[ { "id" : "service", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "HTTP" } , { "id" : "SSLv2", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "SSLv3", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "TLS1", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "offered" } , { "id" : "TLS1_1", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "offered" } , { "id" : "TLS1_2", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "TLS1_3", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "not offered and downgraded to a weaker protocol" } , { "id" : "NPN", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "ALPN", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "cipherlist_NULL", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_aNULL", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_EXPORT", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_LOW", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_3DES_IDEA", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cwe" : "CWE-310", "finding" : "not offered" } , { "id" : "cipherlist_AVERAGE", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "LOW", "cwe" : "CWE-310", "finding" : "offered" } , { "id" : "cipherlist_STRONG", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS_ciphers", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES256-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CAMELLIA128-SHA256" } , { "id" : "PFS_ECDHE_curves", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "secp224k1 secp224r1 secp256k1 prime256v1 secp384r1 secp521r1 brainpoolP256r1 brainpoolP384r1 brainpoolP512r1" } , { "id" : "DH_groups", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "RFC3526/Oakley Group 14" } , { "id" : "cipher_order", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "server" } , { "id" : "protocol_negotiated", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "Default protocol TLS1.2" } , { "id" : "cipher_negotiated", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "ECDHE-RSA-AES256-GCM-SHA384, 521 bit ECDH (P-521)" } , { "id" : "cipherorder_TLSv1", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" } , { "id" : "cipherorder_TLSv1_1", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" } , { "id" : "cipherorder_TLSv1_2", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-CHACHA20-POLY1305 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-AES256-SHA256 DHE-RSA-CAMELLIA256-SHA256" } , { "id" : "TLS_extensions", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "'renegotiation info/#65281' 'EC point formats/#11' 'max fragment length/#1' 'encrypt-then-mac/#22' 'extended master secret/#23'" } , { "id" : "TLS_session_ticket", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "No lifetime advertised" } , { "id" : "SSL_sessionID_support", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "yes" } , { "id" : "sessionresumption_ticket", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "supported" } , { "id" : "sessionresumption_ID", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "supported" } , { "id" : "TLS_timestamp", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "off by 0 seconds from your localtime" } , { "id" : "cert_numbers", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "1" } , { "id" : "cert_signatureAlgorithm", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "SHA256 with RSA" } , { "id" : "cert_keySize", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "2048 bits" } , { "id" : "cert_keyUsage", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "Digital Signature, Key Encipherment" } , { "id" : "cert_extKeyUsage", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "cert_ext_keyusage" } , { "id" : "cert_serialNumber", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "B2579DAF1112DA87" } , { "id" : "cert_fingerprintSHA1", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "F92089514210213DADEB901E60B06A3755102F1F" } , { "id" : "cert_fingerprintSHA256", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "082FC0DD5B2E7056379EAE85674EBC3166C3BD6AF7F37644BED02E9E69F6C5C6" } , { "id" : "cert", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "-----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgIJALJXna8REtqHMA0GCSqGSIb3DQEBCwUAMIG0MQswCQYD VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEa MBgGA1UEChMRR29EYWRkeS5jb20sIEluYy4xLTArBgNVBAsTJGh0dHA6Ly9jZXJ0 cy5nb2RhZGR5LmNvbS9yZXBvc2l0b3J5LzEzMDEGA1UEAxMqR28gRGFkZHkgU2Vj dXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcyMB4XDTE4MDIxOTE1MDgwMFoX DTIwMDIxNDIyNDIwMVowPDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh dGVkMRcwFQYDVQQDDA4qLmNlZGlhLm9yZy5lYzCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKzWf14S4gFEegdQSpgo/YwPJCvJhAZW1EUewAkwpathWI+H 8tAB3ux8/HePY9NoqQb4Z23DeFbsCWYOzmU6mF4CzS3ju0h+WG8UJBQK+uy0OgEF IZzM3XB/npn4nQiDTrL5V1SKjhO4EenOW1fEJbsF/hawiKT/U5fJhpZIamd2VZ48 VilqaW6uA2nl2KN5iiJwvyvS3+yIuAucAP1Zd8J1TQebHkXd9BkOQBoJTw8pbZGY xd/dFGqn8DhcXaNVQzuEQVCnRZGcujQ+m9EWCzOMIgYY0xQxxOgMxCuUUE4nADlU Fm+KDSmcj8j7yWL2VZuIlpSCfePEH6qZgVHLjxsCAwEAAaOCAbowggG2MAwGA1Ud EwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB /wQEAwIFoDA3BgNVHR8EMDAuMCygKqAohiZodHRwOi8vY3JsLmdvZGFkZHkuY29t L2dkaWcyczEtODA5LmNybDBdBgNVHSAEVjBUMEgGC2CGSAGG/W0BBxcBMDkwNwYI KwYBBQUHAgEWK2h0dHA6Ly9jZXJ0aWZpY2F0ZXMuZ29kYWRkeS5jb20vcmVwb3Np dG9yeS8wCAYGZ4EMAQIBMHYGCCsGAQUFBwEBBGowaDAkBggrBgEFBQcwAYYYaHR0 cDovL29jc3AuZ29kYWRkeS5jb20vMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydGlm aWNhdGVzLmdvZGFkZHkuY29tL3JlcG9zaXRvcnkvZ2RpZzIuY3J0MB8GA1UdIwQY MBaAFEDCvSeOzDSDMKIz1/tss/C0LIDOMCcGA1UdEQQgMB6CDiouY2VkaWEub3Jn LmVjggxjZWRpYS5vcmcuZWMwHQYDVR0OBBYEFFY3YLmn5KPbVXJqgRtOKgG/4Xgv MA0GCSqGSIb3DQEBCwUAA4IBAQBWP9qj9qCl5Ta2aKWSox8OFjqnnVjJ4RGEfPQj ORiQsL0/FuQ+EmPaKufr9fyRJbapWJi9Zgs+/r8hoAP5Y90nPQ0of1Er1TDQQMnw m8BfMwrBVCHy7psb2ovJrOBmEf1Tmff6jBVp8ywGkoNTM3NR7vv8RWq3+U6klji8 gb3Ry8+5tckMMfVTHRzYmVx9OWgwrqgyIgCZV3BLNfyzYF6xXSmym6fftSxJvPDl Fj8vVGio5d89vzJ1DU4McQUPz1j0NZd3YkH/6wK7Qm2qAJRLPjE9Ua/sMh0iixbf dEGqKgL9Jx/9eL63V42K6bc5JiW3q24iS/Xm4NlVubBZDNui -----END CERTIFICATE-----" } , { "id" : "cert_commonName", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "*.cedia.org.ec" } , { "id" : "cert_commonName_wo_SNI", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "*.cedia.org.ec" } , { "id" : "cert_subjectAltName", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "*.cedia.org.ec cedia.org.ec" } , { "id" : "cert_caIssuers", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "Go Daddy Secure Certificate Authority - G2 (GoDaddy.com, Inc. from US)" } , { "id" : "cert_trust", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "Ok via SAN wildcard and CN wildcard (same w/o SNI)" } , { "id" : "cert_chain_of_trust", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "passed." } , { "id" : "cert_certificatePolicies_EV", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "no" } , { "id" : "cert_eTLS", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "not present" } , { "id" : "cert_expiration_status", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "348 >= 60 days" } , { "id" : "cert_notBefore", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "2018-02-19 10:08" } , { "id" : "cert_notAfter", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "2020-02-14 17:42" } , { "id" : "certs_countServer", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "4" } , { "id" : "certs_list_ordering_problem", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "no" } , { "id" : "cert_crlDistributionPoints", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "http://crl.godaddy.com/gdig2s1-809.crl" } , { "id" : "cert_ocspURL", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "http://ocsp.godaddy.com/" } , { "id" : "OCSP_stapling", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "cert_mustStapleExtension", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "DNS_CAArecord", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "LOW", "finding" : "--" } , { "id" : "certificate_transparency", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "HTTP_status_code", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "200 OK ('/CRAN/')" } , { "id" : "HTTP_clock_skew", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "0 seconds from localtime" } , { "id" : "HSTS_time", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "MEDIUM", "finding" : "max-age too short. 2 days (=172800 seconds) < 15465600 seconds" } , { "id" : "HSTS_subdomains", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "only for this domain" } , { "id" : "HSTS_preload", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "domain is NOT marked for preloading" } , { "id" : "HPKP", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "No support for HTTP Public Key Pinning" } , { "id" : "banner_server", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "High Performance 8bit Web Server" } , { "id" : "banner_application", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "No application banner found" } , { "id" : "cookie_count", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "0 at '/CRAN/'" } , { "id" : "security_headers", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "MEDIUM", "finding" : "--" } , { "id" : "banner_reverseproxy", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "cwe" : "CWE-200", "finding" : "--" } , { "id" : "heartbleed", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0160", "cwe" : "CWE-119", "finding" : "not vulnerable, no heartbeat extension" } , { "id" : "CCS", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0224", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "ticketbleed", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-9244", "cwe" : "CWE-200", "finding" : "no session ticket extension" } , { "id" : "ROBOT", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", "cwe" : "CWE-203", "finding" : "not vulnerable, no RSA key transport cipher" } , { "id" : "secure_renego", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "secure_client_renego", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "CRIME_TLS", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2012-4929", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "BREACH", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "HIGH", "cve" : "CVE-2013-3587", "cwe" : "CWE-310", "finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested" } , { "id" : "POODLE_SSL", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-3566", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "fallback_SCSV", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "finding" : "supported" } , { "id" : "SWEET32", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-2183 CVE-2016-6329", "cwe" : "CWE-327", "finding" : "not vulnerable" } , { "id" : "FREAK", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-0204", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "DROWN", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "not vulnerable to DROWN on this host and port" } , { "id" : "DROWN", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=082FC0DD5B2E7056379EAE85674EBC3166C3BD6AF7F37644BED02E9E69F6C5C6" } , { "id" : "LOGJAM-common_primes", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "RFC3526/Oakley Group 14" } , { "id" : "LOGJAM", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "not vulnerable, no DH EXPORT ciphers," } , { "id" : "BEAST_CBC_TLS1", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "MEDIUM", "cve" : "CVE-2011-3389", "cwe" : "CWE-20", "finding" : "ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-SHA DHE-RSA-AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-AES128-SHA DHE-RSA-CAMELLIA128-SHA" } , { "id" : "BEAST", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "LOW", "cve" : "CVE-2011-3389", "cwe" : "CWE-20", "finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)" } , { "id" : "LUCKY13", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "LOW", "cve" : "CVE-2013-0169", "cwe" : "CWE-310", "finding" : "potentially vulnerable, uses TLS CBC ciphers" } , { "id" : "RC4", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-2566 CVE-2015-2808", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "cipher_xc030", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 521 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_xc028", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" } , { "id" : "cipher_xc014", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 521 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_x9f", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_xcca8", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xcca8 ECDHE-RSA-CHACHA20-POLY1305 ECDH 521 ChaCha20 256 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256" } , { "id" : "cipher_xccaa", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xccaa DHE-RSA-CHACHA20-POLY1305 DH 2048 ChaCha20 256 TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256" } , { "id" : "cipher_x6b", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256" } , { "id" : "cipher_x39", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_xc077", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 521 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384" } , { "id" : "cipher_xc4", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256" } , { "id" : "cipher_x88", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA" } , { "id" : "cipher_xc02f", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 521 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_xc027", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_xc013", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 521 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "cipher_x33", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "cipher_xc076", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 521 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256" } , { "id" : "cipher_x45", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA" } , { "id" : "clientsimulation-android_422", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" } , { "id" : "clientsimulation-android_442", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-android_500", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_60", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_70", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-chrome_65_win7", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-chrome_70_win10", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-firefox_59_win7", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-firefox_62_win7", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-CHACHA20-POLY1305" } , { "id" : "clientsimulation-ie_6_xp", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_7_vista", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" } , { "id" : "clientsimulation-ie_8_win7", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" } , { "id" : "clientsimulation-ie_8_xp", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_11_win7", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-ie_11_win81", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 DHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-ie_11_winphone81", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win10", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-edge_13_win10", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-edge_13_winphone10", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-edge_15_win10", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-opera_17_win7", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-safari_9_ios9", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-safari_9_osx1011", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-safari_10_osx1012", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-apple_ats_9_ios9", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-tor_1709_win7", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.0 ECDHE-RSA-AES256-SHA" } , { "id" : "clientsimulation-java_6u45", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_7u25", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA" } , { "id" : "clientsimulation-java_8u161", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-java_904", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-openssl_101l", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "clientsimulation-openssl_102e", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384" } , { "id" : "scanTime", "ip" : "mirror.cedia.org.ec/201.159.221.67", "port" : "443", "severity" : "INFO", "finding" : "190" } ]