fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,52 +1,134 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:16:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com" start="1775376964" startstr="Sun Apr 5 08:16:04 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:49:00 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com" start="1776138540" startstr="Tue Apr 14 03:49:00 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="NSE" time="1775376977"/>
|
||||
<taskend task="NSE" time="1775376977"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376982"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376982"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376983"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376983"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376983"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376984" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775377099"/>
|
||||
<taskend task="Service scan" time="1775377135" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775377135"/>
|
||||
<taskprogress task="NSE" time="1775377166" percent="53.74" remaining="27" etc="1775377193"/>
|
||||
<taskprogress task="NSE" time="1775377196" percent="82.21" remaining="14" etc="1775377209"/>
|
||||
<taskprogress task="NSE" time="1775377313" percent="84.44" remaining="33" etc="1775377346"/>
|
||||
<taskprogress task="NSE" time="1775377349" percent="84.49" remaining="40" etc="1775377388"/>
|
||||
<taskprogress task="NSE" time="1775377454" percent="84.54" remaining="59" etc="1775377512"/>
|
||||
<taskprogress task="NSE" time="1775377484" percent="84.54" remaining="64" etc="1775377548"/>
|
||||
<taskprogress task="NSE" time="1775377514" percent="95.13" remaining="20" etc="1775377533"/>
|
||||
<taskprogress task="NSE" time="1775377544" percent="99.03" remaining="5" etc="1775377548"/>
|
||||
<taskprogress task="NSE" time="1775377575" percent="99.35" remaining="3" etc="1775377578"/>
|
||||
<taskprogress task="NSE" time="1775377606" percent="99.68" remaining="2" etc="1775377608"/>
|
||||
<taskprogress task="NSE" time="1775377658" percent="99.68" remaining="2" etc="1775377660"/>
|
||||
<taskend task="NSE" time="1775377676"/>
|
||||
<taskbegin task="NSE" time="1775377676"/>
|
||||
<taskend task="NSE" time="1775377687"/>
|
||||
<taskbegin task="NSE" time="1775377687"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<host starttime="1775376983" endtime="1775377688"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776138545"/>
|
||||
<taskend task="NSE" time="1776138545"/>
|
||||
<taskbegin task="NSE" time="1776138545"/>
|
||||
<taskend task="NSE" time="1776138545"/>
|
||||
<taskbegin task="NSE" time="1776138545"/>
|
||||
<taskend task="NSE" time="1776138546"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138550"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138550"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138551"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138552"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776138552"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776138553" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776138723"/>
|
||||
<taskend task="Service scan" time="1776138736" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776138736"/>
|
||||
<taskprogress task="NSE" time="1776138767" percent="83.28" remaining="7" etc="1776138773"/>
|
||||
<taskprogress task="NSE" time="1776138797" percent="96.10" remaining="3" etc="1776138799"/>
|
||||
<taskprogress task="NSE" time="1776138892" percent="97.09" remaining="5" etc="1776138897"/>
|
||||
<taskprogress task="NSE" time="1776138938" percent="97.41" remaining="6" etc="1776138943"/>
|
||||
<taskprogress task="NSE" time="1776138968" percent="98.38" remaining="4" etc="1776138972"/>
|
||||
<taskprogress task="NSE" time="1776139019" percent="99.68" remaining="1" etc="1776139020"/>
|
||||
<taskend task="NSE" time="1776139048"/>
|
||||
<taskbegin task="NSE" time="1776139048"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<taskbegin task="NSE" time="1776139056"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<host starttime="1776138553" endtime="1776139056"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="nextcloud.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-server-header" output="Apache/2.4.66 (Debian)"><elem>Apache/2.4.66 (Debian)</elem>
|
||||
</script><script id="http-headers" output="
 Cache-Control: no-cache, no-store, must-revalidate
 Content-Length: 16047
 Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Content-Type: text/html; charset=UTF-8
 Date: Sun, 05 Apr 2026 08:19:52 GMT
 Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
 Referrer-Policy: same-origin
 Server: Apache/2.4.66 (Debian)
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: oc_sessionPassphrase=vaA75gLRczK4PR19LRVIdeCUbAH2eyCr84lwC0J%2FRs%2FAJzlQYpiLdt%2BxMWrssNRkSjTrifW2r%2Fg0sWzn7Cact8Zw3rXzotR6z4WBk4sSNdwp4UgXFlUAwNHKCMEVwmfq; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
 Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Frame-Options: SAMEORIGIN
 X-Permitted-Cross-Domain-Policies: none
 X-Powered-By: PHP/8.3.30
 X-Request-Id: 8l0zCl9BZ2uwysWABFY8
 X-Robots-Tag: noindex, nofollow
 X-Xss-Protection: 1; mode=block
 Connection: close
 
 (Request type: HEAD)
"/><script id="http-title" output="Login \xE2\x80\x93 Nextcloud
Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login"><elem key="title">
			Login \xE2\x80\x93 Nextcloud		</elem>
|
||||
<elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
</script><script id="http-vhosts" output="
127 names had status 404
auth.lan.ddnsgeek.com : 200"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-waf-detect" output="IDS/IPS/WAF detected:
nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="ssl-cert" output="Subject: commonName=nextcloud.lan.ddnsgeek.com
Subject Alternative Name: DNS:nextcloud.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-10T22:57:14
Not valid after: 2026-07-09T22:57:13
MD5: 3e9f 313a b74d 382e 83fc 5f1a 5a53 e40b
SHA-1: 1937 4753 629c 2c83 886f ec53 de7e 0a3c de34 7039
SHA-256: 3c52 054a efae 0d1d 5cf0 8226 e0ae 7ad0 478a 8c85 f5e7 a963 0ddd 072d d9c5 d129
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">nextcloud.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
<elem key="commonName">R13</elem>
|
||||
<elem key="countryName">US</elem>
|
||||
<elem key="organizationName">Let's Encrypt</elem>
|
||||
</table>
|
||||
<table key="pubkey">
|
||||
<elem key="type">rsa</elem>
|
||||
<elem key="bits">4096</elem>
|
||||
<elem key="modulus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elem>
|
||||
<elem key="exponent">65537</elem>
|
||||
</table>
|
||||
<table key="extensions">
|
||||
<table>
|
||||
<elem key="name">X509v3 Key Usage</elem>
|
||||
<elem key="value">Digital Signature, Key Encipherment</elem>
|
||||
<elem key="critical">true</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Extended Key Usage</elem>
|
||||
<elem key="value">TLS Web Server Authentication</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Basic Constraints</elem>
|
||||
<elem key="value">CA:FALSE</elem>
|
||||
<elem key="critical">true</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Subject Key Identifier</elem>
|
||||
<elem key="value">2F:A7:49:E0:BE:37:58:D6:3C:25:3E:3C:7E:92:B6:37:6E:0C:8A:6C</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Authority Key Identifier</elem>
|
||||
<elem key="value">E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">Authority Information Access</elem>
|
||||
<elem key="value">CA Issuers - URI:http://r13.i.lencr.org/</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Subject Alternative Name</elem>
|
||||
<elem key="value">DNS:nextcloud.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Certificate Policies</elem>
|
||||
<elem key="value">Policy: 2.23.140.1.2.1</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 CRL Distribution Points</elem>
|
||||
<elem key="value">Full Name:
 URI:http://r13.c.lencr.org/34.crl
</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">CT Precertificate SCTs</elem>
|
||||
<elem key="value">Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:
 C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD
 Timestamp : Apr 10 23:55:44.811 2026 GMT
 Extensions: none
 Signature : ecdsa-with-SHA256
 30:45:02:20:16:34:57:D7:CC:A6:20:8F:8B:52:3D:FF:
 9A:7E:34:85:36:5C:E7:8F:B0:B8:EE:BA:55:CB:03:D4:
 05:B3:D3:11:02:21:00:B5:5D:89:CD:F2:22:07:7F:E8:
 0C:93:3A:D9:4A:5E:7B:A9:93:31:0E:FC:40:8F:42:88:
 10:BF:A4:70:8B:83:AB
Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
 D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
 Timestamp : Apr 10 23:55:45.497 2026 GMT
 Extensions: 00:00:05:00:06:66:A7:55
 Signature : ecdsa-with-SHA256
 30:44:02:20:73:40:8F:60:7D:7C:0B:79:D5:88:0B:7B:
 31:F3:18:23:A3:20:F7:A7:44:5F:D3:AB:88:56:FE:D4:
 13:F2:1F:B2:02:20:39:34:EE:18:67:79:80:7E:0C:5B:
 0E:C0:99:70:7B:A0:15:A2:65:67:27:26:F4:7E:83:3A:
 B5:46:11:C5:B6:EC</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="sig_algo">sha256WithRSAEncryption</elem>
|
||||
<table key="validity">
|
||||
<elem key="notBefore">2026-04-10T22:57:14</elem>
|
||||
<elem key="notAfter">2026-07-09T22:57:13</elem>
|
||||
</table>
|
||||
<elem key="md5">3e9f313ab74d382e83fc5f1a5a53e40b</elem>
|
||||
<elem key="sha1">19374753629c2c83886fec53de7e0a3cde347039</elem>
|
||||
<elem key="sha256">3c52054aefae0d1d5cf08226e0ae7ad0478a8c85f5e7a9630ddd072dd9c5d129</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34
 Change in Status Code: 
 libwww: 404"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
<table key="Change in Status Code">
|
||||
<elem key="libwww">404</elem>
|
||||
</table>
|
||||
</script><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
@@ -103,10 +185,17 @@
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=nextcloud.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	http://nextcloud.lan.ddnsgeek.com:443/
"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-sitemap-generator" output="
 Directory structure:
 /index.php/
 Other: 1
 Longest directory structure:
 Depth: 1
 Dir: /index.php/
 Total files found (by extension):
 Other: 1
"/><script id="http-date" output="Sun, 05 Apr 2026 08:20:00 GMT; -6s from local time."><elem key="date">2026-04-05T08:20:00+00:00</elem>
|
||||
<elem key="delta">-6.0</elem>
|
||||
</script><script id="http-waf-detect" output="IDS/IPS/WAF detected:
nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
 Content_Security_Policy: 
 Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Description: Define the base uri for relative uri.
 Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
 Description: Define which scripts the protected resource can execute.
 Description: Define which styles (CSS) the user applies to the protected resource.
 Description: Define from where the protected resource can load images.
 Description: Define from where the protected resource can load video and audio.
 Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
 Description: Define from where the protected resource can be embedded in frames.
 Description: Define from where the protected resource can load fonts.
 Description: Define which URIs the protected resource can load using script interfaces.
 Description: Define which URIs can be used as the action of HTML form elements.
 X_Permitted_Cross_Domain_Policies: 
 Header: X-Permitted-Cross-Domain-Policies: none
 Description: No policy files are allowed anywhere on the target server, including this master policy file. 
 Cookie: 
 Cookies are secured with Secure Flag in HTTPS Connection
 Cache_Control: 
 Header: Cache-Control: no-cache, no-store, must-revalidate"><table key="Strict_Transport_Security">
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-referer-checker" output="
Spidering limited to: maxpagecount=30
 https://nextcloud.lan.ddnsgeek.com:443/dist/core-common.js?v=e80d16a8-0
 https://nextcloud.lan.ddnsgeek.com:443/dist/core-login.js?v=e80d16a8-0
 https://nextcloud.lan.ddnsgeek.com:443/apps/theming/js/theming.js?v=e80d16a8-0
 https://nextcloud.lan.ddnsgeek.com:443/dist/core-main.js?v=e80d16a8-0
"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-malware-host" output="Host appears to be clean"/><script id="http-vhosts" output="
auth.lan.ddnsgeek.com : 200
127 names had status 404"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-date" output="Tue, 14 Apr 2026 03:52:41 GMT; -3s from local time."><elem key="date">2026-04-14T03:52:41+00:00</elem>
|
||||
<elem key="delta">-3.0</elem>
|
||||
</script><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-server-header" output="Apache/2.4.66 (Debian)"><elem>Apache/2.4.66 (Debian)</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
 Content_Security_Policy: 
 Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Description: Define the base uri for relative uri.
 Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
 Description: Define which scripts the protected resource can execute.
 Description: Define which styles (CSS) the user applies to the protected resource.
 Description: Define from where the protected resource can load images.
 Description: Define from where the protected resource can load video and audio.
 Description: Deprecated and replaced by child-src. Define from where the protected resource can embed frames.
 Description: Define from where the protected resource can be embedded in frames.
 Description: Define from where the protected resource can load fonts.
 Description: Define which URIs the protected resource can load using script interfaces.
 Description: Define which URIs can be used as the action of HTML form elements.
 X_Permitted_Cross_Domain_Policies: 
 Header: X-Permitted-Cross-Domain-Policies: none
 Description: No policy files are allowed anywhere on the target server, including this master policy file. 
 Cookie: 
 Cookies are secured with Secure Flag in HTTPS Connection
 Cache_Control: 
 Header: Cache-Control: no-cache, no-store, must-revalidate"><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
@@ -122,7 +211,7 @@
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
<table key="Content_Security_Policy">
|
||||
<elem>Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'</elem>
|
||||
<elem>Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'</elem>
|
||||
<elem>Description: Define the base uri for relative uri.</elem>
|
||||
<elem>Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).</elem>
|
||||
<elem>Description: Define which scripts the protected resource can execute.</elem>
|
||||
@@ -145,43 +234,18 @@
|
||||
<table key="Cache_Control">
|
||||
<elem>Header: Cache-Control: no-cache, no-store, must-revalidate</elem>
|
||||
</table>
|
||||
</script><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-chrono" output="Request times for /index.php/login; avg: 3919.89ms; min: 1656.25ms; max: 10499.33ms"/><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-php-version" output="Logo query returned unknown hash e473773cc5b8b9dc08c846c0dc434c15"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-traceroute" output="
 Status Code
 Hop #1: 404
 Hop #2: 302
 Hop #3: 302
 server
 Hop #1
 Hop #2: Apache/2.4.66 (Debian)
 Hop #3: Apache/2.4.66 (Debian)
 content-type
 Hop #1: text/plain; charset=utf-8
 Hop #2: text/html; charset=UTF-8
 Hop #3: text/html; charset=UTF-8
 content-length
 Hop #1: 19
 Hop #2: 0
 Hop #3: 0
 location
 Hop #1
 Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/></port>
|
||||
</script><script id="http-enum" output="
 /robots.txt: Robots file
"/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-chrono" output="Request times for /index.php/login; avg: 2458.85ms; min: 1703.33ms; max: 3689.52ms"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-traceroute" output="
 Status Code
 Hop #1: 404
 Hop #2: 302
 Hop #3: 302
 server
 Hop #1
 Hop #2: Apache/2.4.66 (Debian)
 Hop #3: Apache/2.4.66 (Debian)
 content-type
 Hop #1: text/plain; charset=utf-8
 Hop #2: text/html; charset=UTF-8
 Hop #3: text/html; charset=UTF-8
 content-length
 Hop #1: 19
 Hop #2: 0
 Hop #3: 0
 location
 Hop #1
 Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
"/><script id="http-php-version" output="Logo query returned unknown hash 7209a04a90229576f2e4ff38710cbbd5
Credits query returned unknown hash 7209a04a90229576f2e4ff38710cbbd5
Version from header x-powered-by: PHP/8.3.30"/><script id="http-sitemap-generator" output="
 Directory structure:
 /index.php/
 Other: 1
 Longest directory structure:
 Depth: 1
 Dir: /index.php/
 Total files found (by extension):
 Other: 1
"/><script id="http-headers" output="
 Cache-Control: no-cache, no-store, must-revalidate
 Content-Length: 16047
 Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
 Content-Type: text/html; charset=UTF-8
 Date: Tue, 14 Apr 2026 03:52:32 GMT
 Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
 Referrer-Policy: same-origin
 Server: Apache/2.4.66 (Debian)
 Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: oc_sessionPassphrase=iqjM5ZelDa7FDYnEagm7YKi4xAYxY%2By8HsYpzip6EAIve%2Fcaq75I8p1eNvhJHnoBu6bc3eJ3eRe2BYmlguMWP2cXiG2GI4pZRqf%2F3ml0UkUEyZZ%2B1Fbc78rWd%2B%2Fr1SzL; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
 Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
 Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
 Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Frame-Options: SAMEORIGIN
 X-Permitted-Cross-Domain-Policies: none
 X-Powered-By: PHP/8.3.30
 X-Request-Id: StUWwRgKsFOpX9ZPeriD
 X-Robots-Tag: noindex, nofollow
 X-Xss-Protection: 1; mode=block
 Connection: close
 
 (Request type: HEAD)
"/><script id="http-title" output="Login \xE2\x80\x93 Nextcloud
Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login"><elem key="title">
			Login \xE2\x80\x93 Nextcloud		</elem>
|
||||
<elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
</script><script id="http-errors" output="Couldn't find any error pages."/></port>
|
||||
</ports>
|
||||
<times srtt="26044" rttvar="26044" to="130220"/>
|
||||
<times srtt="14414" rttvar="14414" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<taskbegin task="NSE" time="1775377688"/>
|
||||
<taskend task="NSE" time="1775377688"/>
|
||||
<runstats><finished time="1775377689" timestr="Sun Apr 5 08:28:09 2026" summary="Nmap done at Sun Apr 5 08:28:09 2026; 1 IP address (1 host up) scanned in 727.15 seconds" elapsed="727.15" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776139056"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<taskbegin task="NSE" time="1776139056"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<taskbegin task="NSE" time="1776139056"/>
|
||||
<taskend task="NSE" time="1776139056"/>
|
||||
<runstats><finished time="1776139056" timestr="Tue Apr 14 03:57:36 2026" summary="Nmap done at Tue Apr 14 03:57:36 2026; 1 IP address (1 host up) scanned in 517.53 seconds" elapsed="517.53" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user