beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/gotify.lan.ddnsgeek.com/report/notes.txt
+1 -1
View File
@@ -2,7 +2,7 @@
[*] http found on tcp/443.
[*] https found on tcp/443.
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Commands.md
-2
View File
@@ -35,8 +35,6 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
sslscan --show-certificate --no-colour gotify.lan.ddnsgeek.com:443 2>&1
ffuf -u https://gotify.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.gotify.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_gotify.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
whatweb --color=never --no-errors -a 3 -v https://gotify.lan.ddnsgeek.com:443 2>&1
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Manual Commands.md
+1 -1
View File
@@ -19,7 +19,7 @@
wpscan --url http://gotify.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
[*] http on tcp/443
[*] https on tcp/443
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md
+24 -29
View File
@@ -5,23 +5,18 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
[/root/results/gotify.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 07:38:54 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/gotify.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml gotify.lan.ddnsgeek.com
adjust_timeouts2: packet supposedly had rtt of -243297 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -243297 microseconds. Ignoring time.
# Nmap 7.99 scan initiated Tue Apr 14 03:26:07 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/gotify.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml gotify.lan.ddnsgeek.com
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.021s latency).
Host is up, received user-set (0.016s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 07:39:08 UTC for 1526s
Scanned at 2026-04-14 03:26:16 UTC for 563s
Not shown: 65531 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Did not follow redirect to https://gotify.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://gotify.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET OPTIONS
|_ssl-date: TLS randomness does not represent time
443/tcp open ssl/https syn-ack ttl 55
| ssl-cert: Subject: commonName=gotify.lan.ddnsgeek.com
| Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -68,19 +63,20 @@ PORT STATE SERVICE REASON VERSION
| Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr
| u7L76W6EfP8Aau/l
|_-----END CERTIFICATE-----
|_http-title: Gotify
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_ssl-date: TLS randomness does not represent time
20001/tcp closed microsan reset ttl 57
51413/tcp open tcpwrapped syn-ack ttl 56
Device type: general purpose
Running (JUST GUESSING): Linux 5.X|4.X (94%)
OS CPE: cpe:/o:linux:linux_kernel:5.4 cpe:/o:linux:linux_kernel:4
Running (JUST GUESSING): Linux 5.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
Aggressive OS guesses: Linux 5.4 (94%), Linux 4.19 - 5.15 (88%), Linux 5.18 (88%)
Aggressive OS guesses: Linux 5.4 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21793%P=x86_64-pc-linux-gnu)
SEQ(SP=105%GCD=1%ISR=108%TI=Z%TS=A)
SEQ(SP=106%GCD=1%ISR=109%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDB60B%P=x86_64-pc-linux-gnu)
SEQ(SP=101%GCD=1%ISR=10B%TI=Z%TS=A)
SEQ(SP=103%GCD=1%ISR=10F%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
@@ -89,30 +85,29 @@ T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 16.935 days (since Thu Mar 19 09:37:52 2026)
Uptime guess: 49.666 days (since Mon Feb 23 11:37:19 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=261 (Good luck!)
TCP Sequence Prediction: Difficulty=259 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 20001/tcp)
HOP RTT ADDRESS
1 0.10 ms 10.216.0.161
2 0.22 ms 10.216.35.11
3 0.80 ms 10.216.32.1
4 0.58 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.70 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.67 ms 10.241.1.187
7 12.83 ms 10.241.2.71
8 19.54 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.31 ms 10.216.0.161
2 0.45 ms 10.216.35.12
3 1.21 ms 10.216.32.1
4 0.56 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 2.91 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.85 ms 10.241.1.187
7 12.42 ms 10.241.2.71
8 14.12 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:04:35 2026 -- 1 IP address (1 host up) scanned in 1548.76 seconds
# Nmap done at Tue Apr 14 03:35:39 2026 -- 1 IP address (1 host up) scanned in 582.29 seconds
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md
+18 -14
View File
@@ -5,34 +5,38 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/gotify.lan.d
[/root/results/gotify.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 07:42:46 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/gotify.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml gotify.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:27:13 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/gotify.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml gotify.lan.ddnsgeek.com
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set.
Host is up, received user-set (0.49s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 07:44:09 UTC for 1432s
Scanned at 2026-04-14 03:27:23 UTC for 1501s
All 100 scanned ports on gotify.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Too many fingerprints match this host to give specific OS details
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%G=N%TM=69D21862%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%DS=12%DC=T%G=N%TM=69DDB9F8%P=x86_64-pc-linux-gnu)
SEQ()
T1(R=Y%DF=Y%TG=40%S=O%A=O%F=A%RD=0%Q=)
T4(R=Y%DF=Y%TG=40%W=1F9%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
U1(R=N)
IE(R=N)
Network Distance: 12 hops
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.06 ms 10.216.0.161
2 0.23 ms 10.216.35.11
3 0.80 ms 10.216.32.2
4 0.49 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.68 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.68 ms 10.241.1.187
7 12.62 ms 10.241.2.71
8 ... 30
HOP RTT ADDRESS
1 0.06 ms 10.216.0.161
2 0.20 ms 10.216.35.12
3 8.82 ms 10.216.32.2
4 0.27 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 4.61 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.68 ms 10.241.1.185
7 12.51 ms 10.241.2.26
8 ... 11
12 485.60 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:08:02 2026 -- 1 IP address (1 host up) scanned in 1524.77 seconds
# Nmap done at Tue Apr 14 03:52:25 2026 -- 1 IP address (1 host up) scanned in 1515.82 seconds
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md
+73 -32
View File
@@ -5,61 +5,102 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
[/root/results/gotify.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 07:38:54 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/gotify.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml gotify.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:26:06 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/gotify.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml gotify.lan.ddnsgeek.com
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.017s latency).
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 07:39:08 UTC for 189s
Scanned at 2026-04-14 03:26:16 UTC for 50s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://gotify.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET OPTIONS
|_ssl-date: TLS randomness does not represent time
443/tcp open ssl/https syn-ack ttl 55
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
| ssl-cert: Subject: commonName=gotify.lan.ddnsgeek.com
| Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-14T19:02:31
| Not valid after: 2026-05-15T19:02:30
| MD5: 0663 3538 85f4 573b 487c 09cb e7dd f8fc
| SHA-1: c524 c1ab 9e90 457e 0aa8 630f 6277 e73a eeb2 5078
| SHA-256: b69e 7113 332a b817 efd6 6485 19a7 ca69 eccc 1918 b1f5 1193 7883 4e0b 69f2 a4f8
| -----BEGIN CERTIFICATE-----
| MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD
| Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
| ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM
| k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3
| hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn
| 4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR
| TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9
| pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk
| h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43
| 4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH
| m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx
| PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg
| 4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj
| ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
| VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j
| BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG
| AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp
| ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E
| JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG
| AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P
| yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL
| v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK
| V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA
| RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR
| y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU
| ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG
| ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN
| 7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep
| UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD
| Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr
| u7L76W6EfP8Aau/l
|_-----END CERTIFICATE-----
|_ssl-date: TLS randomness does not represent time
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|router|storage-misc
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%), Synology DiskStation Manager 5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
Device type: VoIP adapter|firewall|general purpose
Running (JUST GUESSING): Cisco embedded (87%), Fortinet embedded (87%), Linux 2.6.X|5.X (87%), Microsoft Windows 10|11|2016 (85%)
OS CPE: cpe:/h:cisco:unified_call_manager cpe:/o:linux:linux_kernel:2.6.26 cpe:/o:linux:linux_kernel:5.18 cpe:/o:microsoft:windows_10 cpe:/o:microsoft:windows_11 cpe:/o:microsoft:windows_server_2016
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 5.0 - 5.14 (93%), Linux 4.19 (92%), OpenWrt 21.02 (Linux 5.4) (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.0 (90%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 (87%), Linux 3.10 - 4.11 (87%)
Aggressive OS guesses: Cisco Unified Communications Manager VoIP adapter (87%), Fortinet FortiGate-50B or 310B firewall (87%), Linux 2.6.26 (87%), Linux 2.6.32 (87%), Linux 5.18 (87%), Linux 5.4 (87%), Microsoft Windows 10 - 11 (85%), Microsoft Windows Server 2016 (85%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D2125C%P=x86_64-pc-linux-gnu)
SEQ(SP=104%GCD=1%ISR=109%TI=Z%TS=A)
SEQ(SP=107%GCD=1%ISR=104%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDB40A%P=x86_64-pc-linux-gnu)
SEQ()
SEQ(TS=A)
ECN(R=N)
T1(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T3(R=Y%DF=Y%TG=40%W=FE88%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)
T4(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 16.920 days (since Thu Mar 19 09:37:52 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=260 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.19 ms 10.216.35.11
3 0.90 ms 10.216.32.2
4 1.19 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.97 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.65 ms 10.241.1.187
7 12.44 ms 10.241.2.71
8 14.13 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.10 ms 10.216.0.161
2 0.26 ms 10.216.35.11
3 0.83 ms 10.216.32.2
4 0.37 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.31 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.66 ms 10.241.1.187
7 12.64 ms 10.241.2.71
8 14.45 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 07:42:23 2026 -- 1 IP address (1 host up) scanned in 217.32 seconds
# Nmap done at Tue Apr 14 03:27:07 2026 -- 1 IP address (1 host up) scanned in 70.32 seconds
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md
-3
View File
@@ -1,3 +0,0 @@
```bash
curl -sSikf https://gotify.lan.ddnsgeek.com:443/robots.txt
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md
-61
View File
@@ -1,61 +0,0 @@
```bash
curl -sSik https://gotify.lan.ddnsgeek.com:443/
```
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html):
```
HTTP/2 200
content-type: text/html
date: Sun, 05 Apr 2026 07:45:39 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
<meta name="theme-color" content="#3f51b5">
<link rel="manifest" href="manifest.json">
<title>Gotify</title>
<link rel="apple-touch-icon-precomposed" sizes="57x57" href="static/apple-touch-icon-57x57.png" />
<link rel="apple-touch-icon-precomposed" sizes="114x114" href="static/apple-touch-icon-114x114.png" />
<link rel="apple-touch-icon-precomposed" sizes="72x72" href="static/apple-touch-icon-72x72.png" />
<link rel="apple-touch-icon-precomposed" sizes="144x144" href="static/apple-touch-icon-144x144.png" />
<link rel="apple-touch-icon-precomposed" sizes="60x60" href="static/apple-touch-icon-60x60.png" />
<link rel="apple-touch-icon-precomposed" sizes="120x120" href="static/apple-touch-icon-120x120.png" />
<link rel="apple-touch-icon-precomposed" sizes="76x76" href="static/apple-touch-icon-76x76.png" />
<link rel="apple-touch-icon-precomposed" sizes="152x152" href="static/apple-touch-icon-152x152.png" />
<link rel="icon" type="image/png" href="static/favicon-196x196.png" sizes="196x196" />
<link rel="icon" type="image/png" href="static/favicon-96x96.png" sizes="96x96" />
<link rel="icon" type="image/png" href="static/favicon-32x32.png" sizes="32x32" />
<link rel="icon" type="image/png" href="static/favicon-16x16.png" sizes="16x16" />
<link rel="icon" type="image/png" href="static/favicon-128.png" sizes="128x128" />
<link rel="icon" href="static/favicon.ico">
<meta name="application-name" content="Gotify"/>
<meta name="msapplication-TileColor" content="#FFFFFF" />
<meta name="msapplication-TileImage" content="static/mstile-144x144.png" />
<meta name="msapplication-square70x70logo" content="static/mstile-70x70.png" />
<meta name="msapplication-square150x150logo" content="static/mstile-150x150.png" />
<meta name="msapplication-wide310x150logo" content="static/mstile-310x150.png" />
<meta name="msapplication-square310x310logo" content="static/mstile-310x310.png" />
<script type="module" crossorigin src="./static/index-eGvATxVq.js"></script>
<link rel="stylesheet" crossorigin href="./static/index-DaSZqSeC.css">
</head>
<body>
<noscript>
Gotify requires JavaScript.
</noscript>
<div id="root"></div>
<script>window.config = {"register":false,"version":{"version":"2.9.1","commit":"4fa74cea55137dc56bacda3fa7ff694f24b5efc0","buildDate":"2026-02-28-19:13:51"}};</script>
</body>
</html>
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md
-355
View File
@@ -1,355 +0,0 @@
```bash
feroxbuster -u https://gotify.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
```
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt):
```
Configuration {
kind: "configuration",
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
config: "/etc/feroxbuster/ferox-config.toml",
proxy: "",
replay_proxy: "",
server_certs: [],
client_cert: "",
client_key: "",
target_url: "https://gotify.lan.ddnsgeek.com/",
status_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
replay_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
filter_status: [],
client: Client {
accepts: Accepts,
proxies: [
Matcher,
],
redirect_policy: "Policy(Custom)",
referer: true,
default_headers: {
"accept": "*/*",
"user-agent": "feroxbuster/2.13.1",
},
reqwest::config::RequestTimeout: 7s,
},
replay_client: None,
threads: 10,
timeout: 7,
verbosity: 1,
silent: false,
quiet: true,
output_level: Quiet,
auto_bail: false,
auto_tune: false,
requester_policy: Default,
json: false,
output: "/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt",
debug_log: "",
user_agent: "feroxbuster/2.13.1",
random_agent: false,
redirects: true,
insecure: true,
extensions: [
"txt",
"html",
"php",
"asp",
"aspx",
"jsp",
],
methods: [
"GET",
],
data: [],
headers: {},
queries: [],
no_recursion: true,
extract_links: true,
add_slash: false,
stdin: false,
cached_stdin: [],
depth: 4,
scan_limit: 0,
parallel: 0,
rate_limit: 0,
filter_size: [],
filter_line_count: [],
filter_word_count: [],
filter_regex: [],
dont_filter: false,
resumed: false,
resume_from: "",
save_state: true,
time_limit: "",
filter_similar: [],
url_denylist: [],
regex_denylist: [],
scope: [
Url {
scheme: "https",
cannot_be_a_base: false,
username: "",
password: None,
host: Some(
Domain(
"gotify.lan.ddnsgeek.com",
),
),
port: None,
path: "/",
query: None,
fragment: None,
},
],
collect_extensions: false,
dont_collect: [
"woff2",
"woff",
"ttf",
"otf",
"eot",
"tif",
"tiff",
"ico",
"cur",
"bmp",
"webp",
"svg",
"png",
"jpg",
"jpeg",
"jfif",
"gif",
"avif",
"apng",
"pjpeg",
"pjp",
"mov",
"wav",
"mpg",
"mpeg",
"mp3",
"mp4",
"m4a",
"m4p",
"m4v",
"ogg",
"webm",
"ogv",
"oga",
"flac",
"aac",
"3gp",
"css",
"zip",
"xls",
"xml",
"gz",
"tgz",
],
collect_backups: false,
backup_extensions: [
"~",
".bak",
".bak2",
".old",
".1",
],
collect_words: false,
force_recursion: false,
update_app: false,
scan_dir_listings: false,
request_file: "",
protocol: "https",
limit_bars: 0,
unique: false,
response_size_limit: 4194304,
}
200 GET 8l 15w 175c https://gotify.lan.ddnsgeek.com/manifest.json
200 GET 9l 57w 3422c https://gotify.lan.ddnsgeek.com/static/favicon-32x32.png
200 GET 79l 364w 28039c https://gotify.lan.ddnsgeek.com/static/favicon-196x196.png
200 GET 33l 231w 19847c https://gotify.lan.ddnsgeek.com/static/mstile-144x144.png
200 GET 14l 87w 7288c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-60x60.png
200 GET 186l 1219w 91115c https://gotify.lan.ddnsgeek.com/static/mstile-310x310.png
200 GET 1l 49w 3017c https://gotify.lan.ddnsgeek.com/static/index-DaSZqSeC.css
200 GET 13l 88w 6813c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-57x57.png
200 GET 34l 169w 12700c https://gotify.lan.ddnsgeek.com/static/favicon-96x96.png
200 GET 45l 249w 17807c https://gotify.lan.ddnsgeek.com/static/favicon-128.png
200 GET 46l 255w 21107c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-152x152.png
200 GET 94l 602w 45005c https://gotify.lan.ddnsgeek.com/static/mstile-310x150.png
200 GET 13l 77w 78752c https://gotify.lan.ddnsgeek.com/static/favicon.ico
200 GET 33l 231w 19847c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-144x144.png
200 GET 21l 116w 9575c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-76x76.png
200 GET 28l 195w 15310c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-114x114.png
200 GET 26l 127w 9189c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-72x72.png
200 GET 97l 533w 39874c https://gotify.lan.ddnsgeek.com/static/mstile-150x150.png
200 GET 198l 19103w 997931c https://gotify.lan.ddnsgeek.com/static/index-eGvATxVq.js
200 GET 45l 249w 17807c https://gotify.lan.ddnsgeek.com/static/mstile-70x70.png
200 GET 49l 229w 16404c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-120x120.png
200 GET 5l 22w 1378c https://gotify.lan.ddnsgeek.com/static/favicon-16x16.png
200 GET 42l 141w 2578c https://gotify.lan.ddnsgeek.com/
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/application
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/client
200 GET 63l 130w 1761c https://gotify.lan.ddnsgeek.com/docs
200 GET 1l 1w 37c https://gotify.lan.ddnsgeek.com/health
200 GET 42l 141w 2578c https://gotify.lan.ddnsgeek.com/index.html
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/message
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/plugin
200 GET 79l 364w 28039c https://gotify.lan.ddnsgeek.com/static/defaultapp.png
200 GET 62l 363w 28652c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500-DRg8azjQ.woff2
200 GET 69l 363w 28347c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100-BJNx9A77.woff2
200 GET 68l 495w 39648c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500italic-DC3lxgcN.woff
200 GET 75l 421w 31430c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400italic-DRWWNyaf.woff2
200 GET 81l 483w 40120c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900italic-uSnr6All.woff
200 GET 56l 365w 31608c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300italic-CYatNKLh.woff2
200 GET 62l 365w 28340c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700-CqGedB_1.woff2
200 GET 93l 428w 36389c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300-Cx9SeV6m.woff
200 GET 12l 7227w 393380c https://gotify.lan.ddnsgeek.com/static/PluginDetailView-DQ2pm7df.js
200 GET 84l 518w 46218c https://gotify.lan.ddnsgeek.com/static/notification.ogg
200 GET 55l 386w 30850c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700italic-C5p_YAqY.woff2
200 GET 57l 342w 28673c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900-BEowQPyJ.woff2
200 GET 68l 410w 31276c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500italic-CAWXcheQ.woff2
200 GET 78l 452w 36359c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700-CCwTn0--.woff
200 GET 70l 374w 28741c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300-EvKWBL9d.woff2
200 GET 59l 433w 36325c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100-B3mHgoOJ.woff
200 GET 68l 455w 36519c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900-Blac3EU0.woff
200 GET 95l 458w 36604c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500-BU-otfqs.woff
200 GET 73l 470w 38816c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100italic-Bjs4D596.woff
200 GET 75l 383w 28313c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400-CEEi-WbQ.woff2
200 GET 81l 422w 36239c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400-CKhRtUFO.woff
200 GET 89l 433w 30558c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100italic-DkGpOhj0.woff2
200 GET 67l 434w 38817c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700italic-DXbHVVaQ.woff
200 GET 65l 445w 39524c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400italic-B7WW6HdJ.woff
200 GET 78l 384w 31534c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900italic-DBp_g5Ww.woff2
200 GET 53l 455w 39980c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300italic-Uxw9HR3T.woff
200 GET 52l 103w 3443c https://gotify.lan.ddnsgeek.com/static/
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/stream
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/user
200 GET 1l 1w 105c https://gotify.lan.ddnsgeek.com/version
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md
-3
View File
@@ -1,3 +0,0 @@
```bash
curl -sSikf https://gotify.lan.ddnsgeek.com:443/.well-known/security.txt
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md
-172
View File
@@ -1,172 +0,0 @@
```bash
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" gotify.lan.ddnsgeek.com
```
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 07:50:48 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 07:51:01 UTC for 582s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| ssl-cert: Subject: commonName=gotify.lan.ddnsgeek.com
| Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-14T19:02:31
| Not valid after: 2026-05-15T19:02:30
| MD5: 0663 3538 85f4 573b 487c 09cb e7dd f8fc
| SHA-1: c524 c1ab 9e90 457e 0aa8 630f 6277 e73a eeb2 5078
| SHA-256: b69e 7113 332a b817 efd6 6485 19a7 ca69 eccc 1918 b1f5 1193 7883 4e0b 69f2 a4f8
| -----BEGIN CERTIFICATE-----
| MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD
| Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
| ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM
| k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3
| hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn
| 4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR
| TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9
| pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk
| h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43
| 4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH
| m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx
| PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg
| 4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj
| ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
| VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j
| BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG
| AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp
| ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E
| JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG
| AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P
| yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL
| v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK
| V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA
| RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR
| y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU
| ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG
| ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN
| 7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep
| UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD
| Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr
| u7L76W6EfP8Aau/l
|_-----END CERTIFICATE-----
|_http-traceroute: ERROR: Script execution failed (use -d to debug)
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-feed: Couldn't find any feeds.
|_http-date: Sun, 05 Apr 2026 07:51:56 GMT; -4s from local time.
| http-methods:
|_ Supported Methods: GET OPTIONS
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-title: Gotify
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1
| /static/
| css: 1; js: 1
| Longest directory structure:
| Depth: 1
| Dir: /static/
| Total files found (by extension):
|_ Other: 1; css: 1; js: 1; json: 1
|_http-malware-host: Host appears to be clean
|_http-errors: Couldn't find any error pages.
| http-headers:
| Content-Type: text/html
| Date: Sun, 05 Apr 2026 07:52:19 GMT
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| Vary: Accept-Encoding
| X-Content-Type-Options: nosniff
| X-Frame-Options: SAMEORIGIN
| X-Xss-Protection: 1; mode=block
| Connection: close
| Transfer-Encoding: chunked
|
|_ (Request type: GET)
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_ssl-date: TLS randomness does not represent time
| http-php-version: Logo query returned unknown hash 622a589591324462d669df924802d29b
|_Credits query returned unknown hash 622a589591324462d669df924802d29b
|_http-chrono: Request times for /; avg: 7828.27ms; min: 3421.52ms; max: 23506.11ms
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-enum:
|_ /manifest.json: Manifest JSON File
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-useragent-tester:
| Status for browser useragent: 200
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:00:43 2026 -- 1 IP address (1 host up) scanned in 597.62 seconds
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md
-201
View File
@@ -1,201 +0,0 @@
```bash
sslscan --show-certificate --no-colour gotify.lan.ddnsgeek.com:443 2>&1
```
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html):
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
Connected to 167.179.167.166
Testing SSL server gotify.lan.ddnsgeek.com on port 443 using SNI name gotify.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 05:68:f1:54:5c:bd:ac:6a:da:af:7f:c8:6b:7b:59:b7:4c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R13
Not valid before: Feb 14 19:02:31 2026 GMT
Not valid after: May 15 19:02:30 2026 GMT
Subject: /CN=gotify.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:92:96:24:64:92:02:85:6b:4b:a3:6a:14:b2:e3:
8a:44:1a:ad:dd:a3:1e:4a:0c:87:02:f0:a2:cb:a4:
54:86:7b:d1:4f:9d:c4:b7:4c:93:b3:c9:6f:f0:c7:
2c:cd:6c:8f:85:9f:d3:88:c1:04:c1:76:b6:50:ff:
03:8f:ee:9c:b6:97:dc:da:3e:6e:cc:e7:ab:a5:7a:
c9:85:40:d1:01:56:41:98:4a:ae:13:77:86:c1:cb:
45:bc:ae:89:b7:da:9f:65:d0:34:c0:96:3e:d9:96:
11:ee:fa:c5:33:fe:8b:64:93:28:5a:19:9b:3e:28:
49:18:a5:38:4c:72:e5:1c:f1:c1:60:de:8b:8a:a7:
e1:db:6b:2d:2a:7f:bc:7b:da:0d:31:11:77:c7:98:
ee:cb:26:38:cd:fd:1e:4c:d9:6d:9a:47:3f:49:20:
d0:06:9e:8c:15:13:2b:b8:dc:8d:34:d5:41:ab:7f:
d3:db:11:4c:7e:35:6d:a8:f2:5d:da:9d:43:90:fc:
25:61:12:29:94:f1:b5:3e:7b:f4:cf:30:19:03:84:
7d:ee:bc:76:75:51:48:7e:17:4b:0e:bd:31:fb:87:
a4:85:f3:85:39:7d:a5:93:b1:db:4f:75:42:a3:b0:
37:cd:00:8f:8a:df:1f:3d:7c:da:a0:9d:c1:71:26:
9d:34:fc:57:e9:e7:27:a6:65:e7:ae:82:87:96:7f:
48:91:ba:2b:0d:68:ce:83:e4:87:af:0d:ce:6b:75:
8f:ad:0f:c5:6e:03:61:6d:42:1f:f5:e0:f5:3a:d5:
d3:88:19:ad:e4:3d:fe:e3:29:3e:6c:17:e3:1f:5a:
aa:62:ae:88:fe:10:b6:d2:b0:2c:de:37:e0:5d:69:
e8:3f:7f:84:13:47:26:fc:27:91:30:fb:37:e3:31:
b2:7a:11:b0:e7:c6:38:b2:c8:59:a8:20:11:cc:01:
c8:48:f6:59:cb:53:6f:05:96:05:b9:d9:34:48:07:
9b:66:88:ef:cd:9a:58:30:88:93:7f:de:2b:2f:08:
92:1f:cb:bf:2d:18:c1:d0:92:5e:3f:31:f5:73:6b:
8a:2e:dc:97:6b:94:4e:f6:cd:ed:59:3c:36:25:5a:
a6:8c:31:3d:9e:0e:d2:61:4f:9c:e9:59:43:93:59:
4e:f4:63:4a:8d:7d:21:07:8d:0d:8b:b3:24:81:20:
00:31:d1:4c:fa:93:be:2f:9a:2f:3b:36:a3:27:8e:
b8:35:a6:7e:fc:a0:e0:62:d7:87:12:33:cb:a5:90:
b5:54:85:cc:01:69:ea:0d:e8:80:92:c8:43:aa:68:
46:21:d3:ba:05:83:0e:9a:63:fe:ca:8c:ba:00:58:
c1:63:1f
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
E9:C1:A7:5D:3E:E8:6D:26:67:0C:02:84:CC:A9:AD:43:85:35:08:C8
X509v3 Authority Key Identifier:
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
Authority Information Access:
CA Issuers - URI:http://r13.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:gotify.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r13.c.lencr.org/10.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
Timestamp : Feb 14 20:01:01.448 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:5D:90:1C:C8:5B:B6:36:B4:61:55:2A:04:
2A:FA:4F:65:D4:15:8D:E5:D6:B2:3F:91:92:63:CB:BF:
BE:51:99:0A:02:21:00:87:45:97:A4:F2:D3:4A:D8:39:
72:33:CE:47:4C:22:D5:DD:43:88:FC:DD:CF:04:2F:85:
64:AC:0D:73:C6:BD:72
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 1A:8B:9D:69:4A:57:98:C8:99:A0:CA:88:BD:F4:8F:C0:
B4:56:60:CC:C3:60:0D:1F:71:F4:69:FF:C7:D1:AC:A3
Timestamp : Feb 14 20:01:01.740 2026 GMT
Extensions: 00:00:05:00:47:FA:50:B2
Signature : ecdsa-with-SHA256
30:45:02:20:10:1C:F5:F7:74:21:20:B5:73:AD:2A:7B:
A7:45:19:A2:4C:25:EB:11:7C:D9:2F:E2:87:A5:4F:F8:
6E:70:84:71:02:21:00:B2:F3:17:5C:45:62:F2:51:CB:
C3:03:28:F1:DD:E9:25:D2:8B:4D:4B:16:48:A5:F1:43:
41:BB:5C:7E:F9:C2:C2
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: gotify.lan.ddnsgeek.com
Altnames: DNS:gotify.lan.ddnsgeek.com
Issuer: R13
Not valid before: Feb 14 19:02:31 2026 GMT
Not valid after: May 15 19:02:30 2026 GMT
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md
-9
View File
@@ -1,9 +0,0 @@
```bash
ffuf -u https://gotify.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.gotify.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_gotify.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
```
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_gotify.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_gotify.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt):
```
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md
-30
View File
@@ -1,30 +0,0 @@
```bash
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://gotify.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
```
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
```
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
+ Target IP: 167.179.167.166
+ Target Hostname: gotify.lan.ddnsgeek.com
+ Target Port: 443
---------------------------------------------------------------------------
+ SSL Info: Subject: /CN=gotify.lan.ddnsgeek.com
CN: gotify.lan.ddnsgeek.com
SAN: gotify.lan.ddnsgeek.com
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
+ Platform: Unknown
+ Start Time: 2026-04-05 07:51:15 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999966] /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md
-74
View File
@@ -1,74 +0,0 @@
```bash
whatweb --color=never --no-errors -a 3 -v https://gotify.lan.ddnsgeek.com:443 2>&1
```
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt):
```
WhatWeb report for https://gotify.lan.ddnsgeek.com:443
Status : 200 OK
Title : Gotify
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Length: 769
Content-Type: text/html
Date: Sun, 05 Apr 2026 07:51:46 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://gotify.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://gotify.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 07:44:04 GMT
Date: Tue, 14 Apr 2026 03:27:10 GMT
Content-Length: 17
Moved Permanently
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSik http://gotify.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://gotify.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 07:44:07 GMT
Date: Tue, 14 Apr 2026 03:27:11 GMT
Content-Length: 17
Moved Permanently
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://gotify.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://gotify.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 07:44:04 GMT
Date: Tue, 14 Apr 2026 03:27:09 GMT
Content-Length: 17
Moved Permanently
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md
+30 -32
View File
@@ -5,33 +5,41 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 07:44:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gotify.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:27:13 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gotify.lan.ddnsgeek.com
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
Host is up, received user-set (0.017s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 07:45:05 UTC for 390s
Scanned at 2026-04-14 03:27:20 UTC for 216s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-mobileversion-checker: No mobile version detected.
| http-headers:
| Location: https://gotify.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 03:27:50 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-title: Did not follow redirect to https://gotify.lan.ddnsgeek.com/
|_http-comments-displayer: Couldn't find any comments.
|_http-malware-host: Host appears to be clean
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-chrono: Request times for /; avg: 651.35ms; min: 481.99ms; max: 876.62ms
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-title: Did not follow redirect to https://gotify.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-mobileversion-checker: No mobile version detected.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-vhosts:
| 126 names had status 308
| lab.lan.ddnsgeek.com : 404
|_svn.lan.ddnsgeek.com : 404
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-comments-displayer: Couldn't find any comments.
|_http-date: Sun, 05 Apr 2026 07:46:12 GMT; -17s from local time.
|_128 names had status 308
|_http-feed: Couldn't find any feeds.
| http-useragent-tester:
| Status for browser useragent: 200
| Status for browser useragent: false
| Redirected To: https://gotify.lan.ddnsgeek.com/
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
@@ -51,7 +59,9 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-errors: Couldn't find any error pages.
|_http-date: Tue, 14 Apr 2026 03:27:33 GMT; -1s from local time.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
@@ -59,24 +69,12 @@ PORT STATE SERVICE REASON VERSION
| Dir: /
| Total files found (by extension):
|_
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-feed: Couldn't find any feeds.
|_http-chrono: Request times for /; avg: 867.56ms; min: 649.49ms; max: 1088.71ms
| http-headers:
| Location: https://gotify.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 07:50:58 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-errors: Couldn't find any error pages.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 07:51:36 2026 -- 1 IP address (1 host up) scanned in 430.55 seconds
# Nmap done at Tue Apr 14 03:30:56 2026 -- 1 IP address (1 host up) scanned in 224.20 seconds
```
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md
+91918 -19800
View File
File diff suppressed because it is too large. Load diff
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md
+24 -5
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://gotify.lan.ddnsgeek
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://gotify.lan.ddnsgeek
+ Target Hostname: gotify.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 07:45:39 (GMT0)
+ Start Time: 2026-04-14 03:27:32 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7901 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 08:04:25 (GMT0) (1126 seconds)
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-14 03:37:19 (GMT0) (587 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/gotify.lan.ddnsgeek.com/report/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md
+1 -65
View File
@@ -23,74 +23,10 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://gotify.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 07:51:45 GMT
Date: Tue, 14 Apr 2026 03:27:56 GMT
Content-Length: 17
Connection: close
WhatWeb report for https://gotify.lan.ddnsgeek.com/
Status : 200 OK
Title : Gotify
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Length: 769
Content-Type: text/html
Date: Sun, 05 Apr 2026 07:52:04 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
```