opicaruscollective · ghost · May 10, 2017 · May 10, 2017 · May 11, 2017 · May 11, 2017
diff --git a/aig.pdf b/aig.pdf
diff --git a/bankofamerica.pdf b/bankofamerica.pdf
diff --git a/beac.int.xml b/beac.int.xml
@@ -0,0 +1,97 @@
+<?xml version="1.0" encoding="iso-8859-1"?>
+<?xml-stylesheet href="file:///usr/bin/../share/nmap/nmap.xsl" type="text/xsl"?><nmaprun start="1492316435" profile_name="Intense scan, no ping" xmloutputversion="1.04" scanner="nmap" version="7.40" startstr="Sun Apr 16 00:20:35 2017" args="nmap -T4 -A -v -Pn 195.24.202.222"><scaninfo services="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3007,3011,3013,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5987-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389" protocol="tcp" numservices="1000" type="syn"></scaninfo><verbose level="1"></verbose><debugging level="0"></debugging><output type="interactive">
+Starting Nmap 7.40 ( https://nmap.org ) at 2017-04-16 00:20 EDT
+NSE: Loaded 143 scripts for scanning.
+NSE: Script Pre-scanning.
+Initiating NSE at 00:20
+Completed NSE at 00:20, 0.00s elapsed
+Initiating NSE at 00:20
+Completed NSE at 00:20, 0.00s elapsed
+Initiating Parallel DNS resolution of 1 host. at 00:20
+Completed Parallel DNS resolution of 1 host. at 00:20, 0.84s elapsed
+Initiating SYN Stealth Scan at 00:20
+Scanning 195.24.202.222 [1000 ports]
+Discovered open port 443/tcp on 195.24.202.222
+Discovered open port 80/tcp on 195.24.202.222
+Completed SYN Stealth Scan at 00:20, 17.52s elapsed (1000 total ports)
+Initiating Service scan at 00:20
+Scanning 2 services on 195.24.202.222
+Completed Service scan at 00:21, 14.22s elapsed (2 services on 1 host)
+Initiating OS detection (try #1) against 195.24.202.222
+Retrying OS detection (try #2) against 195.24.202.222
+Initiating Traceroute at 00:21
+Completed Traceroute at 00:21, 0.53s elapsed
+Initiating Parallel DNS resolution of 14 hosts. at 00:21
+Completed Parallel DNS resolution of 14 hosts. at 00:21, 2.90s elapsed
+NSE: Script scanning 195.24.202.222.
+Initiating NSE at 00:21
+Completed NSE at 00:21, 17.14s elapsed
+Initiating NSE at 00:21
+Completed NSE at 00:21, 0.01s elapsed
+Nmap scan report for 195.24.202.222
+Host is up (0.31s latency).
+Not shown: 998 filtered ports
+PORT    STATE SERVICE  VERSION
+80/tcp  open  http     Apache httpd
+| http-methods: 
+|_  Supported Methods: GET HEAD POST OPTIONS
+|_http-server-header: Apache
+|_http-title: Did not follow redirect to https://www.beac.int
+443/tcp open  ssl/http Apache httpd
+|_http-favicon: Unknown favicon MD5: 92A8EDF8A1710605B1E9634300A1FDA5
+| http-methods: 
+|_  Supported Methods: GET HEAD POST OPTIONS
+| http-robots.txt: 14 disallowed entries 
+| /administrator/ /cache/ /components/ /images/ 
+| /includes/ /installation/ /language/ /libraries/ /media/ 
+|_/modules/ /plugins/ /templates/ /tmp/ /xmlrpc/
+|_http-server-header: Apache
+|_http-title: 400 Bad Request
+| ssl-cert: Subject: commonName=www.beac.int/organizationName=Banque des Etats de l'Afrique Centrale/stateOrProvinceName=Cameroon/countryName=CM
+| Subject Alternative Name: DNS:www.beac.int, DNS:beac.int
+| Issuer: commonName=Symantec Class 3 EV SSL CA - G3/organizationName=Symantec Corporation/countryName=US
+| Public Key type: rsa
+| Public Key bits: 2048
+| Signature Algorithm: sha256WithRSAEncryption
+| Not valid before: 2017-04-04T00:00:00
+| Not valid after:  2019-04-03T23:59:59
+| MD5:   e8b1 f2be 23d5 444a 11ad 205b 9c82 6bff
+|_SHA-1: 452d 3cd6 d5cf 0d0e 0f18 fe8c e20d 784e f4bf f987
+|_ssl-date: TLS randomness does not represent time
+Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
+Aggressive OS guesses: Linux 2.6.18 (98%), Linux 3.0 (97%), Linux 3.7 - 3.8 (97%), Linux 2.6.32 - 3.10 (97%), Linux 2.6.32 - 3.9 (97%), Linux 2.6.9 (97%), Cisco UC320 PBX (Linux 2.6) (96%), Linux 3.0 - 3.1 (95%), Linux 3.11 - 3.12 (95%), HP LaserJet M451dn, CM1415fnw, or CP4525 (95%)
+No exact OS matches for host (test conditions non-ideal).
+Uptime guess: 32.577 days (since Tue Mar 14 10:31:03 2017)
+Network Distance: 16 hops
+TCP Sequence Prediction: Difficulty=255 (Good luck!)
+IP ID Sequence Generation: All zeros
+
+TRACEROUTE (using port 443/tcp)
+HOP RTT       ADDRESS
+1   198.02 ms 10.50.0.1
+2   198.10 ms rif-vlan3022.cust.teknikbyran.com (178.248.30.129)
+3   198.15 ms sesto0852-rc2.ip-only.net (82.99.0.53)
+4   198.21 ms s-b5-link.telia.net (62.115.144.164)
+5   198.57 ms vsnl-ic-124239-s-b1.c.telia.net (213.248.104.162)
+6   237.76 ms if-ae-25-3.tcore2.AV2-Amsterdam.as6453.net (80.231.152.74)
+7   211.08 ms if-ae-14-2.tcore2.L78-London.as6453.net (80.231.131.160)
+8   237.84 ms if-ae-14-2.tcore2.L78-London.as6453.net (80.231.131.160)
+9   198.77 ms if-ae-19-2.tcore1.SV8-Highbridge.as6453.net (80.231.138.21)
+10  237.98 ms if-ge-3-0-0.core1.SZ5-Seixal.as6453.net (80.231.138.27)
+11  282.36 ms 154.72.175.205
+12  319.24 ms 154.72.175.205
+13  319.17 ms yde-ctn-pe-01.camnet.cm (195.24.192.8)
+14  319.29 ms 195.24.198.194
+15  319.23 ms 195.24.202.249
+16  319.30 ms 195.24.202.222
+
+NSE: Script Post-scanning.
+Initiating NSE at 00:21
+Completed NSE at 00:21, 0.00s elapsed
+Initiating NSE at 00:21
+Completed NSE at 00:21, 0.00s elapsed
+Read data files from: /usr/bin/../share/nmap
+OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
+Nmap done: 1 IP address (1 host up) scanned in 64.31 seconds
+           Raw packets sent: 2115 (98.196KB) | Rcvd: 128 (26.909KB)
+</output><host comment=""><status state="up"></status><address addrtype="ipv4" vendor="" addr="195.24.202.222"></address><hostnames></hostnames><ports><extraports count="998" state="filtered"></extraports><port protocol="tcp" portid="80"><state reason="syn-ack" state="open" reason_ttl="43"></state><service product="Apache httpd" method="probed" conf="10" name="http"></service></port><port protocol="tcp" portid="443"><state reason="syn-ack" state="open" reason_ttl="42"></state><service product="Apache httpd" method="probed" conf="10" name="http"></service></port></ports><os><portused state="open" portid="80" proto="tcp"></portused><osmatch line="46609" name="Linux 2.6.18" accuracy="98"><osclass type="general purpose" osfamily="Linux" vendor="Linux" osgen="2.6.X" accuracy="98"></osclass></osmatch><osmatch line="59506" name="Linux 3.0" accuracy="97"><osclass type="general purpose" osfamily="Linux" vendor="Linux" osgen="3.X" accuracy="97"></osclass></osmatch><osmatch line="62691" name="Linux 3.7 - 3.8" accuracy="97"><osclass type="general purpose" osfamily="Linux" vendor="Linux" osgen="3.X" accuracy="97"></osclass></osmatch><osmatch line="53646" name="Linux 2.6.32 - 3.10" accuracy="97"><osclass type="general purpose" osfamily="Linux" vendor="Linux" osgen="3.X" accuracy="97"></osclass></osmatch><osmatch line="53893" name="Linux 2.6.32 - 3.9" accuracy="97"><osclass type="general purpose" osfamily="Linux" vendor="Linux" osgen="3.X" accuracy="97"></osclass></osmatch><osmatch line="55827" name="Linux 2.6.9" accuracy="97"><osclass type="general purpose" osfamily="Linux" vendor="Linux" osgen="2.6.X" accuracy="97"></osclass></osmatch><osmatch line="56861" name="Cisco UC320 PBX (Linux 2.6)" accuracy="96"><osclass type="PBX" osfamily="embedded" vendor="Cisco" osgen="" accuracy="96"></osclass></osmatch><osmatch line="59582" name="Linux 3.0 - 3.1" accuracy="95"><osclass type="general purpose" osfamily="Linux" vendor="Linux" osgen="3.X" accuracy="95"></osclass></osmatch><osmatch line="60458" name="Linux 3.11 - 3.12" accuracy="95"><osclass type="general purpose" osfamily="Linux" vendor="Linux" osgen="3.X" accuracy="95"></osclass></osmatch><osmatch line="31756" name="HP LaserJet M451dn, CM1415fnw, or CP4525" accuracy="95"><osclass type="printer" osfamily="embedded" vendor="HP" osgen="" accuracy="95"></osclass></osmatch></os><uptime lastboot="Tue Mar 14 10:31:03 2017" seconds="2814635"></uptime><tcpsequence index="255" values="FA46DE51,C7671FEB,E2AE69F1,E5C6A891,18B93921" difficulty="Good luck!"></tcpsequence><ipidsequence values="0,0,0,0,0" class="All zeros"></ipidsequence><tcptssequence values="A7C38EA4,A7C38EEF,A7C38F72,A7C38FC5,A7C39023" class="1000HZ"></tcptssequence><trace port="443" proto="tcp"><hop rtt="198.02" host="" ipaddr="10.50.0.1" ttl="1"></hop><hop rtt="198.10" host="rif-vlan3022.cust.teknikbyran.com" ipaddr="178.248.30.129" ttl="2"></hop><hop rtt="198.15" host="sesto0852-rc2.ip-only.net" ipaddr="82.99.0.53" ttl="3"></hop><hop rtt="198.21" host="s-b5-link.telia.net" ipaddr="62.115.144.164" ttl="4"></hop><hop rtt="198.57" host="vsnl-ic-124239-s-b1.c.telia.net" ipaddr="213.248.104.162" ttl="5"></hop><hop rtt="237.76" host="if-ae-25-3.tcore2.AV2-Amsterdam.as6453.net" ipaddr="80.231.152.74" ttl="6"></hop><hop rtt="211.08" host="if-ae-14-2.tcore2.L78-London.as6453.net" ipaddr="80.231.131.160" ttl="7"></hop><hop rtt="237.84" host="if-ae-14-2.tcore2.L78-London.as6453.net" ipaddr="80.231.131.160" ttl="8"></hop><hop rtt="198.77" host="if-ae-19-2.tcore1.SV8-Highbridge.as6453.net" ipaddr="80.231.138.21" ttl="9"></hop><hop rtt="237.98" host="if-ge-3-0-0.core1.SZ5-Seixal.as6453.net" ipaddr="80.231.138.27" ttl="10"></hop><hop rtt="282.36" host="" ipaddr="154.72.175.205" ttl="11"></hop><hop rtt="319.24" host="" ipaddr="154.72.175.205" ttl="12"></hop><hop rtt="319.17" host="yde-ctn-pe-01.camnet.cm" ipaddr="195.24.192.8" ttl="13"></hop><hop rtt="319.29" host="" ipaddr="195.24.198.194" ttl="14"></hop><hop rtt="319.23" host="" ipaddr="195.24.202.249" ttl="15"></hop><hop rtt="319.30" host="" ipaddr="195.24.202.222" ttl="16"></hop></trace></host><runstats><finished timestr="Sun Apr 16 00:21:38 2017" time="1492316498"></finished><hosts down="0" total="1" up="1"></hosts></runstats></nmaprun>
diff --git a/bloomberg.pdf b/bloomberg.pdf
diff --git a/bloombergharvest.txt b/bloombergharvest.txt
@@ -0,0 +1,34 @@
+[+] Emails found:
+------------------
+Rberk@bloomberg.com
+caadmin@bloomberg.com
+ftpserver@bloomberg.com
+jknight@bloomberg.com
+jrobertson40@bloomberg.com
+kdocimo@bloomberg.com
+ljacob@bloomberg.com
+rwardley@bloomberg.com
+rwardley@lnxpop3.bloomberg.com
+ukaul@bloomberg.com
+
+[+] Hosts found in search engines:
+------------------------------------
+[-] Resolving hostnames IPs... 
+199.172.169.63:bbe.bloomberg.com
+69.191.242.157:events.bloomberg.com
+69.191.242.182:login.bloomberg.com
+69.187.26.28:m.bloomberg.com
+208.89.161.106:mediasource.bloomberg.com
+172.217.0.19:topics.bloomberg.com
+23.44.169.136:www.bloomberg.com
+[+] Virtual hosts:
+==================
+199.172.169.63	bbe.bloomberg.com
+199.172.169.63	bbe.blpprofessional.com
+69.191.242.157	events.bloomberg.com
+69.191.242.182	login.bloomberg.com
+69.187.26.28	m.bloomberg
+69.187.26.28	m.blpprofessional.com
+69.187.26.28	m.bloomberg.com
+208.89.161.106	mediasource
+208.89.161.106	mediasource.bloomberg.com