNS name do not match
Users will receive strong browser warnings
 
Server may have sent unnecessary certificates in the SSL/TLS negotiation
Users may experience slower performance
 
Server doesn’t prefer ciphers that enable forward secrecy.
Encrypted communications captured today are at risk of being decrypted by an attacker in the future.
 
Server has not enabled HTTP Strict-Transport-Security
Users may be exposed to man-in-the-middle attacks
 
Server has not yet upgraded to a Extended Validation certificate
Increase customer confidence by offering visitors the highest level of assurance.
 
SSL 2.0 Disabled:Pass
SSL 3.0 Disabled:Pass
TLS 1.0 Enabled:Pass
TLS 1.1 Enabled:Pass
TLS 1.2 Enabled:Pass
Weak ciphersuites disabled:Pass
Certificates configured correctly:Fail
Secure renegotiation configured:Fail
Session resumption configured:Pass
BEAST Vulnerability:Fail
OCSP Stapling:Fail
PCI Compliant:Fail
FIPS Compliant:Fail
Forward Secrecy Supported:Fail
Heartbleed Vulnerability:Pass
 
Strict Transport Security:Fail
Mixed Content (HTTP and HTTPS):Timed Out
Domain name resolves to IPv4 address:Pass
Domain name resolves to IPv6 address:Fail
=====
 
Testing SSL server 134.204.240.122 on port 443
 
Accepted  TLSv1  256 bits  AES256-SHA
Accepted  TLSv1  128 bits  AES128-SHA
Accepted  TLSv1  168 bits  DES-CBC3-SHA
Accepted  TLSv1  128 bits  RC4-SHA
 
Prefered Server Cipher(s):
    TLSv1  256 bits  AES256-SHA
 
 SSL Certificate:
    Version: 2
    Serial Number: -4294967295
    Signature Algorithm: sha1WithRSAEncryption
    Issuer: /C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3
    Not valid before: Apr 20 00:00:00 2012 GMT
    Not valid after: Apr 20 23:59:59 2018 GMT
    Subject: /C=US/ST=Oklahoma/L=Oklahoma City/O=SEAGATE TECHNOLOGY LLC/OU=IT/CN=www.seagate.com
    Public Key Algorithm: rsaEncryption
    RSA Public Key: (2048 bit)
      Modulus (2048 bit):
          00:c9:cd:47:87:d3:88:ba:04:14:cf:2b:62:68:73:
          1c:16:89:ba:e9:75:f9:eb:71:e0:e0:07:e8:85:7a:
          72:4d:a7:5f:dd:87:d8:45:03:27:42:50:83:59:b0:
          44:d0:55:a5:f1:60:cf:05:ca:63:72:4d:66:bb:bb:
          eb:ac:66:2d:ff:62:78:69:d2:d6:38:fc:95:c5:89:
          f3:75:f6:2b:49:15:2f:15:f1:54:69:1a:91:f4:d9:
          b6:1f:f2:92:06:4a:4b:ca:5b:a7:97:73:25:6f:0c:
          76:6a:99:31:08:41:c9:4c:ee:ed:85:94:87:6f:50:
          c4:e4:a6:70:66:8c:f8:ce:d6:c6:da:b7:a0:69:fa:
          0a:5d:22:78:b5:b3:b3:1e:2c:47:ec:fb:9b:4b:18:
          33:1a:88:fe:86:6d:19:a7:31:ec:55:1c:28:a5:5a:
          85:a0:74:f7:11:75:11:5b:ff:51:23:51:a4:1e:a9:
          3c:77:c7:20:7c:66:60:93:ab:da:65:5a:9f:16:77:
          c2:d1:44:b4:fa:04:d1:08:db:16:44:b2:0c:c3:bb:
          3d:bd:04:48:b6:99:97:ec:fe:2a:4b:7e:de:07:03:
          64:17:78:2c:5d:99:9a:6a:aa:79:e0:ce:f3:f0:89:
          f6:26:49:2e:bc:9d:49:89:6f:c6:7b:00:30:19:e4:
          54:8f
      Exponent: 65537 (0x10001)
    X509v3 Extensions:
      X509v3 Subject Alternative Name:
        DNS:www.seagate.com, DNS:direct.seagate.com, DNS:origin-www.seagate.com
      X509v3 Basic Constraints:
        CA:FALSE
      X509v3 Key Usage:
        Digital Signature, Key Encipherment
      X509v3 CRL Distribution Points:
        URI:http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl
 
      X509v3 Certificate Policies:
        Policy: 2.16.840.1.113733.1.7.23.3
          CPS: https://www.verisign.com/rpa
 
      X509v3 Extended Key Usage:
        TLS Web Server Authentication, TLS Web Client Authentication
      X509v3 Authority Key Identifier:
        keyid:0D:44:5C:16:53:44:C1:82:7E:1D:20:AB:25:F4:01:63:D8:BE:79:A5
 
      Authority Information Access:
        OCSP - URI:http://ocsp.verisign.com
        CA Issuers - URI:http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer
 
      1.3.6.1.5.5.7.1.12:
        0`.^.\0Z0X0V..image/gif0!0.0...+......Kk.(.....R8.).K..!..0&.$http://logo.verisign.com/vslogo1.gif
========================
 
http://www.seagate.com/robots.txt
 
User-agent: HypeStat
Disallow: /
User-agent: EtaoSpider
Disallow: /
User-agent: AppCodesCrawler
Disallow: /
User-agent: *
Disallow: /product-finder/external-hard-drives/
Disallow: /product-finder/internal-hard-drives/
Disallow: /product-finder/home-entertainment/
 
Disallow: /de/de/product-finder/external-hard-drives/
Disallow: /de/de/product-finder/internal-hard-drives/
Disallow: /de/de/product-finder/home-entertainment/
 
Disallow: /gb/en/product-finder/external-hard-drives/
Disallow: /gb/en/product-finder/internal-hard-drives/
Disallow: /gb/en/product-finder/home-entertainment/
 
Disallow: /au/en/product-finder/external-hard-drives/
Disallow: /au/en/product-finder/internal-hard-drives/
Disallow: /au/en/product-finder/home-entertainment/
 
Disallow: /es/es/product-finder/external-hard-drives/
Disallow: /es/es/product-finder/internal-hard-drives/
Disallow: /es/es/product-finder/home-entertainment/
 
Disallow: /it/it/product-finder/external-hard-drives/
Disallow: /it/it/product-finder/internal-hard-drives/
Disallow: /it/it/product-finder/home-entertainment/
 
Disallow: /fr/fr/product-finder/external-hard-drives/
Disallow: /fr/fr/product-finder/internal-hard-drives/
Disallow: /fr/fr/product-finder/home-entertainment/
 
Disallow: /pl/pl/product-finder/external-hard-drives/
Disallow: /pl/pl/product-finder/internal-hard-drives/
Disallow: /pl/pl/product-finder/home-entertainment/
 
Disallow: /tr/tr/product-finder/external-hard-drives/
Disallow: /tr/tr/product-finder/internal-hard-drives/
Disallow: /tr/tr/product-finder/home-entertainment/
 
Disallow: /kr/ko/product-finder/external-hard-drives/
Disallow: /kr/ko/product-finder/internal-hard-drives/
Disallow: /kr/ko/product-finder/home-entertainment/
 
Disallow: /jp/ja/product-finder/external-hard-drives/
Disallow: /jp/ja/product-finder/internal-hard-drives/
Disallow: /jp/ja/product-finder/home-entertainment/
 
Disallow: /cn/zh/product-finder/external-hard-drives/
Disallow: /cn/zh/product-finder/internal-hard-drives/
Disallow: /cn/zh/product-finder/home-entertainment/
 
Disallow: /tw/zh/product-finder/external-hard-drives/
Disallow: /tw/zh/product-finder/internal-hard-drives/
Disallow: /tw/zh/product-finder/home-entertainment/
 
Disallow: /la/es/product-finder/external-hard-drives/
Disallow: /la/es/product-finder/internal-hard-drives/
Disallow: /la/es/product-finder/home-entertainment/
 
Disallow: /br/pt/product-finder/external-hard-drives/
Disallow: /br/pt/product-finder/internal-hard-drives/
Disallow: /br/pt/product-finder/home-entertainment/
 
Disallow: /ru/ru/product-finder/external-hard-drives/
Disallow: /ru/ru/product-finder/internal-hard-drives/
Disallow: /ru/ru/product-finder/home-entertainment/
 
Sitemap: http://www.seagate.com/files/www-content/system/sitemap.xml
Sitemap: http://www.seagate.com/ww/universal/display-views/site-map-partnumber-xml.jsp?locale=en-us
Sitemap: http://www.seagate.com/ww/universal/display-views/site-map-skus-xml.jsp?locale=en-us
Sitemap: http://www.seagate.com/ww/universal/display-views/site-map-upc-xml.jsp?locale=en-us
Sitemap: http://www.seagate.com/ww/universal/display-views/site-map-ean_xml.jsp?locale=en-us