fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,7 +1,7 @@
|
||||
HTTP/2 200
|
||||
accept-ranges: bytes
|
||||
content-type: text/plain; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 08:15:05 GMT
|
||||
date: Tue, 14 Apr 2026 03:48:59 GMT
|
||||
etag: "1a-64e41fd0d5664"
|
||||
last-modified: Mon, 30 Mar 2026 18:26:25 GMT
|
||||
referrer-policy: no-referrer
|
||||
@@ -15,4 +15,4 @@ x-xss-protection: 1; mode=block
|
||||
content-length: 26
|
||||
|
||||
User-agent: *
|
||||
Disallow: /
|
||||
Disallow: /
|
||||
@@ -1,16 +1,16 @@
|
||||
HTTP/2 302
|
||||
content-security-policy: default-src 'self'; script-src 'self' 'nonce-0UjAoEIy1Rabnj72oZ1MOexz4/Jo1zf+kWHhit5OsFg='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
content-security-policy: default-src 'self'; script-src 'self' 'nonce-dPrOadKHeACGSW0T3+sYeu/ZJfuEvLOXAGkQZNN2WNo='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
content-type: text/html; charset=UTF-8
|
||||
date: Sun, 05 Apr 2026 08:15:07 GMT
|
||||
date: Tue, 14 Apr 2026 03:48:59 GMT
|
||||
location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
referrer-policy: no-referrer
|
||||
server: Apache/2.4.66 (Debian)
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: oc_sessionPassphrase=Qe9VfIvKEADVVKypzMAh9bod76L%2BO9pllh2SFfHSV9qilitYJE4V6f0E2h8mXiocS%2F9WjZgYB5qZJFhGfKXnNlbkJ7UL9%2FPeJVKhCuXEOVCJ4nhjMBP3igQmb%2BAiBYKm; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=9e45361fa989bdb4c67c4ff553384b13; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: oc_sessionPassphrase=y8j7u7X8JXPxNFeCmTzyiB3t78UaqwatD6dRDbon5UtfgbUaAUQCHqIrPaj9u8G0tXXFSw35R55svDq%2Fe4Z7wEJQO2MQPPRIxUt5OCbB9eGx2NI6G0Wrdbha4m5s52bg; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=9e45361fa989bdb4c67c4ff553384b13; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
set-cookie: ocexfs76yoe2=e967eb027dcffbc8de5b9970ea4f1d49; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=9e45361fa989bdb4c67c4ff553384b13; path=/; secure; HttpOnly; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
@@ -20,4 +20,3 @@ x-robots-tag: noindex, nofollow
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 0
|
||||
|
||||
|
||||
+11
-10
@@ -283,28 +283,28 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/dashboard
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/logreader
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/photos
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/dashboard
|
||||
200 GET 494l 1557w 31067c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files_pdfviewer
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/activity
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/photos
|
||||
200 GET 93l 341w 16047c https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/settings/user/security
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/settings/user/security
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.jsp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.jsp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.jsp
|
||||
200 GET 6l 12w 281c https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
200 GET 1l 5w 77c https://nextcloud.lan.ddnsgeek.com/cron.php
|
||||
200 GET 12l 31w 331c https://nextcloud.lan.ddnsgeek.com/index.html
|
||||
@@ -313,3 +313,4 @@ Configuration {
|
||||
200 GET 1l 1w 170c https://nextcloud.lan.ddnsgeek.com/status.php
|
||||
200 GET 0l 0w 0c https://nextcloud.lan.ddnsgeek.com/version.php
|
||||
200 GET 661l 5535w 34520c https://nextcloud.lan.ddnsgeek.com/COPYING
|
||||
404 GET 0l 0w 64c https://nextcloud.lan.ddnsgeek.com/spreadsheets.aspx
|
||||
@@ -2,16 +2,16 @@ HTTP/2 200
|
||||
cache-control: no-cache, no-store, must-revalidate
|
||||
content-security-policy: default-src 'none';base-uri 'none';manifest-src 'self';frame-ancestors 'none'
|
||||
content-type: text/plain;charset=UTF-8
|
||||
date: Sun, 05 Apr 2026 08:15:04 GMT
|
||||
date: Tue, 14 Apr 2026 03:48:59 GMT
|
||||
feature-policy: autoplay 'none';camera 'none';fullscreen 'none';geolocation 'none';microphone 'none';payment 'none'
|
||||
referrer-policy: no-referrer
|
||||
server: Apache/2.4.66 (Debian)
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: oc_sessionPassphrase=wMD2r4bjh3qzFmpNL0NjJILFcgpYM7BaIp9xoMpv24WNwSUdpi3tOs5%2FTjqdmUplkJf6bjitdDnd3ItEf4g2yfB7kyCENUGFDsaqdH23YmQe7xumvAbfzZt5w0IdtZc4; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=fae5003f49421836c006ef3a07b86baa; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: oc_sessionPassphrase=%2FsEu5b1GCprHfK4f4G35q%2FYyZ0cTW5%2BFXoWXNvx2ic1CWYPc9VzXGnmHhsyieg5UF8kR5aPq6S2Ia0fAZTCy7VVj1WXwcAeEWMWHQk%2BG%2Fd048AQRTf9OZm0AJLUpO45u; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=fae5003f49421836c006ef3a07b86baa; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
set-cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
set-cookie: ocexfs76yoe2=0e51bcf9950c6c3c1daa59f041984726; path=/; secure; HttpOnly; SameSite=Lax
|
||||
set-cookie: ocexfs76yoe2=fae5003f49421836c006ef3a07b86baa; path=/; secure; HttpOnly; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept-Encoding
|
||||
x-content-type-options: nosniff
|
||||
@@ -19,7 +19,7 @@ x-frame-options: SAMEORIGIN
|
||||
x-nextcloud-well-known: 1
|
||||
x-permitted-cross-domain-policies: none
|
||||
x-powered-by: PHP/8.3.30
|
||||
x-request-id: lt7eKRvu1nrKBoKkjBte
|
||||
x-request-id: hjzokHPO2YT8KgfP9CM3
|
||||
x-robots-tag: noindex, nofollow
|
||||
x-xss-protection: 1; mode=block
|
||||
|
||||
@@ -28,4 +28,4 @@ Expires: 2026-08-31T23:00:00.000Z
|
||||
Acknowledgments: https://hackerone.com/nextcloud/thanks
|
||||
Acknowledgments: https://github.com/nextcloud/security-advisories/security/advisories
|
||||
Policy: https://hackerone.com/nextcloud
|
||||
Preferred-Languages: en
|
||||
Preferred-Languages: en
|
||||
@@ -1,3 +1,22 @@
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -9,14 +28,14 @@
|
||||
CN: nextcloud.lan.ddnsgeek.com
|
||||
SAN: nextcloud.lan.ddnsgeek.com
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
+ Platform: Linux/Unix
|
||||
+ Start Time: 2026-04-05 08:16:11 (GMT0)
|
||||
+ Start Time: 2026-04-14 03:52:13 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: Apache/2.4.66 (Debian)
|
||||
+ [999986] /: Retrieved x-powered-by header: PHP/8.3.30.
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [999100] /index.php/login: Uncommon header(s) 'x-request-id' found, with contents: cM0SfixyCyb80zOKJ4nJ.
|
||||
+ [999100] /index.php/login: Uncommon header(s) 'x-request-id' found, with contents: hSKOqZhlTxLkZaK3GvPG.
|
||||
+ [600625] PHP/8.3.30 appears to be outdated (current is at least 8.5.1).
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999984] /index.html: Server may leak inodes via ETags, header found with file /index.html, inode: 14b, size: 64e41fd0d4aac, mtime: gzip. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1418
|
||||
@@ -1,47 +1,85 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:16:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:49:00 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.026s latency).
|
||||
Host is up, received user-set (0.014s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:16:23 UTC for 705s
|
||||
Scanned at 2026-04-14 03:49:13 UTC for 503s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-server-header: Apache/2.4.66 (Debian)
|
||||
| http-headers:
|
||||
| Cache-Control: no-cache, no-store, must-revalidate
|
||||
| Content-Length: 16047
|
||||
| Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
| Content-Type: text/html; charset=UTF-8
|
||||
| Date: Sun, 05 Apr 2026 08:19:52 GMT
|
||||
| Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
| Referrer-Policy: same-origin
|
||||
| Server: Apache/2.4.66 (Debian)
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: oc_sessionPassphrase=vaA75gLRczK4PR19LRVIdeCUbAH2eyCr84lwC0J%2FRs%2FAJzlQYpiLdt%2BxMWrssNRkSjTrifW2r%2Fg0sWzn7Cact8Zw3rXzotR6z4WBk4sSNdwp4UgXFlUAwNHKCMEVwmfq; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
| Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Permitted-Cross-Domain-Policies: none
|
||||
| X-Powered-By: PHP/8.3.30
|
||||
| X-Request-Id: 8l0zCl9BZ2uwysWABFY8
|
||||
| X-Robots-Tag: noindex, nofollow
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: HEAD)
|
||||
| http-title: Login \xE2\x80\x93 Nextcloud
|
||||
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| http-vhosts:
|
||||
| 127 names had status 404
|
||||
|_auth.lan.ddnsgeek.com : 200
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| ssl-cert: Subject: commonName=nextcloud.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:nextcloud.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-04-10T22:57:14
|
||||
| Not valid after: 2026-07-09T22:57:13
|
||||
| MD5: 3e9f 313a b74d 382e 83fc 5f1a 5a53 e40b
|
||||
| SHA-1: 1937 4753 629c 2c83 886f ec53 de7e 0a3c de34 7039
|
||||
| SHA-256: 3c52 054a efae 0d1d 5cf0 8226 e0ae 7ad0 478a 8c85 f5e7 a963 0ddd 072d d9c5 d129
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGDTCCBPWgAwIBAgISBrmm2MmqMNL/bqguwka5v7ahMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTMwHhcNMjYwNDEwMjI1NzE0WhcNMjYwNzA5MjI1NzEzWjAlMSMwIQYDVQQD
|
||||
| ExpuZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
|
||||
| ggIPADCCAgoCggIBAMfZPcsjUERAyRB3mvCx+kUJE/5gKelvulMMV3uCdil8yiop
|
||||
| 3CgXHNN1E/9hsK8/gueXU1AbcpNUrHP1clNlrMku+GuwAQF4+eulJdycXM8UBOB4
|
||||
| HkWO/CljSna1EZQlPx4FhDLMSki2uLP9mgNOM1/lBQ1qPG3B3EXLKOqGlEQ/zOjg
|
||||
| /gyPEBxjWA3bYZZN4oiaFHnA32ontFN7CQ7COeCJCnRpr2zAUvpRO5U5uH2cfApt
|
||||
| 4gha9FQSgAj6lAqFGDrRDLqUl1oGY4HM5DWDhYiYnJ/n34hDRoWOt1D02PpCjNQf
|
||||
| O4CDs+6udQN7zBNQBZiSBEtpGnQn73EFeElRvoGqZMrQFJa6/VEle+oJxdQL5JIv
|
||||
| yeqILlfJqlMgAiM4rItUKl9hTtWOfTuPCGbtPx7qDG6gdD2CDxdgPfPBseiKU6DV
|
||||
| sbHAs6aAv17982O0FIf4LE7vSmkVSpzafYRXdx/F5I6Zi+t7SlsC+l7cZiYMAyfU
|
||||
| DP6kmO7mCGRRQmxu1Ui6hZjIWEa2VJ6epueY7GtrEmsVulna+uq+jz2vI/uk99EF
|
||||
| H2NZuc/65i67UAjUllYA/58dTcC6kX6/WO5CTRsCzkhY0cCY2xGrs2i6bok50TzQ
|
||||
| 90IlIpa4IK19uDunxb6i7BFY/m56lmpKkYcyNflBCOrPtBSkVpUe45skVVdRAgMB
|
||||
| AAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
|
||||
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUL6dJ4L43WNY8JT48fpK2N24MimwwHwYD
|
||||
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
|
||||
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpu
|
||||
| ZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAu
|
||||
| BgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzM0LmNybDCC
|
||||
| AQsGCisGAQQB1nkCBAIEgfwEgfkA9wB2AMIxfldFGaNF7n843rKQQevHwiFaIr9/
|
||||
| 1bWtdprZDlLNAAABnXnSsysAAAQDAEcwRQIgFjRX18ymII+LUj3/mn40hTZc54+w
|
||||
| uO66VcsD1AWz0xECIQC1XYnN8iIHf+gMkzrZSl57qZMxDvxAj0KIEL+kcIuDqwB9
|
||||
| AKgmy+MKxjUSRlM/4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnXnStdkACAAABQAG
|
||||
| ZqdVBAMARjBEAiBzQI9gfXwLedWIC3sx8xgjoyD3p0Rf06uIVv7UE/IfsgIgOTTu
|
||||
| GGd5gH4MWw7AmXB7oBWiZWcnJvR+gzq1RhHFtuwwDQYJKoZIhvcNAQELBQADggEB
|
||||
| AG9ivSu820MYLxWacjStBZN9tZoJl6rI3E52h7pl70JXUFQ7hFr8SN0SCU9/Iz+L
|
||||
| wDdrqUGC3T5lr5NeTqW1hRnsErVFGe8DygcQDEZyAwR6mi7ym1h3VwWJ+2y09We5
|
||||
| euyyem+7J8l2KeaJMJZaboi9rKjp/D6nl8a7aUxD/k2WrcPfwI2pok7o+QVaHTzo
|
||||
| oXUSiiowm5lU2Ir6WmDDShBc3Ddql9siUjULVqt5bUcTXXvrS2X8xItKS+Zz+J6N
|
||||
| 3f6xHKzt8YFlHAoKYuRh1E7K/uKsBQ6oNEAv/fN7GJHuxbb9HHAwZJe+DTnCAPws
|
||||
| 84ceLvP0DzJN/Socs95sKb4=
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
| WWW-Mechanize/1.34
|
||||
| Change in Status Code:
|
||||
|_ libwww: 404
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
@@ -62,27 +100,27 @@ PORT STATE SERVICE REASON VERSION
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=nextcloud.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ http://nextcloud.lan.ddnsgeek.com:443/
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-referer-checker:
|
||||
| Spidering limited to: maxpagecount=30
|
||||
| https://nextcloud.lan.ddnsgeek.com:443/dist/core-common.js?v=e80d16a8-0
|
||||
| https://nextcloud.lan.ddnsgeek.com:443/dist/core-login.js?v=e80d16a8-0
|
||||
| https://nextcloud.lan.ddnsgeek.com:443/apps/theming/js/theming.js?v=e80d16a8-0
|
||||
|_ https://nextcloud.lan.ddnsgeek.com:443/dist/core-main.js?v=e80d16a8-0
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /index.php/
|
||||
| Other: 1
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /index.php/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1
|
||||
|_http-date: Sun, 05 Apr 2026 08:20:00 GMT; -6s from local time.
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-malware-host: Host appears to be clean
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-date: Tue, 14 Apr 2026 03:52:41 GMT; -3s from local time.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-server-header: Apache/2.4.66 (Debian)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
@@ -96,7 +134,7 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
| Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
| Content_Security_Policy:
|
||||
| Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
| Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
| Description: Define the base uri for relative uri.
|
||||
| Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
|
||||
| Description: Define which scripts the protected resource can execute.
|
||||
@@ -115,39 +153,12 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Cookies are secured with Secure Flag in HTTPS Connection
|
||||
| Cache_Control:
|
||||
|_ Header: Cache-Control: no-cache, no-store, must-revalidate
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-chrono: Request times for /index.php/login; avg: 3919.89ms; min: 1656.25ms; max: 10499.33ms
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-php-version: Logo query returned unknown hash e473773cc5b8b9dc08c846c0dc434c15
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-enum:
|
||||
|_ /robots.txt: Robots file
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-chrono: Request times for /index.php/login; avg: 2458.85ms; min: 1703.33ms; max: 3689.52ms
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 404
|
||||
@@ -169,9 +180,49 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Hop #1
|
||||
| Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
|_ Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
| http-php-version: Logo query returned unknown hash 7209a04a90229576f2e4ff38710cbbd5
|
||||
| Credits query returned unknown hash 7209a04a90229576f2e4ff38710cbbd5
|
||||
|_Version from header x-powered-by: PHP/8.3.30
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /index.php/
|
||||
| Other: 1
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /index.php/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1
|
||||
| http-headers:
|
||||
| Cache-Control: no-cache, no-store, must-revalidate
|
||||
| Content-Length: 16047
|
||||
| Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
| Content-Type: text/html; charset=UTF-8
|
||||
| Date: Tue, 14 Apr 2026 03:52:32 GMT
|
||||
| Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
| Referrer-Policy: same-origin
|
||||
| Server: Apache/2.4.66 (Debian)
|
||||
| Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: oc_sessionPassphrase=iqjM5ZelDa7FDYnEagm7YKi4xAYxY%2By8HsYpzip6EAIve%2Fcaq75I8p1eNvhJHnoBu6bc3eJ3eRe2BYmlguMWP2cXiG2GI4pZRqf%2F3ml0UkUEyZZ%2B1Fbc78rWd%2B%2Fr1SzL; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
| Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
| Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Permitted-Cross-Domain-Policies: none
|
||||
| X-Powered-By: PHP/8.3.30
|
||||
| X-Request-Id: StUWwRgKsFOpX9ZPeriD
|
||||
| X-Robots-Tag: noindex, nofollow
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: HEAD)
|
||||
| http-title: Login \xE2\x80\x93 Nextcloud
|
||||
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:28:09 2026 -- 1 IP address (1 host up) scanned in 727.15 seconds
|
||||
# Nmap done at Tue Apr 14 03:57:36 2026 -- 1 IP address (1 host up) scanned in 517.53 seconds
|
||||
@@ -102,18 +102,18 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 0
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-jBF4PW7Nahz7qJf01Ql5+OPaeNUN0RV0T/nfH+WBIPA='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-eJJaUYSl69LnzUT5f2oen13g5dGL7ymBpryYUsbS1rM='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:25:23 GMT
|
||||
Date: Tue, 14 Apr 2026 03:52:32 GMT
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Referrer-Policy: no-referrer
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: oc_sessionPassphrase=yh7PzM6DWTY7HEAttA9lvgWmmVxOQ2YDkL19S3w0zOHt8ozOqNco9XLM%2BLiTUrNHJXssRgYZ67HAiDcpGTK7cKtYBZ6wm%2BCEvIefKrgsn9h0UPRGcc0FGFf%2B6kNtvkvn; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=6bc4aff492fef3b2af03c81e29e9a0e3; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: oc_sessionPassphrase=5pTvnvYZRBKLnd46XMg0XJgoZATFmwg0xpb9U1MWOfbLENZfrRG142BX4xAg7bm56hCNDQECmNcTK4g1NdWTqtlGZEsFXybcLKF2X9emXfyh%2BvINw27UVedM9bAdvRzR; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=6bc4aff492fef3b2af03c81e29e9a0e3; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=6bc4aff492fef3b2af03c81e29e9a0e3; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
@@ -129,21 +129,9 @@ Title : ,Login – Nextcloud
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Apache[2.4.66], Cookies[ocexfs76yoe2], HTML5, HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[ocexfs76yoe2], Open-Graph-Protocol[website], PHP[8.3.30], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
Summary : Cookies[ocexfs76yoe2], HTML5, HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[ocexfs76yoe2], Open-Graph-Protocol[website], PHP[8.3.30], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
@@ -236,20 +224,20 @@ HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Cache-Control: no-cache, no-store, must-revalidate
|
||||
Content-Encoding: gzip
|
||||
Content-Length: 5803
|
||||
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-E/y++JVhUAGMmgbdxDsI7DMjrWvCSk3K8sBFlL2CjXM=';script-src-elem 'strict-dynamic' 'nonce-E/y++JVhUAGMmgbdxDsI7DMjrWvCSk3K8sBFlL2CjXM=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
Content-Length: 5801
|
||||
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-SVXVLb4Re1+OOOXuQ3YRupmmoh1cwSYDPAn4J796nvU=';script-src-elem 'strict-dynamic' 'nonce-SVXVLb4Re1+OOOXuQ3YRupmmoh1cwSYDPAn4J796nvU=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:28:23 GMT
|
||||
Date: Tue, 14 Apr 2026 03:53:08 GMT
|
||||
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
Referrer-Policy: same-origin
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=0502aeb89f6be80bb391a1abfd08525d; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=6bc4aff492fef3b2af03c81e29e9a0e3; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Request-Id: hQlveGNuRyEf5cb7mJIq
|
||||
X-Request-Id: xJN1PJW80BokVwJXwvnU
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
OpenSSL 3.5.5 27 Jan 2026
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
@@ -49,9 +49,9 @@ TLSv1.2 128 bits x25519
|
||||
SSL Certificate:
|
||||
Certificate blob:
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIGGDCCBQCgAwIBAgISBs84fOBMHD0zq0Oj2DfRjS1QMA0GCSqGSIb3DQEBCwUA
|
||||
MIIGDTCCBPWgAwIBAgISBrmm2MmqMNL/bqguwka5v7ahMA0GCSqGSIb3DQEBCwUA
|
||||
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
EwNSMTIwHhcNMjYwMjA5MTkwMjM3WhcNMjYwNTEwMTkwMjM2WjAlMSMwIQYDVQQD
|
||||
EwNSMTMwHhcNMjYwNDEwMjI1NzE0WhcNMjYwNzA5MjI1NzEzWjAlMSMwIQYDVQQD
|
||||
ExpuZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
|
||||
ggIPADCCAgoCggIBAMfZPcsjUERAyRB3mvCx+kUJE/5gKelvulMMV3uCdil8yiop
|
||||
3CgXHNN1E/9hsK8/gueXU1AbcpNUrHP1clNlrMku+GuwAQF4+eulJdycXM8UBOB4
|
||||
@@ -64,31 +64,31 @@ sbHAs6aAv17982O0FIf4LE7vSmkVSpzafYRXdx/F5I6Zi+t7SlsC+l7cZiYMAyfU
|
||||
DP6kmO7mCGRRQmxu1Ui6hZjIWEa2VJ6epueY7GtrEmsVulna+uq+jz2vI/uk99EF
|
||||
H2NZuc/65i67UAjUllYA/58dTcC6kX6/WO5CTRsCzkhY0cCY2xGrs2i6bok50TzQ
|
||||
90IlIpa4IK19uDunxb6i7BFY/m56lmpKkYcyNflBCOrPtBSkVpUe45skVVdRAgMB
|
||||
AAGjggIyMIICLjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
|
||||
CCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC+nSeC+N1jWPCU+PH6S
|
||||
tjduDIpsMB8GA1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUF
|
||||
BwEBBCcwJTAjBggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJQYD
|
||||
VR0RBB4wHIIabmV4dGNsb3VkLmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAI
|
||||
BgZngQwBAgEwLgYDVR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9y
|
||||
Zy84MS5jcmwwggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAfgDjI43yjaKI4KrgrPD6
|
||||
kMmF8La/9dKlJ7AB/BxEWMS26AAAAZxD/lXDAAgAAAUAMg4sIQQDAEcwRQIgIrCy
|
||||
dkG2OA3k+ot4xDhxRpcnzkBKHTNZylHElvVz0J8CIQDfJueLeCcVjYrFxFfiBC7H
|
||||
/0xdjUSIP0UwZKmWxao/TwB2ABaDLavwqSUPD/A6pUX/yL/II9CHS/YEKSf45x8z
|
||||
E/X6AAABnEP+XTYAAAQDAEcwRQIhAPkHxBF88NswLBzx2jqn1RenJotA4rFrNQM9
|
||||
1Eof/yZ7AiAHL5k+cqEy/GJ/5eSrDYLr7HCgFBZBE5FHYlXfQ/l32DANBgkqhkiG
|
||||
9w0BAQsFAAOCAQEAlW2wfkaVWzbyhttsFH2ZuSqGY2PMi4UzJWCkokkB2fPG16Ky
|
||||
+EvvTkkkj+U39fkyDqc44jCWJ1cvM5KP6YNyit2w+dhzicllKsO5OJeOQF49EZuC
|
||||
jBxyK2AHJzOVUOpTSeaeWjRH6eVgq8ebnwxrN1APCKRhb99SRgfF5SttfVl9CHt+
|
||||
qlimvDKxX7/PeXz+PW3KAI/DOTBF7mjZUUvIRZLr2Tv7AXtl27fbfpEtXhlBVsdy
|
||||
2JtMrKu0qbfxfWeOr1uD69WWsPkgWZ8HHP+7VibHwyXUuc7FmHuxDQCtWFNkj9rm
|
||||
lZr6d0LRlE/gU6T/SDixaqBbYR7VEOEMYhL0SA==
|
||||
AAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
|
||||
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUL6dJ4L43WNY8JT48fpK2N24MimwwHwYD
|
||||
VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
|
||||
CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpu
|
||||
ZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAu
|
||||
BgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzM0LmNybDCC
|
||||
AQsGCisGAQQB1nkCBAIEgfwEgfkA9wB2AMIxfldFGaNF7n843rKQQevHwiFaIr9/
|
||||
1bWtdprZDlLNAAABnXnSsysAAAQDAEcwRQIgFjRX18ymII+LUj3/mn40hTZc54+w
|
||||
uO66VcsD1AWz0xECIQC1XYnN8iIHf+gMkzrZSl57qZMxDvxAj0KIEL+kcIuDqwB9
|
||||
AKgmy+MKxjUSRlM/4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnXnStdkACAAABQAG
|
||||
ZqdVBAMARjBEAiBzQI9gfXwLedWIC3sx8xgjoyD3p0Rf06uIVv7UE/IfsgIgOTTu
|
||||
GGd5gH4MWw7AmXB7oBWiZWcnJvR+gzq1RhHFtuwwDQYJKoZIhvcNAQELBQADggEB
|
||||
AG9ivSu820MYLxWacjStBZN9tZoJl6rI3E52h7pl70JXUFQ7hFr8SN0SCU9/Iz+L
|
||||
wDdrqUGC3T5lr5NeTqW1hRnsErVFGe8DygcQDEZyAwR6mi7ym1h3VwWJ+2y09We5
|
||||
euyyem+7J8l2KeaJMJZaboi9rKjp/D6nl8a7aUxD/k2WrcPfwI2pok7o+QVaHTzo
|
||||
oXUSiiowm5lU2Ir6WmDDShBc3Ddql9siUjULVqt5bUcTXXvrS2X8xItKS+Zz+J6N
|
||||
3f6xHKzt8YFlHAoKYuRh1E7K/uKsBQ6oNEAv/fN7GJHuxbb9HHAwZJe+DTnCAPws
|
||||
84ceLvP0DzJN/Socs95sKb4=
|
||||
-----END CERTIFICATE-----
|
||||
Version: 2
|
||||
Serial Number: 06:cf:38:7c:e0:4c:1c:3d:33:ab:43:a3:d8:37:d1:8d:2d:50
|
||||
Serial Number: 06:b9:a6:d8:c9:aa:30:d2:ff:6e:a8:2e:c2:46:b9:bf:b6:a1
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
Not valid before: Feb 9 19:02:37 2026 GMT
|
||||
Not valid after: May 10 19:02:36 2026 GMT
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
Not valid before: Apr 10 22:57:14 2026 GMT
|
||||
Not valid after: Jul 9 22:57:13 2026 GMT
|
||||
Subject: /CN=nextcloud.lan.ddnsgeek.com
|
||||
Public Key Algorithm: NULL
|
||||
RSA Public Key: (4096 bit)
|
||||
@@ -134,48 +134,48 @@ lZr6d0LRlE/gU6T/SDixaqBbYR7VEOEMYhL0SA==
|
||||
X509v3 Key Usage: critical
|
||||
Digital Signature, Key Encipherment
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, TLS Web Client Authentication
|
||||
TLS Web Server Authentication
|
||||
X509v3 Basic Constraints: critical
|
||||
CA:FALSE
|
||||
X509v3 Subject Key Identifier:
|
||||
2F:A7:49:E0:BE:37:58:D6:3C:25:3E:3C:7E:92:B6:37:6E:0C:8A:6C
|
||||
X509v3 Authority Key Identifier:
|
||||
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
|
||||
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
|
||||
Authority Information Access:
|
||||
CA Issuers - URI:http://r12.i.lencr.org/
|
||||
CA Issuers - URI:http://r13.i.lencr.org/
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:nextcloud.lan.ddnsgeek.com
|
||||
X509v3 Certificate Policies:
|
||||
Policy: 2.23.140.1.2.1
|
||||
X509v3 CRL Distribution Points:
|
||||
Full Name:
|
||||
URI:http://r12.c.lencr.org/81.crl
|
||||
URI:http://r13.c.lencr.org/34.crl
|
||||
|
||||
CT Precertificate SCTs:
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : E3:23:8D:F2:8D:A2:88:E0:AA:E0:AC:F0:FA:90:C9:85:
|
||||
F0:B6:BF:F5:D2:A5:27:B0:01:FC:1C:44:58:C4:B6:E8
|
||||
Timestamp : Feb 9 20:01:07.523 2026 GMT
|
||||
Extensions: 00:00:05:00:32:0E:2C:21
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:45:02:20:22:B0:B2:76:41:B6:38:0D:E4:FA:8B:78:
|
||||
C4:38:71:46:97:27:CE:40:4A:1D:33:59:CA:51:C4:96:
|
||||
F5:73:D0:9F:02:21:00:DF:26:E7:8B:78:27:15:8D:8A:
|
||||
C5:C4:57:E2:04:2E:C7:FF:4C:5D:8D:44:88:3F:45:30:
|
||||
64:A9:96:C5:AA:3F:4F
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:
|
||||
C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA
|
||||
Timestamp : Feb 9 20:01:09.430 2026 GMT
|
||||
Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
|
||||
C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
|
||||
Timestamp : Apr 10 23:55:44.811 2026 GMT
|
||||
Extensions: none
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:45:02:21:00:F9:07:C4:11:7C:F0:DB:30:2C:1C:F1:
|
||||
DA:3A:A7:D5:17:A7:26:8B:40:E2:B1:6B:35:03:3D:D4:
|
||||
4A:1F:FF:26:7B:02:20:07:2F:99:3E:72:A1:32:FC:62:
|
||||
7F:E5:E4:AB:0D:82:EB:EC:70:A0:14:16:41:13:91:47:
|
||||
62:55:DF:43:F9:77:D8
|
||||
30:45:02:20:16:34:57:D7:CC:A6:20:8F:8B:52:3D:FF:
|
||||
9A:7E:34:85:36:5C:E7:8F:B0:B8:EE:BA:55:CB:03:D4:
|
||||
05:B3:D3:11:02:21:00:B5:5D:89:CD:F2:22:07:7F:E8:
|
||||
0C:93:3A:D9:4A:5E:7B:A9:93:31:0E:FC:40:8F:42:88:
|
||||
10:BF:A4:70:8B:83:AB
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
|
||||
D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
|
||||
Timestamp : Apr 10 23:55:45.497 2026 GMT
|
||||
Extensions: 00:00:05:00:06:66:A7:55
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:44:02:20:73:40:8F:60:7D:7C:0B:79:D5:88:0B:7B:
|
||||
31:F3:18:23:A3:20:F7:A7:44:5F:D3:AB:88:56:FE:D4:
|
||||
13:F2:1F:B2:02:20:39:34:EE:18:67:79:80:7E:0C:5B:
|
||||
0E:C0:99:70:7B:A0:15:A2:65:67:27:26:F4:7E:83:3A:
|
||||
B5:46:11:C5:B6:EC
|
||||
Verify m:
|
||||
unable to get local issuer certificate
|
||||
|
||||
@@ -185,8 +185,8 @@ RSA Key Strength: 4096
|
||||
|
||||
Subject: nextcloud.lan.ddnsgeek.com
|
||||
Altnames: DNS:nextcloud.lan.ddnsgeek.com
|
||||
Issuer: R12
|
||||
Issuer: R13
|
||||
|
||||
Not valid before: Feb 9 19:02:37 2026 GMT
|
||||
Not valid after: May 10 19:02:36 2026 GMT
|
||||
Not valid before: Apr 10 22:57:14 2026 GMT
|
||||
Not valid after: Jul 9 22:57:13 2026 GMT
|
||||
|
||||
@@ -1,52 +1,134 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:16:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com" start="1775376964" startstr="Sun Apr 5 08:16:04 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:49:00 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com" start="1776138540" startstr="Tue Apr 14 03:49:00 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376982"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376982"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376983"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376983"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376983"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376984" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775377099"/>
|
||||
<taskend task="Service scan" time="1775377135" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775377135"/>
|
||||
<taskprogress task="NSE" time="1775377166" percent="53.74" remaining="27" etc="1775377193"/>
|
||||
<taskprogress task="NSE" time="1775377196" percent="82.21" remaining="14" etc="1775377209"/>
|
||||
<taskprogress task="NSE" time="1775377313" percent="84.44" remaining="33" etc="1775377346"/>
|
||||
<taskprogress task="NSE" time="1775377349" percent="84.49" remaining="40" etc="1775377388"/>
|
||||
<taskprogress task="NSE" time="1775377454" percent="84.54" remaining="59" etc="1775377512"/>
|
||||
<taskprogress task="NSE" time="1775377484" percent="84.54" remaining="64" etc="1775377548"/>
|
||||
<taskprogress task="NSE" time="1775377514" percent="95.13" remaining="20" etc="1775377533"/>
|
||||
<taskprogress task="NSE" time="1775377544" percent="99.03" remaining="5" etc="1775377548"/>
|
||||
<taskprogress task="NSE" time="1775377575" percent="99.35" remaining="3" etc="1775377578"/>
|
||||
<taskprogress task="NSE" time="1775377606" percent="99.68" remaining="2" etc="1775377608"/>
|
||||
<taskprogress task="NSE" time="1775377658" percent="99.68" remaining="2" etc="1775377660"/>
|
||||
<taskend task="NSE" time="1775377676"/>
|
||||
<taskbegin task="NSE" time="1775377676"/>
|
||||
<taskend task="NSE" time="1775377687"/>
|
||||
<taskbegin task="NSE" time="1775377687"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<host starttime="1775376983" endtime="1775377688"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776138545"/>
|
||||
<taskend task="NSE" time="1776138545"/>
|
||||
<taskbegin task="NSE" time="1776138545"/>
|
||||
<taskend task="NSE" time="1776138545"/>
|
||||
<taskbegin task="NSE" time="1776138545"/>
|
||||
<taskend task="NSE" time="1776138546"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138550"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138550"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138551"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138552"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776138552"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776138553" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776138723"/>
|
||||
<taskend task="Service scan" time="1776138736" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776138736"/>
|
||||
<taskprogress task="NSE" time="1776138767" percent="83.28" remaining="7" etc="1776138773"/>
|
||||
<taskprogress task="NSE" time="1776138797" percent="96.10" remaining="3" etc="1776138799"/>
|
||||
<taskprogress task="NSE" time="1776138892" percent="97.09" remaining="5" etc="1776138897"/>
|
||||
<taskprogress task="NSE" time="1776138938" percent="97.41" remaining="6" etc="1776138943"/>
|
||||
<taskprogress task="NSE" time="1776138968" percent="98.38" remaining="4" etc="1776138972"/>
|
||||
<taskprogress task="NSE" time="1776139019" percent="99.68" remaining="1" etc="1776139020"/>
|
||||
<taskend task="NSE" time="1776139048"/>
|
||||
<taskbegin task="NSE" time="1776139048"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<taskbegin task="NSE" time="1776139056"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<host starttime="1776138553" endtime="1776139056"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="nextcloud.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-server-header" output="Apache/2.4.66 (Debian)"><elem>Apache/2.4.66 (Debian)</elem>
|
||||
</script><script id="http-headers" output="
 Cache-Control: no-cache, no-store, must-revalidate
 Content-Length: 16047
 Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Content-Type: text/html; charset=UTF-8
 Date: Sun, 05 Apr 2026 08:19:52 GMT
 Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
 Referrer-Policy: same-origin
 Server: Apache/2.4.66 (Debian)
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: oc_sessionPassphrase=vaA75gLRczK4PR19LRVIdeCUbAH2eyCr84lwC0J%2FRs%2FAJzlQYpiLdt%2BxMWrssNRkSjTrifW2r%2Fg0sWzn7Cact8Zw3rXzotR6z4WBk4sSNdwp4UgXFlUAwNHKCMEVwmfq; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
 Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Frame-Options: SAMEORIGIN
 X-Permitted-Cross-Domain-Policies: none
 X-Powered-By: PHP/8.3.30
 X-Request-Id: 8l0zCl9BZ2uwysWABFY8
 X-Robots-Tag: noindex, nofollow
 X-Xss-Protection: 1; mode=block
 Connection: close
 
 (Request type: HEAD)
"/><script id="http-title" output="Login \xE2\x80\x93 Nextcloud
Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login"><elem key="title">
			Login \xE2\x80\x93 Nextcloud		</elem>
|
||||
<elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
</script><script id="http-vhosts" output="
127 names had status 404
auth.lan.ddnsgeek.com : 200"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-waf-detect" output="IDS/IPS/WAF detected:
nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="ssl-cert" output="Subject: commonName=nextcloud.lan.ddnsgeek.com
Subject Alternative Name: DNS:nextcloud.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-10T22:57:14
Not valid after: 2026-07-09T22:57:13
MD5: 3e9f 313a b74d 382e 83fc 5f1a 5a53 e40b
SHA-1: 1937 4753 629c 2c83 886f ec53 de7e 0a3c de34 7039
SHA-256: 3c52 054a efae 0d1d 5cf0 8226 e0ae 7ad0 478a 8c85 f5e7 a963 0ddd 072d d9c5 d129
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">nextcloud.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
<elem key="commonName">R13</elem>
|
||||
<elem key="countryName">US</elem>
|
||||
<elem key="organizationName">Let's Encrypt</elem>
|
||||
</table>
|
||||
<table key="pubkey">
|
||||
<elem key="type">rsa</elem>
|
||||
<elem key="bits">4096</elem>
|
||||
<elem key="modulus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elem>
|
||||
<elem key="exponent">65537</elem>
|
||||
</table>
|
||||
<table key="extensions">
|
||||
<table>
|
||||
<elem key="name">X509v3 Key Usage</elem>
|
||||
<elem key="value">Digital Signature, Key Encipherment</elem>
|
||||
<elem key="critical">true</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Extended Key Usage</elem>
|
||||
<elem key="value">TLS Web Server Authentication</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Basic Constraints</elem>
|
||||
<elem key="value">CA:FALSE</elem>
|
||||
<elem key="critical">true</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Subject Key Identifier</elem>
|
||||
<elem key="value">2F:A7:49:E0:BE:37:58:D6:3C:25:3E:3C:7E:92:B6:37:6E:0C:8A:6C</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Authority Key Identifier</elem>
|
||||
<elem key="value">E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">Authority Information Access</elem>
|
||||
<elem key="value">CA Issuers - URI:http://r13.i.lencr.org/</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Subject Alternative Name</elem>
|
||||
<elem key="value">DNS:nextcloud.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Certificate Policies</elem>
|
||||
<elem key="value">Policy: 2.23.140.1.2.1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 CRL Distribution Points</elem>
|
||||
<elem key="value">Full Name:
 URI:http://r13.c.lencr.org/34.crl
</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">CT Precertificate SCTs</elem>
|
||||
<elem key="value">Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
 C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
 Timestamp : Apr 10 23:55:44.811 2026 GMT
 Extensions: none
 Signature : ecdsa-with-SHA256
 30:45:02:20:16:34:57:D7:CC:A6:20:8F:8B:52:3D:FF:
 9A:7E:34:85:36:5C:E7:8F:B0:B8:EE:BA:55:CB:03:D4:
 05:B3:D3:11:02:21:00:B5:5D:89:CD:F2:22:07:7F:E8:
 0C:93:3A:D9:4A:5E:7B:A9:93:31:0E:FC:40:8F:42:88:
 10:BF:A4:70:8B:83:AB
Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
 D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
 Timestamp : Apr 10 23:55:45.497 2026 GMT
 Extensions: 00:00:05:00:06:66:A7:55
 Signature : ecdsa-with-SHA256
 30:44:02:20:73:40:8F:60:7D:7C:0B:79:D5:88:0B:7B:
 31:F3:18:23:A3:20:F7:A7:44:5F:D3:AB:88:56:FE:D4:
 13:F2:1F:B2:02:20:39:34:EE:18:67:79:80:7E:0C:5B:
 0E:C0:99:70:7B:A0:15:A2:65:67:27:26:F4:7E:83:3A:
 B5:46:11:C5:B6:EC</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="sig_algo">sha256WithRSAEncryption</elem>
|
||||
<table key="validity">
|
||||
<elem key="notBefore">2026-04-10T22:57:14</elem>
|
||||
<elem key="notAfter">2026-07-09T22:57:13</elem>
|
||||
</table>
|
||||
<elem key="md5">3e9f313ab74d382e83fc5f1a5a53e40b</elem>
|
||||
<elem key="sha1">19374753629c2c83886fec53de7e0a3cde347039</elem>
|
||||
<elem key="sha256">3c52054aefae0d1d5cf08226e0ae7ad0478a8c85f5e7a9630ddd072dd9c5d129</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34
 Change in Status Code: 
 libwww: 404"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
<table key="Change in Status Code">
|
||||
<elem key="libwww">404</elem>
|
||||
</table>
|
||||
</script><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
@@ -103,10 +185,17 @@
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=nextcloud.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	http://nextcloud.lan.ddnsgeek.com:443/
"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-sitemap-generator" output="
 Directory structure:
 /index.php/
 Other: 1
 Longest directory structure:
 Depth: 1
 Dir: /index.php/
 Total files found (by extension):
 Other: 1
"/><script id="http-date" output="Sun, 05 Apr 2026 08:20:00 GMT; -6s from local time."><elem key="date">2026-04-05T08:20:00+00:00</elem>
|
||||
<elem key="delta">-6.0</elem>
|
||||
</script><script id="http-waf-detect" output="IDS/IPS/WAF detected:
nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
 Content_Security_Policy: 
 Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Description: Define the base uri for relative uri.
 Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
 Description: Define which scripts the protected resource can execute.
 Description: Define which styles (CSS) the user applies to the protected resource.
 Description: Define from where the protected resource can load images.
 Description: Define from where the protected resource can load video and audio.
 Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
 Description: Define from where the protected resource can be embedded in frames.
 Description: Define from where the protected resource can load fonts.
 Description: Define which URIs the protected resource can load using script interfaces.
 Description: Define which URIs can be used as the action of HTML form elements.
 X_Permitted_Cross_Domain_Policies: 
 Header: X-Permitted-Cross-Domain-Policies: none
 Description: No policy files are allowed anywhere on the target server, including this master policy file. 
 Cookie: 
 Cookies are secured with Secure Flag in HTTPS Connection
 Cache_Control: 
 Header: Cache-Control: no-cache, no-store, must-revalidate"><table key="Strict_Transport_Security">
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-referer-checker" output="
Spidering limited to: maxpagecount=30
 https://nextcloud.lan.ddnsgeek.com:443/dist/core-common.js?v=e80d16a8-0
 https://nextcloud.lan.ddnsgeek.com:443/dist/core-login.js?v=e80d16a8-0
 https://nextcloud.lan.ddnsgeek.com:443/apps/theming/js/theming.js?v=e80d16a8-0
 https://nextcloud.lan.ddnsgeek.com:443/dist/core-main.js?v=e80d16a8-0
"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-malware-host" output="Host appears to be clean"/><script id="http-vhosts" output="
auth.lan.ddnsgeek.com : 200
127 names had status 404"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-date" output="Tue, 14 Apr 2026 03:52:41 GMT; -3s from local time."><elem key="date">2026-04-14T03:52:41+00:00</elem>
|
||||
<elem key="delta">-3.0</elem>
|
||||
</script><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-server-header" output="Apache/2.4.66 (Debian)"><elem>Apache/2.4.66 (Debian)</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
 Content_Security_Policy: 
 Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Description: Define the base uri for relative uri.
 Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
 Description: Define which scripts the protected resource can execute.
 Description: Define which styles (CSS) the user applies to the protected resource.
 Description: Define from where the protected resource can load images.
 Description: Define from where the protected resource can load video and audio.
 Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
 Description: Define from where the protected resource can be embedded in frames.
 Description: Define from where the protected resource can load fonts.
 Description: Define which URIs the protected resource can load using script interfaces.
 Description: Define which URIs can be used as the action of HTML form elements.
 X_Permitted_Cross_Domain_Policies: 
 Header: X-Permitted-Cross-Domain-Policies: none
 Description: No policy files are allowed anywhere on the target server, including this master policy file. 
 Cookie: 
 Cookies are secured with Secure Flag in HTTPS Connection
 Cache_Control: 
 Header: Cache-Control: no-cache, no-store, must-revalidate"><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
@@ -122,7 +211,7 @@
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
<table key="Content_Security_Policy">
|
||||
<elem>Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'</elem>
|
||||
<elem>Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'</elem>
|
||||
<elem>Description: Define the base uri for relative uri.</elem>
|
||||
<elem>Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).</elem>
|
||||
<elem>Description: Define which scripts the protected resource can execute.</elem>
|
||||
@@ -145,43 +234,18 @@
|
||||
<table key="Cache_Control">
|
||||
<elem>Header: Cache-Control: no-cache, no-store, must-revalidate</elem>
|
||||
</table>
|
||||
</script><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-chrono" output="Request times for /index.php/login; avg: 3919.89ms; min: 1656.25ms; max: 10499.33ms"/><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-php-version" output="Logo query returned unknown hash e473773cc5b8b9dc08c846c0dc434c15"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-traceroute" output="
 Status Code
 Hop #1: 404
 Hop #2: 302
 Hop #3: 302
 server
 Hop #1
 Hop #2: Apache/2.4.66 (Debian)
 Hop #3: Apache/2.4.66 (Debian)
 content-type
 Hop #1: text/plain; charset=utf-8
 Hop #2: text/html; charset=UTF-8
 Hop #3: text/html; charset=UTF-8
 content-length
 Hop #1: 19
 Hop #2: 0
 Hop #3: 0
 location
 Hop #1
 Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/></port>
|
||||
</script><script id="http-enum" output="
 /robots.txt: Robots file
"/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-chrono" output="Request times for /index.php/login; avg: 2458.85ms; min: 1703.33ms; max: 3689.52ms"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-traceroute" output="
 Status Code
 Hop #1: 404
 Hop #2: 302
 Hop #3: 302
 server
 Hop #1
 Hop #2: Apache/2.4.66 (Debian)
 Hop #3: Apache/2.4.66 (Debian)
 content-type
 Hop #1: text/plain; charset=utf-8
 Hop #2: text/html; charset=UTF-8
 Hop #3: text/html; charset=UTF-8
 content-length
 Hop #1: 19
 Hop #2: 0
 Hop #3: 0
 location
 Hop #1
 Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
"/><script id="http-php-version" output="Logo query returned unknown hash 7209a04a90229576f2e4ff38710cbbd5
Credits query returned unknown hash 7209a04a90229576f2e4ff38710cbbd5
Version from header x-powered-by: PHP/8.3.30"/><script id="http-sitemap-generator" output="
 Directory structure:
 /index.php/
 Other: 1
 Longest directory structure:
 Depth: 1
 Dir: /index.php/
 Total files found (by extension):
 Other: 1
"/><script id="http-headers" output="
 Cache-Control: no-cache, no-store, must-revalidate
 Content-Length: 16047
 Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Content-Type: text/html; charset=UTF-8
 Date: Tue, 14 Apr 2026 03:52:32 GMT
 Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
 Referrer-Policy: same-origin
 Server: Apache/2.4.66 (Debian)
 Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: oc_sessionPassphrase=iqjM5ZelDa7FDYnEagm7YKi4xAYxY%2By8HsYpzip6EAIve%2Fcaq75I8p1eNvhJHnoBu6bc3eJ3eRe2BYmlguMWP2cXiG2GI4pZRqf%2F3ml0UkUEyZZ%2B1Fbc78rWd%2B%2Fr1SzL; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
 Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
 Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Frame-Options: SAMEORIGIN
 X-Permitted-Cross-Domain-Policies: none
 X-Powered-By: PHP/8.3.30
 X-Request-Id: StUWwRgKsFOpX9ZPeriD
 X-Robots-Tag: noindex, nofollow
 X-Xss-Protection: 1; mode=block
 Connection: close
 
 (Request type: HEAD)
"/><script id="http-title" output="Login \xE2\x80\x93 Nextcloud
Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login"><elem key="title">
			Login \xE2\x80\x93 Nextcloud		</elem>
|
||||
<elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
</script><script id="http-errors" output="Couldn't find any error pages."/></port>
|
||||
</ports>
|
||||
<times srtt="26044" rttvar="26044" to="130220"/>
|
||||
<times srtt="14414" rttvar="14414" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<runstats><finished time="1775377689" timestr="Sun Apr 5 08:28:09 2026" summary="Nmap done at Sun Apr 5 08:28:09 2026; 1 IP address (1 host up) scanned in 727.15 seconds" elapsed="727.15" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776139056"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<taskbegin task="NSE" time="1776139056"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<taskbegin task="NSE" time="1776139056"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<runstats><finished time="1776139056" timestr="Tue Apr 14 03:57:36 2026" summary="Nmap done at Tue Apr 14 03:57:36 2026; 1 IP address (1 host up) scanned in 517.53 seconds" elapsed="517.53" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user