fresh autorecon run
This commit is contained in:
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,52 +1 @@
|
||||
HTTP/2 200
|
||||
content-type: text/html
|
||||
date: Sun, 05 Apr 2026 07:45:39 GMT
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept-Encoding
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="utf-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
|
||||
<meta name="theme-color" content="#3f51b5">
|
||||
<link rel="manifest" href="manifest.json">
|
||||
<title>Gotify</title>
|
||||
|
||||
<link rel="apple-touch-icon-precomposed" sizes="57x57" href="static/apple-touch-icon-57x57.png" />
|
||||
<link rel="apple-touch-icon-precomposed" sizes="114x114" href="static/apple-touch-icon-114x114.png" />
|
||||
<link rel="apple-touch-icon-precomposed" sizes="72x72" href="static/apple-touch-icon-72x72.png" />
|
||||
<link rel="apple-touch-icon-precomposed" sizes="144x144" href="static/apple-touch-icon-144x144.png" />
|
||||
<link rel="apple-touch-icon-precomposed" sizes="60x60" href="static/apple-touch-icon-60x60.png" />
|
||||
<link rel="apple-touch-icon-precomposed" sizes="120x120" href="static/apple-touch-icon-120x120.png" />
|
||||
<link rel="apple-touch-icon-precomposed" sizes="76x76" href="static/apple-touch-icon-76x76.png" />
|
||||
<link rel="apple-touch-icon-precomposed" sizes="152x152" href="static/apple-touch-icon-152x152.png" />
|
||||
<link rel="icon" type="image/png" href="static/favicon-196x196.png" sizes="196x196" />
|
||||
<link rel="icon" type="image/png" href="static/favicon-96x96.png" sizes="96x96" />
|
||||
<link rel="icon" type="image/png" href="static/favicon-32x32.png" sizes="32x32" />
|
||||
<link rel="icon" type="image/png" href="static/favicon-16x16.png" sizes="16x16" />
|
||||
<link rel="icon" type="image/png" href="static/favicon-128.png" sizes="128x128" />
|
||||
<link rel="icon" href="static/favicon.ico">
|
||||
<meta name="application-name" content="Gotify"/>
|
||||
<meta name="msapplication-TileColor" content="#FFFFFF" />
|
||||
<meta name="msapplication-TileImage" content="static/mstile-144x144.png" />
|
||||
<meta name="msapplication-square70x70logo" content="static/mstile-70x70.png" />
|
||||
<meta name="msapplication-square150x150logo" content="static/mstile-150x150.png" />
|
||||
<meta name="msapplication-wide310x150logo" content="static/mstile-310x150.png" />
|
||||
<meta name="msapplication-square310x310logo" content="static/mstile-310x310.png" />
|
||||
|
||||
<script type="module" crossorigin src="./static/index-eGvATxVq.js"></script>
|
||||
<link rel="stylesheet" crossorigin href="./static/index-DaSZqSeC.css">
|
||||
</head>
|
||||
<body>
|
||||
<noscript>
|
||||
Gotify requires JavaScript.
|
||||
</noscript>
|
||||
<div id="root"></div>
|
||||
<script>window.config = {"register":false,"version":{"version":"2.9.1","commit":"4fa74cea55137dc56bacda3fa7ff694f24b5efc0","buildDate":"2026-02-28-19:13:51"}};</script>
|
||||
</body>
|
||||
</html>
|
||||
|
||||
@@ -283,64 +283,3 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
200 GET 8l 15w 175c https://gotify.lan.ddnsgeek.com/manifest.json
|
||||
200 GET 9l 57w 3422c https://gotify.lan.ddnsgeek.com/static/favicon-32x32.png
|
||||
200 GET 79l 364w 28039c https://gotify.lan.ddnsgeek.com/static/favicon-196x196.png
|
||||
200 GET 33l 231w 19847c https://gotify.lan.ddnsgeek.com/static/mstile-144x144.png
|
||||
200 GET 14l 87w 7288c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-60x60.png
|
||||
200 GET 186l 1219w 91115c https://gotify.lan.ddnsgeek.com/static/mstile-310x310.png
|
||||
200 GET 1l 49w 3017c https://gotify.lan.ddnsgeek.com/static/index-DaSZqSeC.css
|
||||
200 GET 13l 88w 6813c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-57x57.png
|
||||
200 GET 34l 169w 12700c https://gotify.lan.ddnsgeek.com/static/favicon-96x96.png
|
||||
200 GET 45l 249w 17807c https://gotify.lan.ddnsgeek.com/static/favicon-128.png
|
||||
200 GET 46l 255w 21107c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-152x152.png
|
||||
200 GET 94l 602w 45005c https://gotify.lan.ddnsgeek.com/static/mstile-310x150.png
|
||||
200 GET 13l 77w 78752c https://gotify.lan.ddnsgeek.com/static/favicon.ico
|
||||
200 GET 33l 231w 19847c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-144x144.png
|
||||
200 GET 21l 116w 9575c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-76x76.png
|
||||
200 GET 28l 195w 15310c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-114x114.png
|
||||
200 GET 26l 127w 9189c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-72x72.png
|
||||
200 GET 97l 533w 39874c https://gotify.lan.ddnsgeek.com/static/mstile-150x150.png
|
||||
200 GET 198l 19103w 997931c https://gotify.lan.ddnsgeek.com/static/index-eGvATxVq.js
|
||||
200 GET 45l 249w 17807c https://gotify.lan.ddnsgeek.com/static/mstile-70x70.png
|
||||
200 GET 49l 229w 16404c https://gotify.lan.ddnsgeek.com/static/apple-touch-icon-120x120.png
|
||||
200 GET 5l 22w 1378c https://gotify.lan.ddnsgeek.com/static/favicon-16x16.png
|
||||
200 GET 42l 141w 2578c https://gotify.lan.ddnsgeek.com/
|
||||
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/application
|
||||
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/client
|
||||
200 GET 63l 130w 1761c https://gotify.lan.ddnsgeek.com/docs
|
||||
200 GET 1l 1w 37c https://gotify.lan.ddnsgeek.com/health
|
||||
200 GET 42l 141w 2578c https://gotify.lan.ddnsgeek.com/index.html
|
||||
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/message
|
||||
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/plugin
|
||||
200 GET 79l 364w 28039c https://gotify.lan.ddnsgeek.com/static/defaultapp.png
|
||||
200 GET 62l 363w 28652c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500-DRg8azjQ.woff2
|
||||
200 GET 69l 363w 28347c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100-BJNx9A77.woff2
|
||||
200 GET 68l 495w 39648c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500italic-DC3lxgcN.woff
|
||||
200 GET 75l 421w 31430c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400italic-DRWWNyaf.woff2
|
||||
200 GET 81l 483w 40120c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900italic-uSnr6All.woff
|
||||
200 GET 56l 365w 31608c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300italic-CYatNKLh.woff2
|
||||
200 GET 62l 365w 28340c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700-CqGedB_1.woff2
|
||||
200 GET 93l 428w 36389c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300-Cx9SeV6m.woff
|
||||
200 GET 12l 7227w 393380c https://gotify.lan.ddnsgeek.com/static/PluginDetailView-DQ2pm7df.js
|
||||
200 GET 84l 518w 46218c https://gotify.lan.ddnsgeek.com/static/notification.ogg
|
||||
200 GET 55l 386w 30850c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700italic-C5p_YAqY.woff2
|
||||
200 GET 57l 342w 28673c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900-BEowQPyJ.woff2
|
||||
200 GET 68l 410w 31276c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500italic-CAWXcheQ.woff2
|
||||
200 GET 78l 452w 36359c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700-CCwTn0--.woff
|
||||
200 GET 70l 374w 28741c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300-EvKWBL9d.woff2
|
||||
200 GET 59l 433w 36325c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100-B3mHgoOJ.woff
|
||||
200 GET 68l 455w 36519c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900-Blac3EU0.woff
|
||||
200 GET 95l 458w 36604c https://gotify.lan.ddnsgeek.com/static/roboto-latin-500-BU-otfqs.woff
|
||||
200 GET 73l 470w 38816c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100italic-Bjs4D596.woff
|
||||
200 GET 75l 383w 28313c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400-CEEi-WbQ.woff2
|
||||
200 GET 81l 422w 36239c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400-CKhRtUFO.woff
|
||||
200 GET 89l 433w 30558c https://gotify.lan.ddnsgeek.com/static/roboto-latin-100italic-DkGpOhj0.woff2
|
||||
200 GET 67l 434w 38817c https://gotify.lan.ddnsgeek.com/static/roboto-latin-700italic-DXbHVVaQ.woff
|
||||
200 GET 65l 445w 39524c https://gotify.lan.ddnsgeek.com/static/roboto-latin-400italic-B7WW6HdJ.woff
|
||||
200 GET 78l 384w 31534c https://gotify.lan.ddnsgeek.com/static/roboto-latin-900italic-DBp_g5Ww.woff2
|
||||
200 GET 53l 455w 39980c https://gotify.lan.ddnsgeek.com/static/roboto-latin-300italic-Uxw9HR3T.woff
|
||||
200 GET 52l 103w 3443c https://gotify.lan.ddnsgeek.com/static/
|
||||
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/stream
|
||||
401 GET 2l 12w 75c https://gotify.lan.ddnsgeek.com/user
|
||||
200 GET 1l 1w 105c https://gotify.lan.ddnsgeek.com/version
|
||||
Whitespace-only changes.
@@ -1,21 +1,23 @@
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 167.179.167.166
|
||||
+ Target Hostname: gotify.lan.ddnsgeek.com
|
||||
+ Target Port: 443
|
||||
---------------------------------------------------------------------------
|
||||
+ SSL Info: Subject: /CN=gotify.lan.ddnsgeek.com
|
||||
CN: gotify.lan.ddnsgeek.com
|
||||
SAN: gotify.lan.ddnsgeek.com
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 07:51:15 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [999966] /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [FAIL] Unable to connect to gotify.lan.ddnsgeek.com:443.
|
||||
@@ -1,11 +1,23 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 07:50:48 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:27:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com
|
||||
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 07:51:01 UTC for 582s
|
||||
Scanned at 2026-04-14 03:27:43 UTC for 200s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/https syn-ack ttl 55
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| HSTS not configured in HTTPS Server
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| ssl-cert: Subject: commonName=gotify.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -52,63 +64,7 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr
|
||||
| u7L76W6EfP8Aau/l
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-traceroute: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-date: Sun, 05 Apr 2026 07:51:56 GMT; -4s from local time.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET OPTIONS
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-title: Gotify
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /
|
||||
| Other: 1; json: 1
|
||||
| /static/
|
||||
| css: 1; js: 1
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /static/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1; css: 1; js: 1; json: 1
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
| http-headers:
|
||||
| Content-Type: text/html
|
||||
| Date: Sun, 05 Apr 2026 07:52:19 GMT
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| Vary: Accept-Encoding
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
| Transfer-Encoding: chunked
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-php-version: Logo query returned unknown hash 622a589591324462d669df924802d29b
|
||||
|_Credits query returned unknown hash 622a589591324462d669df924802d29b
|
||||
|_http-chrono: Request times for /; avg: 7828.27ms; min: 3421.52ms; max: 23506.11ms
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
@@ -129,15 +85,21 @@ PORT STATE SERVICE REASON VERSION
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-enum:
|
||||
|_ /manifest.json: Manifest JSON File
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-vhosts:
|
||||
|_128 names had status 404
|
||||
|_http-date: Tue, 14 Apr 2026 03:28:15 GMT; 0s from local time.
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=gotify.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ http://gotify.lan.ddnsgeek.com:443/
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Status for browser useragent: 404
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
@@ -156,8 +118,29 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Tue, 14 Apr 2026 03:28:30 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-chrono: Request times for /; avg: 793.49ms; min: 415.71ms; max: 1062.27ms
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:00:43 2026 -- 1 IP address (1 host up) scanned in 597.62 seconds
|
||||
# Nmap done at Tue Apr 14 03:31:03 2026 -- 1 IP address (1 host up) scanned in 207.02 seconds
|
||||
@@ -1,65 +1 @@
|
||||
WhatWeb report for https://gotify.lan.ddnsgeek.com:443
|
||||
Status : 200 OK
|
||||
Title : Gotify
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Encoding: gzip
|
||||
Content-Length: 769
|
||||
Content-Type: text/html
|
||||
Date: Sun, 05 Apr 2026 07:51:46 GMT
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
Vary: Accept-Encoding
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
OpenSSL 3.5.5 27 Jan 2026
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
|
||||
@@ -1,56 +1,51 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 07:50:48 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com" start="1775375448" startstr="Sun Apr 5 07:50:48 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:27:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com" start="1776137257" startstr="Tue Apr 14 03:27:37 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775375460"/>
|
||||
<taskend task="NSE" time="1775375460"/>
|
||||
<taskbegin task="NSE" time="1775375460"/>
|
||||
<taskend task="NSE" time="1775375460"/>
|
||||
<taskbegin task="NSE" time="1775375460"/>
|
||||
<taskend task="NSE" time="1775375460"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775375460"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775375461"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775375461"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775375461"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775375461"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775375461" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775375465"/>
|
||||
<taskend task="Service scan" time="1775375478" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775375478"/>
|
||||
<taskprogress task="NSE" time="1775375509" percent="65.41" remaining="17" etc="1775375525"/>
|
||||
<taskprogress task="NSE" time="1775375539" percent="84.04" remaining="12" etc="1775375551"/>
|
||||
<taskprogress task="NSE" time="1775375577" percent="85.99" remaining="17" etc="1775375593"/>
|
||||
<taskprogress task="NSE" time="1775375607" percent="96.44" remaining="5" etc="1775375612"/>
|
||||
<taskprogress task="NSE" time="1775375637" percent="98.38" remaining="3" etc="1775375640"/>
|
||||
<taskprogress task="NSE" time="1775375667" percent="99.35" remaining="2" etc="1775375668"/>
|
||||
<taskprogress task="NSE" time="1775375697" percent="99.68" remaining="1" etc="1775375698"/>
|
||||
<taskprogress task="NSE" time="1775375727" percent="99.68" remaining="1" etc="1775375728"/>
|
||||
<taskprogress task="NSE" time="1775375757" percent="99.68" remaining="1" etc="1775375758"/>
|
||||
<taskprogress task="NSE" time="1775375787" percent="99.68" remaining="2" etc="1775375788"/>
|
||||
<taskprogress task="NSE" time="1775375817" percent="99.68" remaining="2" etc="1775375818"/>
|
||||
<taskprogress task="NSE" time="1775375847" percent="99.68" remaining="2" etc="1775375848"/>
|
||||
<taskprogress task="NSE" time="1775375877" percent="99.68" remaining="2" etc="1775375878"/>
|
||||
<taskprogress task="NSE" time="1775375907" percent="99.68" remaining="2" etc="1775375908"/>
|
||||
<taskprogress task="NSE" time="1775375937" percent="99.68" remaining="2" etc="1775375938"/>
|
||||
<taskprogress task="NSE" time="1775375967" percent="99.68" remaining="2" etc="1775375969"/>
|
||||
<taskprogress task="NSE" time="1775375997" percent="99.68" remaining="2" etc="1775375999"/>
|
||||
<taskprogress task="NSE" time="1775376027" percent="99.68" remaining="2" etc="1775376029"/>
|
||||
<taskend task="NSE" time="1775376038"/>
|
||||
<taskbegin task="NSE" time="1775376038"/>
|
||||
<taskend task="NSE" time="1775376043"/>
|
||||
<taskbegin task="NSE" time="1775376043"/>
|
||||
<taskend task="NSE" time="1775376043"/>
|
||||
<host starttime="1775375461" endtime="1775376043"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776137262"/>
|
||||
<taskend task="NSE" time="1776137262"/>
|
||||
<taskbegin task="NSE" time="1776137262"/>
|
||||
<taskend task="NSE" time="1776137262"/>
|
||||
<taskbegin task="NSE" time="1776137262"/>
|
||||
<taskend task="NSE" time="1776137262"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776137263"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776137263"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776137263"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776137263"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776137263"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776137263" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776137266"/>
|
||||
<taskend task="Service scan" time="1776137275" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776137275"/>
|
||||
<taskprogress task="NSE" time="1776137306" percent="84.31" remaining="6" etc="1776137312"/>
|
||||
<taskprogress task="NSE" time="1776137336" percent="99.35" remaining="1" etc="1776137336"/>
|
||||
<taskprogress task="NSE" time="1776137366" percent="99.68" remaining="1" etc="1776137366"/>
|
||||
<taskprogress task="NSE" time="1776137396" percent="99.68" remaining="1" etc="1776137396"/>
|
||||
<taskprogress task="NSE" time="1776137426" percent="99.68" remaining="1" etc="1776137426"/>
|
||||
<taskprogress task="NSE" time="1776137456" percent="99.68" remaining="1" etc="1776137457"/>
|
||||
<taskend task="NSE" time="1776137461"/>
|
||||
<taskbegin task="NSE" time="1776137461"/>
|
||||
<taskend task="NSE" time="1776137463"/>
|
||||
<taskbegin task="NSE" time="1776137463"/>
|
||||
<taskend task="NSE" time="1776137463"/>
|
||||
<host starttime="1776137263" endtime="1776137463"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="gotify.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="ssl-cert" output="Subject: commonName=gotify.lan.ddnsgeek.com
Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-02-14T19:02:31
Not valid after: 2026-05-15T19:02:30
MD5: 0663 3538 85f4 573b 487c 09cb e7dd f8fc
SHA-1: c524 c1ab 9e90 457e 0aa8 630f 6277 e73a eeb2 5078
SHA-256: b69e 7113 332a b817 efd6 6485 19a7 ca69 eccc 1918 b1f5 1193 7883 4e0b 69f2 a4f8
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgISBWjxVFy9rGrar3/Ia3tZt0wJMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTMwHhcNMjYwMjE0MTkwMjMxWhcNMjYwNTE1MTkwMjMwWjAiMSAwHgYDVQQD
Exdnb3RpZnkubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBAJKWJGSSAoVrS6NqFLLjikQard2jHkoMhwLwosukVIZ70U+dxLdM
k7PJb/DHLM1sj4Wf04jBBMF2tlD/A4/unLaX3No+bsznq6V6yYVA0QFWQZhKrhN3
hsHLRbyuibfan2XQNMCWPtmWEe76xTP+i2STKFoZmz4oSRilOExy5RzxwWDei4qn
4dtrLSp/vHvaDTERd8eY7ssmOM39HkzZbZpHP0kg0AaejBUTK7jcjTTVQat/09sR
TH41bajyXdqdQ5D8JWESKZTxtT579M8wGQOEfe68dnVRSH4XSw69MfuHpIXzhTl9
pZOx2091QqOwN80Aj4rfHz182qCdwXEmnTT8V+nnJ6Zl566Ch5Z/SJG6Kw1ozoPk
h68Nzmt1j60PxW4DYW1CH/Xg9TrV04gZreQ9/uMpPmwX4x9aqmKuiP4QttKwLN43
4F1p6D9/hBNHJvwnkTD7N+MxsnoRsOfGOLLIWaggEcwByEj2WctTbwWWBbnZNEgH
m2aI782aWDCIk3/eKy8Ikh/Lvy0YwdCSXj8x9XNrii7cl2uUTvbN7Vk8NiVapowx
PZ4O0mFPnOlZQ5NZTvRjSo19IQeNDYuzJIEgADHRTPqTvi+aLzs2oyeOuDWmfvyg
4GLXhxIzy6WQtVSFzAFp6g3ogJLIQ6poRiHTugWDDppj/sqMugBYwWMfAgMBAAGj
ggIlMIICITAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQU6cGnXT7obSZnDAKEzKmtQ4U1CMgwHwYDVR0j
BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG
AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdnb3Rp
ZnkubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAuBgNVHR8E
JzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEwLmNybDCCAQwGCisG
AQQB1nkCBAIEgf0EgfoA+AB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8P
yqnGAAABnF2+CggAAAQDAEcwRQIgXZAcyFu2NrRhVSoEKvpPZdQVjeXWsj+RkmPL
v75RmQoCIQCHRZek8tNK2DlyM85HTCLV3UOI/N3PBC+FZKwNc8a9cgB+ABqLnWlK
V5jImaDKiL30j8C0VmDMw2ANH3H0af/H0ayjAAABnF2+CywACAAABQBH+lCyBAMA
RzBFAiAQHPX3dCEgtXOtKnunRRmiTCXrEXzZL+KHpU/4bnCEcQIhALLzF1xFYvJR
y8MDKPHd6SXSi01LFkil8UNBu1x++cLCMA0GCSqGSIb3DQEBCwUAA4IBAQBzxqbU
ANmKar7Hl1sDtpXXmYA7fqtT8QToH8hne93Edrhe4wa9aJzb/SJS5Jp9Dkuqb/WG
ES0HMFD1MSvO37cpCsuKebYrsz8RT86iYFTrlUqvHsgUA7YukdZy7zi6LEXIi7xN
7ywov+BUO30KakhcG95fLYTqudoWlEEpOtiiSzvyGaNcNIX8FKh+SUgxGFlPO3Ep
UQWefkONj9BkFwKu63UdmP3TXP4X8sDZXY7vA6qsoA1k2WOzDVGY3TFC3kArlkjD
Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr
u7L76W6EfP8Aau/l
-----END CERTIFICATE-----
"><table key="subject">
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 HSTS not configured in HTTPS Server
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
|
||||
<elem>HSTS not configured in HTTPS Server</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
</script><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="ssl-cert" output="Subject: commonName=gotify.lan.ddnsgeek.com
Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-02-14T19:02:31
Not valid after: 2026-05-15T19:02:30
MD5: 0663 3538 85f4 573b 487c 09cb e7dd f8fc
SHA-1: c524 c1ab 9e90 457e 0aa8 630f 6277 e73a eeb2 5078
SHA-256: b69e 7113 332a b817 efd6 6485 19a7 ca69 eccc 1918 b1f5 1193 7883 4e0b 69f2 a4f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">gotify.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
@@ -117,55 +112,32 @@
|
||||
<elem key="sha1">c524c1ab9e90457e0aa8630f6277e73aeeb25078</elem>
|
||||
<elem key="sha256">b69e7113332ab817efd6648519a7ca69eccc1918b1f5119378834e0b69f2a4f8</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="http-traceroute" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-date" output="Sun, 05 Apr 2026 07:51:56 GMT; -4s from local time."><elem key="date">2026-04-05T07:51:56+00:00</elem>
|
||||
<elem key="delta">-4.0</elem>
|
||||
</script><script id="http-methods" output="
 Supported Methods: GET OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
|
||||
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
|
||||
</table>
|
||||
<table key="X_XSS_Protection">
|
||||
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
|
||||
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
</script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-title" output="Gotify"><elem key="title">Gotify</elem>
|
||||
</script><script id="http-sitemap-generator" output="
 Directory structure:
 /
 Other: 1; json: 1
 /static/
 css: 1; js: 1
 Longest directory structure:
 Depth: 1
 Dir: /static/
 Total files found (by extension):
 Other: 1; css: 1; js: 1; json: 1
"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-errors" output="Couldn't find any error pages."/><script id="http-headers" output="
 Content-Type: text/html
 Date: Sun, 05 Apr 2026 07:52:19 GMT
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 Vary: Accept-Encoding
 X-Content-Type-Options: nosniff
 X-Frame-Options: SAMEORIGIN
 X-Xss-Protection: 1; mode=block
 Connection: close
 Transfer-Encoding: chunked
 
 (Request type: GET)
"/><script id="http-vhosts" output="
auth.lan.ddnsgeek.com : 200
127 names had status 404"/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-php-version" output="Logo query returned unknown hash 622a589591324462d669df924802d29b
Credits query returned unknown hash 622a589591324462d669df924802d29b"/><script id="http-chrono" output="Request times for /; avg: 7828.27ms; min: 3421.52ms; max: 23506.11ms"/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
</script><script id="http-title" output="Site doesn't have a title (text/plain; charset=utf-8)."></script><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="compressors">
|
||||
@@ -179,25 +151,28 @@
|
||||
<table key="TLSv1.3">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-enum" output="
 /manifest.json: Manifest JSON File
"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-vhosts" output="
128 names had status 404"/><script id="http-date" output="Tue, 14 Apr 2026 03:28:15 GMT; 0s from local time."><elem key="date">2026-04-14T03:28:15+00:00</elem>
|
||||
<elem key="delta">0.0</elem>
|
||||
</script><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=gotify.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	http://gotify.lan.ddnsgeek.com:443/
"/><script id="http-useragent-tester" output="
 Status for browser useragent: 404
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">404</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
@@ -217,16 +192,16 @@
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/></port>
|
||||
</script><script id="http-feed" output="Couldn't find any feeds."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-headers" output="
 Content-Type: text/plain; charset=utf-8
 X-Content-Type-Options: nosniff
 Date: Tue, 14 Apr 2026 03:28:30 GMT
 Content-Length: 19
 Connection: close
 
 (Request type: GET)
"/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-chrono" output="Request times for /; avg: 793.49ms; min: 415.71ms; max: 1062.27ms"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/></port>
|
||||
</ports>
|
||||
<times srtt="14826" rttvar="14826" to="100000"/>
|
||||
<times srtt="15099" rttvar="15099" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775376043"/>
|
||||
<taskend task="NSE" time="1775376043"/>
|
||||
<taskbegin task="NSE" time="1775376043"/>
|
||||
<taskend task="NSE" time="1775376043"/>
|
||||
<taskbegin task="NSE" time="1775376043"/>
|
||||
<taskend task="NSE" time="1775376043"/>
|
||||
<runstats><finished time="1775376043" timestr="Sun Apr 5 08:00:43 2026" summary="Nmap done at Sun Apr 5 08:00:43 2026; 1 IP address (1 host up) scanned in 597.62 seconds" elapsed="597.62" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776137463"/>
|
||||
<taskend task="NSE" time="1776137463"/>
|
||||
<taskbegin task="NSE" time="1776137463"/>
|
||||
<taskend task="NSE" time="1776137463"/>
|
||||
<taskbegin task="NSE" time="1776137463"/>
|
||||
<taskend task="NSE" time="1776137463"/>
|
||||
<runstats><finished time="1776137463" timestr="Tue Apr 14 03:31:03 2026" summary="Nmap done at Tue Apr 14 03:31:03 2026; 1 IP address (1 host up) scanned in 207.02 seconds" elapsed="207.02" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user