fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,11 +1,23 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 07:50:48 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:27:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml gotify.lan.ddnsgeek.com
|
||||
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 07:51:01 UTC for 582s
|
||||
Scanned at 2026-04-14 03:27:43 UTC for 200s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/https syn-ack ttl 55
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| HSTS not configured in HTTPS Server
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| ssl-cert: Subject: commonName=gotify.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:gotify.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -52,63 +64,7 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Lc3uWbMBAgMe6LIg0A45uMNzHVq6Jz6Cqxbq4zWCpTJG86mS74VI+Z4Vr9d+BzQr
|
||||
| u7L76W6EfP8Aau/l
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-traceroute: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-date: Sun, 05 Apr 2026 07:51:56 GMT; -4s from local time.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET OPTIONS
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-title: Gotify
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /
|
||||
| Other: 1; json: 1
|
||||
| /static/
|
||||
| css: 1; js: 1
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /static/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1; css: 1; js: 1; json: 1
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
| http-headers:
|
||||
| Content-Type: text/html
|
||||
| Date: Sun, 05 Apr 2026 07:52:19 GMT
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| Vary: Accept-Encoding
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
| Transfer-Encoding: chunked
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-php-version: Logo query returned unknown hash 622a589591324462d669df924802d29b
|
||||
|_Credits query returned unknown hash 622a589591324462d669df924802d29b
|
||||
|_http-chrono: Request times for /; avg: 7828.27ms; min: 3421.52ms; max: 23506.11ms
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
@@ -129,15 +85,21 @@ PORT STATE SERVICE REASON VERSION
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-enum:
|
||||
|_ /manifest.json: Manifest JSON File
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-vhosts:
|
||||
|_128 names had status 404
|
||||
|_http-date: Tue, 14 Apr 2026 03:28:15 GMT; 0s from local time.
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=gotify.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ http://gotify.lan.ddnsgeek.com:443/
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Status for browser useragent: 404
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
@@ -156,8 +118,29 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Tue, 14 Apr 2026 03:28:30 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-chrono: Request times for /; avg: 793.49ms; min: 415.71ms; max: 1062.27ms
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:00:43 2026 -- 1 IP address (1 host up) scanned in 597.62 seconds
|
||||
# Nmap done at Tue Apr 14 03:31:03 2026 -- 1 IP address (1 host up) scanned in 207.02 seconds
|
||||
Reference in new issue
Block a user