TRABAJOS ETHICAL HACKING

TRABAJO NUMERO 1: USO DE DNSENUM

1. GOOGLE.COM
dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.
----- google.com.pe -----
Host's addresses:
__________________
google.com.pe. 5 IN A 179.6.255.55
google.com.pe. 5 IN A 179.6.255.45
google.com.pe. 5 IN A 179.6.255.35
google.com.pe. 5 IN A 179.6.255.50
google.com.pe. 5 IN A 179.6.255.49
google.com.pe. 5 IN A 179.6.255.40
google.com.pe. 5 IN A 179.6.255.34
google.com.pe. 5 IN A 179.6.255.29
google.com.pe. 5 IN A 179.6.255.30
google.com.pe. 5 IN A 179.6.255.20
google.com.pe. 5 IN A 179.6.255.24
google.com.pe. 5 IN A 179.6.255.25
google.com.pe. 5 IN A 179.6.255.39
google.com.pe. 5 IN A 179.6.255.54
google.com.pe. 5 IN A 179.6.255.44
google.com.pe. 5 IN A 179.6.255.59

Name Servers:
______________
ns1.google.com. 5 IN A 216.239.32.10
ns4.google.com. 5 IN A 216.239.38.10
ns3.google.com. 5 IN A 216.239.36.10
ns2.google.com. 5 IN A 216.239.34.10
Mail (MX) Servers:
___________________
alt1.aspmx.l.google.com. 5 IN A 74.125.138.26
alt3.aspmx.l.google.com. 5 IN A 173.194.65.26
aspmx.l.google.com. 5 IN A 173.194.73.26
alt4.aspmx.l.google.com. 5 IN A 64.233.164.26
alt2.aspmx.l.google.com. 5 IN A 64.233.167.26

Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for google.com.pe on ns1.google.com ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for google.com.pe on ns4.google.com ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for google.com.pe on ns3.google.com ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for google.com.pe on ns2.google.com ...
AXFR record query failed: Response code from server: REFUSED
Scraping google.com.pe subdomains from Google:
_______________________________________________
Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

2. FACEBOOK.COM
dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.
----- facebook.com -----
Host's addresses:
__________________
facebook.com. 5 IN A 173.252.110.27
Name Servers:
______________

b.ns.facebook.com. 5 IN A 69.171.255.12
a.ns.facebook.com. 5 IN A 69.171.239.12

Mail (MX) Servers:
___________________

msgin.t.facebook.com. 5 IN A 66.220.159.18

Trying Zone Transfers and getting Bind Versions:
_________________________________________________

Trying Zone Transfer for facebook.com on b.ns.facebook.com ...
AXFR record query failed: connection failed
Trying Zone Transfer for facebook.com on a.ns.facebook.com ...
AXFR record query failed: connection failed
Scraping facebook.com subdomains from Google:
______________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

3. HOTMAIL.COM

dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.
----- hotmail.com -----
Host's addresses:
__________________
hotmail.com. 5 IN A 157.55.152.112
hotmail.com. 5 IN A 157.56.172.28
hotmail.com. 5 IN A 65.55.77.28
hotmail.com. 5 IN A 65.55.85.12

Name Servers:
______________

ns2.msft.net. 5 IN A 208.84.2.53
ns3.msft.net. 5 IN A 213.199.180.53
ns4.msft.net. 5 IN A 208.76.45.53
ns1.msft.net. 5 IN A 65.55.37.62
ns5.msft.net. 5 IN A 65.55.226.140

Mail (MX) Servers:
___________________

mx4.hotmail.com. 5 IN A 65.55.37.88
mx4.hotmail.com. 5 IN A 207.46.8.167
mx4.hotmail.com. 5 IN A 65.55.92.184
mx4.hotmail.com. 5 IN A 65.55.33.135
mx4.hotmail.com. 5 IN A 65.54.188.94
mx4.hotmail.com. 5 IN A 207.46.8.199
mx4.hotmail.com. 5 IN A 65.55.92.152
mx4.hotmail.com. 5 IN A 65.54.188.126
mx4.hotmail.com. 5 IN A 65.55.92.136
mx4.hotmail.com. 5 IN A 65.54.188.72
mx4.hotmail.com. 5 IN A 65.55.37.104
mx4.hotmail.com. 5 IN A 65.55.33.119
mx4.hotmail.com. 5 IN A 65.55.92.168
mx4.hotmail.com. 5 IN A 65.55.37.120
mx4.hotmail.com. 5 IN A 65.54.188.110
mx4.hotmail.com. 5 IN A 65.55.37.72
mx1.hotmail.com. 5 IN A 65.54.188.72
mx1.hotmail.com. 5 IN A 65.55.92.168
mx1.hotmail.com. 5 IN A 65.55.92.136
mx1.hotmail.com. 5 IN A 65.55.92.184
mx1.hotmail.com. 5 IN A 65.55.33.135
mx1.hotmail.com. 5 IN A 65.54.188.126
mx1.hotmail.com. 5 IN A 65.54.188.94
mx1.hotmail.com. 5 IN A 65.55.37.120
mx1.hotmail.com. 5 IN A 65.55.92.152
mx1.hotmail.com. 5 IN A 65.54.188.110
mx1.hotmail.com. 5 IN A 65.55.33.119
mx1.hotmail.com. 5 IN A 65.55.37.72
mx1.hotmail.com. 5 IN A 65.55.37.88
mx1.hotmail.com. 5 IN A 65.55.37.104
mx1.hotmail.com. 5 IN A 207.46.8.199
mx1.hotmail.com. 5 IN A 207.46.8.167
mx2.hotmail.com. 5 IN A 65.55.33.119
mx2.hotmail.com. 5 IN A 65.55.92.184
mx2.hotmail.com. 5 IN A 65.55.33.135
mx2.hotmail.com. 5 IN A 65.54.188.94
mx2.hotmail.com. 5 IN A 65.55.37.120
mx2.hotmail.com. 5 IN A 65.55.37.88
mx2.hotmail.com. 5 IN A 65.54.188.72
mx2.hotmail.com. 5 IN A 65.55.92.152
mx2.hotmail.com. 5 IN A 65.55.37.104
mx2.hotmail.com. 5 IN A 207.46.8.199
mx2.hotmail.com. 5 IN A 65.54.188.110
mx2.hotmail.com. 5 IN A 65.54.188.126
mx2.hotmail.com. 5 IN A 207.46.8.167
mx2.hotmail.com. 5 IN A 65.55.92.136
mx2.hotmail.com. 5 IN A 65.55.37.72
mx2.hotmail.com. 5 IN A 65.55.92.168
mx3.hotmail.com. 5 IN A 65.55.37.120
mx3.hotmail.com. 5 IN A 65.55.92.152
mx3.hotmail.com. 5 IN A 65.55.92.168
mx3.hotmail.com. 5 IN A 207.46.8.167
mx3.hotmail.com. 5 IN A 65.55.37.104
mx3.hotmail.com. 5 IN A 65.55.33.119
mx3.hotmail.com. 5 IN A 65.55.37.88
mx3.hotmail.com. 5 IN A 65.54.188.94
mx3.hotmail.com. 5 IN A 65.55.33.135
mx3.hotmail.com. 5 IN A 65.54.188.110
mx3.hotmail.com. 5 IN A 207.46.8.199
mx3.hotmail.com. 5 IN A 65.54.188.126
mx3.hotmail.com. 5 IN A 65.54.188.72
mx3.hotmail.com. 5 IN A 65.55.92.136
mx3.hotmail.com. 5 IN A 65.55.92.184
mx3.hotmail.com. 5 IN A 65.55.37.72

Trying Zone Transfers and getting Bind Versions:
_________________________________________________

Trying Zone Transfer for hotmail.com on ns2.msft.net ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for hotmail.com on ns4.msft.net ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for hotmail.com on ns1.msft.net ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for hotmail.com on ns5.msft.net ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for hotmail.com on ns3.msft.net ...
AXFR record query failed: Response code from server: REFUSED

Scraping hotmail.com subdomains from Google:
_____________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

4. YOUTUBE.COM

dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.

----- youtube.com -----


Host's addresses:
__________________

youtube.com. 5 IN A 179.6.255.24
youtube.com. 5 IN A 179.6.255.30
youtube.com. 5 IN A 179.6.255.49
youtube.com. 5 IN A 179.6.255.34
youtube.com. 5 IN A 179.6.255.50
youtube.com. 5 IN A 179.6.255.54
youtube.com. 5 IN A 179.6.255.44
youtube.com. 5 IN A 179.6.255.20
youtube.com. 5 IN A 179.6.255.29
youtube.com. 5 IN A 179.6.255.55
youtube.com. 5 IN A 179.6.255.25
youtube.com. 5 IN A 179.6.255.39
youtube.com. 5 IN A 179.6.255.59
youtube.com. 5 IN A 179.6.255.40
youtube.com. 5 IN A 179.6.255.45
youtube.com. 5 IN A 179.6.255.35


Name Servers:
______________

ns4.google.com. 5 IN A 216.239.38.10
ns1.google.com. 5 IN A 216.239.32.10
ns3.google.com. 5 IN A 216.239.36.10
ns2.google.com. 5 IN A 216.239.34.10


Mail (MX) Servers:
___________________

aspmx.l.google.com. 5 IN A 74.125.139.27
alt4.aspmx.l.google.com. 5 IN A 64.233.164.26
alt2.aspmx.l.google.com. 5 IN A 74.125.206.26
alt1.aspmx.l.google.com. 5 IN A 74.125.138.26
alt3.aspmx.l.google.com. 5 IN A 173.194.65.26


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for youtube.com on ns4.google.com ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for youtube.com on ns1.google.com ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for youtube.com on ns3.google.com ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for youtube.com on ns2.google.com ...
AXFR record query failed: Response code from server: REFUSED


Scraping youtube.com subdomains from Google:
_____________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

5. PETROPERU.COM.PE
dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.

----- petroperu.com.pe -----


Host's addresses:
__________________



Name Servers:
______________

ns2.petroperu.com.pe. 5 IN A 190.216.179.54
ns.petroperu.com.pe. 5 IN A 190.216.179.53


Mail (MX) Servers:
___________________

smtp.petroperu.com.pe. 5 IN A 190.216.179.56


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for petroperu.com.pe on ns2.petroperu.com.pe ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for petroperu.com.pe on ns.petroperu.com.pe ...
AXFR record query failed: Response code from server: REFUSED


Scraping petroperu.com.pe subdomains from Google:
__________________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

6. EPSGRAU.COM.PE
dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.

----- epsgrau.com.pe -----


Host's addresses:
__________________

epsgrau.com.pe. 5 IN A 190.223.56.51


Name Servers:
______________

ns1.telmex.net.pe. 5 IN A 200.62.191.10
ns2.telmex.net.pe. 5 IN A 200.24.191.10


Mail (MX) Servers:
___________________

ASPMX2.GOOGLEMAIL.COM. 5 IN A 74.125.138.26
ASPMX3.GOOGLEMAIL.COM. 5 IN A 74.125.206.26
ASPMX.L.GOOGLE.COM. 5 IN A 74.125.139.27
ALT1.ASPMX.L.GOOGLE.COM. 5 IN A 74.125.138.26
ALT2.ASPMX.L.GOOGLE.COM. 5 IN A 74.125.206.26


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for epsgrau.com.pe on ns1.telmex.net.pe ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for epsgrau.com.pe on ns2.telmex.net.pe ...
AXFR record query failed: Response code from server: REFUSED


Scraping epsgrau.com.pe subdomains from Google:
________________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

7. APLUS2.COM
dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.

----- aplus2.com -----


Host's addresses:
__________________

aplus2.com. 5 IN A 69.73.179.252


Name Servers:
______________



Mail (MX) Servers:
___________________

aplus2.com. 5 IN A 69.73.179.252


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for aplus2.com on ns23.peru-hosts.com ...
AXFR record query failed: no nameservers

Trying Zone Transfer for aplus2.com on ns24.peru-hosts.com ...
AXFR record query failed: no nameservers


Scraping aplus2.com subdomains from Google:
____________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

8. BCP.COM.PE

dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.

----- bcp.com.pe -----


Host's addresses:
__________________



Name Servers:
______________

dns3.unired.net.pe. 5 IN A 200.37.10.36
ns.bcp.com.pe. 5 IN A 200.37.27.133
ns3.bcp.com.pe. 5 IN A 216.244.162.212
dns1.unired.net.pe. 5 IN A 200.37.10.34


Mail (MX) Servers:
___________________

mx3.bcp.com.pe. 5 IN A 216.244.165.201
mx4.bcp.com.pe. 5 IN A 216.244.162.201
mxrr.bcp.com.pe. 5 IN A 200.37.27.158
mxrr.bcp.com.pe. 5 IN A 200.37.27.137
mx5.bcp.com.pe. 5 IN A 216.244.165.222
mx6.bcp.com.pe. 5 IN A 216.244.162.222
mx1.bcp.com.pe. 5 IN A 200.37.27.137
mx2.bcp.com.pe. 5 IN A 200.37.27.158


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for bcp.com.pe on ns.bcp.com.pe ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for bcp.com.pe on dns3.unired.net.pe ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for bcp.com.pe on ns3.bcp.com.pe ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for bcp.com.pe on dns1.unired.net.pe ...
AXFR record query failed: Response code from server: REFUSED


Scraping bcp.com.pe subdomains from Google:
____________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

9. REGIONPIURA.GOB.PE
dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.

----- regionpiura.gob.pe -----


Host's addresses:
__________________

regionpiura.gob.pe. 5 IN A 190.223.56.131


Name Servers:
______________

ns1.telmex.net.pe. 5 IN A 200.62.191.10
ns2.telmex.net.pe. 5 IN A 200.24.191.10


Mail (MX) Servers:
___________________

mail.regionpiura.gob.pe. 5 IN A 190.223.56.139


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for regionpiura.gob.pe on ns1.telmex.net.pe ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for regionpiura.gob.pe on ns2.telmex.net.pe ...
AXFR record query failed: Response code from server: REFUSED


Scraping regionpiura.gob.pe subdomains from Google:
____________________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903

10. MUNIPIURA.GOB.PE
dnsenum.pl VERSION:1.2.3
Warning: can't load Net::Whois::IP module, whois queries disabled.

----- munipiura.gob.pe -----


Host's addresses:
__________________



Name Servers:
______________

dns2.unired.net.pe. 5 IN A 200.37.10.35
dns1.unired.net.pe. 5 IN A 200.37.10.34


Mail (MX) Servers:
___________________

mail.munipiura.gob.pe. 5 IN A 200.37.204.204


Trying Zone Transfers and getting Bind Versions:
_________________________________________________


Trying Zone Transfer for munipiura.gob.pe on dns2.unired.net.pe ...
AXFR record query failed: Response code from server: REFUSED

Trying Zone Transfer for munipiura.gob.pe on dns1.unired.net.pe ...
AXFR record query failed: Response code from server: REFUSED


Scraping munipiura.gob.pe subdomains from Google:
__________________________________________________

Error GETing http://www.google.com/ncr: Can't connect to 127.0.0.1:8080 (Connection
refused) at /usr/bin/dnsenum line 903


TRABAJO NUMERO 2: ENUMERACIN DE SERVICIOS CON NMAP EN 10 SERVIDORES

1. NMAP sV 200.37.204.204

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 19:57 EDT
Nmap scan report for mail.munipiura.gob.pe (200.37.204.204)
Host is up (0.048s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
110/tcp open pop3?

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 105.06 seconds

2. NMAP sV 200.37.27.137

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:01 EDT
Nmap scan report for mx1.bcp.com.pe (200.37.27.137)
Host is up (0.0013s latency).
All 1000 scanned ports on mx1.bcp.com.pe (200.37.27.137) are filtered

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 5.79 seconds

3. NMAP sV 65.55.37.88

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:03 EDT
Nmap scan report for col0-mc2-f.col0.hotmail.com (65.55.37.88)
Host is up (0.0044s latency).
All 1000 scanned ports on col0-mc2-f.col0.hotmail.com (65.55.37.88) are filtered

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 34.04 seconds
4. NMAP sV 157.55.152.112

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:05 EDT
Nmap scan report for origin.sn145w.snt145.mail.live.com (157.55.152.112)
Host is up (0.012s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 104.64 seconds

5. NMAP sV 179.6.255.55

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:09 EDT
Nmap scan report for 179.6.255.55
Host is up (0.00084s latency).
All 1000 scanned ports on 179.6.255.55 are filtered

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 55.97 seconds

6. NMAP sV 65.55.92.168

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:11 EDT
Nmap scan report for mx1.hotmail.com (65.55.92.168)
Host is up (0.031s latency).
All 1000 scanned ports on mx1.hotmail.com (65.55.92.168) are filtered

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 54.09 seconds


7. NMAP sV 190.216.179.53

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:16 EDT
Nmap scan report for 190.216.179.53
Host is up (0.0080s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
53/tcp open domain?

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 107.96 seconds

8. NMAP sV 179.6.255.39

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:19 EDT
Nmap scan report for 179.6.255.39
Host is up (0.022s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open https?

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 101.04 seconds

9. NMAP sV 65.55.37.72

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:21 EDT
Nmap scan report for col0-mc1-f.col0.hotmail.com (65.55.37.72)
Host is up (0.0011s latency).
All 1000 scanned ports on col0-mc1-f.col0.hotmail.com (65.55.37.72) are filtered

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 18.31 seconds


10. NMAP sV 190.216.179.56

Starting Nmap 6.40 ( http://nmap.org ) at 2014-08-21 20:23 EDT
Nmap scan report for smtp.petroperu.com.pe (190.216.179.56)
Host is up (0.013s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open https?

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 41.72 seconds