{"id":91,"date":"2008-05-29T14:01:23","date_gmt":"2008-05-29T08:31:23","guid":{"rendered":"http:\/\/brainstorms.in\/?p=91"},"modified":"2008-05-29T20:48:51","modified_gmt":"2008-05-29T15:18:51","slug":"the-online-method-of-finding-fair-value-of-land-in-kerala-d","status":"publish","type":"post","link":"https:\/\/brainstorms.in\/?p=91","title":{"rendered":"The online method of finding fair value of land in Kerala :D"},"content":{"rendered":"

             The registration department of Kerala has launched a web site<\/a> which lists fair value of land in various parts of Kerala. Here<\/a> is a report about the inauguration of the site . Being a land owner( and,of course a member of the so called land mafia), I was eager to find out the fair value of some of my property.<\/p>\n

At 2.30 pm on 29th May 2008, I got the following screen.<\/p>\n

\ud83d\ude00<\/p>\n

\"registration_department_of_kerala_website\"<\/a><\/p>\n

I had a different screen in the morning, but could not go beyond the starting screen.<\/p>\n

This is a classic case of Kerala Government web sites getting failed on the very first day of operation. The fair price of land being a sensitive issue, the the server might have got fairly good amount of hits this morning. The sys admins of most of the government websites are unaware of issues like slashdot effect<\/a>.<\/p>\n

Ok. Let us find out what this http:\/\/igr.kerala.gov.in<\/a> is.<\/p>\n

sunil@debian:~$ nslookup
>
> igr.kerala.gov.in
Server: 202.88.238.3
Address: 202.88.238.3#53<\/p>\n

Non-authoritative answer:
Name: igr.kerala.gov.in
Address: 210.212.239.30
><\/p>\n

Browsing to http:\/\/210.212.239.30 also gave the above page. Hence, it is assumed that the domain is hosted on a dedicated IP.<\/p>\n

Let us run nmap and find out what OS is being run.<\/p>\n

debian:\/home\/sunil# nmap -P0 -sV -O -v igr.kerala.gov.in<\/p>\n

Starting Nmap 4.11) at 2008-05-29 20:07 IST
DNS resolution of 1 IPs took 0.00s.
Initiating SYN Stealth Scan against 210.212.239.30 [1680 ports] at 20:07
Discovered open port 80\/tcp on 210.212.239.30
SYN Stealth Scan Timing: About 39.46% done; ETC: 20:09 (0:00:46 remaining)
The SYN Stealth Scan took 84.78s to scan 1680 total ports.
Initiating service scan against 1 service on 210.212.239.30 at 20:09
The service scan took 6.29s to scan 1 service on 1 host.
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
For OSScan assuming port 80 is open, 35912 is closed, and neither are firewalled
Host 210.212.239.30 appears to be up … good.
Interesting ports on 210.212.239.30:
Not shown: 1679 filtered ports
PORT STATE SERVICE VERSION
80\/tcp open http Microsoft IIS webserver 6.0
Device type: general purpose
Running: Microsoft Windows 2003\/.NET
OS details: Microsoft Windows 2003 Server SP1
TCP Sequence Prediction: Class=truly random
Difficulty=9999999 (Good luck!)
IPID Sequence Generation: Busy server or unknown class
Service Info: OS: Windows<\/p>\n

Nmap finished: 1 IP address (1 host up) scanned in 94.289 seconds
Raw packets sent: 5074 (224.128KB) | Rcvd: 27 (1875B)<\/p>\n

The server is running widows 2003 server. I was under the impression that all the Kerala government sites are on free software.<\/p>\n

I did some more research on some prominent Kerala government sites and I feel most of them are vulnerable. Some of them running unwanted services, open relays,outdated software etc. Try running nmap on a couple of them. No wonder they get hacked so often.<\/p>\n

Let us wait and see how the registration department web site will come up.<\/p>\n

Update 8pm 29 may 2007:<\/p>\n

The site is back online.<\/p>\n

Here is a screen shot. Even though  it is showing server busy, I could access records from the site.<\/p>\n

\"fair_value_of_land_in_kerala\"<\/a> <\/p>\n

            There is a detailed  page<\/a> here on how to access your lands fair value.  Now look at the front page there is a user login box  on the right side. Click on the user drop down box. All user names are listed. This seems to be for  data updation  from various district offices.  <\/p>\n

          Now, select any user from the  list, click on the  forgot password link.. :d  Tomorrow  each of the users will see  thousands of mails announcing change of password.<\/p>\n","protected":false},"excerpt":{"rendered":"

             The registration department of Kerala has launched a web site which lists fair value of land in various parts of Kerala. Here is a report about the inauguration of the site . Being a land owner( and,of course a member of the so called land mafia), I was eager to find out the fair… Continue reading The online method of finding fair value of land in Kerala \ud83d\ude00<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[32],"class_list":["post-91","post","type-post","status-publish","format-standard","hentry","category-living-in-india","tag-kerala-land-value-registration"],"_links":{"self":[{"href":"https:\/\/brainstorms.in\/index.php?rest_route=\/wp\/v2\/posts\/91","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brainstorms.in\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/brainstorms.in\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/brainstorms.in\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/brainstorms.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=91"}],"version-history":[{"count":0,"href":"https:\/\/brainstorms.in\/index.php?rest_route=\/wp\/v2\/posts\/91\/revisions"}],"wp:attachment":[{"href":"https:\/\/brainstorms.in\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=91"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/brainstorms.in\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=91"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/brainstorms.in\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=91"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}