Mossad
From LeakDirectory
General Notes
The Institute for Intelligence and Special Operations, otherwise known as the Mossad, has been appointed by the State of Israel to collect information, analyze intelligence, and perform special covert operations beyond its borders.
The form on this website is for responding to website related topics and for matters you think might affect state security.
If you feel you have information that could be useful to ISIS, please use the form on this page. We undertake to protect the information and to maintain the sender's anonymity.
ISIS does not handle information pertaining to domestic law enforcement.
This website is one of those for which fake Digital Certificates were produced by an allegedly Iranian hacker or the Iranian government see DigiNotar Damage Disclosure
Contact Details
When accessing via tor browser, one gets a connect, but no page. If one tries to reload, after a time one gets a connection and sees the page. I guess, mossad filters <known TOR IPs>, so the page can be used as a carany to find unknown Tor IPs.
- Press inquiries
ISIS does not have a press officer. All media applications are handled by the Prime Minister's Bureau.
- General inquiries
Postal Address:
None
Social Networking publicity
None
None
Blog
None
Financial Donation methods
Not Applicable - Israeli taxpayer funded
Currently accepting submissions of whistleblower leaks / tip offs ?
Yes
https://www.mossad.gov.il//Eng/Contact.aspx - English
https://www.mossad.gov.il//ContactUs.aspx - Hebrew
Leak Submission Encryption
Digital Certificate fingerprints published on their website:
No
Since this website is one of those for which fake Digital Certificates were produced by an allegedly Iranian hacker or the Iranian government (see DigiNotar Damage Disclosure), here are the current Digital Certificate cryptographic hash fingerprints:
Subject: CN=www.mossad.gov.il, OU=Tehila, O=Ministry Of Finance, L=Jerusalem, ST=Israel, C=IL
Issuer: CN=ComSign Server CA, O=ComSign Ltd., C=IL
Serial Number: 1F85 242D 112E A9D6 633F 1E95 82B6 4F14
Valid Until: 04-Nov-2012 07:00:13 GMT
SHA-1: 86:EA:96:D3:78:D5:1A:5D:2E:FF:47:6A:19:D0:2A:EC:4F:E4:F0:96
MD5: C5:3D:5D:1D:F8:6B:AD:8D:26:DD:66:27:BE:BB:0B:CB
Qualsys SSLLabs SSL Server Test rating:
https://www.ssllabs.com/ssldb/analyze.html?d=www.mossad.gov.il
Overall rating: D [48]
Certificate: 100
Protocol Support: 55
Key Exchange: 40
Cipher Strength: 50
The Israeli Ministry of Finance / Mossad webserver is misconfigured to still allow the deprecated SSL ver 2.0 protocol and weak 40bit and 56bit cipher suites. Although most modern web browsers will not use these, there is a chance of a Man-In-the-Middle cipher suite downgrade attack, especially at, for example, public WiFi hotspots, which means that the "secure" session encryption could be broken in real time.
Given that traffic to and from this website must be of intense interest to neighbouring and global sigint intelligence agencies, who will try to capture and retain such internet data into the future, the RSA / 1024 bit private keys may soon be vulnerable to massively parallel computer systems - they should really upgrade to 2048 or 4096 bit private keys.
PGP Public Encryption Key
None published on their website
TOR Hidden Service
No
I2P eepsite
No
Domain Name Resilience
Domain Name Registrar
Multiple Domain Name Service providers, in different legal jurisdictions ?
No
Name server list
dns.gov.il
dns3.gov.il
Where they are located
Israeli Government Network, Ministry of Finance
Israel only
Alternate Domain Name aliases
No
Actual Physical Mirrors of the website:
No
Content available via BitTorrent etc P2P etc.
No
