beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt
+67 -189
View File
@@ -1,166 +1,12 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:05:15 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
Host is up, received user-set (0.035s latency).
Host is up, received user-set (0.037s latency).
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
Scanned at 2026-04-05 08:05:54 UTC for 467s
Scanned at 2026-04-14 03:42:37 UTC for 357s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 53 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: /dashboard
| Allowed User Agents:
| libwww
| lwp-trivial
| libcurl-agent/1.0
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
| PHP/: 404
| PHPCrawl: 404
|_ Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_ssl-date: TLS randomness does not represent time
|_http-favicon: Unknown favicon MD5: 5EA4B467D984433398E1037469F13214
| http-drupal-enum:
| Modules:
| views
| token
| ctools
| pathauto
| libraries
| entity
| admin_menu
| date
| imce
| jquery_update
| ckeditor
| wysiwyg
| link
| webform
| backup_migrate
| rules
| module_filter
| google_analytics
| views_slideshow
| features
| xmlsitemap
| metatag
| captcha
| colorbox
| media
| entityreference
| panels
| field_group
| devel
| views_bulk_operations
| menu_block
| transliteration
| l10n_update
| imce_wysiwyg
| globalredirect
| variable
| i18n
| context
| imageapi
| advanced_help
| filefield
| email
| page_title
| lightbox2
| ds
| strongarm
| superfish
| imagefield
| calendar
| imagecache
| references
| field_collection
| block_class
| job_scheduler
| menu_attributes
| redirect
| addressfield
| mailsystem
| nice_menus
| diff
| flexslider
| taxonomy_menu
| file_entity
| feeds
| media_youtube
| node_clone
| admin_views
| smtp
| special_menu_items
| auto_nodetitle
| jquery_ui
| insert
| cck
| quicktabs
| mimemail
| views_php
| content_access
| jcarousel
| print
| plupload
| votingapi
| poormanscron
| simplenews
| filefield_sources
| extlink
| honeypot
| facetapi
| logintoboggan
| search_api
| uuid
| commerce
| custom_breadcrumbs
| views_data_export
| oauth
| better_formats
| site_verify
| location
| fontyourface
| masquerade
|_ imce_mkdir
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1; png: 1; svg: 1
| /assets/
| css: 1; js: 2
| Longest directory structure:
| Depth: 1
| Dir: /assets/
| Total files found (by extension):
|_ Other: 1; css: 1; js: 2; json: 1; png: 1; svg: 1
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
|_http-mobileversion-checker: No mobile version detected.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-errors: ERROR: Script execution failed (use -d to debug)
|_http-comments-displayer: Couldn't find any comments.
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-trane-info: Problem with XML parsing of /evox/about
|_http-php-version: Credits query returned unknown hash 3b299781d582f5b522a0a6f14dfd9268
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-date: Sun, 05 Apr 2026 08:06:30 GMT; -1s from local time.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-vhosts:
|_128 names had status 404
|_http-malware-host: Host appears to be clean
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/https syn-ack ttl 53
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
@@ -181,38 +27,63 @@ PORT STATE SERVICE REASON VERSION
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-feed: Couldn't find any feeds.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-date: Tue, 14 Apr 2026 03:42:53 GMT; -5s from local time.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| HSTS not configured in HTTPS Server
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-headers:
| Content-Length: 2444
| Content-Type: text/html; charset=utf-8
| Date: Sun, 05 Apr 2026 08:07:06 GMT
| Etag: W/"98c-RxUaxZHFr+/FSabMqXO58T7mz+U"
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Frame-Options: SAMEORIGIN
| X-Xss-Protection: 1; mode=block
| Connection: close
| http-errors:
| Spidering limited to: maxpagecount=40; withinhost=kuma.lan.ddnsgeek.com
| Found the following error pages:
|
|_ (Request type: HEAD)
|_http-chrono: Request times for /; avg: 33701.34ms; min: 1061.83ms; max: 134159.26ms
| http-robots.txt: 1 disallowed entry
|_/
| http-title: Uptime Kuma
|_Requested resource was /dashboard
| Error Code: 404
|_ http://kuma.lan.ddnsgeek.com:443/
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
| http-vhosts:
|_128 names had status 404
| http-useragent-tester:
| Status for browser useragent: 404
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-chrono: Request times for /; avg: 501.71ms; min: 433.96ms; max: 693.82ms
|_http-malware-host: Host appears to be clean
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-mobileversion-checker: No mobile version detected.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_ssl-date: TLS randomness does not represent time
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_http-comments-displayer: Couldn't find any comments.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -259,10 +130,17 @@ PORT STATE SERVICE REASON VERSION
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
| ssZpBGM=
|_-----END CERTIFICATE-----
| http-waf-detect: IDS/IPS/WAF detected:
|_kuma.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-feed: Couldn't find any feeds.
| http-headers:
| Content-Type: text/plain; charset=utf-8
| X-Content-Type-Options: nosniff
| Date: Tue, 14 Apr 2026 03:43:08 GMT
| Content-Length: 19
| Connection: close
|
|_ (Request type: GET)
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:13:42 2026 -- 1 IP address (1 host up) scanned in 509.39 seconds
# Nmap done at Tue Apr 14 03:48:35 2026 -- 1 IP address (1 host up) scanned in 361.55 seconds