fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,59 +1,106 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 11:50:05 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/grafana.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml grafana.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/grafana.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml grafana.lan.ddnsgeek.com" start="1775389805" startstr="Sun Apr 5 11:50:05 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:33:49 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/grafana.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml grafana.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/grafana.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/grafana.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml grafana.lan.ddnsgeek.com" start="1776137629" startstr="Tue Apr 14 03:33:49 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775389809"/>
|
||||
<taskend task="NSE" time="1775389809"/>
|
||||
<taskbegin task="NSE" time="1775389809"/>
|
||||
<taskend task="NSE" time="1775389809"/>
|
||||
<taskbegin task="NSE" time="1775389809"/>
|
||||
<taskend task="NSE" time="1775389809"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775389809"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775389810"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775389810"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775389810"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775389810"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775389810" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775389812"/>
|
||||
<taskend task="Service scan" time="1775389825" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775389825"/>
|
||||
<taskprogress task="NSE" time="1775389856" percent="82.89" remaining="7" etc="1775389862"/>
|
||||
<taskprogress task="NSE" time="1775389886" percent="88.31" remaining="9" etc="1775389894"/>
|
||||
<taskprogress task="NSE" time="1775389916" percent="94.19" remaining="6" etc="1775389922"/>
|
||||
<taskprogress task="NSE" time="1775389946" percent="98.71" remaining="2" etc="1775389948"/>
|
||||
<taskprogress task="NSE" time="1775389976" percent="99.35" remaining="1" etc="1775389977"/>
|
||||
<taskprogress task="NSE" time="1775390006" percent="99.68" remaining="1" etc="1775390007"/>
|
||||
<taskprogress task="NSE" time="1775390036" percent="99.68" remaining="1" etc="1775390037"/>
|
||||
<taskprogress task="NSE" time="1775390066" percent="99.68" remaining="1" etc="1775390067"/>
|
||||
<taskprogress task="NSE" time="1775390096" percent="99.68" remaining="1" etc="1775390097"/>
|
||||
<taskprogress task="NSE" time="1775390126" percent="99.68" remaining="1" etc="1775390127"/>
|
||||
<taskprogress task="NSE" time="1775390156" percent="99.68" remaining="2" etc="1775390157"/>
|
||||
<taskprogress task="NSE" time="1775390186" percent="99.68" remaining="2" etc="1775390187"/>
|
||||
<taskprogress task="NSE" time="1775390216" percent="99.68" remaining="2" etc="1775390217"/>
|
||||
<taskprogress task="NSE" time="1775390246" percent="99.68" remaining="2" etc="1775390247"/>
|
||||
<taskprogress task="NSE" time="1775390276" percent="99.68" remaining="2" etc="1775390277"/>
|
||||
<taskprogress task="NSE" time="1775390306" percent="99.68" remaining="2" etc="1775390308"/>
|
||||
<taskprogress task="NSE" time="1775390336" percent="99.68" remaining="2" etc="1775390338"/>
|
||||
<taskprogress task="NSE" time="1775390366" percent="99.68" remaining="2" etc="1775390368"/>
|
||||
<taskend task="NSE" time="1775390375"/>
|
||||
<taskbegin task="NSE" time="1775390375"/>
|
||||
<taskend task="NSE" time="1775390380"/>
|
||||
<taskbegin task="NSE" time="1775390380"/>
|
||||
<taskend task="NSE" time="1775390380"/>
|
||||
<host starttime="1775389810" endtime="1775390380"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776137632"/>
|
||||
<taskend task="NSE" time="1776137632"/>
|
||||
<taskbegin task="NSE" time="1776137632"/>
|
||||
<taskend task="NSE" time="1776137632"/>
|
||||
<taskbegin task="NSE" time="1776137632"/>
|
||||
<taskend task="NSE" time="1776137632"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776137632"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776137632"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776137632"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776137632"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776137632"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776137632" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776137634"/>
|
||||
<taskend task="Service scan" time="1776137642" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776137642"/>
|
||||
<taskprogress task="NSE" time="1776137673" percent="99.68" remaining="1" etc="1776137673"/>
|
||||
<taskprogress task="NSE" time="1776137703" percent="99.68" remaining="1" etc="1776137703"/>
|
||||
<taskend task="NSE" time="1776137730"/>
|
||||
<taskbegin task="NSE" time="1776137730"/>
|
||||
<taskend task="NSE" time="1776137732"/>
|
||||
<taskbegin task="NSE" time="1776137732"/>
|
||||
<taskend task="NSE" time="1776137732"/>
|
||||
<host starttime="1776137632" endtime="1776137732"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="grafana.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-date" output="Sun, 05 Apr 2026 11:50:27 GMT; -2s from local time."><elem key="date">2026-04-05T11:50:27+00:00</elem>
|
||||
<elem key="delta">-2.0</elem>
|
||||
</script><script id="http-waf-detect" output="IDS/IPS/WAF detected:
grafana.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-headers" output="
 Cache-Control: no-store
 Content-Type: text/html; charset=UTF-8
 Date: Sun, 05 Apr 2026 11:50:56 GMT
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Frame-Options: SAMEORIGIN
 X-Xss-Protection: 1; mode=block
 Connection: close
 
 (Request type: HEAD)
"/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: /login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">/login</elem>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-vhosts" output="
128 names had status 404"/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 HSTS not configured in HTTPS Server
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
|
||||
<elem>HSTS not configured in HTTPS Server</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
</script><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="compressors">
|
||||
<elem>NULL</elem>
|
||||
</table>
|
||||
<elem key="cipher preference">client</elem>
|
||||
<table key="warnings">
|
||||
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="TLSv1.3">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="http-date" output="Tue, 14 Apr 2026 03:34:10 GMT; -3s from local time."><elem key="date">2026-04-14T03:34:10+00:00</elem>
|
||||
<elem key="delta">-3.0</elem>
|
||||
</script><script id="http-feed" output="Couldn't find any feeds."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=grafana.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	http://grafana.lan.ddnsgeek.com:443/
"/><script id="http-useragent-tester" output="
 Status for browser useragent: 404
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">404</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
@@ -73,64 +120,8 @@
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="compressors">
|
||||
<elem>NULL</elem>
|
||||
</table>
|
||||
<elem key="cipher preference">client</elem>
|
||||
<table key="warnings">
|
||||
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="TLSv1.3">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="http-vuln-cve2017-1001000" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-chrono" output="Request times for /; avg: 3141.32ms; min: 1664.45ms; max: 4403.02ms"/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="ssl-cert" output="Subject: commonName=grafana.lan.ddnsgeek.com
Subject Alternative Name: DNS:grafana.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-03-29T18:41:52
Not valid after: 2026-06-27T18:41:51
MD5: 07d9 97d8 f40d a2d9 1403 9a5d f226 8e1e
SHA-1: a41d 6cbf 7307 408e 9f56 246c 53e7 7f8d 12ce a374
SHA-256: a829 2621 ef33 c82d 54bc 1466 b7b9 fd97 b794 be37 f4b3 c3a2 4d93 b593 21c7 fd33
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgISBkiVQNwIJIiZUfr5fE1dW9QvMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTMwHhcNMjYwMzI5MTg0MTUyWhcNMjYwNjI3MTg0MTUxWjAjMSEwHwYDVQQD
ExhncmFmYW5hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
DwAwggIKAoICAQC2Wlye1RGu1O4N2S+n/shOsGEOlOFsGYzyu7NhPoRVAhM3r/cF
bNi+AnXqt+aHVRIYqJBZlQNYZJ0c+M/viW+vX1qGFN4dZiUhqHWp9Mi2snmtFbWB
pdzXQpNH7a6LQYKyX+LeCuJwWERXKPTUTgd9JYgwnOCGJdu9tbBRjbE0cjhWWWOC
M/eHPJXFYLuDY7YpWXB8AViWFvhE13cGMwyy1TLX8qom2dBoR3EPDKKJ/uo6MCfa
zXBRpKve2d48U7S7BbKQ9IrlWwruGL43/ghCde7MbYpR1RiAydB79dn65PQJ7TNc
bNKz9A7ar1wwqBhMH0sDbUiNvs81S20gL0vBxy4r0sYUxefTcepLUH5yaiYk7ZcD
U/Zud9uTvjVkbz1yLxst71dLoUdwXruFDZRZz1oaDsWFz9EfvUad5NLvlr9EQhqV
5TrOiP3g6UsA78uruuDHMiNooXGxCZux6FXrNJV4/QXFebeVaHlSk3hiYHUudqN6
UROgctzzK8aH1mfadN8PyXD08QlbtCgeL1NtxQJ28FUMspkSXJSq9txmxhrWbI8P
yaikXVV/ut5UwlfOKYVCuLD8kDDYR4wf77GPbt2oPuiDnqb0nOqzTlogMWcZ0/QW
nrbX6o/0Tczl5H8DmS2hbTq00bj//CwIr6WhC3ofZOFOtC4lgCRnLUOGQQIDAQAB
o4ICJjCCAiIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFG00g9+MwX+8cnYYxWRNm1bap+60MB8GA1Ud
IwQYMBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggr
BgEFBQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYZ3Jh
ZmFuYS5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1Ud
HwQnMCUwI6AhoB+GHWh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvNDguY3JsMIIBDAYK
KwYBBAHWeQIEAgSB/QSB+gD4AHYASZybad4dfOz8Nt7Nh2SmuFuvCoeAGdFVUvvp
6ynd+MMAAAGdOxyVfwAABAMARzBFAiEA31C4QUdMPck+Q7dCbjWs0cBTXLOmzEEC
7fujXIvNrQUCIG0SSU6AzEX35sGsawCoVYXyqSSYZVU+xYNH2cfoOSHaAH4AbP5Q
GUOoXqkWvFLRM+TcyR7xQRx9JYQg0XOAnhgY6zoAAAGdOxyY7wAIAAAFAATUAfQE
AwBHMEUCIQDXheUsAJm96qrhW/XUdYDMLdhUONzavisbnO0I3hIBLQIgLfE5yIME
eBR7sOWX0NYAuHpx/nBei4viZ+nYLiv9iHQwDQYJKoZIhvcNAQELBQADggEBACvw
ZvNVT/KDSGJNtGy4FqDRAYZEM2yfeHgWJz5+6wizK2I0h1AGM7a2gG9Uh7l3uspY
Pd24f+/QKnrgBLDt/LocdK0H4h8tRrijn6aQBt29Eo9xWZo/2L/L5qZeceyjmiSM
3V2kPsKN6m+bKeBGkjSWKcz1jv2ZhE1Vk+XWC8/VBHZJIAmzWJfZQ7isoNtaSVl4
yi52ZIMoNhvGXOAui6yQtl4igByTJ3BuJeix0RYclP6DZvlZSBeg/csGcIYWah4o
iwPRzaJWZAeMuMarmka2LIdm+jmHExv8j0vRyULPlPtXVQrwoIiK58Kvh2kq+UHD
ANVNGekVQAyZvBHOA4g=
-----END CERTIFICATE-----
"><table key="subject">
|
||||
</script><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-headers" output="
 Content-Type: text/plain; charset=utf-8
 X-Content-Type-Options: nosniff
 Date: Tue, 14 Apr 2026 03:34:18 GMT
 Content-Length: 19
 Connection: close
 
 (Request type: GET)
"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-chrono" output="Request times for /; avg: 358.72ms; min: 251.88ms; max: 689.42ms"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-title" output="Site doesn't have a title (text/plain; charset=utf-8)."></script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="ssl-cert" output="Subject: commonName=grafana.lan.ddnsgeek.com
Subject Alternative Name: DNS:grafana.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-03-29T18:41:52
Not valid after: 2026-06-27T18:41:51
MD5: 07d9 97d8 f40d a2d9 1403 9a5d f226 8e1e
SHA-1: a41d 6cbf 7307 408e 9f56 246c 53e7 7f8d 12ce a374
SHA-256: a829 2621 ef33 c82d 54bc 1466 b7b9 fd97 b794 be37 f4b3 c3a2 4d93 b593 21c7 fd33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">grafana.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
@@ -197,43 +188,16 @@
|
||||
<elem key="sha1">a41d6cbf7307408e9f56246c53e77f8d12cea374</elem>
|
||||
<elem key="sha256">a8292621ef33c82d54bc1466b7b9fd97b794be37f4b3c3a24d93b59321c7fd33</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-php-version" output="Logo query returned unknown hash 5636d1779729b41eb6628e08ff04eff2
Credits query returned unknown hash 5636d1779729b41eb6628e08ff04eff2"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-config-backup" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
 Cache_Control: 
 Header: Cache-Control: no-store"><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
|
||||
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
|
||||
</table>
|
||||
<table key="X_XSS_Protection">
|
||||
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
|
||||
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
<table key="Cache_Control">
|
||||
<elem>Header: Cache-Control: no-store</elem>
|
||||
</table>
|
||||
</script><script id="http-vuln-cve2010-0738" output="
 /jmx-console/: Authentication was not required
"/><script id="http-errors" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-trane-info" output="Problem with XML parsing of /evox/about"/><script id="http-robots.txt" output="1 disallowed entry 
/"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-title" output="Grafana
Requested resource was /login"><elem key="title">Grafana</elem>
|
||||
<elem key="redirect_url">/login</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-majordomo2-dir-traversal" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-favicon" output="Unknown favicon MD5: 5636D1779729B41EB6628E08FF04EFF2"/><script id="http-vhosts" output="
127 names had status 404
auth.lan.ddnsgeek.com : 200"/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-sitemap-generator" output="
 Directory structure:
 /
 Other: 1
 /public/build/
 css: 2; js: 5
 /public/build/img/
 png: 2
 /public/img/
 svg: 1
 Longest directory structure:
 Depth: 3
 Dir: /public/build/img/
 Total files found (by extension):
 Other: 1; css: 2; js: 5; png: 2; svg: 1
"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-enum" output="
 /login/: Login page
 /robots.txt: Robots file
 /api/: Potentially interesting folder (401 Unauthorized)
 /api-docs/: Potentially interesting folder (401 Unauthorized)
"/></port>
|
||||
</script></port>
|
||||
</ports>
|
||||
<times srtt="14848" rttvar="14848" to="100000"/>
|
||||
<times srtt="15281" rttvar="15281" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775390380"/>
|
||||
<taskend task="NSE" time="1775390380"/>
|
||||
<taskbegin task="NSE" time="1775390380"/>
|
||||
<taskend task="NSE" time="1775390380"/>
|
||||
<taskbegin task="NSE" time="1775390380"/>
|
||||
<taskend task="NSE" time="1775390380"/>
|
||||
<runstats><finished time="1775390380" timestr="Sun Apr 5 11:59:40 2026" summary="Nmap done at Sun Apr 5 11:59:40 2026; 1 IP address (1 host up) scanned in 575.16 seconds" elapsed="575.16" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776137732"/>
|
||||
<taskend task="NSE" time="1776137732"/>
|
||||
<taskbegin task="NSE" time="1776137732"/>
|
||||
<taskend task="NSE" time="1776137732"/>
|
||||
<taskbegin task="NSE" time="1776137732"/>
|
||||
<taskend task="NSE" time="1776137732"/>
|
||||
<runstats><finished time="1776137732" timestr="Tue Apr 14 03:35:32 2026" summary="Nmap done at Tue Apr 14 03:35:32 2026; 1 IP address (1 host up) scanned in 102.95 seconds" elapsed="102.95" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user