You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
1160 lines
52 KiB
1160 lines
52 KiB
[
|
|
{
|
|
"id" : "service",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "HTTP"
|
|
}
|
|
, {
|
|
"id" : "SSLv2",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "SSLv3",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "TLS1",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "offered"
|
|
}
|
|
, {
|
|
"id" : "TLS1_1",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "offered"
|
|
}
|
|
, {
|
|
"id" : "TLS1_2",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "offered"
|
|
}
|
|
, {
|
|
"id" : "TLS1_3",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "not offered and downgraded to a weaker protocol"
|
|
}
|
|
, {
|
|
"id" : "NPN",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "ALPN",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "http/1.1"
|
|
}
|
|
, {
|
|
"id" : "cipherlist_NULL",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cwe" : "CWE-327",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "cipherlist_aNULL",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cwe" : "CWE-327",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "cipherlist_EXPORT",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cwe" : "CWE-327",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "cipherlist_LOW",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cwe" : "CWE-327",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "cipherlist_3DES_IDEA",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "cipherlist_AVERAGE",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "LOW",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "offered"
|
|
}
|
|
, {
|
|
"id" : "cipherlist_STRONG",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "offered"
|
|
}
|
|
, {
|
|
"id" : "PFS",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "offered"
|
|
}
|
|
, {
|
|
"id" : "PFS_ciphers",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA"
|
|
}
|
|
, {
|
|
"id" : "PFS_ECDHE_curves",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "prime256v1 secp384r1 secp521r1 X25519"
|
|
}
|
|
, {
|
|
"id" : "DH_groups",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "RFC3526/Oakley Group 14"
|
|
}
|
|
, {
|
|
"id" : "cipher_order",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "server"
|
|
}
|
|
, {
|
|
"id" : "protocol_negotiated",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "Default protocol TLS1.2"
|
|
}
|
|
, {
|
|
"id" : "cipher_negotiated",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)"
|
|
}
|
|
, {
|
|
"id" : "cipherorder_TLSv1",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA"
|
|
}
|
|
, {
|
|
"id" : "cipherorder_TLSv1_1",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA"
|
|
}
|
|
, {
|
|
"id" : "cipherorder_TLSv1_2",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA AES256-SHA DHE-RSA-AES256-CCM8 DHE-RSA-AES256-CCM DHE-RSA-AES128-CCM8 DHE-RSA-AES128-CCM AES256-CCM8 AES256-CCM AES128-CCM8 AES128-CCM AES256-SHA256 AES128-SHA256 ECDHE-RSA-CAMELLIA256-SHA384 DHE-RSA-CAMELLIA256-SHA256 ECDHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA128-SHA256 DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA256 CAMELLIA128-SHA256 CAMELLIA256-SHA CAMELLIA128-SHA"
|
|
}
|
|
, {
|
|
"id" : "TLS_extensions",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "'renegotiation info/#65281' 'server name/#0' 'EC point formats/#11' 'session ticket/#35' 'encrypt-then-mac/#22' 'extended master secret/#23' 'application layer protocol negotiation/#16'"
|
|
}
|
|
, {
|
|
"id" : "TLS_session_ticket",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "valid for 300 seconds only (<daily)"
|
|
}
|
|
, {
|
|
"id" : "SSL_sessionID_support",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "yes"
|
|
}
|
|
, {
|
|
"id" : "sessionresumption_ticket",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "supported"
|
|
}
|
|
, {
|
|
"id" : "sessionresumption_ID",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "supported"
|
|
}
|
|
, {
|
|
"id" : "TLS_timestamp",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "random"
|
|
}
|
|
, {
|
|
"id" : "cert_numbers",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "1"
|
|
}
|
|
, {
|
|
"id" : "cert_signatureAlgorithm",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "SHA256 with RSA"
|
|
}
|
|
, {
|
|
"id" : "cert_keySize",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "2048 bits"
|
|
}
|
|
, {
|
|
"id" : "cert_keyUsage",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "Digital Signature, Key Encipherment"
|
|
}
|
|
, {
|
|
"id" : "cert_extKeyUsage",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "cert_ext_keyusage"
|
|
}
|
|
, {
|
|
"id" : "cert_serialNumber",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "0B9FD8C67E4977A878AC0E4B"
|
|
}
|
|
, {
|
|
"id" : "cert_fingerprintSHA1",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "27DC547089D55BAD398FCA8075F27A5E30287B27"
|
|
}
|
|
, {
|
|
"id" : "cert_fingerprintSHA256",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "2D319B29E628B7B4D96D23FD628ADC7EEC447808EFC60176843235A0B9892769"
|
|
}
|
|
, {
|
|
"id" : "cert",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "-----BEGIN CERTIFICATE----- MIIG8TCCBdmgAwIBAgIMC5/Yxn5Jd6h4rA5LMA0GCSqGSIb3DQEBCwUAMIGpMQsw CQYDVQQGEwJCUjEXMBUGA1UECBMOUmlvIGRlIEphbmVpcm8xFzAVBgNVBAcTDlJp byBkZSBKYW5laXJvMSQwIgYDVQQLExtHZXJlbmNpYSBkZSBTZXJ2aWNvcyAoR1Nl cikxMTAvBgNVBAoTKFJlZGUgTmFjaW9uYWwgZGUgRW5zaW5vIGUgUGVzcXVpc2Eg LSBSTlAxDzANBgNVBAMTBklDUEVkdTAeFw0xODAxMjkxNzAxMDhaFw0yMTAxMjkx NzAxMDhaMG4xCzAJBgNVBAYTAkJSMQswCQYDVQQIEwJTUDESMBAGA1UEBxMJU2Fv IFBhdWxvMSIwIAYDVQQKExlVTklWRVJTSURBREUgREUgU0FPIFBBVUxPMRowGAYD VQQDDBEqLnZwcy5mbXZ6LnVzcC5icjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC AQoCggEBAM3+Npgqj6ZQmONwipoE0xio7guuFBG4M9rMoh80kwwoBBqCYtzP28os ImD/TUECqoZKtOejTqtN5f51f3s9O8PR7surZe/ip/Oiy0k9d8XWU/7ERQtxuGFz 9b9wpgB/3rF8+/GE/w87HPiT29tsSh37RjnBcXK1DLsoskAFR2jg40NK+hu5SWjx Pf4BK9cWJdrkPw621Uj8n/S1xInWHP2kRfT+Ab5gyQNwmXFCiIkEK9ZYbHjzVklE B5wFti7cKnlRju9P19K2G84kPjlpX2joJZSOu8xOdb/7mTNiSPsORgk2hGVfeDW5 8jFbMVCfO+DTrNQV02majGec4jyRVf0CAwEAAaOCA1EwggNNMA4GA1UdDwEB/wQE AwIFoDCBhgYIKwYBBQUHAQEEejB4MEAGCCsGAQUFBzAChjRodHRwOi8vc2VjdXJl Lmdsb2JhbHNpZ24uY29tL2NhY2VydC9pY3BlZHVzaGEyZzIuY3J0MDQGCCsGAQUF BzABhihodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vaWNwZWR1c2hhMmcyMFYG A1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3 Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAA MD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Mv aWNwZWR1c2hhMmcyLmNybDAtBgNVHREEJjAkghEqLnZwcy5mbXZ6LnVzcC5icoIP dnBzLmZtdnoudXNwLmJyMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAd BgNVHQ4EFgQUhFTwreq2tR+dizNLrFnvDCZEqgEwHwYDVR0jBBgwFoAUlfCkhBqn XCA2psUI12VCAuV3aOMwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AN3rHSt6 DU+mIIuBrYFocH4ujp0B1VyIjT0RxM227L7MAAABYULdhekAAAQDAEgwRgIhAJmy 77F9gmtqp/nCycYqJ2ekMidwKNUe+MdVrHVOMzSRAiEA9Ab0hE0Z71NqRvFYSZKl 4CZYC7+bJJbyvFNvcItLeFsAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80O yA3cEAAAAWFC3Yi1AAAEAwBHMEUCIBG/xYfMj5CzGBfBqwtDLQEsmBNsvL4HT+HI H8hdgecOAiEA//LtGwEWGwwJtEtuluySOx6gnUJaxgN8x5yHpDq88JsAdgDuS723 dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWFC3YuVAAAEAwBHMEUCIQCQ IWVyo+V8Q4nLoGUenUQkfhGUyyUwUX2ok5jhwc00mwIgNwUypuGMUfMJ+kbBlxy/ ycTYTOks5OhLo9G5CyY4AAwwDQYJKoZIhvcNAQELBQADggEBAHWixKfL2soayn50 IuHxOVtAXa7XSf+LOQw6FxXTUeu1gJKIuK/wMXJEnOqL8qnsK3uYdkPlIDvaN53g uI1o9SGuD9QK623M7xyVInIxW1BtiDf1it/ceidsVHJnpwzlAbEV6SjfREcZu/vV ahUw+SYwvBKXk4syE5syqbnNLWPocIDZtYKsfCpzGlcVYJ+fhmNh2ypGl8a9JQh6 4ocTFKc1zDyv2/eXXRB0GDb804c9dvq3Kj+YISRHMb3QdSgFk1tTFki5fj2eFeR6 v+U0udwO/LSh/Pj9zLnexghCBO832Z9PORqNNuSyG/TUXglbH2npqGEzICfWFo4i USirUws= -----END CERTIFICATE-----"
|
|
}
|
|
, {
|
|
"id" : "cert_commonName",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "*.vps.fmvz.usp.br"
|
|
}
|
|
, {
|
|
"id" : "cert_commonName_wo_SNI",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "*.vps.fmvz.usp.br"
|
|
}
|
|
, {
|
|
"id" : "cert_subjectAltName",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "*.vps.fmvz.usp.br vps.fmvz.usp.br"
|
|
}
|
|
, {
|
|
"id" : "cert_caIssuers",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "ICPEdu (Rede Nacional de Ensino e Pesquisa - RNP from BR)"
|
|
}
|
|
, {
|
|
"id" : "cert_trust",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "Ok via SAN (same w/o SNI)"
|
|
}
|
|
, {
|
|
"id" : "cert_chain_of_trust",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "passed."
|
|
}
|
|
, {
|
|
"id" : "cert_certificatePolicies_EV",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "no"
|
|
}
|
|
, {
|
|
"id" : "cert_eTLS",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "not present"
|
|
}
|
|
, {
|
|
"id" : "cert_expiration_status",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "698 >= 60 days"
|
|
}
|
|
, {
|
|
"id" : "cert_notBefore",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "2018-01-29 12:01"
|
|
}
|
|
, {
|
|
"id" : "cert_notAfter",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "2021-01-29 12:01"
|
|
}
|
|
, {
|
|
"id" : "certs_countServer",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "3"
|
|
}
|
|
, {
|
|
"id" : "certs_list_ordering_problem",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "no"
|
|
}
|
|
, {
|
|
"id" : "cert_crlDistributionPoints",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "http://crl.globalsign.com/gs/icpedusha2g2.crl"
|
|
}
|
|
, {
|
|
"id" : "cert_ocspURL",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "http://ocsp2.globalsign.com/icpedusha2g2"
|
|
}
|
|
, {
|
|
"id" : "OCSP_stapling",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "LOW",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "cert_mustStapleExtension",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "--"
|
|
}
|
|
, {
|
|
"id" : "DNS_CAArecord",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "iodef=mailto:stidomain@usp.br, issue=comodoca.com, issue=digicert.com, issue=globalsign.com, issue=godaddy.com, issue=identrust.com, issue=letsencrypt.org, issue=pki.goog, issue=symantec.com, issuewild=comodoca.com, issuewild=digicert.com, issuewild=globalsign.com"
|
|
}
|
|
, {
|
|
"id" : "certificate_transparency",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "yes (certificate extension)"
|
|
}
|
|
, {
|
|
"id" : "HTTP_status_code",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "200 OK ('/CRAN/')"
|
|
}
|
|
, {
|
|
"id" : "HTTP_clock_skew",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "+17 seconds from localtime"
|
|
}
|
|
, {
|
|
"id" : "HSTS",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "LOW",
|
|
"finding" : "not offered"
|
|
}
|
|
, {
|
|
"id" : "HPKP",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "No support for HTTP Public Key Pinning"
|
|
}
|
|
, {
|
|
"id" : "banner_server",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "Apache"
|
|
}
|
|
, {
|
|
"id" : "banner_application",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "No application banner found"
|
|
}
|
|
, {
|
|
"id" : "cookie_count",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "0 at '/CRAN/'"
|
|
}
|
|
, {
|
|
"id" : "X-Frame-Options",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "sameorigin"
|
|
}
|
|
, {
|
|
"id" : "X-Content-Type-Options",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "nosniff"
|
|
}
|
|
, {
|
|
"id" : "banner_reverseproxy",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"cwe" : "CWE-200",
|
|
"finding" : "--"
|
|
}
|
|
, {
|
|
"id" : "heartbleed",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2014-0160",
|
|
"cwe" : "CWE-119",
|
|
"finding" : "not vulnerable, no heartbeat extension"
|
|
}
|
|
, {
|
|
"id" : "CCS",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2014-0224",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "ticketbleed",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2016-9244",
|
|
"cwe" : "CWE-200",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "ROBOT",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168",
|
|
"cwe" : "CWE-203",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "secure_renego",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2009-3555",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "secure_client_renego",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2009-3555",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "CRIME_TLS",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2012-4929",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "BREACH",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "HIGH",
|
|
"cve" : "CVE-2013-3587",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "potentially VULNERABLE, uses gzip HTTP compression - only supplied '/CRAN/' tested"
|
|
}
|
|
, {
|
|
"id" : "POODLE_SSL",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2014-3566",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "fallback_SCSV",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"finding" : "supported"
|
|
}
|
|
, {
|
|
"id" : "SWEET32",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2016-2183 CVE-2016-6329",
|
|
"cwe" : "CWE-327",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "FREAK",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2015-0204",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "DROWN",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable to DROWN on this host and port"
|
|
}
|
|
, {
|
|
"id" : "DROWN",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"cve" : "CVE-2016-0800 CVE-2016-0703",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=2D319B29E628B7B4D96D23FD628ADC7EEC447808EFC60176843235A0B9892769"
|
|
}
|
|
, {
|
|
"id" : "LOGJAM-common_primes",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"cve" : "CVE-2015-4000",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "RFC3526/Oakley Group 14"
|
|
}
|
|
, {
|
|
"id" : "LOGJAM",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2015-4000",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable, no DH EXPORT ciphers,"
|
|
}
|
|
, {
|
|
"id" : "BEAST_CBC_TLS1",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "MEDIUM",
|
|
"cve" : "CVE-2011-3389",
|
|
"cwe" : "CWE-20",
|
|
"finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA AES128-SHA AES256-SHA DHE-RSA-CAMELLIA256-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA CAMELLIA128-SHA"
|
|
}
|
|
, {
|
|
"id" : "BEAST",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "LOW",
|
|
"cve" : "CVE-2011-3389",
|
|
"cwe" : "CWE-20",
|
|
"finding" : "VULNERABLE -- but also supports higher protocols TLSv1.1 TLSv1.2 (likely mitigated)"
|
|
}
|
|
, {
|
|
"id" : "LUCKY13",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "LOW",
|
|
"cve" : "CVE-2013-0169",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "potentially vulnerable, uses TLS CBC ciphers"
|
|
}
|
|
, {
|
|
"id" : "RC4",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "OK",
|
|
"cve" : "CVE-2013-2566 CVE-2015-2808",
|
|
"cwe" : "CWE-310",
|
|
"finding" : "not vulnerable"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc030",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc028",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc014",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_x9f",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x9f DHE-RSA-AES256-GCM-SHA384 DH 2048 AESGCM 256 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc0a3",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc0a3 DHE-RSA-AES256-CCM8 DH 2048 AESCCM8 256 TLS_DHE_RSA_WITH_AES_256_CCM_8"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc09f",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc09f DHE-RSA-AES256-CCM DH 2048 AESCCM 256 TLS_DHE_RSA_WITH_AES_256_CCM"
|
|
}
|
|
, {
|
|
"id" : "cipher_x6b",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x6b DHE-RSA-AES256-SHA256 DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x39",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x39 DHE-RSA-AES256-SHA DH 2048 AES 256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc077",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc077 ECDHE-RSA-CAMELLIA256-SHA384 ECDH 256 Camellia 256 TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc4",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc4 DHE-RSA-CAMELLIA256-SHA256 DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x88",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x88 DHE-RSA-CAMELLIA256-SHA DH 2048 Camellia 256 TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_x9d",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc0a1",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc0a1 AES256-CCM8 RSA AESCCM8 256 TLS_RSA_WITH_AES_256_CCM_8"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc09d",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc09d AES256-CCM RSA AESCCM 256 TLS_RSA_WITH_AES_256_CCM"
|
|
}
|
|
, {
|
|
"id" : "cipher_x3d",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x3d AES256-SHA256 RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x35",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc0",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc0 CAMELLIA256-SHA256 RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x84",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x84 CAMELLIA256-SHA RSA Camellia 256 TLS_RSA_WITH_CAMELLIA_256_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc02f",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc027",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc013",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_x9e",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x9e DHE-RSA-AES128-GCM-SHA256 DH 2048 AESGCM 128 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc0a2",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc0a2 DHE-RSA-AES128-CCM8 DH 2048 AESCCM8 128 TLS_DHE_RSA_WITH_AES_128_CCM_8"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc09e",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc09e DHE-RSA-AES128-CCM DH 2048 AESCCM 128 TLS_DHE_RSA_WITH_AES_128_CCM"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc0a0",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc0a0 AES128-CCM8 RSA AESCCM8 128 TLS_RSA_WITH_AES_128_CCM_8"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc09c",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc09c AES128-CCM RSA AESCCM 128 TLS_RSA_WITH_AES_128_CCM"
|
|
}
|
|
, {
|
|
"id" : "cipher_x67",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x67 DHE-RSA-AES128-SHA256 DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x33",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x33 DHE-RSA-AES128-SHA DH 2048 AES 128 TLS_DHE_RSA_WITH_AES_128_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_xc076",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xc076 ECDHE-RSA-CAMELLIA128-SHA256 ECDH 256 Camellia 128 TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_xbe",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xbe DHE-RSA-CAMELLIA128-SHA256 DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x45",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x45 DHE-RSA-CAMELLIA128-SHA DH 2048 Camellia 128 TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_x9c",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x3c",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x2f",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "cipher_xba",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "xba CAMELLIA128-SHA256 RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256"
|
|
}
|
|
, {
|
|
"id" : "cipher_x41",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "x41 CAMELLIA128-SHA RSA Camellia 128 TLS_RSA_WITH_CAMELLIA_128_CBC_SHA"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-android_422",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-android_442",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-android_500",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-android_60",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-android_70",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-chrome_65_win7",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-chrome_70_win10",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-firefox_59_win7",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-firefox_62_win7",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-ie_6_xp",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "No connection"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-ie_7_vista",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-ie_8_win7",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-ie_8_xp",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "No connection"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-ie_11_win7",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-ie_11_win81",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 DHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-ie_11_winphone81",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-ie_11_win10",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-edge_13_win10",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-edge_13_winphone10",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-edge_15_win10",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-opera_17_win7",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-safari_9_ios9",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-safari_9_osx1011",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-safari_10_osx1012",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-apple_ats_9_ios9",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-tor_1709_win7",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-java_6u45",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "No connection"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-java_7u25",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.0 ECDHE-RSA-AES128-SHA"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-java_8u161",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-java_904",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-openssl_101l",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "clientsimulation-openssl_102e",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256"
|
|
}
|
|
, {
|
|
"id" : "scanTime",
|
|
"ip" : "vps.fmvz.usp.br/143.107.10.17",
|
|
"port" : "443",
|
|
"severity" : "INFO",
|
|
"finding" : "333"
|
|
}
|
|
]
|
|
|