fresh autorecon run
This commit is contained in:
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -2,7 +2,7 @@
|
||||
|
||||
|
||||
|
||||
[*] http found on tcp/443.
|
||||
[*] https found on tcp/443.
|
||||
|
||||
|
||||
|
||||
@@ -3,8 +3,6 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" kuma.lan.ddnsgeek.com
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" kuma.lan.ddnsgeek.com
|
||||
|
||||
feroxbuster -u http://kuma.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
|
||||
|
||||
curl -sSikf http://kuma.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
@@ -35,9 +33,9 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
|
||||
|
||||
sslscan --show-certificate --no-colour kuma.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
ffuf -u https://kuma.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.kuma.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v https://kuma.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" kuma.lan.ddnsgeek.com
|
||||
|
||||
|
||||
```
|
||||
+1
-1
@@ -19,7 +19,7 @@
|
||||
|
||||
wpscan --url http://kuma.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
|
||||
|
||||
[*] http on tcp/443
|
||||
[*] https on tcp/443
|
||||
|
||||
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
|
||||
|
||||
|
||||
@@ -1,62 +0,0 @@
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
+28
-39
@@ -5,26 +5,18 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:04:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
adjust_timeouts2: packet supposedly had rtt of -984240 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -1004694 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -1004694 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -806844 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -806844 microseconds. Ignoring time.
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set (0.053s latency).
|
||||
Host is up, received user-set (0.039s latency).
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:04:51 UTC for 381s
|
||||
Scanned at 2026-04-14 03:42:37 UTC for 132s
|
||||
Not shown: 65533 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
443/tcp open ssl/https syn-ack ttl 53
|
||||
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -71,22 +63,19 @@ PORT STATE SERVICE REASON VERSION
|
||||
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
|
||||
| ssZpBGM=
|
||||
|_-----END CERTIFICATE-----
|
||||
| http-title: Uptime Kuma
|
||||
|_Requested resource was /dashboard
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose|router|storage-misc
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
|
||||
Device type: general purpose|router
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:6.0 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3
|
||||
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 (87%)
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (92%), Linux 5.0 - 5.14 (92%), OpenWrt 21.02 (Linux 5.4) (92%), Linux 6.0 (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.15 (89%), Linux 2.6.32 - 3.13 (87%), Linux 3.2 - 4.14 (87%), Linux 2.6.32 - 3.10 (86%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D21921%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=103%GCD=1%ISR=10A%TI=Z%TS=A)
|
||||
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB831%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
|
||||
SEQ(SP=F4%GCD=1%ISR=10F%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
|
||||
@@ -97,26 +86,26 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 6.448 days (since Sun Mar 29 21:26:28 2026)
|
||||
Uptime guess: 37.080 days (since Sun Mar 8 01:49:42 2026)
|
||||
Network Distance: 10 hops
|
||||
TCP Sequence Prediction: Difficulty=259 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=258 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 443/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.07 ms 10.216.0.161
|
||||
2 0.23 ms 10.216.35.12
|
||||
3 0.80 ms 10.216.32.2
|
||||
4 10.87 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 0.25 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
|
||||
6 1.74 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 2.57 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
|
||||
8 0.84 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 0.90 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 38.80 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
|
||||
1 0.12 ms 10.216.0.161
|
||||
2 0.43 ms 10.216.35.12
|
||||
3 0.81 ms 10.216.32.2
|
||||
4 0.43 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 0.41 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
|
||||
6 1.97 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 2.50 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
|
||||
8 0.91 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 0.82 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 44.07 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:11:13 2026 -- 1 IP address (1 host up) scanned in 394.56 seconds
|
||||
# Nmap done at Tue Apr 14 03:44:49 2026 -- 1 IP address (1 host up) scanned in 136.35 seconds
|
||||
|
||||
```
|
||||
+11
-11
@@ -5,16 +5,16 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddn
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:05:19 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:44:21 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set.
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:06:00 UTC for 1373s
|
||||
Scanned at 2026-04-14 03:44:23 UTC for 1486s
|
||||
All 100 scanned ports on kuma.lan.ddnsgeek.com (101.180.16.105) are in ignored states.
|
||||
Not shown: 100 open|filtered udp ports (no-response)
|
||||
Too many fingerprints match this host to give specific OS details
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=Y%G=N%TM=69D21D47%P=x86_64-pc-linux-gnu)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=Y%G=N%TM=69DDBDE5%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
@@ -23,18 +23,18 @@ IE(R=N)
|
||||
TRACEROUTE (using proto 1/icmp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.08 ms 10.216.0.161
|
||||
2 0.21 ms 10.216.35.11
|
||||
3 0.87 ms 10.216.32.2
|
||||
4 0.38 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 0.32 ms ae19.r01.syd01.ien.netarch.akamai.com (104.70.113.20)
|
||||
6 1.35 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 2.29 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
|
||||
2 0.19 ms 10.216.35.11
|
||||
3 0.90 ms 10.216.32.2
|
||||
4 0.58 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 0.25 ms ae19.r01.syd01.ien.netarch.akamai.com (104.70.113.20)
|
||||
6 1.71 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 1.91 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
|
||||
8 0.82 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 5.08 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
9 0.87 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 ... 30
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:28:57 2026 -- 1 IP address (1 host up) scanned in 1430.00 seconds
|
||||
# Nmap done at Tue Apr 14 04:09:09 2026 -- 1 IP address (1 host up) scanned in 1488.91 seconds
|
||||
|
||||
```
|
||||
+28
-34
@@ -5,22 +5,20 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:04:18 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:41:47 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set (0.040s latency).
|
||||
Host is up, received user-set (0.038s latency).
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:04:26 UTC for 39s
|
||||
Scanned at 2026-04-14 03:41:48 UTC for 44s
|
||||
Not shown: 998 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
443/tcp open ssl/https syn-ack ttl 53
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -67,21 +65,17 @@ PORT STATE SERVICE REASON VERSION
|
||||
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
|
||||
| ssZpBGM=
|
||||
|_-----END CERTIFICATE-----
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-title: Uptime Kuma
|
||||
|_Requested resource was /dashboard
|
||||
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose|router
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3
|
||||
Device type: general purpose|router|storage-misc
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
|
||||
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 5.0 - 5.14 (93%), Linux 4.19 (92%), OpenWrt 21.02 (Linux 5.4) (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.0 (90%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 - 4.11 (87%), Linux 3.2 - 4.14 (87%)
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 6.15 (90%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D217B1%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=105%GCD=1%ISR=101%TI=Z%TS=A)
|
||||
SEQ(SP=105%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB7A8%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
|
||||
SEQ(SP=104%GCD=1%ISR=109%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
|
||||
@@ -92,26 +86,26 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 6.443 days (since Sun Mar 29 21:26:28 2026)
|
||||
Uptime guess: 37.078 days (since Sun Mar 8 01:49:42 2026)
|
||||
Network Distance: 10 hops
|
||||
TCP Sequence Prediction: Difficulty=261 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=260 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 443/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.12 ms 10.216.0.161
|
||||
2 0.25 ms 10.216.35.11
|
||||
3 0.91 ms 10.216.32.2
|
||||
4 0.93 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 0.27 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
|
||||
6 1.66 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 1.79 ms bundle-ether50.hay-core30.sydney.telstra.net (203.50.12.130)
|
||||
8 0.96 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 0.99 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 41.72 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
|
||||
1 0.32 ms 10.216.0.161
|
||||
2 0.35 ms 10.216.35.12
|
||||
3 0.85 ms 10.216.32.1
|
||||
4 0.38 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 0.36 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
|
||||
6 1.45 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 1.05 ms bundle-ether50.hay-core30.sydney.telstra.net (203.50.12.130)
|
||||
8 0.80 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 0.89 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 33.83 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:05:05 2026 -- 1 IP address (1 host up) scanned in 53.02 seconds
|
||||
# Nmap done at Tue Apr 14 03:42:32 2026 -- 1 IP address (1 host up) scanned in 45.09 seconds
|
||||
|
||||
```
|
||||
-20
@@ -1,20 +0,0 @@
|
||||
```bash
|
||||
curl -sSikf https://kuma.lan.ddnsgeek.com:443/robots.txt
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt):
|
||||
|
||||
```
|
||||
HTTP/2 200
|
||||
content-type: text/plain; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:05:10 GMT
|
||||
etag: W/"19-2NTlN/votVlrfMtAaltZ799LfR0"
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 25
|
||||
|
||||
User-agent: *
|
||||
Disallow: /
|
||||
```
|
||||
-21
@@ -1,21 +0,0 @@
|
||||
```bash
|
||||
curl -sSik https://kuma.lan.ddnsgeek.com:443/
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html):
|
||||
|
||||
```
|
||||
HTTP/2 302
|
||||
content-type: text/plain; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:05:10 GMT
|
||||
location: /dashboard
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 32
|
||||
|
||||
Found. Redirecting to /dashboard
|
||||
|
||||
```
|
||||
-310
@@ -1,310 +0,0 @@
|
||||
```bash
|
||||
feroxbuster -u https://kuma.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt):
|
||||
|
||||
```
|
||||
Configuration {
|
||||
kind: "configuration",
|
||||
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
|
||||
config: "/etc/feroxbuster/ferox-config.toml",
|
||||
proxy: "",
|
||||
replay_proxy: "",
|
||||
server_certs: [],
|
||||
client_cert: "",
|
||||
client_key: "",
|
||||
target_url: "https://kuma.lan.ddnsgeek.com/",
|
||||
status_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
replay_codes: [
|
||||
100,
|
||||
101,
|
||||
102,
|
||||
200,
|
||||
201,
|
||||
202,
|
||||
203,
|
||||
204,
|
||||
205,
|
||||
206,
|
||||
207,
|
||||
208,
|
||||
226,
|
||||
300,
|
||||
301,
|
||||
302,
|
||||
303,
|
||||
304,
|
||||
305,
|
||||
307,
|
||||
308,
|
||||
400,
|
||||
401,
|
||||
402,
|
||||
403,
|
||||
404,
|
||||
405,
|
||||
406,
|
||||
407,
|
||||
408,
|
||||
409,
|
||||
410,
|
||||
411,
|
||||
412,
|
||||
413,
|
||||
414,
|
||||
415,
|
||||
416,
|
||||
417,
|
||||
418,
|
||||
421,
|
||||
422,
|
||||
423,
|
||||
424,
|
||||
426,
|
||||
428,
|
||||
429,
|
||||
431,
|
||||
451,
|
||||
500,
|
||||
501,
|
||||
502,
|
||||
503,
|
||||
504,
|
||||
505,
|
||||
506,
|
||||
507,
|
||||
508,
|
||||
510,
|
||||
511,
|
||||
103,
|
||||
425,
|
||||
],
|
||||
filter_status: [],
|
||||
client: Client {
|
||||
accepts: Accepts,
|
||||
proxies: [
|
||||
Matcher,
|
||||
],
|
||||
redirect_policy: "Policy(Custom)",
|
||||
referer: true,
|
||||
default_headers: {
|
||||
"accept": "*/*",
|
||||
"user-agent": "feroxbuster/2.13.1",
|
||||
},
|
||||
reqwest::config::RequestTimeout: 7s,
|
||||
},
|
||||
replay_client: None,
|
||||
threads: 10,
|
||||
timeout: 7,
|
||||
verbosity: 1,
|
||||
silent: false,
|
||||
quiet: true,
|
||||
output_level: Quiet,
|
||||
auto_bail: false,
|
||||
auto_tune: false,
|
||||
requester_policy: Default,
|
||||
json: false,
|
||||
output: "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt",
|
||||
debug_log: "",
|
||||
user_agent: "feroxbuster/2.13.1",
|
||||
random_agent: false,
|
||||
redirects: true,
|
||||
insecure: true,
|
||||
extensions: [
|
||||
"txt",
|
||||
"html",
|
||||
"php",
|
||||
"asp",
|
||||
"aspx",
|
||||
"jsp",
|
||||
],
|
||||
methods: [
|
||||
"GET",
|
||||
],
|
||||
data: [],
|
||||
headers: {},
|
||||
queries: [],
|
||||
no_recursion: true,
|
||||
extract_links: true,
|
||||
add_slash: false,
|
||||
stdin: false,
|
||||
cached_stdin: [],
|
||||
depth: 4,
|
||||
scan_limit: 0,
|
||||
parallel: 0,
|
||||
rate_limit: 0,
|
||||
filter_size: [],
|
||||
filter_line_count: [],
|
||||
filter_word_count: [],
|
||||
filter_regex: [],
|
||||
dont_filter: false,
|
||||
resumed: false,
|
||||
resume_from: "",
|
||||
save_state: true,
|
||||
time_limit: "",
|
||||
filter_similar: [],
|
||||
url_denylist: [],
|
||||
regex_denylist: [],
|
||||
scope: [
|
||||
Url {
|
||||
scheme: "https",
|
||||
cannot_be_a_base: false,
|
||||
username: "",
|
||||
password: None,
|
||||
host: Some(
|
||||
Domain(
|
||||
"kuma.lan.ddnsgeek.com",
|
||||
),
|
||||
),
|
||||
port: None,
|
||||
path: "/",
|
||||
query: None,
|
||||
fragment: None,
|
||||
},
|
||||
],
|
||||
collect_extensions: false,
|
||||
dont_collect: [
|
||||
"woff2",
|
||||
"woff",
|
||||
"ttf",
|
||||
"otf",
|
||||
"eot",
|
||||
"tif",
|
||||
"tiff",
|
||||
"ico",
|
||||
"cur",
|
||||
"bmp",
|
||||
"webp",
|
||||
"svg",
|
||||
"png",
|
||||
"jpg",
|
||||
"jpeg",
|
||||
"jfif",
|
||||
"gif",
|
||||
"avif",
|
||||
"apng",
|
||||
"pjpeg",
|
||||
"pjp",
|
||||
"mov",
|
||||
"wav",
|
||||
"mpg",
|
||||
"mpeg",
|
||||
"mp3",
|
||||
"mp4",
|
||||
"m4a",
|
||||
"m4p",
|
||||
"m4v",
|
||||
"ogg",
|
||||
"webm",
|
||||
"ogv",
|
||||
"oga",
|
||||
"flac",
|
||||
"aac",
|
||||
"3gp",
|
||||
"css",
|
||||
"zip",
|
||||
"xls",
|
||||
"xml",
|
||||
"gz",
|
||||
"tgz",
|
||||
],
|
||||
collect_backups: false,
|
||||
backup_extensions: [
|
||||
"~",
|
||||
".bak",
|
||||
".bak2",
|
||||
".old",
|
||||
".1",
|
||||
],
|
||||
collect_words: false,
|
||||
force_recursion: false,
|
||||
update_app: false,
|
||||
scan_dir_listings: false,
|
||||
request_file: "",
|
||||
protocol: "https",
|
||||
limit_bars: 0,
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
302 GET 1l 4w 89c https://kuma.lan.ddnsgeek.com/.well-known/change-password => https://github.com/louislam/uptime-kuma/wiki/Reset-Password-via-CLI
|
||||
200 GET 4l 33w 29264c https://kuma.lan.ddnsgeek.com/favicon.ico
|
||||
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 141c https://kuma.lan.ddnsgeek.com/api/status-page/default/manifest.json
|
||||
200 GET 9l 104w 1168c https://kuma.lan.ddnsgeek.com/icon.svg
|
||||
200 GET 1l 2912w 155329c https://kuma.lan.ddnsgeek.com/assets/polyfills-legacy-CC6RtsPR.js
|
||||
200 GET 6l 2770w 163840c https://kuma.lan.ddnsgeek.com/assets/index-BBxTfFCS.js
|
||||
200 GET 1l 4307w 196608c https://kuma.lan.ddnsgeek.com/assets/index-legacy-DAPjczQA.js
|
||||
200 GET 6l 3493w 163840c https://kuma.lan.ddnsgeek.com/assets/index-bOVKKa1O.css
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/status
|
||||
404 GET 1l 3w 15c https://kuma.lan.ddnsgeek.com/upload/
|
||||
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/metrics
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/STATUS
|
||||
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/Robots.txt
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/Status
|
||||
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/Metrics
|
||||
|
||||
```
|
||||
-56
@@ -1,56 +0,0 @@
|
||||
```bash
|
||||
curl -sSikf https://kuma.lan.ddnsgeek.com:443/.well-known/security.txt
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt):
|
||||
|
||||
```
|
||||
HTTP/2 200
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:05:09 GMT
|
||||
etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 2444
|
||||
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
|
||||
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
|
||||
<link rel="icon" type="image/svg+xml" href="/icon.svg" />
|
||||
<link rel="manifest" href="/manifest.json" />
|
||||
<meta name="theme-color" id="theme-color" content="" />
|
||||
<meta name="description" content="Uptime Kuma monitoring tool" />
|
||||
<title>Uptime Kuma</title>
|
||||
<style> .noscript-message {
|
||||
font-size: 20px;
|
||||
text-align: center;
|
||||
padding: 10px;
|
||||
max-width: 500px;
|
||||
margin: 0 auto;
|
||||
}
|
||||
</style>
|
||||
<script type="module" crossorigin src="/assets/index-BBxTfFCS.js"></script>
|
||||
<link rel="stylesheet" crossorigin href="/assets/index-bOVKKa1O.css">
|
||||
<script type="module">import.meta.url;import("_").catch(()=>1);async function* g(){};if(location.protocol!="file:"){window.__vite_is_modern_browser=true}</script>
|
||||
<script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy chunks, syntax error above and the same error below should be ignored");var e=document.getElementById("vite-legacy-polyfill"),n=document.createElement("script");n.src=e.src,n.onload=function(){System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))},document.body.appendChild(n)}();</script>
|
||||
</head>
|
||||
<body>
|
||||
<noscript>
|
||||
<div class="noscript-message">
|
||||
Sorry, you don't seem to have JavaScript enabled or your browser
|
||||
doesn't support it.<br />This website requires JavaScript to function.
|
||||
Please enable JavaScript in your browser settings to continue.
|
||||
</div>
|
||||
</noscript>
|
||||
<div id="app"></div>
|
||||
<script nomodule>!function(){var e=document,t=e.createElement("script");if(!("noModule"in t)&&"onbeforeload"in t){var n=!1;e.addEventListener("beforeload",(function(e){if(e.target===t)n=!0;else if(!e.target.hasAttribute("nomodule")||!n)return;e.preventDefault()}),!0),t.type="module",t.src=".",e.head.appendChild(t),t.remove()}}();</script>
|
||||
<script nomodule crossorigin id="vite-legacy-polyfill" src="/assets/polyfills-legacy-CC6RtsPR.js"></script>
|
||||
<script nomodule crossorigin id="vite-legacy-entry" data-src="/assets/index-legacy-DAPjczQA.js">System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))</script>
|
||||
</body>
|
||||
</html>
|
||||
```
|
||||
-277
@@ -1,277 +0,0 @@
|
||||
```bash
|
||||
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" kuma.lan.ddnsgeek.com
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:05:15 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set (0.035s latency).
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:05:54 UTC for 467s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: /dashboard
|
||||
| Allowed User Agents:
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
| WWW-Mechanize/1.34
|
||||
| Change in Status Code:
|
||||
| PHP/: 404
|
||||
| PHPCrawl: 404
|
||||
|_ Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
|
||||
| http-drupal-enum:
|
||||
| Modules:
|
||||
| views
|
||||
| token
|
||||
| ctools
|
||||
| pathauto
|
||||
| libraries
|
||||
| entity
|
||||
| admin_menu
|
||||
| date
|
||||
| imce
|
||||
| jquery_update
|
||||
| ckeditor
|
||||
| wysiwyg
|
||||
| link
|
||||
| webform
|
||||
| backup_migrate
|
||||
| rules
|
||||
| module_filter
|
||||
| google_analytics
|
||||
| views_slideshow
|
||||
| features
|
||||
| xmlsitemap
|
||||
| metatag
|
||||
| captcha
|
||||
| colorbox
|
||||
| media
|
||||
| entityreference
|
||||
| panels
|
||||
| field_group
|
||||
| devel
|
||||
| views_bulk_operations
|
||||
| menu_block
|
||||
| transliteration
|
||||
| l10n_update
|
||||
| imce_wysiwyg
|
||||
| globalredirect
|
||||
| variable
|
||||
| i18n
|
||||
| context
|
||||
| imageapi
|
||||
| advanced_help
|
||||
| filefield
|
||||
| email
|
||||
| page_title
|
||||
| lightbox2
|
||||
| ds
|
||||
| strongarm
|
||||
| superfish
|
||||
| imagefield
|
||||
| calendar
|
||||
| imagecache
|
||||
| references
|
||||
| field_collection
|
||||
| block_class
|
||||
| job_scheduler
|
||||
| menu_attributes
|
||||
| redirect
|
||||
| addressfield
|
||||
| mailsystem
|
||||
| nice_menus
|
||||
| diff
|
||||
| flexslider
|
||||
| taxonomy_menu
|
||||
| file_entity
|
||||
| feeds
|
||||
| media_youtube
|
||||
| node_clone
|
||||
| admin_views
|
||||
| smtp
|
||||
| special_menu_items
|
||||
| auto_nodetitle
|
||||
| jquery_ui
|
||||
| insert
|
||||
| cck
|
||||
| quicktabs
|
||||
| mimemail
|
||||
| views_php
|
||||
| content_access
|
||||
| jcarousel
|
||||
| print
|
||||
| plupload
|
||||
| votingapi
|
||||
| poormanscron
|
||||
| simplenews
|
||||
| filefield_sources
|
||||
| extlink
|
||||
| honeypot
|
||||
| facetapi
|
||||
| logintoboggan
|
||||
| search_api
|
||||
| uuid
|
||||
| commerce
|
||||
| custom_breadcrumbs
|
||||
| views_data_export
|
||||
| oauth
|
||||
| better_formats
|
||||
| site_verify
|
||||
| location
|
||||
| fontyourface
|
||||
| masquerade
|
||||
|_ imce_mkdir
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /
|
||||
| Other: 1; json: 1; png: 1; svg: 1
|
||||
| /assets/
|
||||
| css: 1; js: 2
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /assets/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1; css: 1; js: 2; json: 1; png: 1; svg: 1
|
||||
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-errors: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
|_http-trane-info: Problem with XML parsing of /evox/about
|
||||
|_http-php-version: Credits query returned unknown hash 3b299781d582f5b522a0a6f14dfd9268
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-date: Sun, 05 Apr 2026 08:06:30 GMT; -1s from local time.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-vhosts:
|
||||
|_128 names had status 404
|
||||
|_http-malware-host: Host appears to be clean
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|
||||
| compressors:
|
||||
| NULL
|
||||
| cipher preference: server
|
||||
| warnings:
|
||||
| Key exchange (secp256r1) of lower strength than certificate key
|
||||
| TLSv1.3:
|
||||
| ciphers:
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|
||||
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-headers:
|
||||
| Content-Length: 2444
|
||||
| Content-Type: text/html; charset=utf-8
|
||||
| Date: Sun, 05 Apr 2026 08:07:06 GMT
|
||||
| Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: HEAD)
|
||||
|_http-chrono: Request times for /; avg: 33701.34ms; min: 1061.83ms; max: 134159.26ms
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
| http-title: Uptime Kuma
|
||||
|_Requested resource was /dashboard
|
||||
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-04-01T19:44:43
|
||||
| Not valid after: 2026-06-30T19:44:42
|
||||
| MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
|
||||
| SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
|
||||
| SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD
|
||||
| ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
|
||||
| ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT
|
||||
| pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR
|
||||
| WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z
|
||||
| lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy
|
||||
| 2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF
|
||||
| MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+
|
||||
| BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp
|
||||
| 5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr
|
||||
| NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D
|
||||
| XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx
|
||||
| JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC
|
||||
| IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
|
||||
| EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY
|
||||
| MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
|
||||
| BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s
|
||||
| YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw
|
||||
| IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5
|
||||
| AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA
|
||||
| AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO
|
||||
| AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/
|
||||
| 4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh
|
||||
| 2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI
|
||||
| 3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L
|
||||
| 2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P
|
||||
| DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG
|
||||
| HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU
|
||||
| 6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc
|
||||
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
|
||||
| ssZpBGM=
|
||||
|_-----END CERTIFICATE-----
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_kuma.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:13:42 2026 -- 1 IP address (1 host up) scanned in 509.39 seconds
|
||||
|
||||
```
|
||||
-201
@@ -1,201 +0,0 @@
|
||||
```bash
|
||||
sslscan --show-certificate --no-colour kuma.lan.ddnsgeek.com:443 2>&1
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html):
|
||||
|
||||
```
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
|
||||
Connected to 101.180.16.105
|
||||
|
||||
Testing SSL server kuma.lan.ddnsgeek.com on port 443 using SNI name kuma.lan.ddnsgeek.com
|
||||
|
||||
SSL/TLS Protocols:
|
||||
SSLv2 disabled
|
||||
SSLv3 disabled
|
||||
TLSv1.0 disabled
|
||||
TLSv1.1 disabled
|
||||
TLSv1.2 enabled
|
||||
TLSv1.3 enabled
|
||||
|
||||
TLS Fallback SCSV:
|
||||
Server supports TLS Fallback SCSV
|
||||
|
||||
TLS renegotiation:
|
||||
Session renegotiation not supported
|
||||
|
||||
TLS Compression:
|
||||
Compression disabled
|
||||
|
||||
Heartbleed:
|
||||
TLSv1.3 not vulnerable to heartbleed
|
||||
TLSv1.2 not vulnerable to heartbleed
|
||||
|
||||
Supported Server Cipher(s):
|
||||
Preferred TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
|
||||
Accepted TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
|
||||
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
|
||||
Preferred TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
|
||||
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
|
||||
|
||||
Server Key Exchange Group(s):
|
||||
TLSv1.3 128 bits secp256r1 (NIST P-256)
|
||||
TLSv1.3 192 bits secp384r1 (NIST P-384)
|
||||
TLSv1.3 260 bits secp521r1 (NIST P-521)
|
||||
TLSv1.3 128 bits x25519
|
||||
TLSv1.2 128 bits secp256r1 (NIST P-256)
|
||||
TLSv1.2 192 bits secp384r1 (NIST P-384)
|
||||
TLSv1.2 260 bits secp521r1 (NIST P-521)
|
||||
TLSv1.2 128 bits x25519
|
||||
|
||||
SSL Certificate:
|
||||
Certificate blob:
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA
|
||||
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD
|
||||
ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
|
||||
ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT
|
||||
pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR
|
||||
WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z
|
||||
lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy
|
||||
2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF
|
||||
MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+
|
||||
BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp
|
||||
5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr
|
||||
NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D
|
||||
XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx
|
||||
JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC
|
||||
IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
|
||||
EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY
|
||||
MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
|
||||
BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s
|
||||
YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw
|
||||
IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5
|
||||
AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA
|
||||
AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO
|
||||
AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/
|
||||
4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh
|
||||
2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI
|
||||
3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L
|
||||
2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P
|
||||
DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG
|
||||
HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU
|
||||
6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc
|
||||
nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
|
||||
ssZpBGM=
|
||||
-----END CERTIFICATE-----
|
||||
Version: 2
|
||||
Serial Number: 05:86:0a:1e:7a:66:3c:3a:54:3c:98:da:38:f2:bd:dd:f4:87
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
Not valid before: Apr 1 19:44:43 2026 GMT
|
||||
Not valid after: Jun 30 19:44:42 2026 GMT
|
||||
Subject: /CN=kuma.lan.ddnsgeek.com
|
||||
Public Key Algorithm: NULL
|
||||
RSA Public Key: (4096 bit)
|
||||
RSA Public-Key: (4096 bit)
|
||||
Modulus:
|
||||
00:b6:6c:dc:b9:42:36:84:e7:62:86:94:70:f2:8a:
|
||||
08:30:32:6d:18:51:4d:52:94:05:2b:1f:50:30:9f:
|
||||
77:9f:2e:79:d4:d8:22:ae:17:f3:53:a4:b3:f6:6a:
|
||||
19:2d:ec:9b:3f:6d:44:52:1c:98:08:48:8e:c3:f2:
|
||||
d4:37:b9:3d:7e:0f:b6:59:8e:58:d8:91:a5:d0:85:
|
||||
da:cb:45:d0:92:34:23:43:8b:77:26:04:47:11:59:
|
||||
40:fc:72:74:b6:8d:76:60:c1:5e:82:f6:c5:36:9d:
|
||||
78:31:88:33:44:9c:5c:b7:00:e2:69:a6:e5:28:e9:
|
||||
35:36:7a:2a:5f:60:c1:f0:b3:3f:85:23:3f:e0:84:
|
||||
3d:d9:95:37:fe:4f:c1:ce:ef:47:06:40:b0:51:40:
|
||||
ff:f8:72:ed:4a:73:9b:0b:fb:10:ce:93:cf:12:07:
|
||||
ff:75:8f:a1:5a:a5:49:97:ae:c2:da:21:a2:de:5f:
|
||||
b1:10:9b:b6:32:da:90:64:69:77:bf:e9:4c:73:36:
|
||||
e0:80:00:fa:b1:b6:4b:8c:3e:2f:53:72:69:bb:5f:
|
||||
d7:ea:a3:71:2b:31:c7:3c:06:d6:6a:78:67:29:d9:
|
||||
9c:26:d6:c8:37:a5:88:c5:32:34:cb:4e:c1:80:73:
|
||||
17:cc:05:6b:d0:8b:c9:e1:43:dd:80:87:e5:66:ec:
|
||||
ed:12:75:d5:04:14:d4:6f:a0:e8:a8:1b:d7:51:df:
|
||||
60:be:bf:ac:34:13:4d:38:52:9b:7e:05:8d:14:5a:
|
||||
df:44:81:4a:c2:e0:8f:1a:c0:60:6b:2f:8f:c4:e6:
|
||||
a8:27:97:a1:e2:e6:1a:36:43:a3:f1:db:cc:9b:22:
|
||||
ea:12:43:b6:9e:26:d4:bc:83:99:c1:8c:2c:e9:e6:
|
||||
7f:35:51:c4:ed:0f:df:25:85:92:96:45:12:4e:6c:
|
||||
53:e1:f5:83:ff:97:16:33:e3:51:92:22:b4:60:06:
|
||||
0e:8f:b7:15:3f:d6:72:74:ad:96:6f:7f:08:ae:8a:
|
||||
0c:6b:35:da:0c:a3:9e:b5:82:16:b2:77:ad:3b:19:
|
||||
56:74:24:f2:af:63:bb:1b:c4:49:09:e9:74:38:e4:
|
||||
4d:8c:3f:92:85:f0:46:8f:76:f7:3e:57:6a:cf:f4:
|
||||
38:f2:f3:4f:83:5d:4a:b9:16:c9:a1:33:e6:0a:d4:
|
||||
57:c2:c3:a4:bd:70:de:c9:44:3f:45:d7:06:58:99:
|
||||
d1:ed:1d:d4:bb:36:6a:5a:83:6f:fc:c3:8d:94:25:
|
||||
08:0d:f7:75:ac:7e:51:31:24:a7:4d:3a:e4:bd:25:
|
||||
68:fd:e6:3f:38:5a:62:e4:81:6b:a0:5a:36:5c:ae:
|
||||
09:35:d4:f2:fa:5a:43:7a:71:e7:03:b7:cf:a3:6e:
|
||||
65:a3:bd
|
||||
Exponent: 65537 (0x10001)
|
||||
X509v3 Extensions:
|
||||
X509v3 Key Usage: critical
|
||||
Digital Signature, Key Encipherment
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication
|
||||
X509v3 Basic Constraints: critical
|
||||
CA:FALSE
|
||||
X509v3 Subject Key Identifier:
|
||||
55:DE:46:2F:60:4E:32:F7:75:78:FC:50:22:49:41:E2:7D:D1:47:9E
|
||||
X509v3 Authority Key Identifier:
|
||||
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
|
||||
Authority Information Access:
|
||||
CA Issuers - URI:http://r13.i.lencr.org/
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:kuma.lan.ddnsgeek.com
|
||||
X509v3 Certificate Policies:
|
||||
Policy: 2.23.140.1.2.1
|
||||
X509v3 CRL Distribution Points:
|
||||
Full Name:
|
||||
URI:http://r13.c.lencr.org/8.crl
|
||||
|
||||
CT Precertificate SCTs:
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:
|
||||
C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA
|
||||
Timestamp : Apr 1 20:43:14.100 2026 GMT
|
||||
Extensions: none
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:44:02:20:58:30:7D:E4:61:38:D6:FA:4F:92:CE:1B:
|
||||
96:B7:08:49:EF:E6:E5:3D:1A:01:D1:7A:ED:C5:80:26:
|
||||
CD:5A:F6:8E:02:20:78:AA:85:22:93:AA:25:13:A6:BB:
|
||||
5E:0C:8C:CA:64:6D:A3:0D:E9:4F:E6:F9:D6:9F:23:76:
|
||||
DF:81:6B:1B:30:3C
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
|
||||
D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
|
||||
Timestamp : Apr 1 20:43:14.497 2026 GMT
|
||||
Extensions: 00:00:05:00:05:2B:73:C8
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:44:02:20:21:D8:AA:E2:2D:C4:AC:03:3B:C0:AA:BB:
|
||||
9C:5F:31:D2:AD:98:1F:15:FE:6D:83:07:52:01:80:5B:
|
||||
B1:44:31:80:02:20:32:14:CA:70:4A:4A:BB:7D:5C:BD:
|
||||
A6:39:AE:31:08:DC:24:62:48:3D:33:44:3A:73:D2:6B:
|
||||
91:DC:40:F4:56:2D
|
||||
Verify m:
|
||||
unable to get local issuer certificate
|
||||
|
||||
SSL Certificate:
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
RSA Key Strength: 4096
|
||||
|
||||
Subject: kuma.lan.ddnsgeek.com
|
||||
Altnames: DNS:kuma.lan.ddnsgeek.com
|
||||
Issuer: R13
|
||||
|
||||
Not valid before: Apr 1 19:44:43 2026 GMT
|
||||
Not valid after: Jun 30 19:44:42 2026 GMT
|
||||
|
||||
|
||||
```
|
||||
-9
@@ -1,9 +0,0 @@
|
||||
```bash
|
||||
ffuf -u https://kuma.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.kuma.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt):
|
||||
|
||||
```
|
||||
|
||||
```
|
||||
-154
@@ -1,154 +0,0 @@
|
||||
```bash
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://kuma.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
|
||||
|
||||
```
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 101.180.16.105
|
||||
+ Target Hostname: kuma.lan.ddnsgeek.com
|
||||
+ Target Port: 443
|
||||
---------------------------------------------------------------------------
|
||||
+ SSL Info: Subject: /CN=kuma.lan.ddnsgeek.com
|
||||
CN: kuma.lan.ddnsgeek.com
|
||||
SAN: kuma.lan.ddnsgeek.com
|
||||
Ciphers: TLS_CHACHA20_POLY1305_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 08:06:30 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 79 requests (~1% complete, ~1.8 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 81 requests (~1% complete, ~1.8 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 83 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 85 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 87 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 89 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 91 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 93 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 95 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 97 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 99 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 101 requests (~1% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 103 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 105 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 107 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 109 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 111 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 113 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 115 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 117 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 119 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 121 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 123 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 125 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 127 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 129 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 131 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 133 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 135 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 137 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 139 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ Scan terminated: 50 errors and 0 items reported on the remote host
|
||||
+ End Time: 2026-04-05 08:07:23 (GMT0) (53 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
```
|
||||
-133
@@ -1,133 +0,0 @@
|
||||
```bash
|
||||
whatweb --color=never --no-errors -a 3 -v https://kuma.lan.ddnsgeek.com:443 2>&1
|
||||
```
|
||||
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt):
|
||||
|
||||
```
|
||||
WhatWeb report for https://kuma.lan.ddnsgeek.com:443
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 101.180.16.105
|
||||
Country : AUSTRALIA, AU
|
||||
|
||||
Summary : RedirectLocation[/dashboard], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : /dashboard (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 32
|
||||
Content-Type: text/plain; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 08:07:00 GMT
|
||||
Location: /dashboard
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
Vary: Accept
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://kuma.lan.ddnsgeek.com/dashboard
|
||||
Status : 200 OK
|
||||
Title : Uptime Kuma
|
||||
IP : 101.180.16.105
|
||||
Country : AUSTRALIA, AU
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Length: 2444
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 08:07:15 GMT
|
||||
Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
|
||||
```
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://kuma.lan.ddnsgeek.com:80/robots.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://kuma.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 08:05:08 GMT
|
||||
Date: Tue, 14 Apr 2026 03:42:33 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSik http://kuma.lan.ddnsgeek.com:80/
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://kuma.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:05:08 GMT
|
||||
Date: Tue, 14 Apr 2026 03:42:33 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
-40
@@ -290,45 +290,5 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
302 GET 1l 4w 89c https://kuma.lan.ddnsgeek.com/.well-known/change-password => https://github.com/louislam/uptime-kuma/wiki/Reset-Password-via-CLI
|
||||
200 GET 4l 33w 29264c https://kuma.lan.ddnsgeek.com/favicon.ico
|
||||
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 141c https://kuma.lan.ddnsgeek.com/api/status-page/default/manifest.json
|
||||
200 GET 9l 104w 1168c https://kuma.lan.ddnsgeek.com/icon.svg
|
||||
200 GET 6l 2252w 131072c https://kuma.lan.ddnsgeek.com/assets/index-BBxTfFCS.js
|
||||
200 GET 1l 2817w 114688c https://kuma.lan.ddnsgeek.com/assets/index-legacy-DAPjczQA.js
|
||||
200 GET 6l 4304w 229376c https://kuma.lan.ddnsgeek.com/assets/index-bOVKKa1O.css
|
||||
200 GET 1l 2525w 131072c https://kuma.lan.ddnsgeek.com/assets/polyfills-legacy-CC6RtsPR.js
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/status
|
||||
404 GET 1l 3w 15c https://kuma.lan.ddnsgeek.com/upload/
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[ => https://kuma.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/] => https://kuma.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.txt => https://kuma.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/].txt => https://kuma.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.html => https://kuma.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/].html => https://kuma.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.php => https://kuma.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.asp => https://kuma.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.aspx => https://kuma.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.jsp => https://kuma.lan.ddnsgeek.com/[.jsp
|
||||
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/metrics
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain] => https://kuma.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].txt => https://kuma.lan.ddnsgeek.com/plain].txt
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].html => https://kuma.lan.ddnsgeek.com/plain].html
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].php => https://kuma.lan.ddnsgeek.com/plain].php
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].asp => https://kuma.lan.ddnsgeek.com/plain].asp
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].aspx => https://kuma.lan.ddnsgeek.com/plain].aspx
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].jsp => https://kuma.lan.ddnsgeek.com/plain].jsp
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote] => https://kuma.lan.ddnsgeek.com/quote]
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].txt => https://kuma.lan.ddnsgeek.com/quote].txt
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].html => https://kuma.lan.ddnsgeek.com/quote].html
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].php => https://kuma.lan.ddnsgeek.com/quote].php
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].asp => https://kuma.lan.ddnsgeek.com/quote].asp
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].aspx => https://kuma.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].jsp => https://kuma.lan.ddnsgeek.com/quote].jsp
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/STATUS
|
||||
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/Robots.txt
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/Status
|
||||
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/Metrics
|
||||
|
||||
```
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://kuma.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://kuma.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 08:05:08 GMT
|
||||
Date: Tue, 14 Apr 2026 03:42:33 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+33
-33
@@ -5,20 +5,28 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:05:09 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:42:33 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set (0.042s latency).
|
||||
Host is up, received user-set (0.030s latency).
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:05:50 UTC for 797s
|
||||
Scanned at 2026-04-14 03:42:36 UTC for 207s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-chrono: Request times for /; avg: 1116.60ms; min: 752.39ms; max: 1373.17ms
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-date: Tue, 14 Apr 2026 03:42:49 GMT; -1s from local time.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-chrono: Request times for /; avg: 339.90ms; min: 222.68ms; max: 427.92ms
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Redirected To: /dashboard
|
||||
| Status for browser useragent: false
|
||||
| Redirected To: https://kuma.lan.ddnsgeek.com/
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
@@ -37,19 +45,21 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-headers:
|
||||
| Location: https://kuma.lan.ddnsgeek.com/
|
||||
| Date: Tue, 14 Apr 2026 03:42:52 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-date: Sun, 05 Apr 2026 08:06:35 GMT; -5s from local time.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
@@ -57,24 +67,14 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-headers:
|
||||
| Location: https://kuma.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 08:06:53 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:19:08 2026 -- 1 IP address (1 host up) scanned in 840.61 seconds
|
||||
# Nmap done at Tue Apr 14 03:46:32 2026 -- 1 IP address (1 host up) scanned in 239.03 seconds
|
||||
|
||||
```
|
||||
+84798
-30196
File diff suppressed because it is too large.
Load diff
+23
-4
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://kuma.lan.ddnsgeek.c
|
||||
[/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://kuma.lan.ddnsgeek.c
|
||||
+ Target Hostname: kuma.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 08:06:25 (GMT0)
|
||||
+ Start Time: 2026-04-14 03:42:40 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7900 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 08:47:07 (GMT0) (2442 seconds)
|
||||
+ End Time: 2026-04-14 04:08:35 (GMT0) (1555 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
|
||||
+1
-124
@@ -23,133 +23,10 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://kuma.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:06:59 GMT
|
||||
Date: Tue, 14 Apr 2026 03:42:46 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://kuma.lan.ddnsgeek.com/
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 101.180.16.105
|
||||
Country : AUSTRALIA, AU
|
||||
|
||||
Summary : RedirectLocation[/dashboard], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : /dashboard (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 32
|
||||
Content-Type: text/plain; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 08:07:14 GMT
|
||||
Location: /dashboard
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
Vary: Accept
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://kuma.lan.ddnsgeek.com/dashboard
|
||||
Status : 200 OK
|
||||
Title : Uptime Kuma
|
||||
IP : 101.180.16.105
|
||||
Country : AUSTRALIA, AU
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Length: 2444
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 08:07:30 GMT
|
||||
Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
|
||||
```
|
||||
@@ -2,8 +2,6 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" kuma.lan.ddnsgeek.com
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" kuma.lan.ddnsgeek.com
|
||||
|
||||
feroxbuster -u http://kuma.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
|
||||
|
||||
curl -sSikf http://kuma.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
@@ -34,7 +32,7 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
|
||||
|
||||
sslscan --show-certificate --no-colour kuma.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
ffuf -u https://kuma.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.kuma.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_kuma.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v https://kuma.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" kuma.lan.ddnsgeek.com
|
||||
|
||||
@@ -1,30 +0,0 @@
|
||||
{
|
||||
"host": "kuma.lan.ddnsgeek.com",
|
||||
"generated_at": "2026-04-07T03:49:38.723646+00:00",
|
||||
"required_reproduction_step_before_ticket": "Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.",
|
||||
"findings": [
|
||||
{
|
||||
"host": "kuma.lan.ddnsgeek.com",
|
||||
"cve": "CVE-2017-9798",
|
||||
"affected_host": "kuma.lan.ddnsgeek.com",
|
||||
"endpoint": "unknown",
|
||||
"product_version_evidence": [
|
||||
"http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)",
|
||||
"http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)",
|
||||
"ssl/http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)",
|
||||
"ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)"
|
||||
],
|
||||
"exploit_precondition": "Target must run Apache HTTP Server with mod_http2 and be susceptible to OptionBleed conditions.",
|
||||
"reproducibility": "not-reproduced",
|
||||
"disposition": "needs-manual-test",
|
||||
"disposition_rationale": "Signature-based identification only; exploitability depends on module/configuration and requires targeted validation.",
|
||||
"required_reproduction_step_before_ticket": "Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient.",
|
||||
"evidence_sources": [
|
||||
{
|
||||
"file": "results/kuma.lan.ddnsgeek.com/scans/_patterns.log",
|
||||
"match_count": 31
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
@@ -1,8 +0,0 @@
|
||||
# CVE triage sheet - kuma.lan.ddnsgeek.com
|
||||
|
||||
Generated (UTC): 2026-04-07T03:49:38.723646+00:00
|
||||
|
||||
| CVE | Affected host | Endpoint | Product/version evidence | Exploit precondition | Reproducibility | Disposition |
|
||||
|---|---|---|---|---|---|---|
|
||||
| CVE-2017-9798 | kuma.lan.ddnsgeek.com | `unknown` | http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API); http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API) | Target must run Apache HTTP Server with mod_http2 and be susceptible to OptionBleed conditions. | not-reproduced | **needs-manual-test** |
|
||||
| | | | | | | Required reproduction gate: Before creating a ticket, reproduce vulnerable behavior directly (e.g., crafted request causing data exposure, traversal read, or exploitable crash) and attach request/response proof. Banner or script signature matches alone are insufficient. |
|
||||
@@ -1,23 +1,15 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:04:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
adjust_timeouts2: packet supposedly had rtt of -984240 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -1004694 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -1004694 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -806844 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -806844 microseconds. Ignoring time.
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set (0.053s latency).
|
||||
Host is up, received user-set (0.039s latency).
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:04:51 UTC for 381s
|
||||
Scanned at 2026-04-14 03:42:37 UTC for 132s
|
||||
Not shown: 65533 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
443/tcp open ssl/https syn-ack ttl 53
|
||||
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -64,22 +56,19 @@ PORT STATE SERVICE REASON VERSION
|
||||
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
|
||||
| ssZpBGM=
|
||||
|_-----END CERTIFICATE-----
|
||||
| http-title: Uptime Kuma
|
||||
|_Requested resource was /dashboard
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose|router|storage-misc
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
|
||||
Device type: general purpose|router
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:6.0 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3
|
||||
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 (87%)
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (92%), Linux 5.0 - 5.14 (92%), OpenWrt 21.02 (Linux 5.4) (92%), Linux 6.0 (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.15 (89%), Linux 2.6.32 - 3.13 (87%), Linux 3.2 - 4.14 (87%), Linux 2.6.32 - 3.10 (86%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D21921%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=103%GCD=1%ISR=10A%TI=Z%TS=A)
|
||||
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB831%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
|
||||
SEQ(SP=F4%GCD=1%ISR=10F%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
|
||||
@@ -90,24 +79,24 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 6.448 days (since Sun Mar 29 21:26:28 2026)
|
||||
Uptime guess: 37.080 days (since Sun Mar 8 01:49:42 2026)
|
||||
Network Distance: 10 hops
|
||||
TCP Sequence Prediction: Difficulty=259 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=258 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 443/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.07 ms 10.216.0.161
|
||||
2 0.23 ms 10.216.35.12
|
||||
3 0.80 ms 10.216.32.2
|
||||
4 10.87 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 0.25 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
|
||||
6 1.74 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 2.57 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
|
||||
8 0.84 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 0.90 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 38.80 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
|
||||
1 0.12 ms 10.216.0.161
|
||||
2 0.43 ms 10.216.35.12
|
||||
3 0.81 ms 10.216.32.2
|
||||
4 0.43 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 0.41 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
|
||||
6 1.97 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 2.50 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
|
||||
8 0.91 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 0.82 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 44.07 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:11:13 2026 -- 1 IP address (1 host up) scanned in 394.56 seconds
|
||||
# Nmap done at Tue Apr 14 03:44:49 2026 -- 1 IP address (1 host up) scanned in 136.35 seconds
|
||||
@@ -18,7 +18,7 @@
|
||||
|
||||
wpscan --url http://kuma.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
|
||||
|
||||
[*] http on tcp/443
|
||||
[*] https on tcp/443
|
||||
|
||||
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
|
||||
|
||||
|
||||
@@ -1,62 +0,0 @@
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
CVE Identified: CVE-2017-9798
|
||||
|
||||
@@ -1,19 +1,17 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:04:18 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:41:47 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set (0.040s latency).
|
||||
Host is up, received user-set (0.038s latency).
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:04:26 UTC for 39s
|
||||
Scanned at 2026-04-14 03:41:48 UTC for 44s
|
||||
Not shown: 998 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 52 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
443/tcp open ssl/https syn-ack ttl 53
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -60,21 +58,17 @@ PORT STATE SERVICE REASON VERSION
|
||||
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
|
||||
| ssZpBGM=
|
||||
|_-----END CERTIFICATE-----
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-title: Uptime Kuma
|
||||
|_Requested resource was /dashboard
|
||||
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose|router
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3
|
||||
Device type: general purpose|router|storage-misc
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
|
||||
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 5.0 - 5.14 (93%), Linux 4.19 (92%), OpenWrt 21.02 (Linux 5.4) (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.0 (90%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 - 4.11 (87%), Linux 3.2 - 4.14 (87%)
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 6.15 (90%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D217B1%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=105%GCD=1%ISR=101%TI=Z%TS=A)
|
||||
SEQ(SP=105%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB7A8%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
|
||||
SEQ(SP=104%GCD=1%ISR=109%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
|
||||
@@ -85,24 +79,24 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 6.443 days (since Sun Mar 29 21:26:28 2026)
|
||||
Uptime guess: 37.078 days (since Sun Mar 8 01:49:42 2026)
|
||||
Network Distance: 10 hops
|
||||
TCP Sequence Prediction: Difficulty=261 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=260 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 443/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.12 ms 10.216.0.161
|
||||
2 0.25 ms 10.216.35.11
|
||||
3 0.91 ms 10.216.32.2
|
||||
4 0.93 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 0.27 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
|
||||
6 1.66 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 1.79 ms bundle-ether50.hay-core30.sydney.telstra.net (203.50.12.130)
|
||||
8 0.96 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 0.99 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 41.72 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
|
||||
1 0.32 ms 10.216.0.161
|
||||
2 0.35 ms 10.216.35.12
|
||||
3 0.85 ms 10.216.32.1
|
||||
4 0.38 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 0.36 ms ae29.r02.syd01.ien.netarch.akamai.com (104.70.113.22)
|
||||
6 1.45 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 1.05 ms bundle-ether50.hay-core30.sydney.telstra.net (203.50.12.130)
|
||||
8 0.80 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 0.89 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 33.83 ms cpe-101-180-16-105.nb10.nsw.asp.telstra.net (101.180.16.105)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:05:05 2026 -- 1 IP address (1 host up) scanned in 53.02 seconds
|
||||
# Nmap done at Tue Apr 14 03:42:32 2026 -- 1 IP address (1 host up) scanned in 45.09 seconds
|
||||
@@ -1,13 +1,13 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:05:19 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:44:21 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set.
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:06:00 UTC for 1373s
|
||||
Scanned at 2026-04-14 03:44:23 UTC for 1486s
|
||||
All 100 scanned ports on kuma.lan.ddnsgeek.com (101.180.16.105) are in ignored states.
|
||||
Not shown: 100 open|filtered udp ports (no-response)
|
||||
Too many fingerprints match this host to give specific OS details
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=Y%G=N%TM=69D21D47%P=x86_64-pc-linux-gnu)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=Y%G=N%TM=69DDBDE5%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
@@ -16,16 +16,16 @@ IE(R=N)
|
||||
TRACEROUTE (using proto 1/icmp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.08 ms 10.216.0.161
|
||||
2 0.21 ms 10.216.35.11
|
||||
3 0.87 ms 10.216.32.2
|
||||
4 0.38 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 0.32 ms ae19.r01.syd01.ien.netarch.akamai.com (104.70.113.20)
|
||||
6 1.35 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 2.29 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
|
||||
2 0.19 ms 10.216.35.11
|
||||
3 0.90 ms 10.216.32.2
|
||||
4 0.58 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 0.25 ms ae19.r01.syd01.ien.netarch.akamai.com (104.70.113.20)
|
||||
6 1.71 ms Bundle-Ether96.ken-edge903.sydney.telstra.net (203.54.231.153)
|
||||
7 1.91 ms bundle-ether12.hay-core30.sydney.telstra.net (203.50.11.172)
|
||||
8 0.82 ms ae10.ken-ice301.sydney.telstra.net (203.50.61.81)
|
||||
9 5.08 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
9 0.87 ms gateway.nb10.sydney.asp.telstra.net (58.162.26.74)
|
||||
10 ... 30
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:28:57 2026 -- 1 IP address (1 host up) scanned in 1430.00 seconds
|
||||
# Nmap done at Tue Apr 14 04:09:09 2026 -- 1 IP address (1 host up) scanned in 1488.91 seconds
|
||||
@@ -1,12 +0,0 @@
|
||||
HTTP/2 200
|
||||
content-type: text/plain; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:05:10 GMT
|
||||
etag: W/"19-2NTlN/votVlrfMtAaltZ799LfR0"
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 25
|
||||
|
||||
User-agent: *
|
||||
Disallow: /
|
||||
@@ -1,12 +0,0 @@
|
||||
HTTP/2 302
|
||||
content-type: text/plain; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:05:10 GMT
|
||||
location: /dashboard
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 32
|
||||
|
||||
Found. Redirecting to /dashboard
|
||||
@@ -283,19 +283,3 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
302 GET 1l 4w 89c https://kuma.lan.ddnsgeek.com/.well-known/change-password => https://github.com/louislam/uptime-kuma/wiki/Reset-Password-via-CLI
|
||||
200 GET 4l 33w 29264c https://kuma.lan.ddnsgeek.com/favicon.ico
|
||||
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 141c https://kuma.lan.ddnsgeek.com/api/status-page/default/manifest.json
|
||||
200 GET 9l 104w 1168c https://kuma.lan.ddnsgeek.com/icon.svg
|
||||
200 GET 1l 2912w 155329c https://kuma.lan.ddnsgeek.com/assets/polyfills-legacy-CC6RtsPR.js
|
||||
200 GET 6l 2770w 163840c https://kuma.lan.ddnsgeek.com/assets/index-BBxTfFCS.js
|
||||
200 GET 1l 4307w 196608c https://kuma.lan.ddnsgeek.com/assets/index-legacy-DAPjczQA.js
|
||||
200 GET 6l 3493w 163840c https://kuma.lan.ddnsgeek.com/assets/index-bOVKKa1O.css
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/status
|
||||
404 GET 1l 3w 15c https://kuma.lan.ddnsgeek.com/upload/
|
||||
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/metrics
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/STATUS
|
||||
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/Robots.txt
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/Status
|
||||
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/Metrics
|
||||
@@ -1,48 +0,0 @@
|
||||
HTTP/2 200
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:05:09 GMT
|
||||
etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 2444
|
||||
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0, viewport-fit=cover" />
|
||||
<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png">
|
||||
<link rel="icon" type="image/svg+xml" href="/icon.svg" />
|
||||
<link rel="manifest" href="/manifest.json" />
|
||||
<meta name="theme-color" id="theme-color" content="" />
|
||||
<meta name="description" content="Uptime Kuma monitoring tool" />
|
||||
<title>Uptime Kuma</title>
|
||||
<style> .noscript-message {
|
||||
font-size: 20px;
|
||||
text-align: center;
|
||||
padding: 10px;
|
||||
max-width: 500px;
|
||||
margin: 0 auto;
|
||||
}
|
||||
</style>
|
||||
<script type="module" crossorigin src="/assets/index-BBxTfFCS.js"></script>
|
||||
<link rel="stylesheet" crossorigin href="/assets/index-bOVKKa1O.css">
|
||||
<script type="module">import.meta.url;import("_").catch(()=>1);async function* g(){};if(location.protocol!="file:"){window.__vite_is_modern_browser=true}</script>
|
||||
<script type="module">!function(){if(window.__vite_is_modern_browser)return;console.warn("vite: loading legacy chunks, syntax error above and the same error below should be ignored");var e=document.getElementById("vite-legacy-polyfill"),n=document.createElement("script");n.src=e.src,n.onload=function(){System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))},document.body.appendChild(n)}();</script>
|
||||
</head>
|
||||
<body>
|
||||
<noscript>
|
||||
<div class="noscript-message">
|
||||
Sorry, you don't seem to have JavaScript enabled or your browser
|
||||
doesn't support it.<br />This website requires JavaScript to function.
|
||||
Please enable JavaScript in your browser settings to continue.
|
||||
</div>
|
||||
</noscript>
|
||||
<div id="app"></div>
|
||||
<script nomodule>!function(){var e=document,t=e.createElement("script");if(!("noModule"in t)&&"onbeforeload"in t){var n=!1;e.addEventListener("beforeload",(function(e){if(e.target===t)n=!0;else if(!e.target.hasAttribute("nomodule")||!n)return;e.preventDefault()}),!0),t.type="module",t.src=".",e.head.appendChild(t),t.remove()}}();</script>
|
||||
<script nomodule crossorigin id="vite-legacy-polyfill" src="/assets/polyfills-legacy-CC6RtsPR.js"></script>
|
||||
<script nomodule crossorigin id="vite-legacy-entry" data-src="/assets/index-legacy-DAPjczQA.js">System.import(document.getElementById('vite-legacy-entry').getAttribute('data-src'))</script>
|
||||
</body>
|
||||
</html>
|
||||
Whitespace-only changes.
@@ -1,145 +1,23 @@
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 101.180.16.105
|
||||
+ Target Hostname: kuma.lan.ddnsgeek.com
|
||||
+ Target Port: 443
|
||||
---------------------------------------------------------------------------
|
||||
+ SSL Info: Subject: /CN=kuma.lan.ddnsgeek.com
|
||||
CN: kuma.lan.ddnsgeek.com
|
||||
SAN: kuma.lan.ddnsgeek.com
|
||||
Ciphers: TLS_CHACHA20_POLY1305_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 08:06:30 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 79 requests (~1% complete, ~1.8 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 81 requests (~1% complete, ~1.8 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 83 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 85 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 87 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 89 requests (~1% complete, ~1.7 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 91 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 93 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 95 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 97 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 99 requests (~1% complete, ~1.6 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 101 requests (~1% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 103 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 105 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 107 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 109 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 111 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 113 requests (~2% complete, ~1.5 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 115 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 117 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 119 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 121 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 123 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 125 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 127 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 129 requests (~2% complete, ~1.4 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 131 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 133 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 135 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 137 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: Error reading chunked data length. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 139 requests (~2% complete, ~1.3 hours left): currently in plugin 'OPTIONSBLEED (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9798) check'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ Scan terminated: 50 errors and 0 items reported on the remote host
|
||||
+ End Time: 2026-04-05 08:07:23 (GMT0) (53 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
+ [FAIL] Unable to connect to kuma.lan.ddnsgeek.com:443.
|
||||
@@ -1,166 +1,12 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:05:15 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set (0.035s latency).
|
||||
Host is up, received user-set (0.037s latency).
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:05:54 UTC for 467s
|
||||
Scanned at 2026-04-14 03:42:37 UTC for 357s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: /dashboard
|
||||
| Allowed User Agents:
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
| WWW-Mechanize/1.34
|
||||
| Change in Status Code:
|
||||
| PHP/: 404
|
||||
| PHPCrawl: 404
|
||||
|_ Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
|
||||
| http-drupal-enum:
|
||||
| Modules:
|
||||
| views
|
||||
| token
|
||||
| ctools
|
||||
| pathauto
|
||||
| libraries
|
||||
| entity
|
||||
| admin_menu
|
||||
| date
|
||||
| imce
|
||||
| jquery_update
|
||||
| ckeditor
|
||||
| wysiwyg
|
||||
| link
|
||||
| webform
|
||||
| backup_migrate
|
||||
| rules
|
||||
| module_filter
|
||||
| google_analytics
|
||||
| views_slideshow
|
||||
| features
|
||||
| xmlsitemap
|
||||
| metatag
|
||||
| captcha
|
||||
| colorbox
|
||||
| media
|
||||
| entityreference
|
||||
| panels
|
||||
| field_group
|
||||
| devel
|
||||
| views_bulk_operations
|
||||
| menu_block
|
||||
| transliteration
|
||||
| l10n_update
|
||||
| imce_wysiwyg
|
||||
| globalredirect
|
||||
| variable
|
||||
| i18n
|
||||
| context
|
||||
| imageapi
|
||||
| advanced_help
|
||||
| filefield
|
||||
| email
|
||||
| page_title
|
||||
| lightbox2
|
||||
| ds
|
||||
| strongarm
|
||||
| superfish
|
||||
| imagefield
|
||||
| calendar
|
||||
| imagecache
|
||||
| references
|
||||
| field_collection
|
||||
| block_class
|
||||
| job_scheduler
|
||||
| menu_attributes
|
||||
| redirect
|
||||
| addressfield
|
||||
| mailsystem
|
||||
| nice_menus
|
||||
| diff
|
||||
| flexslider
|
||||
| taxonomy_menu
|
||||
| file_entity
|
||||
| feeds
|
||||
| media_youtube
|
||||
| node_clone
|
||||
| admin_views
|
||||
| smtp
|
||||
| special_menu_items
|
||||
| auto_nodetitle
|
||||
| jquery_ui
|
||||
| insert
|
||||
| cck
|
||||
| quicktabs
|
||||
| mimemail
|
||||
| views_php
|
||||
| content_access
|
||||
| jcarousel
|
||||
| print
|
||||
| plupload
|
||||
| votingapi
|
||||
| poormanscron
|
||||
| simplenews
|
||||
| filefield_sources
|
||||
| extlink
|
||||
| honeypot
|
||||
| facetapi
|
||||
| logintoboggan
|
||||
| search_api
|
||||
| uuid
|
||||
| commerce
|
||||
| custom_breadcrumbs
|
||||
| views_data_export
|
||||
| oauth
|
||||
| better_formats
|
||||
| site_verify
|
||||
| location
|
||||
| fontyourface
|
||||
| masquerade
|
||||
|_ imce_mkdir
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /
|
||||
| Other: 1; json: 1; png: 1; svg: 1
|
||||
| /assets/
|
||||
| css: 1; js: 2
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /assets/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1; css: 1; js: 2; json: 1; png: 1; svg: 1
|
||||
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-errors: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
|_http-trane-info: Problem with XML parsing of /evox/about
|
||||
|_http-php-version: Credits query returned unknown hash 3b299781d582f5b522a0a6f14dfd9268
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-date: Sun, 05 Apr 2026 08:06:30 GMT; -1s from local time.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-vhosts:
|
||||
|_128 names had status 404
|
||||
|_http-malware-host: Host appears to be clean
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/https syn-ack ttl 53
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
@@ -181,38 +27,63 @@ PORT STATE SERVICE REASON VERSION
|
||||
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-date: Tue, 14 Apr 2026 03:42:53 GMT; -5s from local time.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| HSTS not configured in HTTPS Server
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-headers:
|
||||
| Content-Length: 2444
|
||||
| Content-Type: text/html; charset=utf-8
|
||||
| Date: Sun, 05 Apr 2026 08:07:06 GMT
|
||||
| Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=kuma.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
|_ (Request type: HEAD)
|
||||
|_http-chrono: Request times for /; avg: 33701.34ms; min: 1061.83ms; max: 134159.26ms
|
||||
| http-robots.txt: 1 disallowed entry
|
||||
|_/
|
||||
| http-title: Uptime Kuma
|
||||
|_Requested resource was /dashboard
|
||||
| Error Code: 404
|
||||
|_ http://kuma.lan.ddnsgeek.com:443/
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
| http-vhosts:
|
||||
|_128 names had status 404
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-chrono: Request times for /; avg: 501.71ms; min: 433.96ms; max: 693.82ms
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -259,10 +130,17 @@ PORT STATE SERVICE REASON VERSION
|
||||
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
|
||||
| ssZpBGM=
|
||||
|_-----END CERTIFICATE-----
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_kuma.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Tue, 14 Apr 2026 03:43:08 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:13:42 2026 -- 1 IP address (1 host up) scanned in 509.39 seconds
|
||||
# Nmap done at Tue Apr 14 03:48:35 2026 -- 1 IP address (1 host up) scanned in 361.55 seconds
|
||||
@@ -1,124 +1 @@
|
||||
WhatWeb report for https://kuma.lan.ddnsgeek.com:443
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 101.180.16.105
|
||||
Country : AUSTRALIA, AU
|
||||
|
||||
Summary : RedirectLocation[/dashboard], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : /dashboard (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 32
|
||||
Content-Type: text/plain; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 08:07:00 GMT
|
||||
Location: /dashboard
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
Vary: Accept
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://kuma.lan.ddnsgeek.com/dashboard
|
||||
Status : 200 OK
|
||||
Title : Uptime Kuma
|
||||
IP : 101.180.16.105
|
||||
Country : AUSTRALIA, AU
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Length: 2444
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 08:07:15 GMT
|
||||
Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
OpenSSL 3.5.5 27 Jan 2026
|
||||
|
||||
Connected to 101.180.16.105
|
||||
|
||||
|
||||
@@ -1,207 +1,73 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:05:15 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com" start="1775376315" startstr="Sun Apr 5 08:05:15 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com" start="1776138154" startstr="Tue Apr 14 03:42:34 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376353"/>
|
||||
<taskend task="NSE" time="1775376353"/>
|
||||
<taskbegin task="NSE" time="1775376353"/>
|
||||
<taskend task="NSE" time="1775376353"/>
|
||||
<taskbegin task="NSE" time="1775376353"/>
|
||||
<taskend task="NSE" time="1775376353"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376354"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376354"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376354"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376354"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376354"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376354" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376359"/>
|
||||
<taskend task="Service scan" time="1775376374" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775376375"/>
|
||||
<taskprogress task="NSE" time="1775376406" percent="53.61" remaining="27" etc="1775376433"/>
|
||||
<taskprogress task="NSE" time="1775376436" percent="85.67" remaining="11" etc="1775376446"/>
|
||||
<taskprogress task="NSE" time="1775376466" percent="88.60" remaining="12" etc="1775376478"/>
|
||||
<taskprogress task="NSE" time="1775376497" percent="88.93" remaining="16" etc="1775376512"/>
|
||||
<taskprogress task="NSE" time="1775376592" percent="88.93" remaining="28" etc="1775376619"/>
|
||||
<taskprogress task="NSE" time="1775376624" percent="89.58" remaining="29" etc="1775376653"/>
|
||||
<taskprogress task="NSE" time="1775376654" percent="92.53" remaining="23" etc="1775376677"/>
|
||||
<taskprogress task="NSE" time="1775376684" percent="94.82" remaining="17" etc="1775376701"/>
|
||||
<taskprogress task="NSE" time="1775376714" percent="96.12" remaining="14" etc="1775376728"/>
|
||||
<taskprogress task="NSE" time="1775376744" percent="98.71" remaining="5" etc="1775376749"/>
|
||||
<taskprogress task="NSE" time="1775376774" percent="99.35" remaining="3" etc="1775376777"/>
|
||||
<taskprogress task="NSE" time="1775376804" percent="99.68" remaining="2" etc="1775376805"/>
|
||||
<taskend task="NSE" time="1775376807"/>
|
||||
<taskbegin task="NSE" time="1775376807"/>
|
||||
<taskend task="NSE" time="1775376820"/>
|
||||
<taskbegin task="NSE" time="1775376820"/>
|
||||
<taskend task="NSE" time="1775376821"/>
|
||||
<host starttime="1775376354" endtime="1775376821"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776138157"/>
|
||||
<taskend task="NSE" time="1776138157"/>
|
||||
<taskbegin task="NSE" time="1776138157"/>
|
||||
<taskend task="NSE" time="1776138157"/>
|
||||
<taskbegin task="NSE" time="1776138157"/>
|
||||
<taskend task="NSE" time="1776138157"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138157"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138157"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138157"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138157"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776138157"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776138157" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776138158"/>
|
||||
<taskend task="Service scan" time="1776138170" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776138170"/>
|
||||
<taskprogress task="NSE" time="1776138201" percent="99.35" remaining="1" etc="1776138201"/>
|
||||
<taskprogress task="NSE" time="1776138231" percent="99.68" remaining="1" etc="1776138231"/>
|
||||
<taskprogress task="NSE" time="1776138261" percent="99.68" remaining="1" etc="1776138261"/>
|
||||
<taskprogress task="NSE" time="1776138291" percent="99.68" remaining="1" etc="1776138291"/>
|
||||
<taskprogress task="NSE" time="1776138321" percent="99.68" remaining="1" etc="1776138321"/>
|
||||
<taskprogress task="NSE" time="1776138351" percent="99.68" remaining="1" etc="1776138352"/>
|
||||
<taskprogress task="NSE" time="1776138385" percent="99.68" remaining="1" etc="1776138386"/>
|
||||
<taskprogress task="NSE" time="1776138415" percent="99.68" remaining="1" etc="1776138416"/>
|
||||
<taskprogress task="NSE" time="1776138445" percent="99.68" remaining="1" etc="1776138446"/>
|
||||
<taskprogress task="NSE" time="1776138475" percent="99.68" remaining="1" etc="1776138476"/>
|
||||
<taskend task="NSE" time="1776138483"/>
|
||||
<taskbegin task="NSE" time="1776138484"/>
|
||||
<taskend task="NSE" time="1776138514"/>
|
||||
<taskbegin task="NSE" time="1776138514"/>
|
||||
<taskend task="NSE" time="1776138514"/>
|
||||
<host starttime="1776138157" endtime="1776138514"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="101.180.16.105" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="cpe-101-180-16-105.nb10.nsw.asp.telstra.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: /dashboard
 Allowed User Agents: 
 libwww
 lwp-trivial
 libcurl-agent/1.0
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34
 Change in Status Code: 
 PHP/: 404
 PHPCrawl: 404
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">/dashboard</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>libwww</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
<table key="Change in Status Code">
|
||||
<elem key="PHP/">404</elem>
|
||||
<elem key="PHPCrawl">404</elem>
|
||||
<elem key="Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)">404</elem>
|
||||
</table>
|
||||
</script><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-favicon" output="Unknown favicon MD5: 5EA4B467D984433398E1037469F13214"/><script id="http-drupal-enum" output="
 Modules: 
 views
 token
 ctools
 pathauto
 libraries
 entity
 admin_menu
 date
 imce
 jquery_update
 ckeditor
 wysiwyg
 link
 webform
 backup_migrate
 rules
 module_filter
 google_analytics
 views_slideshow
 features
 xmlsitemap
 metatag
 captcha
 colorbox
 media
 entityreference
 panels
 field_group
 devel
 views_bulk_operations
 menu_block
 transliteration
 l10n_update
 imce_wysiwyg
 globalredirect
 variable
 i18n
 context
 imageapi
 advanced_help
 filefield
 email
 page_title
 lightbox2
 ds
 strongarm
 superfish
 imagefield
 calendar
 imagecache
 references
 field_collection
 block_class
 job_scheduler
 menu_attributes
 redirect
 addressfield
 mailsystem
 nice_menus
 diff
 flexslider
 taxonomy_menu
 file_entity
 feeds
 media_youtube
 node_clone
 admin_views
 smtp
 special_menu_items
 auto_nodetitle
 jquery_ui
 insert
 cck
 quicktabs
 mimemail
 views_php
 content_access
 jcarousel
 print
 plupload
 votingapi
 poormanscron
 simplenews
 filefield_sources
 extlink
 honeypot
 facetapi
 logintoboggan
 search_api
 uuid
 commerce
 custom_breadcrumbs
 views_data_export
 oauth
 better_formats
 site_verify
 location
 fontyourface
 masquerade
 imce_mkdir"><table key="Modules">
|
||||
<elem>views</elem>
|
||||
<elem>token</elem>
|
||||
<elem>ctools</elem>
|
||||
<elem>pathauto</elem>
|
||||
<elem>libraries</elem>
|
||||
<elem>entity</elem>
|
||||
<elem>admin_menu</elem>
|
||||
<elem>date</elem>
|
||||
<elem>imce</elem>
|
||||
<elem>jquery_update</elem>
|
||||
<elem>ckeditor</elem>
|
||||
<elem>wysiwyg</elem>
|
||||
<elem>link</elem>
|
||||
<elem>webform</elem>
|
||||
<elem>backup_migrate</elem>
|
||||
<elem>rules</elem>
|
||||
<elem>module_filter</elem>
|
||||
<elem>google_analytics</elem>
|
||||
<elem>views_slideshow</elem>
|
||||
<elem>features</elem>
|
||||
<elem>xmlsitemap</elem>
|
||||
<elem>metatag</elem>
|
||||
<elem>captcha</elem>
|
||||
<elem>colorbox</elem>
|
||||
<elem>media</elem>
|
||||
<elem>entityreference</elem>
|
||||
<elem>panels</elem>
|
||||
<elem>field_group</elem>
|
||||
<elem>devel</elem>
|
||||
<elem>views_bulk_operations</elem>
|
||||
<elem>menu_block</elem>
|
||||
<elem>transliteration</elem>
|
||||
<elem>l10n_update</elem>
|
||||
<elem>imce_wysiwyg</elem>
|
||||
<elem>globalredirect</elem>
|
||||
<elem>variable</elem>
|
||||
<elem>i18n</elem>
|
||||
<elem>context</elem>
|
||||
<elem>imageapi</elem>
|
||||
<elem>advanced_help</elem>
|
||||
<elem>filefield</elem>
|
||||
<elem>email</elem>
|
||||
<elem>page_title</elem>
|
||||
<elem>lightbox2</elem>
|
||||
<elem>ds</elem>
|
||||
<elem>strongarm</elem>
|
||||
<elem>superfish</elem>
|
||||
<elem>imagefield</elem>
|
||||
<elem>calendar</elem>
|
||||
<elem>imagecache</elem>
|
||||
<elem>references</elem>
|
||||
<elem>field_collection</elem>
|
||||
<elem>block_class</elem>
|
||||
<elem>job_scheduler</elem>
|
||||
<elem>menu_attributes</elem>
|
||||
<elem>redirect</elem>
|
||||
<elem>addressfield</elem>
|
||||
<elem>mailsystem</elem>
|
||||
<elem>nice_menus</elem>
|
||||
<elem>diff</elem>
|
||||
<elem>flexslider</elem>
|
||||
<elem>taxonomy_menu</elem>
|
||||
<elem>file_entity</elem>
|
||||
<elem>feeds</elem>
|
||||
<elem>media_youtube</elem>
|
||||
<elem>node_clone</elem>
|
||||
<elem>admin_views</elem>
|
||||
<elem>smtp</elem>
|
||||
<elem>special_menu_items</elem>
|
||||
<elem>auto_nodetitle</elem>
|
||||
<elem>jquery_ui</elem>
|
||||
<elem>insert</elem>
|
||||
<elem>cck</elem>
|
||||
<elem>quicktabs</elem>
|
||||
<elem>mimemail</elem>
|
||||
<elem>views_php</elem>
|
||||
<elem>content_access</elem>
|
||||
<elem>jcarousel</elem>
|
||||
<elem>print</elem>
|
||||
<elem>plupload</elem>
|
||||
<elem>votingapi</elem>
|
||||
<elem>poormanscron</elem>
|
||||
<elem>simplenews</elem>
|
||||
<elem>filefield_sources</elem>
|
||||
<elem>extlink</elem>
|
||||
<elem>honeypot</elem>
|
||||
<elem>facetapi</elem>
|
||||
<elem>logintoboggan</elem>
|
||||
<elem>search_api</elem>
|
||||
<elem>uuid</elem>
|
||||
<elem>commerce</elem>
|
||||
<elem>custom_breadcrumbs</elem>
|
||||
<elem>views_data_export</elem>
|
||||
<elem>oauth</elem>
|
||||
<elem>better_formats</elem>
|
||||
<elem>site_verify</elem>
|
||||
<elem>location</elem>
|
||||
<elem>fontyourface</elem>
|
||||
<elem>masquerade</elem>
|
||||
<elem>imce_mkdir</elem>
|
||||
</table>
|
||||
</script><script id="http-sitemap-generator" output="
 Directory structure:
 /
 Other: 1; json: 1; png: 1; svg: 1
 /assets/
 css: 1; js: 2
 Longest directory structure:
 Depth: 1
 Dir: /assets/
 Total files found (by extension):
 Other: 1; css: 1; js: 2; json: 1; png: 1; svg: 1
"/><script id="http-majordomo2-dir-traversal" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-errors" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-methods" output="
 Supported Methods: GET HEAD POST"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
</table>
|
||||
</script><script id="http-trane-info" output="Problem with XML parsing of /evox/about"/><script id="http-php-version" output="Credits query returned unknown hash 3b299781d582f5b522a0a6f14dfd9268"/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-date" output="Sun, 05 Apr 2026 08:06:30 GMT; -1s from local time."><elem key="date">2026-04-05T08:06:30+00:00</elem>
|
||||
<elem key="delta">-1.0</elem>
|
||||
</script><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-vhosts" output="
128 names had status 404"/><script id="http-malware-host" output="Host appears to be clean"/><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 compressors: 
 NULL
 cipher preference: server
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 compressors: 
 NULL
 cipher preference: server
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="compressors">
|
||||
@@ -215,43 +81,55 @@
|
||||
<table key="TLSv1.3">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-feed" output="Couldn't find any feeds."/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
|
||||
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
|
||||
</table>
|
||||
<table key="X_XSS_Protection">
|
||||
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
|
||||
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
|
||||
</script><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-date" output="Tue, 14 Apr 2026 03:42:53 GMT; -5s from local time."><elem key="date">2026-04-14T03:42:53+00:00</elem>
|
||||
<elem key="delta">-5.0</elem>
|
||||
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 HSTS not configured in HTTPS Server
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
|
||||
<elem>HSTS not configured in HTTPS Server</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
</script><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-headers" output="
 Content-Length: 2444
 Content-Type: text/html; charset=utf-8
 Date: Sun, 05 Apr 2026 08:07:06 GMT
 Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Frame-Options: SAMEORIGIN
 X-Xss-Protection: 1; mode=block
 Connection: close
 
 (Request type: HEAD)
"/><script id="http-chrono" output="Request times for /; avg: 33701.34ms; min: 1061.83ms; max: 134159.26ms"/><script id="http-robots.txt" output="1 disallowed entry 
/"/><script id="http-title" output="Uptime Kuma
Requested resource was /dashboard"><elem key="title">Uptime Kuma</elem>
|
||||
<elem key="redirect_url">/dashboard</elem>
|
||||
</script><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com
Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-01T19:44:43
Not valid after: 2026-06-30T19:44:42
MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
</script><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=kuma.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	http://kuma.lan.ddnsgeek.com:443/
"/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/><script id="http-vhosts" output="
128 names had status 404"/><script id="http-useragent-tester" output="
 Status for browser useragent: 404
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">404</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-chrono" output="Request times for /; avg: 501.71ms; min: 433.96ms; max: 693.82ms"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Site doesn't have a title (text/plain; charset=utf-8)."></script><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com
Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-01T19:44:43
Not valid after: 2026-06-30T19:44:42
MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">kuma.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
@@ -318,16 +196,16 @@
|
||||
<elem key="sha1">a08d7799f3efcb179052958c43c5eeb5d6b559c1</elem>
|
||||
<elem key="sha256">0c923f5eb8618c91b8a8f4bf1cb87d80f07addc83c4b8ed9547890cfb482512b</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD
ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT
pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR
WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z
lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy
2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF
MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+
BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp
5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr
NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D
XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx
JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC
IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY
MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s
YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw
IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5
AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA
AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO
AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/
4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh
2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI
3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L
2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P
DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG
HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU
6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc
nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
ssZpBGM=
-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="http-waf-detect" output="IDS/IPS/WAF detected:
kuma.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/></port>
|
||||
</script><script id="http-feed" output="Couldn't find any feeds."/><script id="http-headers" output="
 Content-Type: text/plain; charset=utf-8
 X-Content-Type-Options: nosniff
 Date: Tue, 14 Apr 2026 03:43:08 GMT
 Content-Length: 19
 Connection: close
 
 (Request type: GET)
"/><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/></port>
|
||||
</ports>
|
||||
<times srtt="34863" rttvar="34863" to="174315"/>
|
||||
<times srtt="36904" rttvar="36904" to="184520"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775376821"/>
|
||||
<taskend task="NSE" time="1775376821"/>
|
||||
<taskbegin task="NSE" time="1775376821"/>
|
||||
<taskend task="NSE" time="1775376821"/>
|
||||
<taskbegin task="NSE" time="1775376821"/>
|
||||
<taskend task="NSE" time="1775376821"/>
|
||||
<runstats><finished time="1775376822" timestr="Sun Apr 5 08:13:42 2026" summary="Nmap done at Sun Apr 5 08:13:42 2026; 1 IP address (1 host up) scanned in 509.39 seconds" elapsed="509.39" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776138515"/>
|
||||
<taskend task="NSE" time="1776138515"/>
|
||||
<taskbegin task="NSE" time="1776138515"/>
|
||||
<taskend task="NSE" time="1776138515"/>
|
||||
<taskbegin task="NSE" time="1776138515"/>
|
||||
<taskend task="NSE" time="1776138515"/>
|
||||
<runstats><finished time="1776138515" timestr="Tue Apr 14 03:48:35 2026" summary="Nmap done at Tue Apr 14 03:48:35 2026; 1 IP address (1 host up) scanned in 361.55 seconds" elapsed="361.55" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://kuma.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 08:05:08 GMT
|
||||
Date: Tue, 14 Apr 2026 03:42:33 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://kuma.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:05:08 GMT
|
||||
Date: Tue, 14 Apr 2026 03:42:33 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
@@ -283,43 +283,3 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
302 GET 1l 4w 89c https://kuma.lan.ddnsgeek.com/.well-known/change-password => https://github.com/louislam/uptime-kuma/wiki/Reset-Password-via-CLI
|
||||
200 GET 4l 33w 29264c https://kuma.lan.ddnsgeek.com/favicon.ico
|
||||
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 141c https://kuma.lan.ddnsgeek.com/api/status-page/default/manifest.json
|
||||
200 GET 9l 104w 1168c https://kuma.lan.ddnsgeek.com/icon.svg
|
||||
200 GET 6l 2252w 131072c https://kuma.lan.ddnsgeek.com/assets/index-BBxTfFCS.js
|
||||
200 GET 1l 2817w 114688c https://kuma.lan.ddnsgeek.com/assets/index-legacy-DAPjczQA.js
|
||||
200 GET 6l 4304w 229376c https://kuma.lan.ddnsgeek.com/assets/index-bOVKKa1O.css
|
||||
200 GET 1l 2525w 131072c https://kuma.lan.ddnsgeek.com/assets/polyfills-legacy-CC6RtsPR.js
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/status
|
||||
404 GET 1l 3w 15c https://kuma.lan.ddnsgeek.com/upload/
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[ => https://kuma.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/] => https://kuma.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.txt => https://kuma.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/].txt => https://kuma.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.html => https://kuma.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/].html => https://kuma.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.php => https://kuma.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.asp => https://kuma.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.aspx => https://kuma.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/[.jsp => https://kuma.lan.ddnsgeek.com/[.jsp
|
||||
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/metrics
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain] => https://kuma.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].txt => https://kuma.lan.ddnsgeek.com/plain].txt
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].html => https://kuma.lan.ddnsgeek.com/plain].html
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].php => https://kuma.lan.ddnsgeek.com/plain].php
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].asp => https://kuma.lan.ddnsgeek.com/plain].asp
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].aspx => https://kuma.lan.ddnsgeek.com/plain].aspx
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/plain].jsp => https://kuma.lan.ddnsgeek.com/plain].jsp
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote] => https://kuma.lan.ddnsgeek.com/quote]
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].txt => https://kuma.lan.ddnsgeek.com/quote].txt
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].html => https://kuma.lan.ddnsgeek.com/quote].html
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].php => https://kuma.lan.ddnsgeek.com/quote].php
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].asp => https://kuma.lan.ddnsgeek.com/quote].asp
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].aspx => https://kuma.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://kuma.lan.ddnsgeek.com/quote].jsp => https://kuma.lan.ddnsgeek.com/quote].jsp
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/STATUS
|
||||
200 GET 2l 4w 25c https://kuma.lan.ddnsgeek.com/Robots.txt
|
||||
200 GET 41l 139w 4221c https://kuma.lan.ddnsgeek.com/Status
|
||||
401 GET 0l 0w 0c https://kuma.lan.ddnsgeek.com/Metrics
|
||||
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://kuma.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 08:05:08 GMT
|
||||
Date: Tue, 14 Apr 2026 03:42:33 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
+84798
-30196
File diff suppressed because it is too large.
Load diff
@@ -1,3 +1,22 @@
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -5,19 +24,19 @@
|
||||
+ Target Hostname: kuma.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 08:06:25 (GMT0)
|
||||
+ Start Time: 2026-04-14 03:42:40 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7900 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 08:47:07 (GMT0) (2442 seconds)
|
||||
+ End Time: 2026-04-14 04:08:35 (GMT0) (1555 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
@@ -1,17 +1,25 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:05:09 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:42:33 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com
|
||||
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
||||
Host is up, received user-set (0.042s latency).
|
||||
Host is up, received user-set (0.030s latency).
|
||||
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
||||
Scanned at 2026-04-05 08:05:50 UTC for 797s
|
||||
Scanned at 2026-04-14 03:42:36 UTC for 207s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-chrono: Request times for /; avg: 1116.60ms; min: 752.39ms; max: 1373.17ms
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-date: Tue, 14 Apr 2026 03:42:49 GMT; -1s from local time.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-chrono: Request times for /; avg: 339.90ms; min: 222.68ms; max: 427.92ms
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Redirected To: /dashboard
|
||||
| Status for browser useragent: false
|
||||
| Redirected To: https://kuma.lan.ddnsgeek.com/
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
@@ -30,19 +38,21 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-headers:
|
||||
| Location: https://kuma.lan.ddnsgeek.com/
|
||||
| Date: Tue, 14 Apr 2026 03:42:52 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-date: Sun, 05 Apr 2026 08:06:35 GMT; -5s from local time.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
@@ -50,22 +60,12 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://kuma.lan.ddnsgeek.com/
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-headers:
|
||||
| Location: https://kuma.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 08:06:53 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:19:08 2026 -- 1 IP address (1 host up) scanned in 840.61 seconds
|
||||
# Nmap done at Tue Apr 14 03:46:32 2026 -- 1 IP address (1 host up) scanned in 239.03 seconds
|
||||
@@ -16,131 +16,8 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://kuma.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:06:59 GMT
|
||||
Date: Tue, 14 Apr 2026 03:42:46 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://kuma.lan.ddnsgeek.com/
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 101.180.16.105
|
||||
Country : AUSTRALIA, AU
|
||||
|
||||
Summary : RedirectLocation[/dashboard], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : /dashboard (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 32
|
||||
Content-Type: text/plain; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 08:07:14 GMT
|
||||
Location: /dashboard
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
Vary: Accept
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://kuma.lan.ddnsgeek.com/dashboard
|
||||
Status : 200 OK
|
||||
Title : Uptime Kuma
|
||||
IP : 101.180.16.105
|
||||
Country : AUSTRALIA, AU
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : x-content-type-options (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Length: 2444
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 08:07:30 GMT
|
||||
Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
@@ -1,65 +1,48 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:05:09 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com" start="1775376309" startstr="Sun Apr 5 08:05:09 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:42:33 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml kuma.lan.ddnsgeek.com" start="1776138153" startstr="Tue Apr 14 03:42:33 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="80"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376349"/>
|
||||
<taskend task="NSE" time="1775376349"/>
|
||||
<taskbegin task="NSE" time="1775376349"/>
|
||||
<taskend task="NSE" time="1775376349"/>
|
||||
<taskbegin task="NSE" time="1775376349"/>
|
||||
<taskend task="NSE" time="1775376349"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376350"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376350"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376350"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376350"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376350"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376350" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376355"/>
|
||||
<taskend task="Service scan" time="1775376362" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775376363"/>
|
||||
<taskprogress task="NSE" time="1775376394" percent="55.17" remaining="26" etc="1775376419"/>
|
||||
<taskprogress task="NSE" time="1775376424" percent="93.51" remaining="5" etc="1775376428"/>
|
||||
<taskprogress task="NSE" time="1775376454" percent="99.03" remaining="1" etc="1775376455"/>
|
||||
<taskprogress task="NSE" time="1775376484" percent="99.68" remaining="1" etc="1775376484"/>
|
||||
<taskprogress task="NSE" time="1775376514" percent="99.68" remaining="1" etc="1775376514"/>
|
||||
<taskprogress task="NSE" time="1775376544" percent="99.68" remaining="1" etc="1775376545"/>
|
||||
<taskprogress task="NSE" time="1775376574" percent="99.68" remaining="1" etc="1775376575"/>
|
||||
<taskprogress task="NSE" time="1775376604" percent="99.68" remaining="1" etc="1775376605"/>
|
||||
<taskprogress task="NSE" time="1775376634" percent="99.68" remaining="1" etc="1775376635"/>
|
||||
<taskprogress task="NSE" time="1775376664" percent="99.68" remaining="1" etc="1775376665"/>
|
||||
<taskprogress task="NSE" time="1775376694" percent="99.68" remaining="2" etc="1775376695"/>
|
||||
<taskprogress task="NSE" time="1775376724" percent="99.68" remaining="2" etc="1775376725"/>
|
||||
<taskprogress task="NSE" time="1775376754" percent="99.68" remaining="2" etc="1775376755"/>
|
||||
<taskprogress task="NSE" time="1775376784" percent="99.68" remaining="2" etc="1775376785"/>
|
||||
<taskprogress task="NSE" time="1775376814" percent="99.68" remaining="2" etc="1775376815"/>
|
||||
<taskprogress task="NSE" time="1775376844" percent="99.68" remaining="2" etc="1775376846"/>
|
||||
<taskprogress task="NSE" time="1775376874" percent="99.68" remaining="2" etc="1775376876"/>
|
||||
<taskprogress task="NSE" time="1775376904" percent="99.68" remaining="2" etc="1775376906"/>
|
||||
<taskprogress task="NSE" time="1775376934" percent="99.68" remaining="2" etc="1775376936"/>
|
||||
<taskprogress task="NSE" time="1775376964" percent="99.68" remaining="2" etc="1775376966"/>
|
||||
<taskprogress task="NSE" time="1775376994" percent="99.68" remaining="3" etc="1775376996"/>
|
||||
<taskprogress task="NSE" time="1775377024" percent="99.68" remaining="3" etc="1775377026"/>
|
||||
<taskprogress task="NSE" time="1775377054" percent="99.68" remaining="3" etc="1775377056"/>
|
||||
<taskprogress task="NSE" time="1775377084" percent="99.68" remaining="3" etc="1775377086"/>
|
||||
<taskprogress task="NSE" time="1775377114" percent="99.68" remaining="3" etc="1775377116"/>
|
||||
<taskprogress task="NSE" time="1775377144" percent="99.68" remaining="3" etc="1775377147"/>
|
||||
<taskend task="NSE" time="1775377145"/>
|
||||
<taskbegin task="NSE" time="1775377145"/>
|
||||
<taskend task="NSE" time="1775377147"/>
|
||||
<taskbegin task="NSE" time="1775377147"/>
|
||||
<taskend task="NSE" time="1775377147"/>
|
||||
<host starttime="1775376350" endtime="1775377147"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776138155"/>
|
||||
<taskend task="NSE" time="1776138155"/>
|
||||
<taskbegin task="NSE" time="1776138155"/>
|
||||
<taskend task="NSE" time="1776138155"/>
|
||||
<taskbegin task="NSE" time="1776138155"/>
|
||||
<taskend task="NSE" time="1776138156"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138156"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138156"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138156"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138156"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776138156"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776138156" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776138157"/>
|
||||
<taskend task="Service scan" time="1776138164" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776138164"/>
|
||||
<taskprogress task="NSE" time="1776138195" percent="99.68" remaining="1" etc="1776138195"/>
|
||||
<taskprogress task="NSE" time="1776138225" percent="99.68" remaining="1" etc="1776138225"/>
|
||||
<taskprogress task="NSE" time="1776138255" percent="99.68" remaining="1" etc="1776138255"/>
|
||||
<taskprogress task="NSE" time="1776138285" percent="99.68" remaining="1" etc="1776138285"/>
|
||||
<taskprogress task="NSE" time="1776138315" percent="99.68" remaining="1" etc="1776138315"/>
|
||||
<taskend task="NSE" time="1776138331"/>
|
||||
<taskbegin task="NSE" time="1776138332"/>
|
||||
<taskend task="NSE" time="1776138361"/>
|
||||
<taskbegin task="NSE" time="1776138362"/>
|
||||
<taskend task="NSE" time="1776138363"/>
|
||||
<host starttime="1776138156" endtime="1776138363"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="101.180.16.105" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="cpe-101-180-16-105.nb10.nsw.asp.telstra.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-chrono" output="Request times for /; avg: 1116.60ms; min: 752.39ms; max: 1373.17ms"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-useragent-tester" output="
 Status for browser useragent: 404
 Redirected To: /dashboard
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">404</elem>
|
||||
<elem key="Redirected To">/dashboard</elem>
|
||||
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-security-headers" output=""></script><script id="http-date" output="Tue, 14 Apr 2026 03:42:49 GMT; -1s from local time."><elem key="date">2026-04-14T03:42:49+00:00</elem>
|
||||
<elem key="delta">-1.0</elem>
|
||||
</script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-title" output="Did not follow redirect to https://kuma.lan.ddnsgeek.com/"><elem key="redirect_url">https://kuma.lan.ddnsgeek.com/</elem>
|
||||
</script><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-errors" output="Couldn't find any error pages."/><script id="http-chrono" output="Request times for /; avg: 339.90ms; min: 222.68ms; max: 427.92ms"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-useragent-tester" output="
 Status for browser useragent: false
 Redirected To: https://kuma.lan.ddnsgeek.com/
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">false</elem>
|
||||
<elem key="Redirected To">https://kuma.lan.ddnsgeek.com/</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
@@ -79,26 +62,22 @@
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-date" output="Sun, 05 Apr 2026 08:06:35 GMT; -5s from local time."><elem key="date">2026-04-05T08:06:35+00:00</elem>
|
||||
<elem key="delta">-5.0</elem>
|
||||
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-errors" output="Couldn't find any error pages."/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/><script id="http-vhosts" output="
128 names had status 308"/><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
</script><script id="http-headers" output="
 Location: https://kuma.lan.ddnsgeek.com/
 Date: Tue, 14 Apr 2026 03:42:52 GMT
 Content-Length: 17
 Connection: close
 
 (Request type: GET)
"/><script id="http-vhosts" output="
128 names had status 308"/><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-security-headers" output=""></script><script id="http-title" output="Did not follow redirect to https://kuma.lan.ddnsgeek.com/"><elem key="redirect_url">https://kuma.lan.ddnsgeek.com/</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-headers" output="
 Location: https://kuma.lan.ddnsgeek.com/
 Date: Sun, 05 Apr 2026 08:06:53 GMT
 Content-Length: 17
 Connection: close
 
 (Request type: GET)
"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/></port>
|
||||
</script><script id="http-malware-host" output="Host appears to be clean"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/></port>
|
||||
</ports>
|
||||
<times srtt="42449" rttvar="42449" to="212245"/>
|
||||
<times srtt="29883" rttvar="29883" to="149415"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775377148"/>
|
||||
<taskend task="NSE" time="1775377148"/>
|
||||
<taskbegin task="NSE" time="1775377148"/>
|
||||
<taskend task="NSE" time="1775377148"/>
|
||||
<taskbegin task="NSE" time="1775377148"/>
|
||||
<taskend task="NSE" time="1775377148"/>
|
||||
<runstats><finished time="1775377148" timestr="Sun Apr 5 08:19:08 2026" summary="Nmap done at Sun Apr 5 08:19:08 2026; 1 IP address (1 host up) scanned in 840.61 seconds" elapsed="840.61" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776138379"/>
|
||||
<taskend task="NSE" time="1776138380"/>
|
||||
<taskbegin task="NSE" time="1776138380"/>
|
||||
<taskend task="NSE" time="1776138380"/>
|
||||
<taskbegin task="NSE" time="1776138385"/>
|
||||
<taskend task="NSE" time="1776138387"/>
|
||||
<runstats><finished time="1776138392" timestr="Tue Apr 14 03:46:32 2026" summary="Nmap done at Tue Apr 14 03:46:32 2026; 1 IP address (1 host up) scanned in 239.03 seconds" elapsed="239.03" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
@@ -1,42 +1,38 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:04:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com" start="1775376284" startstr="Sun Apr 5 08:04:44 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/kuma.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml kuma.lan.ddnsgeek.com" start="1776138154" startstr="Tue Apr 14 03:42:34 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="65535" services="1-65535"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376290"/>
|
||||
<taskend task="NSE" time="1775376290"/>
|
||||
<taskbegin task="NSE" time="1775376290"/>
|
||||
<taskend task="NSE" time="1775376290"/>
|
||||
<taskbegin task="NSE" time="1775376290"/>
|
||||
<taskend task="NSE" time="1775376290"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376291"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376291"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376291"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376291"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376291"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376322" percent="14.08" remaining="190" etc="1775376511"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376352" percent="22.07" remaining="216" etc="1775376567"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376382" percent="32.99" remaining="185" etc="1775376567"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376412" percent="44.39" remaining="152" etc="1775376564"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376442" percent="59.73" remaining="102" etc="1775376544"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1775376472" percent="77.45" remaining="53" etc="1775376525"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376551" extrainfo="65535 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376628"/>
|
||||
<taskend task="Service scan" time="1775376642" extrainfo="2 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1775376650"/>
|
||||
<taskend task="Traceroute" time="1775376650"/>
|
||||
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1775376650"/>
|
||||
<taskend task="Parallel DNS resolution of 9 hosts." time="1775376651"/>
|
||||
<taskbegin task="NSE" time="1775376651"/>
|
||||
<taskend task="NSE" time="1775376668"/>
|
||||
<taskbegin task="NSE" time="1775376668"/>
|
||||
<taskend task="NSE" time="1775376672"/>
|
||||
<taskbegin task="NSE" time="1775376672"/>
|
||||
<taskend task="NSE" time="1775376672"/>
|
||||
<host starttime="1775376291" endtime="1775376672"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776138157"/>
|
||||
<taskend task="NSE" time="1776138157"/>
|
||||
<taskbegin task="NSE" time="1776138157"/>
|
||||
<taskend task="NSE" time="1776138157"/>
|
||||
<taskbegin task="NSE" time="1776138157"/>
|
||||
<taskend task="NSE" time="1776138157"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138157"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138157"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138157"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138157"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776138157"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1776138188" percent="20.27" remaining="122" etc="1776138310"/>
|
||||
<taskprogress task="SYN Stealth Scan" time="1776138218" percent="54.59" remaining="51" etc="1776138269"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776138249" extrainfo="65535 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776138250"/>
|
||||
<taskend task="Service scan" time="1776138276" extrainfo="2 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1776138281"/>
|
||||
<taskend task="Traceroute" time="1776138281"/>
|
||||
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1776138281"/>
|
||||
<taskend task="Parallel DNS resolution of 9 hosts." time="1776138282"/>
|
||||
<taskbegin task="NSE" time="1776138282"/>
|
||||
<taskend task="NSE" time="1776138287"/>
|
||||
<taskbegin task="NSE" time="1776138287"/>
|
||||
<taskend task="NSE" time="1776138289"/>
|
||||
<taskbegin task="NSE" time="1776138289"/>
|
||||
<taskend task="NSE" time="1776138289"/>
|
||||
<host starttime="1776138157" endtime="1776138289"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="101.180.16.105" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
|
||||
@@ -45,7 +41,7 @@
|
||||
<ports><extraports state="filtered" count="65533">
|
||||
<extrareasons reason="no-response" count="65533" proto="tcp" ports="1-79,81-442,444-65535"/>
|
||||
</extraports>
|
||||
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="52"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
@@ -53,12 +49,7 @@
|
||||
</table>
|
||||
</script><script id="http-title" output="Did not follow redirect to https://kuma.lan.ddnsgeek.com/"><elem key="redirect_url">https://kuma.lan.ddnsgeek.com/</elem>
|
||||
</script></port>
|
||||
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-methods" output="
 Supported Methods: GET HEAD POST"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
</table>
|
||||
</script><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com
Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-01T19:44:43
Not valid after: 2026-06-30T19:44:42
MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com
Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-01T19:44:43
Not valid after: 2026-06-30T19:44:42
MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">kuma.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
@@ -125,71 +116,71 @@
|
||||
<elem key="sha1">a08d7799f3efcb179052958c43c5eeb5d6b559c1</elem>
|
||||
<elem key="sha256">0c923f5eb8618c91b8a8f4bf1cb87d80f07addc83c4b8ed9547890cfb482512b</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="http-title" output="Uptime Kuma
Requested resource was /dashboard"><elem key="title">Uptime Kuma</elem>
|
||||
<elem key="redirect_url">/dashboard</elem>
|
||||
</script><script id="http-robots.txt" output="1 disallowed entry 
/"/><script id="http-favicon" output="Unknown favicon MD5: 5EA4B467D984433398E1037469F13214"/></port>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Site doesn't have a title (text/plain; charset=utf-8)."></script></port>
|
||||
</ports>
|
||||
<os><portused state="open" proto="tcp" portid="80"/>
|
||||
<osmatch name="Linux 4.15 - 5.19" accuracy="93" line="70534">
|
||||
<osmatch name="Linux 4.15 - 5.19" accuracy="93" line="71007">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 4.19" accuracy="93" line="70644">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:4.19</cpe></osclass>
|
||||
<osmatch name="Linux 4.19" accuracy="92" line="71117">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:4.19</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 5.0 - 5.14" accuracy="93" line="71713">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
|
||||
<osmatch name="Linux 5.0 - 5.14" accuracy="92" line="72205">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="OpenWrt 21.02 (Linux 5.4)" accuracy="93" line="72530">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
|
||||
<osmatch name="OpenWrt 21.02 (Linux 5.4)" accuracy="92" line="73083">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3)" accuracy="93" line="91792">
|
||||
<osclass type="router" vendor="MikroTik" osfamily="RouterOS" osgen="7.X" accuracy="93"><cpe>cpe:/o:mikrotik:routeros:7</cpe></osclass>
|
||||
<osclass type="router" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5.6.3</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 6.0" accuracy="92" line="72657">
|
||||
<osmatch name="Linux 6.0" accuracy="92" line="73210">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:6.0</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 5.4 - 5.10" accuracy="87" line="72380">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
|
||||
<osmatch name="MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3)" accuracy="92" line="92909">
|
||||
<osclass type="router" vendor="MikroTik" osfamily="RouterOS" osgen="7.X" accuracy="92"><cpe>cpe:/o:mikrotik:routeros:7</cpe></osclass>
|
||||
<osclass type="router" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5.6.3</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 2.6.32" accuracy="87" line="58659">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:2.6.32</cpe></osclass>
|
||||
<osmatch name="Linux 6.15" accuracy="89" line="73426">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="89"><cpe>cpe:/o:linux:linux_kernel:6.15</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 2.6.32 - 3.13" accuracy="87" line="59907">
|
||||
<osmatch name="Linux 2.6.32 - 3.13" accuracy="87" line="60380">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 3.10" accuracy="87" line="66222">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3.10</cpe></osclass>
|
||||
<osmatch name="Linux 3.2 - 4.14" accuracy="87" line="68905">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
|
||||
</osmatch>
|
||||
<osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D21921%P=x86_64-pc-linux-gnu)
SEQ(SP=103%GCD=1%ISR=10A%TI=Z%TS=A)
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
"/>
|
||||
<osmatch name="Linux 2.6.32 - 3.10" accuracy="86" line="60347">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="86"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="86"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
|
||||
</osmatch>
|
||||
<osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB831%P=x86_64-pc-linux-gnu)
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=F4%GCD=1%ISR=10F%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
"/>
|
||||
</os>
|
||||
<uptime seconds="557085" lastboot="Sun Mar 29 21:26:28 2026"/>
|
||||
<uptime seconds="3203707" lastboot="Sun Mar 8 01:49:42 2026"/>
|
||||
<distance value="10"/>
|
||||
<tcpsequence index="259" difficulty="Good luck!" values="1882BF87,E223B0E5,3D475F85,684C5BAA,29D419F0,A5F66829"/>
|
||||
<tcpsequence index="258" difficulty="Good luck!" values="5456BE21,7D639071,C1173E9B,392B0A61,868287B4,23E95FA1"/>
|
||||
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
|
||||
<tcptssequence class="1000HZ" values="21340C3F,21340CA5,21340D09,21340D6C,21340DD1,21340E37"/>
|
||||
<tcptssequence class="1000HZ" values="BEF48B09,BEF48B6E,BEF48BD3,BEF48C37,BEF48C9C,BEF48D00"/>
|
||||
<trace port="443" proto="tcp">
|
||||
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.07"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.23"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.80"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.102" rtt="10.87" host="lo0-0.gw2.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="104.70.113.22" rtt="0.25" host="ae29.r02.syd01.ien.netarch.akamai.com"/>
|
||||
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.74" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
|
||||
<hop ttl="7" ipaddr="203.50.11.172" rtt="2.57" host="bundle-ether12.hay-core30.sydney.telstra.net"/>
|
||||
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.84" host="ae10.ken-ice301.sydney.telstra.net"/>
|
||||
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.90" host="gateway.nb10.sydney.asp.telstra.net"/>
|
||||
<hop ttl="10" ipaddr="101.180.16.105" rtt="38.80" host="cpe-101-180-16-105.nb10.nsw.asp.telstra.net"/>
|
||||
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.12"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.43"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.81"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.102" rtt="0.43" host="lo0-0.gw2.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="104.70.113.22" rtt="0.41" host="ae29.r02.syd01.ien.netarch.akamai.com"/>
|
||||
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.97" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
|
||||
<hop ttl="7" ipaddr="203.50.11.172" rtt="2.50" host="bundle-ether12.hay-core30.sydney.telstra.net"/>
|
||||
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.91" host="ae10.ken-ice301.sydney.telstra.net"/>
|
||||
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.82" host="gateway.nb10.sydney.asp.telstra.net"/>
|
||||
<hop ttl="10" ipaddr="101.180.16.105" rtt="44.07" host="cpe-101-180-16-105.nb10.nsw.asp.telstra.net"/>
|
||||
</trace>
|
||||
<times srtt="53438" rttvar="23111" to="145882"/>
|
||||
<times srtt="38979" rttvar="3607" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775376673"/>
|
||||
<taskend task="NSE" time="1775376673"/>
|
||||
<taskbegin task="NSE" time="1775376673"/>
|
||||
<taskend task="NSE" time="1775376673"/>
|
||||
<taskbegin task="NSE" time="1775376673"/>
|
||||
<taskend task="NSE" time="1775376673"/>
|
||||
<runstats><finished time="1775376673" timestr="Sun Apr 5 08:11:13 2026" summary="Nmap done at Sun Apr 5 08:11:13 2026; 1 IP address (1 host up) scanned in 394.56 seconds" elapsed="394.56" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776138289"/>
|
||||
<taskend task="NSE" time="1776138289"/>
|
||||
<taskbegin task="NSE" time="1776138289"/>
|
||||
<taskend task="NSE" time="1776138289"/>
|
||||
<taskbegin task="NSE" time="1776138289"/>
|
||||
<taskend task="NSE" time="1776138289"/>
|
||||
<runstats><finished time="1776138289" timestr="Tue Apr 14 03:44:49 2026" summary="Nmap done at Tue Apr 14 03:44:49 2026; 1 IP address (1 host up) scanned in 136.35 seconds" elapsed="136.35" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
@@ -1,36 +1,36 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:04:18 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com" start="1775376258" startstr="Sun Apr 5 08:04:18 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:41:47 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/kuma.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml kuma.lan.ddnsgeek.com" start="1776138107" startstr="Tue Apr 14 03:41:47 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1000" services="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3006,3011,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5985-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376265"/>
|
||||
<taskend task="NSE" time="1775376265"/>
|
||||
<taskbegin task="NSE" time="1775376265"/>
|
||||
<taskend task="NSE" time="1775376265"/>
|
||||
<taskbegin task="NSE" time="1775376265"/>
|
||||
<taskend task="NSE" time="1775376265"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376265"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376265"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376265"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376266"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376266"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376271" extrainfo="1000 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376274"/>
|
||||
<taskend task="Service scan" time="1775376288" extrainfo="2 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1775376293"/>
|
||||
<taskend task="Traceroute" time="1775376293"/>
|
||||
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1775376293"/>
|
||||
<taskend task="Parallel DNS resolution of 9 hosts." time="1775376294"/>
|
||||
<taskbegin task="NSE" time="1775376294"/>
|
||||
<taskend task="NSE" time="1775376302"/>
|
||||
<taskbegin task="NSE" time="1775376302"/>
|
||||
<taskend task="NSE" time="1775376305"/>
|
||||
<taskbegin task="NSE" time="1775376305"/>
|
||||
<taskend task="NSE" time="1775376305"/>
|
||||
<host starttime="1775376266" endtime="1775376305"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776138108"/>
|
||||
<taskend task="NSE" time="1776138108"/>
|
||||
<taskbegin task="NSE" time="1776138108"/>
|
||||
<taskend task="NSE" time="1776138108"/>
|
||||
<taskbegin task="NSE" time="1776138108"/>
|
||||
<taskend task="NSE" time="1776138108"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138108"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138108"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138108"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138108"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776138108"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776138114" extrainfo="1000 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776138115"/>
|
||||
<taskend task="Service scan" time="1776138140" extrainfo="2 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1776138144"/>
|
||||
<taskend task="Traceroute" time="1776138144"/>
|
||||
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1776138144"/>
|
||||
<taskend task="Parallel DNS resolution of 9 hosts." time="1776138145"/>
|
||||
<taskbegin task="NSE" time="1776138145"/>
|
||||
<taskend task="NSE" time="1776138150"/>
|
||||
<taskbegin task="NSE" time="1776138150"/>
|
||||
<taskend task="NSE" time="1776138152"/>
|
||||
<taskbegin task="NSE" time="1776138152"/>
|
||||
<taskend task="NSE" time="1776138152"/>
|
||||
<host starttime="1776138108" endtime="1776138152"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="101.180.16.105" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
|
||||
@@ -47,12 +47,7 @@
|
||||
</table>
|
||||
</script><script id="http-title" output="Did not follow redirect to https://kuma.lan.ddnsgeek.com/"><elem key="redirect_url">https://kuma.lan.ddnsgeek.com/</elem>
|
||||
</script></port>
|
||||
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="52"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-robots.txt" output="1 disallowed entry 
/"/><script id="http-methods" output="
 Supported Methods: GET HEAD POST"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
</table>
|
||||
</script><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com
Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-01T19:44:43
Not valid after: 2026-06-30T19:44:42
MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD
ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT
pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR
WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z
lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy
2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF
MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+
BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp
5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr
NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D
XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx
JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC
IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY
MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s
YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw
IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5
AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA
AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO
AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/
4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh
2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI
3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L
2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P
DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG
HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU
6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc
nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
ssZpBGM=
-----END CERTIFICATE-----
"><table key="subject">
|
||||
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="53"/><service name="https" tunnel="ssl" method="probed" conf="10"/><script id="http-title" output="Site doesn't have a title (text/plain; charset=utf-8)."></script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="ssl-cert" output="Subject: commonName=kuma.lan.ddnsgeek.com
Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-01T19:44:43
Not valid after: 2026-06-30T19:44:42
MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">kuma.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
@@ -119,73 +114,69 @@
|
||||
<elem key="sha1">a08d7799f3efcb179052958c43c5eeb5d6b559c1</elem>
|
||||
<elem key="sha256">0c923f5eb8618c91b8a8f4bf1cb87d80f07addc83c4b8ed9547890cfb482512b</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Uptime Kuma
Requested resource was /dashboard"><elem key="title">Uptime Kuma</elem>
|
||||
<elem key="redirect_url">/dashboard</elem>
|
||||
</script><script id="http-favicon" output="Unknown favicon MD5: 5EA4B467D984433398E1037469F13214"/></port>
|
||||
</script></port>
|
||||
</ports>
|
||||
<os><portused state="open" proto="tcp" portid="80"/>
|
||||
<osmatch name="Linux 4.15 - 5.19" accuracy="93" line="70534">
|
||||
<osmatch name="Linux 4.15 - 5.19" accuracy="93" line="71007">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 5.0 - 5.14" accuracy="93" line="71713">
|
||||
<osmatch name="Linux 4.19" accuracy="93" line="71117">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:4.19</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 5.0 - 5.14" accuracy="93" line="72205">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 4.19" accuracy="92" line="70644">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:4.19</cpe></osclass>
|
||||
<osmatch name="OpenWrt 21.02 (Linux 5.4)" accuracy="93" line="73083">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="OpenWrt 21.02 (Linux 5.4)" accuracy="92" line="72530">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
|
||||
<osmatch name="MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3)" accuracy="93" line="92909">
|
||||
<osclass type="router" vendor="MikroTik" osfamily="RouterOS" osgen="7.X" accuracy="93"><cpe>cpe:/o:mikrotik:routeros:7</cpe></osclass>
|
||||
<osclass type="router" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="93"><cpe>cpe:/o:linux:linux_kernel:5.6.3</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3)" accuracy="92" line="91792">
|
||||
<osclass type="router" vendor="MikroTik" osfamily="RouterOS" osgen="7.X" accuracy="92"><cpe>cpe:/o:mikrotik:routeros:7</cpe></osclass>
|
||||
<osclass type="router" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:5.6.3</cpe></osclass>
|
||||
<osmatch name="Linux 6.0" accuracy="92" line="73210">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="92"><cpe>cpe:/o:linux:linux_kernel:6.0</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 6.0" accuracy="90" line="72657">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="90"><cpe>cpe:/o:linux:linux_kernel:6.0</cpe></osclass>
|
||||
<osmatch name="Linux 6.15" accuracy="90" line="73426">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="90"><cpe>cpe:/o:linux:linux_kernel:6.15</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 2.6.32" accuracy="87" line="58659">
|
||||
<osmatch name="Linux 5.4 - 5.10" accuracy="87" line="72914">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:5</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 2.6.32" accuracy="87" line="59132">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:2.6.32</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 2.6.32 - 3.13" accuracy="87" line="59907">
|
||||
<osmatch name="Linux 2.6.32 - 3.13" accuracy="87" line="60380">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 3.10 - 4.11" accuracy="87" line="66652">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
|
||||
</osmatch>
|
||||
<osmatch name="Linux 3.2 - 4.14" accuracy="87" line="68432">
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:3</cpe></osclass>
|
||||
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
|
||||
</osmatch>
|
||||
<osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69D217B1%P=x86_64-pc-linux-gnu)
SEQ(SP=105%GCD=1%ISR=101%TI=Z%TS=A)
SEQ(SP=105%GCD=1%ISR=10C%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
"/>
|
||||
<osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=Y%DS=10%DC=T%G=N%TM=69DDB7A8%P=x86_64-pc-linux-gnu)
SEQ(SP=102%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=104%GCD=1%ISR=109%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
U1(R=N)
IE(R=N)
"/>
|
||||
</os>
|
||||
<uptime seconds="556717" lastboot="Sun Mar 29 21:26:28 2026"/>
|
||||
<uptime seconds="3203570" lastboot="Sun Mar 8 01:49:42 2026"/>
|
||||
<distance value="10"/>
|
||||
<tcpsequence index="261" difficulty="Good luck!" values="59FF8C96,9D4DCFBE,96946CE0,31E6D252,CFBDEF83,7BA98389"/>
|
||||
<tcpsequence index="260" difficulty="Good luck!" values="35D67B07,C6234E83,F5F32B0F,A7A9BD85,8F4A13DC,7738548D"/>
|
||||
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
|
||||
<tcptssequence class="1000HZ" values="212E9DEC,212E9E54,212E9EB9,212E9F1D,212E9F83,212E9FE9"/>
|
||||
<tcptssequence class="1000HZ" values="BEF2762A,BEF2768D,BEF276F2,BEF27756,BEF277BA,BEF2781E"/>
|
||||
<trace port="443" proto="tcp">
|
||||
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.12"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.25"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.91"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.93" host="lo0-0.gw1.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="104.70.113.22" rtt="0.27" host="ae29.r02.syd01.ien.netarch.akamai.com"/>
|
||||
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.66" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
|
||||
<hop ttl="7" ipaddr="203.50.12.130" rtt="1.79" host="bundle-ether50.hay-core30.sydney.telstra.net"/>
|
||||
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.96" host="ae10.ken-ice301.sydney.telstra.net"/>
|
||||
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.99" host="gateway.nb10.sydney.asp.telstra.net"/>
|
||||
<hop ttl="10" ipaddr="101.180.16.105" rtt="41.72" host="cpe-101-180-16-105.nb10.nsw.asp.telstra.net"/>
|
||||
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.32"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.35"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.1" rtt="0.85"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.102" rtt="0.38" host="lo0-0.gw2.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="104.70.113.22" rtt="0.36" host="ae29.r02.syd01.ien.netarch.akamai.com"/>
|
||||
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.45" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
|
||||
<hop ttl="7" ipaddr="203.50.12.130" rtt="1.05" host="bundle-ether50.hay-core30.sydney.telstra.net"/>
|
||||
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.80" host="ae10.ken-ice301.sydney.telstra.net"/>
|
||||
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.89" host="gateway.nb10.sydney.asp.telstra.net"/>
|
||||
<hop ttl="10" ipaddr="101.180.16.105" rtt="33.83" host="cpe-101-180-16-105.nb10.nsw.asp.telstra.net"/>
|
||||
</trace>
|
||||
<times srtt="40202" rttvar="3040" to="100000"/>
|
||||
<times srtt="37523" rttvar="3193" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775376305"/>
|
||||
<taskend task="NSE" time="1775376305"/>
|
||||
<taskbegin task="NSE" time="1775376305"/>
|
||||
<taskend task="NSE" time="1775376305"/>
|
||||
<taskbegin task="NSE" time="1775376305"/>
|
||||
<taskend task="NSE" time="1775376305"/>
|
||||
<runstats><finished time="1775376305" timestr="Sun Apr 5 08:05:05 2026" summary="Nmap done at Sun Apr 5 08:05:05 2026; 1 IP address (1 host up) scanned in 53.02 seconds" elapsed="53.02" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776138152"/>
|
||||
<taskend task="NSE" time="1776138152"/>
|
||||
<taskbegin task="NSE" time="1776138152"/>
|
||||
<taskend task="NSE" time="1776138152"/>
|
||||
<taskbegin task="NSE" time="1776138152"/>
|
||||
<taskend task="NSE" time="1776138152"/>
|
||||
<runstats><finished time="1776138152" timestr="Tue Apr 14 03:42:32 2026" summary="Nmap done at Tue Apr 14 03:42:32 2026; 1 IP address (1 host up) scanned in 45.09 seconds" elapsed="45.09" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
@@ -1,70 +1,70 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:05:19 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com" start="1775376319" startstr="Sun Apr 5 08:05:19 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:44:21 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/kuma.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml kuma.lan.ddnsgeek.com" start="1776138261" startstr="Tue Apr 14 03:44:21 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="udp" protocol="udp" numservices="100" services="7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376353"/>
|
||||
<taskend task="NSE" time="1775376354"/>
|
||||
<taskbegin task="NSE" time="1775376354"/>
|
||||
<taskend task="NSE" time="1775376354"/>
|
||||
<taskbegin task="NSE" time="1775376354"/>
|
||||
<taskend task="NSE" time="1775376354"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376354"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376355"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376355"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376355"/>
|
||||
<taskbegin task="UDP Scan" time="1775376355"/>
|
||||
<taskend task="UDP Scan" time="1775376371" extrainfo="100 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376371"/>
|
||||
<taskprogress task="Service scan" time="1775376470" percent="1.00" remaining="9802" etc="1775386271"/>
|
||||
<taskprogress task="Service scan" time="1775376568" percent="31.00" remaining="439" etc="1775377006"/>
|
||||
<taskprogress task="Service scan" time="1775376667" percent="61.00" remaining="190" etc="1775376856"/>
|
||||
<taskprogress task="Service scan" time="1775376770" percent="91.00" remaining="40" etc="1775376809"/>
|
||||
<taskend task="Service scan" time="1775376776" extrainfo="100 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1775376784"/>
|
||||
<taskend task="Traceroute" time="1775376793"/>
|
||||
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1775376793"/>
|
||||
<taskend task="Parallel DNS resolution of 9 hosts." time="1775376794"/>
|
||||
<taskbegin task="NSE" time="1775376795"/>
|
||||
<taskprogress task="NSE" time="1775376829" percent="82.30" remaining="8" etc="1775376836"/>
|
||||
<taskprogress task="NSE" time="1775376859" percent="91.78" remaining="6" etc="1775376865"/>
|
||||
<taskprogress task="NSE" time="1775376889" percent="98.87" remaining="2" etc="1775376890"/>
|
||||
<taskprogress task="NSE" time="1775376919" percent="99.36" remaining="1" etc="1775376920"/>
|
||||
<taskprogress task="NSE" time="1775376949" percent="99.38" remaining="1" etc="1775376950"/>
|
||||
<taskprogress task="NSE" time="1775376979" percent="99.40" remaining="2" etc="1775376980"/>
|
||||
<taskprogress task="NSE" time="1775377009" percent="99.43" remaining="2" etc="1775377010"/>
|
||||
<taskprogress task="NSE" time="1775377039" percent="99.45" remaining="2" etc="1775377040"/>
|
||||
<taskprogress task="NSE" time="1775377069" percent="99.47" remaining="2" etc="1775377070"/>
|
||||
<taskprogress task="NSE" time="1775377099" percent="99.49" remaining="2" etc="1775377101"/>
|
||||
<taskprogress task="NSE" time="1775377129" percent="99.51" remaining="2" etc="1775377131"/>
|
||||
<taskprogress task="NSE" time="1775377159" percent="99.54" remaining="2" etc="1775377161"/>
|
||||
<taskprogress task="NSE" time="1775377189" percent="99.57" remaining="2" etc="1775377191"/>
|
||||
<taskprogress task="NSE" time="1775377219" percent="99.60" remaining="2" etc="1775377221"/>
|
||||
<taskprogress task="NSE" time="1775377249" percent="99.62" remaining="2" etc="1775377251"/>
|
||||
<taskprogress task="NSE" time="1775377279" percent="99.64" remaining="2" etc="1775377281"/>
|
||||
<taskprogress task="NSE" time="1775377309" percent="99.66" remaining="2" etc="1775377311"/>
|
||||
<taskprogress task="NSE" time="1775377339" percent="99.69" remaining="2" etc="1775377341"/>
|
||||
<taskprogress task="NSE" time="1775377369" percent="99.71" remaining="2" etc="1775377371"/>
|
||||
<taskprogress task="NSE" time="1775377399" percent="99.74" remaining="2" etc="1775377401"/>
|
||||
<taskprogress task="NSE" time="1775377429" percent="99.76" remaining="2" etc="1775377431"/>
|
||||
<taskprogress task="NSE" time="1775377459" percent="99.78" remaining="2" etc="1775377460"/>
|
||||
<taskprogress task="NSE" time="1775377490" percent="99.81" remaining="2" etc="1775377491"/>
|
||||
<taskprogress task="NSE" time="1775377520" percent="99.83" remaining="2" etc="1775377521"/>
|
||||
<taskprogress task="NSE" time="1775377550" percent="99.86" remaining="2" etc="1775377551"/>
|
||||
<taskprogress task="NSE" time="1775377580" percent="99.89" remaining="1" etc="1775377581"/>
|
||||
<taskprogress task="NSE" time="1775377610" percent="99.91" remaining="1" etc="1775377611"/>
|
||||
<taskprogress task="NSE" time="1775377640" percent="99.94" remaining="1" etc="1775377641"/>
|
||||
<taskprogress task="NSE" time="1775377670" percent="99.96" remaining="1" etc="1775377670"/>
|
||||
<taskprogress task="NSE" time="1775377700" percent="99.99" remaining="1" etc="1775377700"/>
|
||||
<taskend task="NSE" time="1775377712"/>
|
||||
<taskbegin task="NSE" time="1775377713"/>
|
||||
<taskend task="NSE" time="1775377731"/>
|
||||
<taskbegin task="NSE" time="1775377731"/>
|
||||
<taskend task="NSE" time="1775377733"/>
|
||||
<host starttime="1775376360" endtime="1775377733"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776138262"/>
|
||||
<taskend task="NSE" time="1776138262"/>
|
||||
<taskbegin task="NSE" time="1776138262"/>
|
||||
<taskend task="NSE" time="1776138262"/>
|
||||
<taskbegin task="NSE" time="1776138262"/>
|
||||
<taskend task="NSE" time="1776138262"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138262"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138262"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138262"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138262"/>
|
||||
<taskbegin task="UDP Scan" time="1776138262"/>
|
||||
<taskend task="UDP Scan" time="1776138274" extrainfo="100 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776138274"/>
|
||||
<taskprogress task="Service scan" time="1776138392" percent="1.00" remaining="11682" etc="1776150074"/>
|
||||
<taskprogress task="Service scan" time="1776138511" percent="31.00" remaining="528" etc="1776139039"/>
|
||||
<taskprogress task="Service scan" time="1776138614" percent="61.00" remaining="218" etc="1776138831"/>
|
||||
<taskprogress task="Service scan" time="1776138747" percent="91.00" remaining="47" etc="1776138794"/>
|
||||
<taskend task="Service scan" time="1776138752" extrainfo="100 services on 1 host"/>
|
||||
<taskbegin task="Traceroute" time="1776138759"/>
|
||||
<taskend task="Traceroute" time="1776138768"/>
|
||||
<taskbegin task="Parallel DNS resolution of 9 hosts." time="1776138768"/>
|
||||
<taskend task="Parallel DNS resolution of 9 hosts." time="1776138768"/>
|
||||
<taskbegin task="NSE" time="1776138768"/>
|
||||
<taskprogress task="NSE" time="1776138815" percent="91.75" remaining="5" etc="1776138819"/>
|
||||
<taskprogress task="NSE" time="1776138891" percent="92.22" remaining="11" etc="1776138901"/>
|
||||
<taskprogress task="NSE" time="1776138926" percent="92.64" remaining="13" etc="1776138939"/>
|
||||
<taskprogress task="NSE" time="1776138956" percent="97.96" remaining="4" etc="1776138960"/>
|
||||
<taskprogress task="NSE" time="1776138986" percent="99.34" remaining="2" etc="1776138987"/>
|
||||
<taskprogress task="NSE" time="1776139016" percent="99.36" remaining="2" etc="1776139018"/>
|
||||
<taskprogress task="NSE" time="1776139046" percent="99.38" remaining="2" etc="1776139048"/>
|
||||
<taskprogress task="NSE" time="1776139076" percent="99.41" remaining="2" etc="1776139078"/>
|
||||
<taskprogress task="NSE" time="1776139106" percent="99.43" remaining="2" etc="1776139108"/>
|
||||
<taskprogress task="NSE" time="1776139136" percent="99.45" remaining="3" etc="1776139138"/>
|
||||
<taskprogress task="NSE" time="1776139167" percent="99.46" remaining="3" etc="1776139169"/>
|
||||
<taskprogress task="NSE" time="1776139198" percent="99.46" remaining="3" etc="1776139200"/>
|
||||
<taskprogress task="NSE" time="1776139228" percent="99.49" remaining="3" etc="1776139230"/>
|
||||
<taskprogress task="NSE" time="1776139258" percent="99.51" remaining="3" etc="1776139260"/>
|
||||
<taskprogress task="NSE" time="1776139288" percent="99.54" remaining="3" etc="1776139290"/>
|
||||
<taskprogress task="NSE" time="1776139318" percent="99.58" remaining="3" etc="1776139320"/>
|
||||
<taskprogress task="NSE" time="1776139348" percent="99.61" remaining="3" etc="1776139350"/>
|
||||
<taskprogress task="NSE" time="1776139378" percent="99.64" remaining="3" etc="1776139380"/>
|
||||
<taskprogress task="NSE" time="1776139408" percent="99.66" remaining="3" etc="1776139410"/>
|
||||
<taskprogress task="NSE" time="1776139438" percent="99.69" remaining="3" etc="1776139440"/>
|
||||
<taskprogress task="NSE" time="1776139468" percent="99.72" remaining="2" etc="1776139470"/>
|
||||
<taskprogress task="NSE" time="1776139498" percent="99.75" remaining="2" etc="1776139500"/>
|
||||
<taskprogress task="NSE" time="1776139528" percent="99.79" remaining="2" etc="1776139530"/>
|
||||
<taskprogress task="NSE" time="1776139558" percent="99.81" remaining="2" etc="1776139559"/>
|
||||
<taskprogress task="NSE" time="1776139588" percent="99.84" remaining="2" etc="1776139589"/>
|
||||
<taskprogress task="NSE" time="1776139618" percent="99.87" remaining="2" etc="1776139619"/>
|
||||
<taskprogress task="NSE" time="1776139648" percent="99.90" remaining="1" etc="1776139649"/>
|
||||
<taskprogress task="NSE" time="1776139678" percent="99.93" remaining="1" etc="1776139679"/>
|
||||
<taskprogress task="NSE" time="1776139708" percent="99.96" remaining="1" etc="1776139708"/>
|
||||
<taskprogress task="NSE" time="1776139738" percent="99.99" remaining="1" etc="1776139738"/>
|
||||
<taskend task="NSE" time="1776139741"/>
|
||||
<taskbegin task="NSE" time="1776139741"/>
|
||||
<taskend task="NSE" time="1776139749"/>
|
||||
<taskbegin task="NSE" time="1776139749"/>
|
||||
<taskend task="NSE" time="1776139749"/>
|
||||
<host starttime="1776138263" endtime="1776139749"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="101.180.16.105" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="kuma.lan.ddnsgeek.com" type="user"/>
|
||||
@@ -74,26 +74,26 @@
|
||||
<extrareasons reason="no-response" count="100" proto="udp" ports="7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024"/>
|
||||
</extraports>
|
||||
</ports>
|
||||
<os><osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=Y%G=N%TM=69D21D47%P=x86_64-pc-linux-gnu)
SEQ()
U1(R=N)
IE(R=N)
"/>
|
||||
<os><osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=Y%G=N%TM=69DDBDE5%P=x86_64-pc-linux-gnu)
SEQ()
U1(R=N)
IE(R=N)
"/>
|
||||
</os>
|
||||
<trace proto="icmp">
|
||||
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.08"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.21"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.87"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.38" host="lo0-0.gw1.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="104.70.113.20" rtt="0.32" host="ae19.r01.syd01.ien.netarch.akamai.com"/>
|
||||
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.35" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
|
||||
<hop ttl="7" ipaddr="203.50.11.172" rtt="2.29" host="bundle-ether12.hay-core30.sydney.telstra.net"/>
|
||||
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.19"/>
|
||||
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.90"/>
|
||||
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.58" host="lo0-0.gw1.syd1.au.linode.com"/>
|
||||
<hop ttl="5" ipaddr="104.70.113.20" rtt="0.25" host="ae19.r01.syd01.ien.netarch.akamai.com"/>
|
||||
<hop ttl="6" ipaddr="203.54.231.153" rtt="1.71" host="Bundle-Ether96.ken-edge903.sydney.telstra.net"/>
|
||||
<hop ttl="7" ipaddr="203.50.11.172" rtt="1.91" host="bundle-ether12.hay-core30.sydney.telstra.net"/>
|
||||
<hop ttl="8" ipaddr="203.50.61.81" rtt="0.82" host="ae10.ken-ice301.sydney.telstra.net"/>
|
||||
<hop ttl="9" ipaddr="58.162.26.74" rtt="5.08" host="gateway.nb10.sydney.asp.telstra.net"/>
|
||||
<hop ttl="9" ipaddr="58.162.26.74" rtt="0.87" host="gateway.nb10.sydney.asp.telstra.net"/>
|
||||
</trace>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775377735"/>
|
||||
<taskend task="NSE" time="1775377735"/>
|
||||
<taskbegin task="NSE" time="1775377735"/>
|
||||
<taskend task="NSE" time="1775377735"/>
|
||||
<taskbegin task="NSE" time="1775377735"/>
|
||||
<taskend task="NSE" time="1775377736"/>
|
||||
<runstats><finished time="1775377737" timestr="Sun Apr 5 08:28:57 2026" summary="Nmap done at Sun Apr 5 08:28:57 2026; 1 IP address (1 host up) scanned in 1430.00 seconds" elapsed="1430.00" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776139749"/>
|
||||
<taskend task="NSE" time="1776139749"/>
|
||||
<taskbegin task="NSE" time="1776139749"/>
|
||||
<taskend task="NSE" time="1776139749"/>
|
||||
<taskbegin task="NSE" time="1776139749"/>
|
||||
<taskend task="NSE" time="1776139749"/>
|
||||
<runstats><finished time="1776139749" timestr="Tue Apr 14 04:09:09 2026" summary="Nmap done at Tue Apr 14 04:09:09 2026; 1 IP address (1 host up) scanned in 1488.91 seconds" elapsed="1488.91" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user