1. TESTING ROBOTS
we use wget to analyze the website : http://www.akakom.ac.id
root@bt:~# wget www.akakom.ac.id
--2011-06-03 09:36:58-- http://www.akakom.ac.id/
Resolving www.akakom.ac.id... 110.76.151.4
Connecting to www.akakom.ac.id|110.76.151.4|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `index.html'
[ <=> ] 47,893 38.1K/s in 1.2s
2011-06-03 09:37:01 (38.1 KB/s) - `index.html' saved [47893]
root@bt:~# wget http://www.akakom.ac.id/robots.txt
--2011-06-03 09:37:52-- http://www.akakom.ac.id/robots.txt
Resolving www.akakom.ac.id... 110.76.151.4
Connecting to www.akakom.ac.id|110.76.151.4|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 304 [text/plain]
Saving to: `robots.txt'
100%[======================================================================================================================================================>] 304 --.-K/s in 0s
2011-06-03 09:37:52 (20.7 MB/s) - `robots.txt' saved [304/304]
this is the screen shoot
2. SEARCH ENGINE DISCOVERY/RECONNAISSANCE
and then we use google to search the site
site:akakom.ac.id
this is the screen shoot
3. IDENTIFY APPLICATION ENTRY POINTS
method get
we not found about method get in this site:www.akakom.ac.id
method post
the url method pos is
4.TESTING FOR WEB APPLICATION FINGERPRINT
we analyze the site with “nmap”
endy@monyonk:~$ nmap -sV -sT akakom.ac.id
Starting Nmap 5.21 ( http://nmap.org ) at 2011-06-02 10:23 WIT
Nmap scan report for akakom.ac.id (110.76.151.2)
Host is up (0.0011s latency).
rDNS record for 110.76.151.2: ns.akakom.ac.id
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 5.5 (protocol 2.0)
25/tcp open smtp Sendmail 8.14.4/8.14.4
53/tcp open domain ISC BIND localhost
80/tcp open http Apache httpd
110/tcp open pop3 Dovecot pop3d
143/tcp open imap Dovecot imapd
445/tcp filtered microsoft-ds
587/tcp open smtp Sendmail 8.14.4/8.14.4
993/tcp open ssl/imap Dovecot imapd
995/tcp open ssl/pop3 Dovecot pop3d
Service Info: Host: mail.akakom.ac.id; OS: Unix
Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 20.96 seconds
and also OnLine Testing with netcraft
this is the screenshoot
5. APPLICATION DISCOVERY
we use DNS zone transfers
root@monyonk:~# host -t ns akakom.ac.id
akakom.ac.id name server gway.akakom.ac.id.
akakom.ac.id name server ns.akakom.ac.id.
root@monyonk:~# host -l akakom.ac.id ns.akakom.ac.id
; Transfer failed.
Using domain server:
Name: ns.akakom.ac.id
Address: 110.76.151.2#53
Aliases:
Host akakom.ac.id.stmik.akakom not found: 9(NOTAUTH)
; Transfer failed.
root@monyonk:~# host -l akakom.ac.id gway.akakom.ac.id
;; Connection to 110.76.151.1#53(110.76.151.1) for akakom.ac.id failed: connection refused.
6. ANALYSIS OF ERROR CODES
we insert the url www.akakom.ac.id/preketek.asp
this is the screenshoot
that is the result for the Information Gathering with my team's....and also we still have much to learn more
thanks for information, very helpful and also helped
st3telkom