fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Date: Tue, 14 Apr 2026 03:48:58 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Date: Tue, 14 Apr 2026 03:48:59 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
+20
-13
@@ -283,49 +283,53 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/dashboard
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/logreader
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/photos
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files
|
||||
200 GET 494l 1557w 31067c https://nextcloud.lan.ddnsgeek.com/index.php/apps/files_pdfviewer
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/dashboard
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/photos
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/logreader
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/apps/activity
|
||||
200 GET 93l 341w 16047c https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/index.php/settings/user/security
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.txt
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.html
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.php
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.asp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.jsp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/caldav.jsp
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.aspx
|
||||
401 GET 2l 12w 75c https://nextcloud.lan.ddnsgeek.com/.well-known/carddav.jsp
|
||||
200 GET 6l 12w 281c https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
200 GET 1l 5w 77c https://nextcloud.lan.ddnsgeek.com/cron.php
|
||||
200 GET 12l 31w 331c https://nextcloud.lan.ddnsgeek.com/index.html
|
||||
404 GET 0l 0w 64c https://nextcloud.lan.ddnsgeek.com/inetsrv.php
|
||||
404 GET 0l 0w 64c https://nextcloud.lan.ddnsgeek.com/information.txt
|
||||
404 GET 0l 0w 64c https://nextcloud.lan.ddnsgeek.com/inf.html
|
||||
404 GET 0l 0w 64c https://nextcloud.lan.ddnsgeek.com/informer
|
||||
500 GET 2l 11w 72c https://nextcloud.lan.ddnsgeek.com/public.php
|
||||
200 GET 2l 4w 26c https://nextcloud.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 1l 1w 170c https://nextcloud.lan.ddnsgeek.com/status.php
|
||||
200 GET 0l 0w 0c https://nextcloud.lan.ddnsgeek.com/version.php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/] => https://nextcloud.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[ => https://nextcloud.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.txt => https://nextcloud.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/] => https://nextcloud.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.html => https://nextcloud.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].txt => https://nextcloud.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].html => https://nextcloud.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.html => https://nextcloud.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.php => https://nextcloud.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].php => https://nextcloud.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].asp => https://nextcloud.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.asp => https://nextcloud.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].php => https://nextcloud.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.aspx => https://nextcloud.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].asp => https://nextcloud.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.jsp => https://nextcloud.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].aspx => https://nextcloud.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/].jsp => https://nextcloud.lan.ddnsgeek.com/].jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/[.jsp => https://nextcloud.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain] => https://nextcloud.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].txt => https://nextcloud.lan.ddnsgeek.com/plain].txt
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/plain].html => https://nextcloud.lan.ddnsgeek.com/plain].html
|
||||
@@ -341,3 +345,6 @@ Configuration {
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].aspx => https://nextcloud.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://nextcloud.lan.ddnsgeek.com/quote].jsp => https://nextcloud.lan.ddnsgeek.com/quote].jsp
|
||||
200 GET 661l 5535w 34520c https://nextcloud.lan.ddnsgeek.com/COPYING
|
||||
404 GET 0l 0w 64c https://nextcloud.lan.ddnsgeek.com/cnn.html
|
||||
404 GET 0l 0w 64c https://nextcloud.lan.ddnsgeek.com/crisis
|
||||
404 GET 0l 0w 64c https://nextcloud.lan.ddnsgeek.com/counter1.txt
|
||||
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 08:15:01 GMT
|
||||
Date: Tue, 14 Apr 2026 03:48:59 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
+94336
-20485
File diff suppressed because it is too large.
Load diff
@@ -1,3 +1,22 @@
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -5,19 +24,19 @@
|
||||
+ Target Hostname: nextcloud.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 08:16:04 (GMT0)
|
||||
+ Start Time: 2026-04-14 03:52:12 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7900 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 08:47:41 (GMT0) (1897 seconds)
|
||||
+ 7901 requests: 17 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-14 04:10:32 (GMT0) (1100 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
@@ -1,30 +1,22 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:15:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:48:59 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
Host is up, received user-set (0.024s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:15:16 UTC for 1235s
|
||||
Scanned at 2026-04-14 03:49:06 UTC for 823s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 301
|
||||
| Hop #2: 301
|
||||
| Hop #3: 404
|
||||
| content-type
|
||||
| Hop #1
|
||||
| Hop #2
|
||||
| Hop #3: text/plain; charset=utf-8
|
||||
| content-length
|
||||
| Hop #1: 17
|
||||
| Hop #2: 17
|
||||
| Hop #3: 19
|
||||
| location
|
||||
| Hop #1: https://nextcloud.lan.ddnsgeek.com/
|
||||
| Hop #2: https://nextcloud.lan.ddnsgeek.com/
|
||||
|_ Hop #3
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
@@ -46,37 +38,26 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-date: Sun, 05 Apr 2026 08:16:39 GMT; -2m03s from local time.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-chrono: Request times for /; avg: 900.47ms; min: 649.96ms; max: 1155.19ms
|
||||
|_http-date: Tue, 14 Apr 2026 03:52:20 GMT; -3s from local time.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-headers:
|
||||
| Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 08:18:48 GMT
|
||||
| Date: Tue, 14 Apr 2026 03:52:32 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-vhosts:
|
||||
| 126 names had status 308
|
||||
| news.lan.ddnsgeek.com : 404
|
||||
|_intra.lan.ddnsgeek.com : 404
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-chrono: Request times for /; avg: 1469.81ms; min: 1340.59ms; max: 1702.87ms
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
@@ -87,4 +68,4 @@ PORT STATE SERVICE REASON VERSION
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:35:52 2026 -- 1 IP address (1 host up) scanned in 1251.73 seconds
|
||||
# Nmap done at Tue Apr 14 04:02:49 2026 -- 1 IP address (1 host up) scanned in 831.14 seconds
|
||||
@@ -16,7 +16,7 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 08:19:27 GMT
|
||||
Date: Tue, 14 Apr 2026 03:52:32 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
@@ -26,9 +26,21 @@ Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Cookies[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], PHP[8.3.30], RedirectLocation[https://nextcloud.lan.ddnsgeek.com/index.php/login], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
Summary : Apache[2.4.66], Cookies[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[__Host-nc_sameSiteCookielax,__Host-nc_sameSiteCookiestrict,oc_sessionPassphrase,ocexfs76yoe2], PHP[8.3.30], RedirectLocation[https://nextcloud.lan.ddnsgeek.com/index.php/login], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
@@ -112,18 +124,18 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 0
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-FGzDOrcXLc9zPk8VixPSWXyY4A9tblc9Ze4kMyv+2aw='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-rkyirdVep768GdPpEXSgC7GFEMCCbw6RZpDc3XgFOSc='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:19:48 GMT
|
||||
Date: Tue, 14 Apr 2026 03:52:44 GMT
|
||||
Location: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Referrer-Policy: no-referrer
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: oc_sessionPassphrase=yrnjr3kTg5BYogPZrxShkmXeTE8dkyeIKMDcnI6OlDMjnWEovYLupGYoV79IoPWumbrliRho5HBAGcWNtAuiz4%2F0w9aVsB8cO2JPviTZ6IyP6VgHAnbiy%2FLVpH3UVqiU; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=e4ff6575096afea6ffc5acd05509889b; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: oc_sessionPassphrase=W1ESLvg%2F4WA5EtFcH7xU0gLAWmXD4ZMLT2MZwdfwdHJ0PrBVCKeJqrPe0nxR66ABf0mMyZgZDo7Tu%2FoK8cT1SsTCWJh48injAN4K2UiqelCIQnr9e93jMrLq9vlmyY%2B4; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=e4ff6575096afea6ffc5acd05509889b; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
|
||||
Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: ocexfs76yoe2=e4ff6575096afea6ffc5acd05509889b; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
@@ -133,135 +145,4 @@ HTTP Headers:
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
Status : 200 OK
|
||||
Title : ,Login – Nextcloud
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Apache[2.4.66], Cookies[ocexfs76yoe2], HTML5, HTTPServer[Debian Linux][Apache/2.4.66 (Debian)], HttpOnly[ocexfs76yoe2], Open-Graph-Protocol[website], PHP[8.3.30], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-Powered-By[PHP/8.3.30], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Apache ]
|
||||
The Apache HTTP Server Project is an effort to develop and
|
||||
maintain an open-source HTTP server for modern operating
|
||||
systems including UNIX and Windows NT. The goal of this
|
||||
project is to provide a secure, efficient and extensible
|
||||
server that provides HTTP services in sync with the current
|
||||
HTTP standards.
|
||||
|
||||
Version : 2.4.66 (from HTTP Server Header)
|
||||
Google Dorks: (3)
|
||||
Website : http://httpd.apache.org/
|
||||
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ HTTPServer ]
|
||||
HTTP server header string. This plugin also attempts to
|
||||
identify the operating system from the server header.
|
||||
|
||||
OS : Debian Linux
|
||||
String : Apache/2.4.66 (Debian) (from server string)
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : ocexfs76yoe2
|
||||
|
||||
[ Open-Graph-Protocol ]
|
||||
The Open Graph protocol enables you to integrate your Web
|
||||
pages into the social graph. It is currently designed for
|
||||
Web pages representing profiles of real-world things .
|
||||
things like movies, sports teams, celebrities, and
|
||||
restaurants. Including Open Graph tags on your Web page,
|
||||
makes your page equivalent to a Facebook Page.
|
||||
|
||||
Version : website
|
||||
|
||||
[ PHP ]
|
||||
PHP is a widely-used general-purpose scripting language
|
||||
that is especially suited for Web development and can be
|
||||
embedded into HTML. This plugin identifies PHP errors,
|
||||
modules and versions and extracts the local file path and
|
||||
username if present.
|
||||
|
||||
Version : 8.3.30
|
||||
Google Dorks: (3)
|
||||
Website : http://www.php.net/
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,feature-policy,referrer-policy,x-content-type-options,x-permitted-cross-domain-policies,x-request-id,x-robots-tag (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-Powered-By ]
|
||||
X-Powered-By HTTP header
|
||||
|
||||
String : PHP/8.3.30 (from x-powered-by string)
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Cache-Control: no-cache, no-store, must-revalidate
|
||||
Content-Encoding: gzip
|
||||
Content-Length: 5801
|
||||
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-yOG1PxBMIFP1f74ch3smft3R4lRE5UCTbgBUiKnBJNU=';script-src-elem 'strict-dynamic' 'nonce-yOG1PxBMIFP1f74ch3smft3R4lRE5UCTbgBUiKnBJNU=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:25:30 GMT
|
||||
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
|
||||
Referrer-Policy: same-origin
|
||||
Server: Apache/2.4.66 (Debian)
|
||||
Set-Cookie: ocexfs76yoe2=affd533eb58b675e17ca401e417639b0; path=/; secure; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Permitted-Cross-Domain-Policies: none
|
||||
X-Powered-By: PHP/8.3.30
|
||||
X-Request-Id: HGFDRAOx21eCKoMjPMZh
|
||||
X-Robots-Tag: noindex, nofollow
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
@@ -1,75 +1,64 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:15:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com" start="1775376902" startstr="Sun Apr 5 08:15:02 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:48:59 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com" start="1776138539" startstr="Tue Apr 14 03:48:59 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="80"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775376915"/>
|
||||
<taskend task="NSE" time="1775376915"/>
|
||||
<taskbegin task="NSE" time="1775376915"/>
|
||||
<taskend task="NSE" time="1775376915"/>
|
||||
<taskbegin task="NSE" time="1775376915"/>
|
||||
<taskend task="NSE" time="1775376916"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376916"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376916"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775376916"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775376916"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775376916"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775376916" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775376921"/>
|
||||
<taskend task="Service scan" time="1775376943" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775376944"/>
|
||||
<taskprogress task="NSE" time="1775376975" percent="60.54" remaining="21" etc="1775376995"/>
|
||||
<taskprogress task="NSE" time="1775377062" percent="79.07" remaining="32" etc="1775377093"/>
|
||||
<taskprogress task="NSE" time="1775377121" percent="80.46" remaining="43" etc="1775377164"/>
|
||||
<taskprogress task="NSE" time="1775377151" percent="98.06" remaining="5" etc="1775377155"/>
|
||||
<taskprogress task="NSE" time="1775377181" percent="99.03" remaining="3" etc="1775377183"/>
|
||||
<taskprogress task="NSE" time="1775377211" percent="99.35" remaining="2" etc="1775377213"/>
|
||||
<taskprogress task="NSE" time="1775377241" percent="99.68" remaining="1" etc="1775377242"/>
|
||||
<taskprogress task="NSE" time="1775377271" percent="99.68" remaining="2" etc="1775377272"/>
|
||||
<taskprogress task="NSE" time="1775377301" percent="99.68" remaining="2" etc="1775377302"/>
|
||||
<taskprogress task="NSE" time="1775377331" percent="99.68" remaining="2" etc="1775377332"/>
|
||||
<taskprogress task="NSE" time="1775377361" percent="99.68" remaining="2" etc="1775377362"/>
|
||||
<taskprogress task="NSE" time="1775377391" percent="99.68" remaining="2" etc="1775377392"/>
|
||||
<taskprogress task="NSE" time="1775377421" percent="99.68" remaining="2" etc="1775377423"/>
|
||||
<taskprogress task="NSE" time="1775377451" percent="99.68" remaining="2" etc="1775377453"/>
|
||||
<taskprogress task="NSE" time="1775377481" percent="99.68" remaining="2" etc="1775377483"/>
|
||||
<taskprogress task="NSE" time="1775377511" percent="99.68" remaining="2" etc="1775377513"/>
|
||||
<taskprogress task="NSE" time="1775377541" percent="99.68" remaining="2" etc="1775377543"/>
|
||||
<taskprogress task="NSE" time="1775377571" percent="99.68" remaining="3" etc="1775377573"/>
|
||||
<taskprogress task="NSE" time="1775377601" percent="99.68" remaining="3" etc="1775377603"/>
|
||||
<taskprogress task="NSE" time="1775377631" percent="99.68" remaining="3" etc="1775377633"/>
|
||||
<taskprogress task="NSE" time="1775377661" percent="99.68" remaining="3" etc="1775377663"/>
|
||||
<taskprogress task="NSE" time="1775377691" percent="99.68" remaining="3" etc="1775377693"/>
|
||||
<taskprogress task="NSE" time="1775377721" percent="99.68" remaining="3" etc="1775377724"/>
|
||||
<taskprogress task="NSE" time="1775377751" percent="99.68" remaining="3" etc="1775377754"/>
|
||||
<taskprogress task="NSE" time="1775377781" percent="99.68" remaining="3" etc="1775377784"/>
|
||||
<taskprogress task="NSE" time="1775377811" percent="99.68" remaining="3" etc="1775377814"/>
|
||||
<taskprogress task="NSE" time="1775377841" percent="99.68" remaining="3" etc="1775377844"/>
|
||||
<taskprogress task="NSE" time="1775377871" percent="99.68" remaining="4" etc="1775377874"/>
|
||||
<taskprogress task="NSE" time="1775377901" percent="99.68" remaining="4" etc="1775377904"/>
|
||||
<taskprogress task="NSE" time="1775377931" percent="99.68" remaining="4" etc="1775377934"/>
|
||||
<taskprogress task="NSE" time="1775377961" percent="99.68" remaining="4" etc="1775377964"/>
|
||||
<taskprogress task="NSE" time="1775377991" percent="99.68" remaining="4" etc="1775377994"/>
|
||||
<taskprogress task="NSE" time="1775378021" percent="99.68" remaining="4" etc="1775378024"/>
|
||||
<taskprogress task="NSE" time="1775378051" percent="99.68" remaining="4" etc="1775378055"/>
|
||||
<taskprogress task="NSE" time="1775378081" percent="99.68" remaining="4" etc="1775378085"/>
|
||||
<taskprogress task="NSE" time="1775378111" percent="99.68" remaining="4" etc="1775378115"/>
|
||||
<taskprogress task="NSE" time="1775378141" percent="99.68" remaining="4" etc="1775378145"/>
|
||||
<taskend task="NSE" time="1775378150"/>
|
||||
<taskbegin task="NSE" time="1775378150"/>
|
||||
<taskend task="NSE" time="1775378151"/>
|
||||
<taskbegin task="NSE" time="1775378151"/>
|
||||
<taskend task="NSE" time="1775378151"/>
|
||||
<host starttime="1775376916" endtime="1775378151"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776138543"/>
|
||||
<taskend task="NSE" time="1776138543"/>
|
||||
<taskbegin task="NSE" time="1776138543"/>
|
||||
<taskend task="NSE" time="1776138543"/>
|
||||
<taskbegin task="NSE" time="1776138543"/>
|
||||
<taskend task="NSE" time="1776138543"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138546"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138546"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138546"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776138546"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776138546"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776138546" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776138723"/>
|
||||
<taskend task="Service scan" time="1776138730" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776138730"/>
|
||||
<taskprogress task="NSE" time="1776138761" percent="98.05" remaining="1" etc="1776138762"/>
|
||||
<taskprogress task="NSE" time="1776138791" percent="99.68" remaining="1" etc="1776138791"/>
|
||||
<taskprogress task="NSE" time="1776138821" percent="99.68" remaining="1" etc="1776138821"/>
|
||||
<taskprogress task="NSE" time="1776138851" percent="99.68" remaining="1" etc="1776138851"/>
|
||||
<taskprogress task="NSE" time="1776138881" percent="99.68" remaining="1" etc="1776138881"/>
|
||||
<taskprogress task="NSE" time="1776138911" percent="99.68" remaining="1" etc="1776138912"/>
|
||||
<taskprogress task="NSE" time="1776138941" percent="99.68" remaining="1" etc="1776138942"/>
|
||||
<taskprogress task="NSE" time="1776138971" percent="99.68" remaining="1" etc="1776138972"/>
|
||||
<taskprogress task="NSE" time="1776139001" percent="99.68" remaining="1" etc="1776139002"/>
|
||||
<taskprogress task="NSE" time="1776139032" percent="99.68" remaining="1" etc="1776139033"/>
|
||||
<taskprogress task="NSE" time="1776139062" percent="99.68" remaining="2" etc="1776139063"/>
|
||||
<taskprogress task="NSE" time="1776139092" percent="99.68" remaining="2" etc="1776139093"/>
|
||||
<taskprogress task="NSE" time="1776139122" percent="99.68" remaining="2" etc="1776139123"/>
|
||||
<taskprogress task="NSE" time="1776139153" percent="99.68" remaining="2" etc="1776139154"/>
|
||||
<taskprogress task="NSE" time="1776139201" percent="99.68" remaining="2" etc="1776139203"/>
|
||||
<taskprogress task="NSE" time="1776139231" percent="99.68" remaining="2" etc="1776139233"/>
|
||||
<taskprogress task="NSE" time="1776139261" percent="99.68" remaining="2" etc="1776139263"/>
|
||||
<taskprogress task="NSE" time="1776139291" percent="99.68" remaining="2" etc="1776139293"/>
|
||||
<taskprogress task="NSE" time="1776139321" percent="99.68" remaining="2" etc="1776139323"/>
|
||||
<taskprogress task="NSE" time="1776139351" percent="99.68" remaining="3" etc="1776139353"/>
|
||||
<taskend task="NSE" time="1776139368"/>
|
||||
<taskbegin task="NSE" time="1776139368"/>
|
||||
<taskend task="NSE" time="1776139369"/>
|
||||
<taskbegin task="NSE" time="1776139369"/>
|
||||
<taskend task="NSE" time="1776139369"/>
|
||||
<host starttime="1776138546" endtime="1776139369"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="nextcloud.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-traceroute" output="
 Status Code
 Hop #1: 301
 Hop #2: 301
 Hop #3: 404
 content-type
 Hop #1
 Hop #2
 Hop #3: text/plain; charset=utf-8
 content-length
 Hop #1: 17
 Hop #2: 17
 Hop #3: 19
 location
 Hop #1: https://nextcloud.lan.ddnsgeek.com/
 Hop #2: https://nextcloud.lan.ddnsgeek.com/
 Hop #3
"/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-feed" output="Couldn't find any feeds."/><script id="http-vhosts" output="
128 names had status 308"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-errors" output="Couldn't find any error pages."/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">https://nextcloud.lan.ddnsgeek.com/index.php/login</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
@@ -90,26 +79,20 @@
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-title" output="Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/"><elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-date" output="Sun, 05 Apr 2026 08:16:39 GMT; -2m03s from local time."><elem key="date">2026-04-05T08:16:39+00:00</elem>
|
||||
<elem key="delta">-123.0</elem>
|
||||
</script><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-headers" output="
 Location: https://nextcloud.lan.ddnsgeek.com/
 Date: Sun, 05 Apr 2026 08:18:48 GMT
 Content-Length: 17
 Connection: close
 
 (Request type: GET)
"/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-errors" output="Couldn't find any error pages."/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-vhosts" output="
126 names had status 308
news.lan.ddnsgeek.com : 404
intra.lan.ddnsgeek.com : 404"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-security-headers" output=""></script><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-chrono" output="Request times for /; avg: 1469.81ms; min: 1340.59ms; max: 1702.87ms"/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/></port>
|
||||
</script><script id="http-malware-host" output="Host appears to be clean"/><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-chrono" output="Request times for /; avg: 900.47ms; min: 649.96ms; max: 1155.19ms"/><script id="http-date" output="Tue, 14 Apr 2026 03:52:20 GMT; -3s from local time."><elem key="date">2026-04-14T03:52:20+00:00</elem>
|
||||
<elem key="delta">-3.0</elem>
|
||||
</script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-security-headers" output=""></script><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-headers" output="
 Location: https://nextcloud.lan.ddnsgeek.com/
 Date: Tue, 14 Apr 2026 03:52:32 GMT
 Content-Length: 17
 Connection: close
 
 (Request type: GET)
"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-title" output="Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/"><elem key="redirect_url">https://nextcloud.lan.ddnsgeek.com/</elem>
|
||||
</script><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/></port>
|
||||
</ports>
|
||||
<times srtt="14505" rttvar="14505" to="100000"/>
|
||||
<times srtt="24330" rttvar="24330" to="121650"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775378152"/>
|
||||
<taskend task="NSE" time="1775378152"/>
|
||||
<taskbegin task="NSE" time="1775378152"/>
|
||||
<taskend task="NSE" time="1775378152"/>
|
||||
<taskbegin task="NSE" time="1775378152"/>
|
||||
<taskend task="NSE" time="1775378152"/>
|
||||
<runstats><finished time="1775378152" timestr="Sun Apr 5 08:35:52 2026" summary="Nmap done at Sun Apr 5 08:35:52 2026; 1 IP address (1 host up) scanned in 1251.73 seconds" elapsed="1251.73" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776139369"/>
|
||||
<taskend task="NSE" time="1776139369"/>
|
||||
<taskbegin task="NSE" time="1776139369"/>
|
||||
<taskend task="NSE" time="1776139369"/>
|
||||
<taskbegin task="NSE" time="1776139369"/>
|
||||
<taskend task="NSE" time="1776139369"/>
|
||||
<runstats><finished time="1776139369" timestr="Tue Apr 14 04:02:49 2026" summary="Nmap done at Tue Apr 14 04:02:49 2026; 1 IP address (1 host up) scanned in 831.14 seconds" elapsed="831.14" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user