fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,18 +1,28 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:04:07 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/influxdb.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml influxdb.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:36:28 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/influxdb.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/influxdb.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml influxdb.lan.ddnsgeek.com
|
||||
Nmap scan report for influxdb.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.016s latency).
|
||||
Host is up, received user-set (0.018s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:04:16 UTC for 1423s
|
||||
Scanned at 2026-04-14 03:36:31 UTC for 97s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_influxdb.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/https syn-ack ttl 55
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_128 names had status 404
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| HSTS not configured in HTTPS Server
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
| ssl-cert: Subject: commonName=influxdb.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:influxdb.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -59,37 +69,54 @@ PORT STATE SERVICE REASON VERSION
|
||||
| MFlXrNJ3FArKKLMHNfPuhU+K6eoq2B0xBra4Rhho0avawUz7y6QEkCF6OtIWSCBy
|
||||
| DxHdWeF7YfmABQ==
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Sun, 05 Apr 2026 08:04:36 GMT
|
||||
| Date: Tue, 14 Apr 2026 03:36:56 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-date: Sun, 05 Apr 2026 08:04:36 GMT; -17s from local time.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=influxdb.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ http://influxdb.lan.ddnsgeek.com:443/
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-date: Tue, 14 Apr 2026 03:36:51 GMT; -4s from local time.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
@@ -110,259 +137,10 @@ PORT STATE SERVICE REASON VERSION
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-iis-webdav-vuln: Could not determine vulnerability, since root folder is password protected
|
||||
|_http-chrono: Request times for /; avg: 6444.75ms; min: 1693.69ms; max: 24941.11ms
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-enum:
|
||||
| /health/: Spring Boot Actuator endpoint
|
||||
| /healthcheck/: Spring Boot Actuator endpoint
|
||||
|_ /healthchecks/: Spring Boot Actuator endpoint
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-auth:
|
||||
| HTTP/1.1 401 Unauthorized\x0D
|
||||
|_ Server returned status 401 but no WWW-Authenticate header.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Allowed User Agents:
|
||||
| GT::WWW
|
||||
| Change in Status Code:
|
||||
| libwww: 401
|
||||
| WWW-Mechanize/1.34: 401
|
||||
| URI::Fetch: 401
|
||||
| PECL::HTTP: 401
|
||||
| PHP/: 401
|
||||
| http client: 401
|
||||
| Zend_Http_Client: 401
|
||||
| PHPCrawl: 401
|
||||
| libcurl-agent/1.0: 401
|
||||
| lwp-trivial: 401
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 401
|
||||
| Wget/1.13.4 (linux-gnu): 401
|
||||
| HTTP::Lite: 401
|
||||
| Snoopy: 401
|
||||
| Python-urllib/2.5: 401
|
||||
|_ MFC_Tear_Sample: 401
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-wordpress-enum:
|
||||
| Search limited to top 100 themes/plugins
|
||||
| themes
|
||||
| astra
|
||||
| twentyseventeen
|
||||
| twentyfifteen
|
||||
| twentynineteen
|
||||
| twentytwenty
|
||||
| twentysixteen
|
||||
| twentyfourteen
|
||||
| twentytwentyone
|
||||
| hello-elementor
|
||||
| twentythirteen
|
||||
| oceanwp
|
||||
| twentytwelve
|
||||
| storefront
|
||||
| twentyeleven
|
||||
| twentytwentytwo
|
||||
| twentyten
|
||||
| generatepress
|
||||
| twentytwentythree
|
||||
| neve
|
||||
| responsive
|
||||
| sydney
|
||||
| blocksy
|
||||
| hestia
|
||||
| customizr
|
||||
| colormag
|
||||
| kadence
|
||||
| vantage
|
||||
| hueman
|
||||
| twentytwentyfour
|
||||
| spacious
|
||||
| lightning
|
||||
| virtue
|
||||
| newsup
|
||||
| onepress
|
||||
| specia
|
||||
| ashe
|
||||
| mh-magazine-lite
|
||||
| zakra
|
||||
| sinatra
|
||||
| phlox
|
||||
| mesmerize
|
||||
| evolve
|
||||
| graphene
|
||||
| shapely
|
||||
| colibri-wp
|
||||
| sparkling
|
||||
| colorway
|
||||
| enigma
|
||||
| make
|
||||
| flash
|
||||
| customify
|
||||
| total
|
||||
| mantra
|
||||
| appointment
|
||||
| ifeature
|
||||
| inspiro
|
||||
| go
|
||||
| covernews
|
||||
| iconic-one
|
||||
| popularfx
|
||||
| minamaze
|
||||
| omega
|
||||
| twentytwentyfive
|
||||
| catch-box
|
||||
| bard
|
||||
| bizberg
|
||||
| dispatch
|
||||
| poseidon
|
||||
| page-builder-framework
|
||||
| illdy
|
||||
| coraline
|
||||
| accelerate
|
||||
| alexandria
|
||||
| pinboard
|
||||
| hemingway
|
||||
| wallstreet
|
||||
| royal-elementor-kit
|
||||
| portfolio-press
|
||||
| startkit
|
||||
| radiate
|
||||
| attitude
|
||||
| nirvana
|
||||
| arilewp
|
||||
| avril
|
||||
| custom-community
|
||||
| argent
|
||||
| blogus
|
||||
| rife-free
|
||||
| raindrops
|
||||
| activello
|
||||
| tempera
|
||||
| spicepress
|
||||
| mystique
|
||||
| estore
|
||||
| sela
|
||||
| suevafree
|
||||
| delicate
|
||||
| travelify
|
||||
| woostify
|
||||
| agama
|
||||
| plugins
|
||||
| wordpress-seo
|
||||
| elementor
|
||||
| jetpack
|
||||
| wordfence
|
||||
| woocommerce
|
||||
| contact-form-7
|
||||
| akismet
|
||||
| wpforms-lite
|
||||
| google-analytics-for-wordpress
|
||||
| google-site-kit
|
||||
| really-simple-ssl
|
||||
| all-in-one-seo-pack
|
||||
| all-in-one-wp-migration
|
||||
| updraftplus
|
||||
| seo-by-rank-math
|
||||
| optinmonster
|
||||
| litespeed-cache
|
||||
| essential-addons-for-elementor-lite
|
||||
| sg-cachepress
|
||||
| classic-editor
|
||||
| astra-sites
|
||||
| the-events-calendar
|
||||
| limit-login-attempts-reloaded
|
||||
| insert-headers-and-footers
|
||||
| wp-mail-smtp
|
||||
| mailchimp-for-wp
|
||||
| redirection
|
||||
| advanced-custom-fields
|
||||
| wp-smushit
|
||||
| wordpress-importer
|
||||
| wp-super-cache
|
||||
| w3-total-cache
|
||||
| wp-fastest-cache
|
||||
| siteorigin-panels
|
||||
| mailpoet
|
||||
| ninja-forms
|
||||
| wp-optimize
|
||||
| google-analytics-dashboard-for-wp
|
||||
| duplicator
|
||||
| instagram-feed
|
||||
| header-footer-elementor
|
||||
| premium-addons-for-elementor
|
||||
| gutenberg
|
||||
| so-widgets-bundle
|
||||
| facebook-for-woocommerce
|
||||
| nextgen-gallery
|
||||
| woocommerce-services
|
||||
| ewww-image-optimizer
|
||||
| autoptimize
|
||||
| google-sitemap-generator
|
||||
| woocommerce-gateway-stripe
|
||||
| cookie-law-info
|
||||
| duplicate-post
|
||||
| elementskit-lite
|
||||
| woocommerce-payments
|
||||
| tinymce-advanced
|
||||
| ultimate-addons-for-gutenberg
|
||||
| better-wp-security
|
||||
| google-listings-and-ads
|
||||
| mainwp-child
|
||||
| all-in-one-wp-security-and-firewall
|
||||
| cookie-notice
|
||||
| wp-statistics
|
||||
| loco-translate
|
||||
| ml-slider
|
||||
| newsletter
|
||||
| duplicate-page
|
||||
| redux-framework
|
||||
| sg-security
|
||||
| coming-soon
|
||||
| yith-woocommerce-wishlist
|
||||
| kadence-blocks
|
||||
| sucuri-scanner
|
||||
| wp-file-manager
|
||||
| wps-hide-login
|
||||
| loginizer
|
||||
| disable-comments
|
||||
| wp-google-maps
|
||||
| coblocks
|
||||
| ocean-extra
|
||||
| formidable
|
||||
| polylang
|
||||
| worker
|
||||
| shortcodes-ultimate
|
||||
| mailchimp-for-woocommerce
|
||||
| regenerate-thumbnails
|
||||
| complianz-gdpr
|
||||
| creative-mail-by-constant-contact
|
||||
| meta-box
|
||||
| user-role-editor
|
||||
| broken-link-checker
|
||||
| custom-post-type-ui
|
||||
| smart-slider-3
|
||||
| cleantalk-spam-protect
|
||||
| tablepress
|
||||
| photo-gallery
|
||||
| backwpup
|
||||
| woocommerce-paypal-payments
|
||||
| accelerated-mobile-pages
|
||||
|_ woocommerce-pdf-invoices-packing-slips
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-chrono: Request times for /; avg: 282.26ms; min: 197.22ms; max: 348.65ms
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:28:01 2026 -- 1 IP address (1 host up) scanned in 1434.42 seconds
|
||||
# Nmap done at Tue Apr 14 03:38:08 2026 -- 1 IP address (1 host up) scanned in 101.27 seconds
|
||||
Reference in new issue
Block a user