beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Commands.md
+2 -2
View File
@@ -3,8 +3,6 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" passbolt.lan.ddnsgeek.com
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" passbolt.lan.ddnsgeek.com
feroxbuster -u http://passbolt.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
curl -sSikf http://passbolt.lan.ddnsgeek.com:80/.well-known/security.txt
@@ -33,6 +31,8 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://passbolt.lan.ddnsg
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" passbolt.lan.ddnsgeek.com
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" passbolt.lan.ddnsgeek.com
sslscan --show-certificate --no-colour passbolt.lan.ddnsgeek.com:443 2>&1
ffuf -u https://passbolt.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.passbolt.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_passbolt.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md
+52 -56
View File
@@ -5,36 +5,33 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
[/root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:29:22 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml passbolt.lan.ddnsgeek.com
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 20 dropped probes since last increase.
adjust_timeouts2: packet supposedly had rtt of -483261 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -483261 microseconds. Ignoring time.
# Nmap 7.99 scan initiated Tue Apr 14 03:57:38 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.024s latency).
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:32:45 UTC for 15878s
Scanned at 2026-04-14 04:00:13 UTC for 567s
Not shown: 65531 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:28
| Not valid after: 2026-05-06T19:02:27
| MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
| SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
| SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
| Not valid before: 2026-04-07T00:44:25
| Not valid after: 2026-07-06T00:44:24
| MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
| SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
@@ -47,76 +44,75 @@ PORT STATE SERVICE REASON VERSION
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
| KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
| BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
| AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
| HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
| Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
| MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
| TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
| cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
| bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
| AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
| 8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
| AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
| lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
| 6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
| 4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
| vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
| Kpvre+eLUhbfX0oMhv69Ijo=
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
| YrarkoA+irmSeogYZBI+qKg=
|_-----END CERTIFICATE-----
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
|_http-server-header: nginx
|_ssl-date: TLS randomness does not represent time
| http-methods:
|_ Supported Methods: GET HEAD POST
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
20001/tcp closed microsan reset ttl 57
51413/tcp open tcpwrapped syn-ack ttl 56
Device type: general purpose|firewall
Running (JUST GUESSING): Linux 4.X|2.6.X|3.X|5.X (94%), IPFire 2.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:ipfire:ipfire:2.27 cpe:/o:linux:linux_kernel:5.15 cpe:/o:linux:linux_kernel:6.1
Device type: general purpose
Running (JUST GUESSING): Linux 5.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
Aggressive OS guesses: Linux 4.19 - 5.15 (94%), Linux 2.6.32 (89%), Linux 2.6.32 or 3.10 (89%), Linux 4.0 - 4.4 (89%), IPFire 2.27 (Linux 5.15 - 6.1) (88%), Linux 4.15 (87%), Linux 5.4 (87%), Linux 2.6.32 - 2.6.35 (86%), Linux 2.6.32 - 2.6.39 (85%)
Aggressive OS guesses: Linux 5.4 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25C33%P=x86_64-pc-linux-gnu)
SEQ(SP=FB%GCD=1%ISR=100%TI=Z%TS=A)
SEQ(SP=FE%GCD=1%ISR=109%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBE04%P=x86_64-pc-linux-gnu)
SEQ(SP=102%GCD=1%ISR=10B%TI=Z%TS=A)
SEQ(SP=FE%GCD=1%ISR=10C%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
ECN(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 17.139 days (since Thu Mar 19 09:37:52 2026)
Uptime guess: 49.689 days (since Mon Feb 23 11:37:19 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=251 (Good luck!)
TCP Sequence Prediction: Difficulty=254 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 20001/tcp)
HOP RTT ADDRESS
1 0.18 ms 10.216.0.161
2 0.35 ms 10.216.35.11
3 3.03 ms 10.216.32.2
4 0.41 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 2.12 ms 4764.syd.equinix.com (45.127.173.7)
6 12.00 ms 10.241.1.187
7 12.61 ms 10.241.2.26
8 27.98 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.16 ms 10.216.0.161
2 0.26 ms 10.216.35.12
3 10.90 ms 10.216.32.1
4 0.46 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.29 ms 4764.syd.equinix.com (45.127.173.7)
6 11.70 ms 10.241.1.187
7 12.45 ms 10.241.2.26
8 14.32 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 12:57:23 2026 -- 1 IP address (1 host up) scanned in 16089.64 seconds
# Nmap done at Tue Apr 14 04:09:40 2026 -- 1 IP address (1 host up) scanned in 726.83 seconds
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md
+17 -20
View File
@@ -5,39 +5,36 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/passbolt.lan
[/root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:33:32 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml passbolt.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:00:46 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.69s latency).
Host is up, received user-set (1.7s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:33:52 UTC for 1546s
Scanned at 2026-04-14 04:00:56 UTC for 1335s
All 100 scanned ports on passbolt.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing an open TCP port so results incomplete
No OS matches for host
Too many fingerprints match this host to give specific OS details
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%DS=13%DC=T%G=N%TM=69D2247B%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDC131%P=x86_64-pc-linux-gnu)
SEQ()
T3(R=Y%DF=Y%TG=40%W=1FA%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T2(R=Y%DF=Y%TG=40%W=FE88%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)
U1(R=N)
IE(R=N)
Network Distance: 13 hops
Network Distance: 8 hops
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.06 ms 10.216.0.161
2 0.21 ms 10.216.35.11
3 0.76 ms 10.216.32.2
4 0.41 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.38 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.62 ms 10.241.1.187
7 12.66 ms 10.241.2.71
8 ... 12
13 686.21 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.20 ms 10.216.35.12
3 3.71 ms 10.216.32.2
4 0.55 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.62 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.67 ms 10.241.1.185
7 12.82 ms 10.241.2.26
8 1686.19 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:59:39 2026 -- 1 IP address (1 host up) scanned in 1577.37 seconds
# Nmap done at Tue Apr 14 04:23:13 2026 -- 1 IP address (1 host up) scanned in 1352.29 seconds
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md
+46 -48
View File
@@ -5,13 +5,11 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
[/root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:28:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml passbolt.lan.ddnsgeek.com
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 21 dropped probes since last increase.
Increasing send delay for 167.179.167.166 from 5 to 10 due to 11 out of 16 dropped probes since last increase.
# Nmap 7.99 scan initiated Tue Apr 14 03:53:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.031s latency).
Host is up, received user-set (0.019s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:28:17 UTC for 665s
Scanned at 2026-04-14 03:53:07 UTC for 261s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
@@ -19,28 +17,24 @@ PORT STATE SERVICE REASON VERSION
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-server-header: nginx
|_ssl-date: TLS randomness does not represent time
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:28
| Not valid after: 2026-05-06T19:02:27
| MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
| SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
| SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
| Not valid before: 2026-04-07T00:44:25
| Not valid after: 2026-07-06T00:44:24
| MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
| SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
@@ -53,25 +47,29 @@ PORT STATE SERVICE REASON VERSION
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
| KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
| BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
| AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
| HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
| Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
| MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
| TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
| cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
| bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
| AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
| 8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
| AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
| lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
| 6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
| 4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
| vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
| Kpvre+eLUhbfX0oMhv69Ijo=
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
| YrarkoA+irmSeogYZBI+qKg=
|_-----END CERTIFICATE-----
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
|_ssl-date: TLS randomness does not represent time
|_http-server-header: nginx
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 5.X (91%)
@@ -80,9 +78,9 @@ OS fingerprint not ideal because: Missing a closed TCP port so results incomplet
Aggressive OS guesses: Linux 5.4 (91%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21FBA%P=x86_64-pc-linux-gnu)
SEQ(SP=104%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=F6%GCD=1%ISR=FF%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBB29%P=x86_64-pc-linux-gnu)
SEQ(TS=A)
SEQ(SP=104%GCD=1%ISR=10B%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
@@ -93,24 +91,24 @@ T4(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 16.959 days (since Thu Mar 19 09:37:53 2026)
Uptime guess: 49.681 days (since Mon Feb 23 11:37:19 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=246 (Good luck!)
TCP Sequence Prediction: Difficulty=260 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 0.09 ms 10.216.0.161
2 0.23 ms 10.216.35.11
3 0.98 ms 10.216.32.2
4 0.66 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.58 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.83 ms 10.241.1.187
7 12.74 ms 10.241.2.71
8 23.70 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
2 0.26 ms 10.216.35.11
3 0.89 ms 10.216.32.2
4 0.57 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.93 ms 4764.syd.equinix.com (45.127.173.7)
6 11.64 ms 10.241.1.185
7 12.76 ms 10.241.2.26
8 14.27 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:39:22 2026 -- 1 IP address (1 host up) scanned in 688.02 seconds
# Nmap done at Tue Apr 14 03:57:29 2026 -- 1 IP address (1 host up) scanned in 270.25 seconds
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md
+2 -2
View File
@@ -9,12 +9,12 @@ HTTP/2 302
cache-control: no-store, no-cache, must-revalidate
content-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
content-type: text/html; charset=UTF-8
date: Sun, 05 Apr 2026 08:39:31 GMT
date: Tue, 14 Apr 2026 04:00:21 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
location: /auth/login?redirect=%2F
pragma: no-cache
server: nginx
set-cookie: passbolt_session=19de39a55e7976fc68a4690d270f2c3c; path=/; HttpOnly; SameSite=Lax
set-cookie: passbolt_session=b3790e501b3588785049c60b517a2320; path=/; HttpOnly; SameSite=Lax
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md
+10 -10
View File
@@ -295,8 +295,8 @@ Configuration {
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fapp
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/css/
200 GET 1l 2w 360c https://passbolt.lan.ddnsgeek.com/favicon.ico
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/fonts/
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Ffolders
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/fonts/
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fgroups
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/img/
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/js/
@@ -306,17 +306,17 @@ Configuration {
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/healthcheck
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/locales/
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_96.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/users/recover
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md
+254 -162
View File
@@ -5,15 +5,14 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
[/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:39:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:00:39 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:39:44 UTC for 1574s
Scanned at 2026-04-14 04:00:47 UTC for 353s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-feed: Couldn't find any feeds.
| http-comments-displayer:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com
|
@@ -22,10 +21,27 @@ PORT STATE SERVICE REASON VERSION
| Comment:
| <!-- main -->
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.10.0
| Line number: 1
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 29
| Comment:
| /*! For license information please see api-vendors.js.LICENSE.txt */
| /**
| * Initialise to get the theme from stylesheet or OS preference
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 22
| Comment:
| /**
| * Bind callbacks
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 79
| Comment:
| /**
| * Is theme defined
| * @returns {boolean}
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/
| Line number: 6
@@ -56,146 +72,60 @@ PORT STATE SERVICE REASON VERSION
| along with this program. If not, see http://www.gnu.org/licenses/.
|
|
|_ -->
| http-headers:
| Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
| Access-Control-Expose-Headers: X-GPGAuth-Progress
| Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
| Access-Control-Expose-Headers: X-GPGAuth-Authenticated
| Access-Control-Expose-Headers: X-GPGAuth-Refer
| Access-Control-Expose-Headers: X-GPGAuth-Debug
| Access-Control-Expose-Headers: X-GPGAuth-Error
| Access-Control-Expose-Headers: X-GPGAuth-Pubkey
| Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
| Access-Control-Expose-Headers: X-GPGAuth-Version
| Cache-Control: no-store, no-cache, must-revalidate
| Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
| Content-Type: text/html; charset=UTF-8
| Date: Sun, 05 Apr 2026 08:43:47 GMT
| Expires: Thu, 19 Nov 1981 08:52:00 GMT
| Pragma: no-cache
| Referrer-Policy: same-origin
| Server: nginx
| Set-Cookie: passbolt_session=0ef149b13c99d135c6c2a67b1a000b76; path=/; HttpOnly; SameSite=Lax
| Set-Cookie: csrfToken=16d25e047084290e11d152a80a4d75f310aab333c9ce6f08261c78346adff7db300d53d7b6cd56f23b17dff875111a4d0f30c368a11fb6aed06ede845284953e; path=/
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Download-Options: noopen
| X-Frame-Options: SAMEORIGIN
| X-Gpgauth-Authenticated: false
| X-Gpgauth-Debug: There is no user associated with this key. No key id set.
| X-Gpgauth-Error: true
| X-Gpgauth-Login-Url: /auth/login
| X-Gpgauth-Logout-Url: /auth/logout
| X-Gpgauth-Progress: stage0
| X-Gpgauth-Pubkey-Url: /auth/verify.json
| X-Gpgauth-Verify-Url: /auth/verify
| X-Gpgauth-Version: 1.3.0
| X-Permitted-Cross-Domain-Policies: all
| X-Xss-Protection: 1; mode=block
| Connection: close
| Transfer-Encoding: chunked
|
|_ (Request type: GET)
|_http-date: Sun, 05 Apr 2026 08:43:47 GMT; -2m53s from local time.
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
| -->
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 1
| Comment:
| /**
| * Passbolt ~ Open source password manager for teams
| * Copyright (c) Passbolt SARL (https://www.passbolt.com)
| *
| * Licensed under GNU Affero General Public License version 3 of the or any later version.
| * For full copyright and license information, please see the LICENSE.txt
| * Redistributions of files must retain the above copyright notice.
| *
| * @copyright Copyright (c) Passbolt SA (https://www.passbolt.com)
| * @license https://opensource.org/licenses/AGPL-3.0 AGPL License
| * @link https://www.passbolt.com Passbolt(tm)
| * @since 3.3.2
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 59
| Comment:
| /**
| * Get link tag
| * @returns {Element}
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.11.0
| Line number: 1
| Comment:
| /*! For license information please see api-vendors.js.LICENSE.txt */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 87
| Comment:
| /**
| * Set theme according to the OS preference
| * @param mediaQueryPreferColor
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0
| Line number: 1
| Comment:
| /*! For license information please see api-triage.js.LICENSE.txt */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 44
| Comment:
| /**
| * Update link reference with the theme
|_ */
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
|_http-chrono: Request times for /; avg: 37139.25ms; min: 2126.65ms; max: 69794.57ms
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:28
| Not valid after: 2026-05-06T19:02:27
| MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
| SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
| SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
| KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
| BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
| AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
| HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
| Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
| MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
| TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
| cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
| bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
| AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
| 8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
| AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
| lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
| 6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
| 4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
| vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
| Kpvre+eLUhbfX0oMhv69Ijo=
|_-----END CERTIFICATE-----
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-php-version: Credits query returned unknown hash 949c98d8d14d6d4da5caaf045903a8a1
|_http-server-header: nginx
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-backup-finder: ERROR: Script execution failed (use -d to debug)
| http-waf-detect: IDS/IPS/WAF detected:
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: /auth/login?redirect=%2F
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
|_ libwww: 404
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
@@ -216,47 +146,209 @@ PORT STATE SERVICE REASON VERSION
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-methods:
|_ Supported Methods: GET HEAD POST
|_ssl-date: TLS randomness does not represent time
| http-waf-detect: IDS/IPS/WAF detected:
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-errors:
| Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com
| Found the following error pages:
|
| Error Code: 404
| https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.10.0
|
| Error Code: 404
| https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case
|
| Error Code: 404
| https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
| https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|
| Error Code: 404
| https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.10.0
|
| Error Code: 404
|_ https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|_http-mobileversion-checker: No mobile version detected.
|_ https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-unsafe-output-escaping: ERROR: Script execution failed (use -d to debug)
|_http-malware-host: Host appears to be clean
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
|_http-chrono: Request times for /; avg: 29564.94ms; min: 2054.83ms; max: 131706.91ms
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-date: Tue, 14 Apr 2026 04:01:12 GMT; -19s from local time.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: /auth/login?redirect=%2F
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| http-php-version: Logo query returned unknown hash 3282c083dbb29b35410366062b9400a1
|_Credits query returned unknown hash 3282c083dbb29b35410366062b9400a1
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-grep:
| (2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0:
| (1) ip:
| + 1.122.28.223
| (1) email:
|_ + you@organization.com
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; ico: 1; png: 5; svg: 1
| Other: 1; ico: 1; png: 6; svg: 1
| /js/app/
| js: 1
| js: 3
| Longest directory structure:
| Depth: 2
| Dir: /js/app/
| Total files found (by extension):
|_ Other: 1; ico: 1; js: 1; png: 5; svg: 1
|_ Other: 1; ico: 1; js: 3; png: 6; svg: 1
|_http-rfi-spider: ERROR: Script execution failed (use -d to debug)
| http-traceroute:
| Status Code
| Hop #1: 404
| Hop #2: 302
| Hop #3: 302
| server
| Hop #1
| Hop #2: nginx
| Hop #3: nginx
| content-type
| Hop #1: text/plain; charset=utf-8
| Hop #2: text/html; charset=UTF-8
| Hop #3: text/html; charset=UTF-8
| content-length
| Hop #1: 19
| Hop #2
| Hop #3
| location
| Hop #1
| Hop #2: /auth/login?redirect=%2F
|_ Hop #3: /auth/login?redirect=%2F
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-04-07T00:44:25
| Not valid after: 2026-07-06T00:44:24
| MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
| SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
| YrarkoA+irmSeogYZBI+qKg=
|_-----END CERTIFICATE-----
|_http-sql-injection: ERROR: Script execution failed (use -d to debug)
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-mobileversion-checker: No mobile version detected.
|_http-server-header: nginx
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-headers:
| Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
| Access-Control-Expose-Headers: X-GPGAuth-Progress
| Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
| Access-Control-Expose-Headers: X-GPGAuth-Authenticated
| Access-Control-Expose-Headers: X-GPGAuth-Refer
| Access-Control-Expose-Headers: X-GPGAuth-Debug
| Access-Control-Expose-Headers: X-GPGAuth-Error
| Access-Control-Expose-Headers: X-GPGAuth-Pubkey
| Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
| Access-Control-Expose-Headers: X-GPGAuth-Version
| Cache-Control: no-store, no-cache, must-revalidate
| Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
| Content-Type: text/html; charset=UTF-8
| Date: Tue, 14 Apr 2026 04:01:12 GMT
| Expires: Thu, 19 Nov 1981 08:52:00 GMT
| Permissions-Policy: unload=(*)
| Pragma: no-cache
| Referrer-Policy: same-origin
| Server: nginx
| Set-Cookie: passbolt_session=868f8b90de9733e71911be79a6ae943e; path=/; HttpOnly; SameSite=Lax
| Set-Cookie: csrfToken=77f99ef8df307c0707c09f924bcade32f7909e5c61ff6c5d6eb225253b6553b25a55e5962129c071808a94301932f194403a7667eabb8ee2723fc58c636798ac; path=/
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Download-Options: noopen
| X-Frame-Options: SAMEORIGIN
| X-Gpgauth-Authenticated: false
| X-Gpgauth-Debug: There is no user associated with this key. No key id set.
| X-Gpgauth-Error: true
| X-Gpgauth-Login-Url: /auth/login
| X-Gpgauth-Logout-Url: /auth/logout
| X-Gpgauth-Progress: stage0
| X-Gpgauth-Pubkey-Url: /auth/verify.json
| X-Gpgauth-Verify-Url: /auth/verify
| X-Gpgauth-Version: 1.3.0
| X-Permitted-Cross-Domain-Policies: all
| X-Xss-Protection: 1; mode=block
| Connection: close
| Transfer-Encoding: chunked
|
|_ (Request type: GET)
|_http-feed: Couldn't find any feeds.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:05:59 2026 -- 1 IP address (1 host up) scanned in 1586.00 seconds
# Nmap done at Tue Apr 14 04:06:40 2026 -- 1 IP address (1 host up) scanned in 361.20 seconds
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md
+49 -49
View File
@@ -6,7 +6,7 @@ sslscan --show-certificate --no-colour passbolt.lan.ddnsgeek.com:443 2>&1
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
@@ -56,9 +56,9 @@ TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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@@ -71,31 +71,31 @@ ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS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AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
YrarkoA+irmSeogYZBI+qKg=
-----END CERTIFICATE-----
Version: 2
Serial Number: 06:b1:d7:0b:1a:8a:64:6e:ec:4a:80:43:f3:c3:4b:cc:d8:00
Serial Number: 06:8c:58:25:86:ad:cb:b5:14:71:53:b8:79:36:ec:23:91:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R13
Not valid before: Feb 5 19:02:28 2026 GMT
Not valid after: May 6 19:02:27 2026 GMT
Issuer: /C=US/O=Let's Encrypt/CN=R12
Not valid before: Apr 7 00:44:25 2026 GMT
Not valid after: Jul 6 00:44:24 2026 GMT
Subject: /CN=passbolt.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
@@ -141,48 +141,48 @@ Kpvre+eLUhbfX0oMhv69Ijo=
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
9B:4B:96:AB:A2:A1:CD:3E:D1:8D:85:EF:C9:E6:F2:04:B4:6A:63:2C
X509v3 Authority Key Identifier:
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
Authority Information Access:
CA Issuers - URI:http://r13.i.lencr.org/
CA Issuers - URI:http://r12.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:passbolt.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r13.c.lencr.org/1.crl
URI:http://r12.c.lencr.org/23.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Feb 5 20:00:59.205 2026 GMT
Extensions: none
Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:
1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A
Timestamp : Apr 7 01:42:56.151 2026 GMT
Extensions: 00:00:05:00:06:1E:AA:29
Signature : ecdsa-with-SHA256
30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:
9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:
96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:
49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:
30:A4:6C:CB:EF:9E
30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:
72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:
C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:
B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:
D5:DF:5A:F4:2E:62:45:E7
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
Timestamp : Feb 5 20:00:59.234 2026 GMT
Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
Timestamp : Apr 7 01:42:56.125 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:
0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:
04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:
DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:
17:F5:11:6E:F6:48:D5:30
30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:
62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:
C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:
9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:
AF:67:40:BF:8B:68:99
Verify m:
unable to get local issuer certificate
@@ -192,10 +192,10 @@ RSA Key Strength: 4096
Subject: passbolt.lan.ddnsgeek.com
Altnames: DNS:passbolt.lan.ddnsgeek.com
Issuer: R13
Issuer: R12
Not valid before: Feb 5 19:02:28 2026 GMT
Not valid after: May 6 19:02:27 2026 GMT
Not valid before: Apr 7 00:44:25 2026 GMT
Not valid after: Jul 6 00:44:24 2026 GMT
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md
+27 -6
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://passbolt.lan.ddnsg
[/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -16,23 +35,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://passbolt.lan.ddnsg
CN: passbolt.lan.ddnsgeek.com
SAN: passbolt.lan.ddnsgeek.com
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
Issuer: /C=US/O=Let's Encrypt/CN=R12
+ Platform: Unknown
+ Start Time: 2026-04-05 08:41:00 (GMT0)
+ Start Time: 2026-04-14 04:00:47 (GMT0)
---------------------------------------------------------------------------
+ Server: nginx
+ [999961] /: Cookie passbolt_session created without the secure flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-login-url' found, with contents: /auth/login.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-error' found, with contents: true.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-version' found, with contents: 1.3.0.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-verify-url' found, with contents: /auth/verify.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-logout-url' found, with contents: /auth/logout.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-debug' found, with contents: There is no user associated with this key. No key id set..
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-progress' found, with contents: stage0.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-error' found, with contents: true.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-pubkey-url' found, with contents: /auth/verify.json.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-logout-url' found, with contents: /auth/logout.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-verify-url' found, with contents: /auth/verify.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-login-url' found, with contents: /auth/login.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-authenticated' found, with contents: false.
+ [999961] /auth/login?redirect=%2F: Cookie csrfToken created without the secure flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ [95] /auth/login?redirect=%2F: Cookie csrfToken created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md
+7 -6
View File
@@ -84,12 +84,12 @@ HTTP Headers:
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:55:19 GMT
Date: Tue, 14 Apr 2026 04:02:47 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: /auth/login?redirect=%2F
Pragma: no-cache
Server: nginx
Set-Cookie: passbolt_session=5925bd4bd383c843e3979f650a0c87bd; path=/; HttpOnly; SameSite=Lax
Set-Cookie: passbolt_session=f885d8dff46c5731c197be09a984fb40; path=/; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
@@ -103,7 +103,7 @@ Title : Passbolt | Open source password manager for teams
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
@@ -147,7 +147,7 @@ Detected Plugins:
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
String : access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
@@ -188,12 +188,13 @@ HTTP Headers:
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:55:31 GMT
Date: Tue, 14 Apr 2026 04:02:56 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Permissions-Policy: unload=(*)
Pragma: no-cache
Referrer-Policy: same-origin
Server: nginx
Set-Cookie: csrfToken=30469be09d90fab9190421d696b29af29e3f6c1267b000a93dcfaf466dfacb51f4b035ffe5c9f5992cf225972b00892236c707fff8865bef925eaa306dabe310; path=/
Set-Cookie: csrfToken=2d978b238a37ff133e36f80d9258db7e3d28ef00c0b5f15beaa8e1f7b5b46cbb060f7447262c0ade3b058c8527a0de71940c878c587d89380ccab965766f6a6a; path=/
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://passbolt.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 08:39:27 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSik http://passbolt.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:39:27 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md
+9 -8
View File
@@ -309,15 +309,16 @@ Configuration {
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.html => https://passbolt.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/] => https://passbolt.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.php => https://passbolt.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].txt => https://passbolt.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.asp => https://passbolt.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].txt => https://passbolt.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].html => https://passbolt.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.aspx => https://passbolt.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].php => https://passbolt.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.jsp => https://passbolt.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].php => https://passbolt.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].asp => https://passbolt.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].aspx => https://passbolt.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].jsp => https://passbolt.lan.ddnsgeek.com/].jsp
404 GET 0l 0w 64c https://passbolt.lan.ddnsgeek.com/environmental.asp
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/healthcheck
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/locales/
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/plain] => https://passbolt.lan.ddnsgeek.com/plain]
@@ -334,17 +335,17 @@ Configuration {
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].asp => https://passbolt.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].aspx => https://passbolt.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].jsp => https://passbolt.lan.ddnsgeek.com/quote].jsp
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_96.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/users/recover
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://passbolt.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 08:39:26 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md
+37 -241
View File
@@ -5,27 +5,52 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:39:28 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml passbolt.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:57:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
Host is up, received user-set (0.016s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:39:39 UTC for 998s
Scanned at 2026-04-14 03:58:32 UTC for 333s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-vhosts:
|_128 names had status 308
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-chrono: Request times for /; avg: 915.97ms; min: 799.65ms; max: 1032.68ms
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test
|_http-errors: Couldn't find any error pages.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-mobileversion-checker: No mobile version detected.
|_http-malware-host: Host appears to be clean
|_http-comments-displayer: Couldn't find any comments.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-date: Tue, 14 Apr 2026 04:00:43 GMT; -2s from local time.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-feed: Couldn't find any feeds.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-headers:
| Location: https://passbolt.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 04:00:56 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-chrono: Request times for /; avg: 812.55ms; min: 646.00ms; max: 1027.61ms
| http-useragent-tester:
| Status for browser useragent: 404
| Redirected To: /auth/login?redirect=%2F
@@ -47,238 +72,9 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
|_http-date: Sun, 05 Apr 2026 08:41:02 GMT; -3s from local time.
| http-headers:
| Location: https://passbolt.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 08:42:05 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-malware-host: Host appears to be clean
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-errors: Couldn't find any error pages.
|_http-feed: Couldn't find any feeds.
| http-wordpress-enum:
| Search limited to top 100 themes/plugins
| plugins
| wordpress-seo
| elementor
| jetpack
| wordfence
| woocommerce
| contact-form-7
| akismet
| wpforms-lite
| google-analytics-for-wordpress
| google-site-kit
| really-simple-ssl
| all-in-one-seo-pack
| all-in-one-wp-migration
| updraftplus
| seo-by-rank-math
| optinmonster
| litespeed-cache
| essential-addons-for-elementor-lite
| sg-cachepress
| classic-editor
| astra-sites
| the-events-calendar
| limit-login-attempts-reloaded
| insert-headers-and-footers
| wp-mail-smtp
| mailchimp-for-wp
| redirection
| advanced-custom-fields
| wp-smushit
| wordpress-importer
| wp-super-cache
| w3-total-cache
| wp-fastest-cache
| siteorigin-panels
| mailpoet
| ninja-forms
| wp-optimize
| google-analytics-dashboard-for-wp
| duplicator
| instagram-feed
| header-footer-elementor
| premium-addons-for-elementor
| gutenberg
| so-widgets-bundle
| facebook-for-woocommerce
| nextgen-gallery
| woocommerce-services
| ewww-image-optimizer
| autoptimize
| google-sitemap-generator
| woocommerce-gateway-stripe
| cookie-law-info
| duplicate-post
| elementskit-lite
| woocommerce-payments
| tinymce-advanced
| ultimate-addons-for-gutenberg
| better-wp-security
| google-listings-and-ads
| mainwp-child
| all-in-one-wp-security-and-firewall
| cookie-notice
| wp-statistics
| loco-translate
| ml-slider
| newsletter
| duplicate-page
| redux-framework
| sg-security
| coming-soon
| yith-woocommerce-wishlist
| kadence-blocks
| sucuri-scanner
| wp-file-manager
| wps-hide-login
| loginizer
| disable-comments
| wp-google-maps
| coblocks
| ocean-extra
| formidable
| polylang
| worker
| shortcodes-ultimate
| mailchimp-for-woocommerce
| regenerate-thumbnails
| complianz-gdpr
| creative-mail-by-constant-contact
| meta-box
| user-role-editor
| broken-link-checker
| custom-post-type-ui
| smart-slider-3
| cleantalk-spam-protect
| tablepress
| photo-gallery
| backwpup
| woocommerce-paypal-payments
| accelerated-mobile-pages
| woocommerce-pdf-invoices-packing-slips
| themes
| astra
| twentyseventeen
| twentyfifteen
| twentynineteen
| twentytwenty
| twentysixteen
| twentyfourteen
| twentytwentyone
| hello-elementor
| twentythirteen
| oceanwp
| twentytwelve
| storefront
| twentyeleven
| twentytwentytwo
| twentyten
| generatepress
| twentytwentythree
| neve
| responsive
| sydney
| blocksy
| hestia
| customizr
| colormag
| kadence
| vantage
| hueman
| twentytwentyfour
| spacious
| lightning
| virtue
| newsup
| onepress
| specia
| ashe
| mh-magazine-lite
| zakra
| sinatra
| phlox
| mesmerize
| evolve
| graphene
| shapely
| colibri-wp
| sparkling
| colorway
| enigma
| make
| flash
| customify
| total
| mantra
| appointment
| ifeature
| inspiro
| go
| covernews
| iconic-one
| popularfx
| minamaze
| omega
| twentytwentyfive
| catch-box
| bard
| bizberg
| dispatch
| poseidon
| page-builder-framework
| illdy
| coraline
| accelerate
| alexandria
| pinboard
| hemingway
| wallstreet
| royal-elementor-kit
| portfolio-press
| startkit
| radiate
| attitude
| nirvana
| arilewp
| avril
| custom-community
| argent
| blogus
| rife-free
| raindrops
| activello
| tempera
| spicepress
| mystique
| estore
| sela
| suevafree
| delicate
| travelify
| woostify
|_ agama
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:56:18 2026 -- 1 IP address (1 host up) scanned in 1011.65 seconds
# Nmap done at Tue Apr 14 04:04:05 2026 -- 1 IP address (1 host up) scanned in 389.23 seconds
```
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md
+75839 -41335
View File
File diff suppressed because it is too large. Load diff
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md
+23 -4
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://passbolt.lan.ddnsge
[/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://passbolt.lan.ddnsge
+ Target Hostname: passbolt.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 08:40:57 (GMT0)
+ Start Time: 2026-04-14 04:00:37 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 09:07:45 (GMT0) (1608 seconds)
+ End Time: 2026-04-14 04:13:28 (GMT0) (771 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/passbolt.lan.ddnsgeek.com/report/report.md/passbolt.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md
+8 -7
View File
@@ -23,7 +23,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:43:36 GMT
Date: Tue, 14 Apr 2026 04:01:00 GMT
Content-Length: 17
Connection: close
@@ -106,12 +106,12 @@ HTTP Headers:
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:43:48 GMT
Date: Tue, 14 Apr 2026 04:01:12 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: /auth/login?redirect=%2F
Pragma: no-cache
Server: nginx
Set-Cookie: passbolt_session=996d036795d4f6b88ad6c0fbed7ff748; path=/; HttpOnly; SameSite=Lax
Set-Cookie: passbolt_session=bff9b1c3939940e6b1ed06d4c4542451; path=/; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
@@ -125,7 +125,7 @@ Title : Passbolt | Open source password manager for teams
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
@@ -169,7 +169,7 @@ Detected Plugins:
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
String : access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
@@ -210,12 +210,13 @@ HTTP Headers:
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:46:40 GMT
Date: Tue, 14 Apr 2026 04:01:24 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Permissions-Policy: unload=(*)
Pragma: no-cache
Referrer-Policy: same-origin
Server: nginx
Set-Cookie: csrfToken=ed154ab1727451a6923c86d61facb81e77d14b234e830561789897fec2577daccf9005ac69a9161ec06ea7df0b5b13e8b46715b1bf6525827f96699b014d863c; path=/
Set-Cookie: csrfToken=01aeb4bac9f26503e0861d4666eb163b6ea50bac303757f3436055ff52302361796cb8a695e33710d6ecb6a11e2a99e84c5f7b9e9032908442bbe954b341eaab; path=/
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
results/passbolt.lan.ddnsgeek.com/scans/_commands.log
+2 -2
View File
@@ -2,8 +2,6 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" passbolt.lan.ddnsgeek.com
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" passbolt.lan.ddnsgeek.com
feroxbuster -u http://passbolt.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
curl -sSikf http://passbolt.lan.ddnsgeek.com:80/.well-known/security.txt
@@ -32,6 +30,8 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://passbolt.lan.ddnsg
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" passbolt.lan.ddnsgeek.com
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" passbolt.lan.ddnsgeek.com
sslscan --show-certificate --no-colour passbolt.lan.ddnsgeek.com:443 2>&1
ffuf -u https://passbolt.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.passbolt.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_passbolt.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt
+52 -56
View File
@@ -1,33 +1,30 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:29:22 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml passbolt.lan.ddnsgeek.com
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 20 dropped probes since last increase.
adjust_timeouts2: packet supposedly had rtt of -483261 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -483261 microseconds. Ignoring time.
# Nmap 7.99 scan initiated Tue Apr 14 03:57:38 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.024s latency).
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:32:45 UTC for 15878s
Scanned at 2026-04-14 04:00:13 UTC for 567s
Not shown: 65531 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:28
| Not valid after: 2026-05-06T19:02:27
| MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
| SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
| SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
| Not valid before: 2026-04-07T00:44:25
| Not valid after: 2026-07-06T00:44:24
| MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
| SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
@@ -40,74 +37,73 @@ PORT STATE SERVICE REASON VERSION
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
| KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
| BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
| AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
| HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
| Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
| MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
| TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
| cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
| bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
| AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
| 8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
| AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
| lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
| 6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
| 4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
| vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
| Kpvre+eLUhbfX0oMhv69Ijo=
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
| YrarkoA+irmSeogYZBI+qKg=
|_-----END CERTIFICATE-----
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
|_http-server-header: nginx
|_ssl-date: TLS randomness does not represent time
| http-methods:
|_ Supported Methods: GET HEAD POST
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
20001/tcp closed microsan reset ttl 57
51413/tcp open tcpwrapped syn-ack ttl 56
Device type: general purpose|firewall
Running (JUST GUESSING): Linux 4.X|2.6.X|3.X|5.X (94%), IPFire 2.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:ipfire:ipfire:2.27 cpe:/o:linux:linux_kernel:5.15 cpe:/o:linux:linux_kernel:6.1
Device type: general purpose
Running (JUST GUESSING): Linux 5.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
Aggressive OS guesses: Linux 4.19 - 5.15 (94%), Linux 2.6.32 (89%), Linux 2.6.32 or 3.10 (89%), Linux 4.0 - 4.4 (89%), IPFire 2.27 (Linux 5.15 - 6.1) (88%), Linux 4.15 (87%), Linux 5.4 (87%), Linux 2.6.32 - 2.6.35 (86%), Linux 2.6.32 - 2.6.39 (85%)
Aggressive OS guesses: Linux 5.4 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25C33%P=x86_64-pc-linux-gnu)
SEQ(SP=FB%GCD=1%ISR=100%TI=Z%TS=A)
SEQ(SP=FE%GCD=1%ISR=109%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBE04%P=x86_64-pc-linux-gnu)
SEQ(SP=102%GCD=1%ISR=10B%TI=Z%TS=A)
SEQ(SP=FE%GCD=1%ISR=10C%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
ECN(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
T5(R=N)
T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=N)
T7(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 17.139 days (since Thu Mar 19 09:37:52 2026)
Uptime guess: 49.689 days (since Mon Feb 23 11:37:19 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=251 (Good luck!)
TCP Sequence Prediction: Difficulty=254 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 20001/tcp)
HOP RTT ADDRESS
1 0.18 ms 10.216.0.161
2 0.35 ms 10.216.35.11
3 3.03 ms 10.216.32.2
4 0.41 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 2.12 ms 4764.syd.equinix.com (45.127.173.7)
6 12.00 ms 10.241.1.187
7 12.61 ms 10.241.2.26
8 27.98 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.16 ms 10.216.0.161
2 0.26 ms 10.216.35.12
3 10.90 ms 10.216.32.1
4 0.46 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.29 ms 4764.syd.equinix.com (45.127.173.7)
6 11.70 ms 10.241.1.187
7 12.45 ms 10.241.2.26
8 14.32 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 12:57:23 2026 -- 1 IP address (1 host up) scanned in 16089.64 seconds
# Nmap done at Tue Apr 14 04:09:40 2026 -- 1 IP address (1 host up) scanned in 726.83 seconds
results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt
+46 -48
View File
@@ -1,10 +1,8 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:28:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml passbolt.lan.ddnsgeek.com
Increasing send delay for 167.179.167.166 from 0 to 5 due to 11 out of 21 dropped probes since last increase.
Increasing send delay for 167.179.167.166 from 5 to 10 due to 11 out of 16 dropped probes since last increase.
# Nmap 7.99 scan initiated Tue Apr 14 03:53:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.031s latency).
Host is up, received user-set (0.019s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:28:17 UTC for 665s
Scanned at 2026-04-14 03:53:07 UTC for 261s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
@@ -12,28 +10,24 @@ PORT STATE SERVICE REASON VERSION
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-server-header: nginx
|_ssl-date: TLS randomness does not represent time
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:28
| Not valid after: 2026-05-06T19:02:27
| MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
| SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
| SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
| Not valid before: 2026-04-07T00:44:25
| Not valid after: 2026-07-06T00:44:24
| MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
| SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
@@ -46,25 +40,29 @@ PORT STATE SERVICE REASON VERSION
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
| KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
| BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
| AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
| HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
| Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
| MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
| TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
| cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
| bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
| AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
| 8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
| AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
| lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
| 6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
| 4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
| vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
| Kpvre+eLUhbfX0oMhv69Ijo=
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
| YrarkoA+irmSeogYZBI+qKg=
|_-----END CERTIFICATE-----
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
|_ssl-date: TLS randomness does not represent time
|_http-server-header: nginx
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 5.X (91%)
@@ -73,9 +71,9 @@ OS fingerprint not ideal because: Missing a closed TCP port so results incomplet
Aggressive OS guesses: Linux 5.4 (91%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21FBA%P=x86_64-pc-linux-gnu)
SEQ(SP=104%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=F6%GCD=1%ISR=FF%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBB29%P=x86_64-pc-linux-gnu)
SEQ(TS=A)
SEQ(SP=104%GCD=1%ISR=10B%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
@@ -86,22 +84,22 @@ T4(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 16.959 days (since Thu Mar 19 09:37:53 2026)
Uptime guess: 49.681 days (since Mon Feb 23 11:37:19 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=246 (Good luck!)
TCP Sequence Prediction: Difficulty=260 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 0.09 ms 10.216.0.161
2 0.23 ms 10.216.35.11
3 0.98 ms 10.216.32.2
4 0.66 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.58 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.83 ms 10.241.1.187
7 12.74 ms 10.241.2.71
8 23.70 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
2 0.26 ms 10.216.35.11
3 0.89 ms 10.216.32.2
4 0.57 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.93 ms 4764.syd.equinix.com (45.127.173.7)
6 11.64 ms 10.241.1.185
7 12.76 ms 10.241.2.26
8 14.27 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:39:22 2026 -- 1 IP address (1 host up) scanned in 688.02 seconds
# Nmap done at Tue Apr 14 03:57:29 2026 -- 1 IP address (1 host up) scanned in 270.25 seconds
results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt
+17 -20
View File
@@ -1,34 +1,31 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:33:32 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml passbolt.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:00:46 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.69s latency).
Host is up, received user-set (1.7s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:33:52 UTC for 1546s
Scanned at 2026-04-14 04:00:56 UTC for 1335s
All 100 scanned ports on passbolt.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing an open TCP port so results incomplete
No OS matches for host
Too many fingerprints match this host to give specific OS details
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%DS=13%DC=T%G=N%TM=69D2247B%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDC131%P=x86_64-pc-linux-gnu)
SEQ()
T3(R=Y%DF=Y%TG=40%W=1FA%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T2(R=Y%DF=Y%TG=40%W=FE88%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)
U1(R=N)
IE(R=N)
Network Distance: 13 hops
Network Distance: 8 hops
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.06 ms 10.216.0.161
2 0.21 ms 10.216.35.11
3 0.76 ms 10.216.32.2
4 0.41 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.38 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.62 ms 10.241.1.187
7 12.66 ms 10.241.2.71
8 ... 12
13 686.21 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.20 ms 10.216.35.12
3 3.71 ms 10.216.32.2
4 0.55 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.62 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.67 ms 10.241.1.185
7 12.82 ms 10.241.2.26
8 1686.19 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:59:39 2026 -- 1 IP address (1 host up) scanned in 1577.37 seconds
# Nmap done at Tue Apr 14 04:23:13 2026 -- 1 IP address (1 host up) scanned in 1352.29 seconds
results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html
+2 -2
View File
@@ -2,12 +2,12 @@ HTTP/2 302
cache-control: no-store, no-cache, must-revalidate
content-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
content-type: text/html; charset=UTF-8
date: Sun, 05 Apr 2026 08:39:31 GMT
date: Tue, 14 Apr 2026 04:00:21 GMT
expires: Thu, 19 Nov 1981 08:52:00 GMT
location: /auth/login?redirect=%2F
pragma: no-cache
server: nginx
set-cookie: passbolt_session=19de39a55e7976fc68a4690d270f2c3c; path=/; HttpOnly; SameSite=Lax
set-cookie: passbolt_session=b3790e501b3588785049c60b517a2320; path=/; HttpOnly; SameSite=Lax
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt
+10 -10
View File
@@ -288,8 +288,8 @@ Configuration {
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fapp
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/css/
200 GET 1l 2w 360c https://passbolt.lan.ddnsgeek.com/favicon.ico
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/fonts/
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Ffolders
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/fonts/
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fgroups
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/img/
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/js/
@@ -299,15 +299,15 @@ Configuration {
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/healthcheck
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/locales/
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_96.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/users/recover
results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt
+27 -6
View File
@@ -1,3 +1,22 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -9,21 +28,23 @@
CN: passbolt.lan.ddnsgeek.com
SAN: passbolt.lan.ddnsgeek.com
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
Issuer: /C=US/O=Let's Encrypt/CN=R12
+ Platform: Unknown
+ Start Time: 2026-04-05 08:41:00 (GMT0)
+ Start Time: 2026-04-14 04:00:47 (GMT0)
---------------------------------------------------------------------------
+ Server: nginx
+ [999961] /: Cookie passbolt_session created without the secure flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-login-url' found, with contents: /auth/login.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-error' found, with contents: true.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-version' found, with contents: 1.3.0.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-verify-url' found, with contents: /auth/verify.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-logout-url' found, with contents: /auth/logout.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-debug' found, with contents: There is no user associated with this key. No key id set..
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-progress' found, with contents: stage0.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-error' found, with contents: true.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-pubkey-url' found, with contents: /auth/verify.json.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-logout-url' found, with contents: /auth/logout.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-verify-url' found, with contents: /auth/verify.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-login-url' found, with contents: /auth/login.
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-authenticated' found, with contents: false.
+ [999961] /auth/login?redirect=%2F: Cookie csrfToken created without the secure flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ [95] /auth/login?redirect=%2F: Cookie csrfToken created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt
+254 -162
View File
@@ -1,12 +1,11 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:39:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:00:39 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:39:44 UTC for 1574s
Scanned at 2026-04-14 04:00:47 UTC for 353s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-feed: Couldn't find any feeds.
| http-comments-displayer:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com
|
@@ -15,10 +14,27 @@ PORT STATE SERVICE REASON VERSION
| Comment:
| <!-- main -->
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.10.0
| Line number: 1
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 29
| Comment:
| /*! For license information please see api-vendors.js.LICENSE.txt */
| /**
| * Initialise to get the theme from stylesheet or OS preference
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 22
| Comment:
| /**
| * Bind callbacks
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 79
| Comment:
| /**
| * Is theme defined
| * @returns {boolean}
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/
| Line number: 6
@@ -49,146 +65,60 @@ PORT STATE SERVICE REASON VERSION
| along with this program. If not, see http://www.gnu.org/licenses/.
|
|
|_ -->
| http-headers:
| Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
| Access-Control-Expose-Headers: X-GPGAuth-Progress
| Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
| Access-Control-Expose-Headers: X-GPGAuth-Authenticated
| Access-Control-Expose-Headers: X-GPGAuth-Refer
| Access-Control-Expose-Headers: X-GPGAuth-Debug
| Access-Control-Expose-Headers: X-GPGAuth-Error
| Access-Control-Expose-Headers: X-GPGAuth-Pubkey
| Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
| Access-Control-Expose-Headers: X-GPGAuth-Version
| Cache-Control: no-store, no-cache, must-revalidate
| Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
| Content-Type: text/html; charset=UTF-8
| Date: Sun, 05 Apr 2026 08:43:47 GMT
| Expires: Thu, 19 Nov 1981 08:52:00 GMT
| Pragma: no-cache
| Referrer-Policy: same-origin
| Server: nginx
| Set-Cookie: passbolt_session=0ef149b13c99d135c6c2a67b1a000b76; path=/; HttpOnly; SameSite=Lax
| Set-Cookie: csrfToken=16d25e047084290e11d152a80a4d75f310aab333c9ce6f08261c78346adff7db300d53d7b6cd56f23b17dff875111a4d0f30c368a11fb6aed06ede845284953e; path=/
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Download-Options: noopen
| X-Frame-Options: SAMEORIGIN
| X-Gpgauth-Authenticated: false
| X-Gpgauth-Debug: There is no user associated with this key. No key id set.
| X-Gpgauth-Error: true
| X-Gpgauth-Login-Url: /auth/login
| X-Gpgauth-Logout-Url: /auth/logout
| X-Gpgauth-Progress: stage0
| X-Gpgauth-Pubkey-Url: /auth/verify.json
| X-Gpgauth-Verify-Url: /auth/verify
| X-Gpgauth-Version: 1.3.0
| X-Permitted-Cross-Domain-Policies: all
| X-Xss-Protection: 1; mode=block
| Connection: close
| Transfer-Encoding: chunked
|
|_ (Request type: GET)
|_http-date: Sun, 05 Apr 2026 08:43:47 GMT; -2m53s from local time.
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
| -->
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 1
| Comment:
| /**
| * Passbolt ~ Open source password manager for teams
| * Copyright (c) Passbolt SARL (https://www.passbolt.com)
| *
| * Licensed under GNU Affero General Public License version 3 of the or any later version.
| * For full copyright and license information, please see the LICENSE.txt
| * Redistributions of files must retain the above copyright notice.
| *
| * @copyright Copyright (c) Passbolt SA (https://www.passbolt.com)
| * @license https://opensource.org/licenses/AGPL-3.0 AGPL License
| * @link https://www.passbolt.com Passbolt(tm)
| * @since 3.3.2
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 59
| Comment:
| /**
| * Get link tag
| * @returns {Element}
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.11.0
| Line number: 1
| Comment:
| /*! For license information please see api-vendors.js.LICENSE.txt */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 87
| Comment:
| /**
| * Set theme according to the OS preference
| * @param mediaQueryPreferColor
| */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0
| Line number: 1
| Comment:
| /*! For license information please see api-triage.js.LICENSE.txt */
|
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
| Line number: 44
| Comment:
| /**
| * Update link reference with the theme
|_ */
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-title: Passbolt | Open source password manager for teams
|_Requested resource was /auth/login?redirect=%2F
|_http-chrono: Request times for /; avg: 37139.25ms; min: 2126.65ms; max: 69794.57ms
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:28
| Not valid after: 2026-05-06T19:02:27
| MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
| SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
| SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
| KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
| BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
| AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
| HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
| Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
| MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
| TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
| cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
| bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
| AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
| 8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
| AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
| lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
| 6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
| 4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
| vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
| Kpvre+eLUhbfX0oMhv69Ijo=
|_-----END CERTIFICATE-----
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-php-version: Credits query returned unknown hash 949c98d8d14d6d4da5caaf045903a8a1
|_http-server-header: nginx
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-backup-finder: ERROR: Script execution failed (use -d to debug)
| http-waf-detect: IDS/IPS/WAF detected:
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: /auth/login?redirect=%2F
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
|_ libwww: 404
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
@@ -209,45 +139,207 @@ PORT STATE SERVICE REASON VERSION
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-methods:
|_ Supported Methods: GET HEAD POST
|_ssl-date: TLS randomness does not represent time
| http-waf-detect: IDS/IPS/WAF detected:
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-errors:
| Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com
| Found the following error pages:
|
| Error Code: 404
| https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.10.0
|
| Error Code: 404
| https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case
|
| Error Code: 404
| https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
| https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|
| Error Code: 404
| https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.10.0
|
| Error Code: 404
|_ https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|_http-mobileversion-checker: No mobile version detected.
|_ https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_http-unsafe-output-escaping: ERROR: Script execution failed (use -d to debug)
|_http-malware-host: Host appears to be clean
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
|_http-chrono: Request times for /; avg: 29564.94ms; min: 2054.83ms; max: 131706.91ms
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-date: Tue, 14 Apr 2026 04:01:12 GMT; -19s from local time.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: /auth/login?redirect=%2F
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| http-php-version: Logo query returned unknown hash 3282c083dbb29b35410366062b9400a1
|_Credits query returned unknown hash 3282c083dbb29b35410366062b9400a1
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-grep:
| (2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0:
| (1) ip:
| + 1.122.28.223
| (1) email:
|_ + you@organization.com
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; ico: 1; png: 5; svg: 1
| Other: 1; ico: 1; png: 6; svg: 1
| /js/app/
| js: 1
| js: 3
| Longest directory structure:
| Depth: 2
| Dir: /js/app/
| Total files found (by extension):
|_ Other: 1; ico: 1; js: 1; png: 5; svg: 1
|_ Other: 1; ico: 1; js: 3; png: 6; svg: 1
|_http-rfi-spider: ERROR: Script execution failed (use -d to debug)
| http-traceroute:
| Status Code
| Hop #1: 404
| Hop #2: 302
| Hop #3: 302
| server
| Hop #1
| Hop #2: nginx
| Hop #3: nginx
| content-type
| Hop #1: text/plain; charset=utf-8
| Hop #2: text/html; charset=UTF-8
| Hop #3: text/html; charset=UTF-8
| content-length
| Hop #1: 19
| Hop #2
| Hop #3
| location
| Hop #1
| Hop #2: /auth/login?redirect=%2F
|_ Hop #3: /auth/login?redirect=%2F
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-04-07T00:44:25
| Not valid after: 2026-07-06T00:44:24
| MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
| SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
| YrarkoA+irmSeogYZBI+qKg=
|_-----END CERTIFICATE-----
|_http-sql-injection: ERROR: Script execution failed (use -d to debug)
| http-methods:
|_ Supported Methods: GET HEAD POST
|_http-mobileversion-checker: No mobile version detected.
|_http-server-header: nginx
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-headers:
| Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
| Access-Control-Expose-Headers: X-GPGAuth-Progress
| Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
| Access-Control-Expose-Headers: X-GPGAuth-Authenticated
| Access-Control-Expose-Headers: X-GPGAuth-Refer
| Access-Control-Expose-Headers: X-GPGAuth-Debug
| Access-Control-Expose-Headers: X-GPGAuth-Error
| Access-Control-Expose-Headers: X-GPGAuth-Pubkey
| Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
| Access-Control-Expose-Headers: X-GPGAuth-Version
| Cache-Control: no-store, no-cache, must-revalidate
| Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
| Content-Type: text/html; charset=UTF-8
| Date: Tue, 14 Apr 2026 04:01:12 GMT
| Expires: Thu, 19 Nov 1981 08:52:00 GMT
| Permissions-Policy: unload=(*)
| Pragma: no-cache
| Referrer-Policy: same-origin
| Server: nginx
| Set-Cookie: passbolt_session=868f8b90de9733e71911be79a6ae943e; path=/; HttpOnly; SameSite=Lax
| Set-Cookie: csrfToken=77f99ef8df307c0707c09f924bcade32f7909e5c61ff6c5d6eb225253b6553b25a55e5962129c071808a94301932f194403a7667eabb8ee2723fc58c636798ac; path=/
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Download-Options: noopen
| X-Frame-Options: SAMEORIGIN
| X-Gpgauth-Authenticated: false
| X-Gpgauth-Debug: There is no user associated with this key. No key id set.
| X-Gpgauth-Error: true
| X-Gpgauth-Login-Url: /auth/login
| X-Gpgauth-Logout-Url: /auth/logout
| X-Gpgauth-Progress: stage0
| X-Gpgauth-Pubkey-Url: /auth/verify.json
| X-Gpgauth-Verify-Url: /auth/verify
| X-Gpgauth-Version: 1.3.0
| X-Permitted-Cross-Domain-Policies: all
| X-Xss-Protection: 1; mode=block
| Connection: close
| Transfer-Encoding: chunked
|
|_ (Request type: GET)
|_http-feed: Couldn't find any feeds.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:05:59 2026 -- 1 IP address (1 host up) scanned in 1586.00 seconds
# Nmap done at Tue Apr 14 04:06:40 2026 -- 1 IP address (1 host up) scanned in 361.20 seconds
results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt
+7 -6
View File
@@ -77,12 +77,12 @@ HTTP Headers:
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:55:19 GMT
Date: Tue, 14 Apr 2026 04:02:47 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: /auth/login?redirect=%2F
Pragma: no-cache
Server: nginx
Set-Cookie: passbolt_session=5925bd4bd383c843e3979f650a0c87bd; path=/; HttpOnly; SameSite=Lax
Set-Cookie: passbolt_session=f885d8dff46c5731c197be09a984fb40; path=/; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
@@ -96,7 +96,7 @@ Title : Passbolt | Open source password manager for teams
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
@@ -140,7 +140,7 @@ Detected Plugins:
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
String : access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
@@ -181,12 +181,13 @@ HTTP Headers:
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:55:31 GMT
Date: Tue, 14 Apr 2026 04:02:56 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Permissions-Policy: unload=(*)
Pragma: no-cache
Referrer-Policy: same-origin
Server: nginx
Set-Cookie: csrfToken=30469be09d90fab9190421d696b29af29e3f6c1267b000a93dcfaf466dfacb51f4b035ffe5c9f5992cf225972b00892236c707fff8865bef925eaa306dabe310; path=/
Set-Cookie: csrfToken=2d978b238a37ff133e36f80d9258db7e3d28ef00c0b5f15beaa8e1f7b5b46cbb060f7447262c0ade3b058c8527a0de71940c878c587d89380ccab965766f6a6a; path=/
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html
+49 -49
View File
@@ -1,5 +1,5 @@
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
@@ -49,9 +49,9 @@ TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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@@ -64,31 +64,31 @@ ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS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AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM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-----END CERTIFICATE-----
Version: 2
Serial Number: 06:b1:d7:0b:1a:8a:64:6e:ec:4a:80:43:f3:c3:4b:cc:d8:00
Serial Number: 06:8c:58:25:86:ad:cb:b5:14:71:53:b8:79:36:ec:23:91:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R13
Not valid before: Feb 5 19:02:28 2026 GMT
Not valid after: May 6 19:02:27 2026 GMT
Issuer: /C=US/O=Let's Encrypt/CN=R12
Not valid before: Apr 7 00:44:25 2026 GMT
Not valid after: Jul 6 00:44:24 2026 GMT
Subject: /CN=passbolt.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
@@ -134,48 +134,48 @@ Kpvre+eLUhbfX0oMhv69Ijo=
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
9B:4B:96:AB:A2:A1:CD:3E:D1:8D:85:EF:C9:E6:F2:04:B4:6A:63:2C
X509v3 Authority Key Identifier:
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
Authority Information Access:
CA Issuers - URI:http://r13.i.lencr.org/
CA Issuers - URI:http://r12.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:passbolt.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r13.c.lencr.org/1.crl
URI:http://r12.c.lencr.org/23.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Feb 5 20:00:59.205 2026 GMT
Extensions: none
Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:
1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A
Timestamp : Apr 7 01:42:56.151 2026 GMT
Extensions: 00:00:05:00:06:1E:AA:29
Signature : ecdsa-with-SHA256
30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:
9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:
96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:
49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:
30:A4:6C:CB:EF:9E
30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:
72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:
C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:
B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:
D5:DF:5A:F4:2E:62:45:E7
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
Timestamp : Feb 5 20:00:59.234 2026 GMT
Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
Timestamp : Apr 7 01:42:56.125 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:
0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:
04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:
DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:
17:F5:11:6E:F6:48:D5:30
30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:
62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:
C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:
9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:
AF:67:40:BF:8B:68:99
Verify m:
unable to get local issuer certificate
@@ -185,8 +185,8 @@ RSA Key Strength: 4096
Subject: passbolt.lan.ddnsgeek.com
Altnames: DNS:passbolt.lan.ddnsgeek.com
Issuer: R13
Issuer: R12
Not valid before: Feb 5 19:02:28 2026 GMT
Not valid after: May 6 19:02:27 2026 GMT
Not valid before: Apr 7 00:44:25 2026 GMT
Not valid after: Jul 6 00:44:24 2026 GMT
results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml
+161 -170
View File
@@ -1,70 +1,157 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:39:34 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com" start="1775378374" startstr="Sun Apr 5 08:39:34 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:00:39 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 443 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com" start="1776139239" startstr="Tue Apr 14 04:00:39 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775378384"/>
<taskend task="NSE" time="1775378384"/>
<taskbegin task="NSE" time="1775378384"/>
<taskend task="NSE" time="1775378384"/>
<taskbegin task="NSE" time="1775378384"/>
<taskend task="NSE" time="1775378384"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775378384"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775378384"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775378384"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775378384"/>
<taskbegin task="SYN Stealth Scan" time="1775378384"/>
<taskend task="SYN Stealth Scan" time="1775378384" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775378387"/>
<taskend task="Service scan" time="1775378463" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775378463"/>
<taskprogress task="NSE" time="1775378611" percent="47.24" remaining="166" etc="1775378776"/>
<taskprogress task="NSE" time="1775378647" percent="83.16" remaining="38" etc="1775378684"/>
<taskprogress task="NSE" time="1775378705" percent="82.89" remaining="50" etc="1775378755"/>
<taskprogress task="NSE" time="1775378735" percent="82.89" remaining="57" etc="1775378791"/>
<taskprogress task="NSE" time="1775378774" percent="83.22" remaining="63" etc="1775378837"/>
<taskprogress task="NSE" time="1775378804" percent="83.61" remaining="67" etc="1775378871"/>
<taskprogress task="NSE" time="1775378870" percent="86.64" remaining="63" etc="1775378933"/>
<taskprogress task="NSE" time="1775378999" percent="86.97" remaining="81" etc="1775379079"/>
<taskprogress task="NSE" time="1775379186" percent="86.97" remaining="109" etc="1775379294"/>
<taskprogress task="NSE" time="1775379309" percent="86.97" remaining="127" etc="1775379436"/>
<taskprogress task="NSE" time="1775379373" percent="86.97" remaining="137" etc="1775379509"/>
<taskprogress task="NSE" time="1775379429" percent="86.97" remaining="145" etc="1775379574"/>
<taskprogress task="NSE" time="1775379478" percent="87.30" remaining="148" etc="1775379626"/>
<taskprogress task="NSE" time="1775379520" percent="87.62" remaining="150" etc="1775379669"/>
<taskprogress task="NSE" time="1775379566" percent="87.62" remaining="156" etc="1775379722"/>
<taskprogress task="NSE" time="1775379614" percent="87.66" remaining="162" etc="1775379776"/>
<taskprogress task="NSE" time="1775379654" percent="87.66" remaining="168" etc="1775379822"/>
<taskprogress task="NSE" time="1775379694" percent="87.66" remaining="174" etc="1775379867"/>
<taskprogress task="NSE" time="1775379730" percent="87.99" remaining="173" etc="1775379903"/>
<taskprogress task="NSE" time="1775379765" percent="88.96" remaining="162" etc="1775379927"/>
<taskprogress task="NSE" time="1775379801" percent="90.26" remaining="145" etc="1775379945"/>
<taskprogress task="NSE" time="1775379832" percent="92.21" remaining="116" etc="1775379948"/>
<taskprogress task="NSE" time="1775379879" percent="96.44" remaining="53" etc="1775379931"/>
<taskprogress task="NSE" time="1775379927" percent="98.39" remaining="24" etc="1775379951"/>
<taskend task="NSE" time="1775379951"/>
<taskbegin task="NSE" time="1775379951"/>
<taskend task="NSE" time="1775379958"/>
<taskbegin task="NSE" time="1775379958"/>
<taskend task="NSE" time="1775379958"/>
<host starttime="1775378384" endtime="1775379958"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776139246"/>
<taskend task="NSE" time="1776139246"/>
<taskbegin task="NSE" time="1776139246"/>
<taskend task="NSE" time="1776139246"/>
<taskbegin task="NSE" time="1776139246"/>
<taskend task="NSE" time="1776139247"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139247"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139247"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139247"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139247"/>
<taskbegin task="SYN Stealth Scan" time="1776139247"/>
<taskend task="SYN Stealth Scan" time="1776139248" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776139251"/>
<taskend task="Service scan" time="1776139264" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776139264"/>
<taskprogress task="NSE" time="1776139295" percent="84.36" remaining="6" etc="1776139301"/>
<taskprogress task="NSE" time="1776139347" percent="87.66" remaining="12" etc="1776139359"/>
<taskprogress task="NSE" time="1776139378" percent="87.66" remaining="17" etc="1776139394"/>
<taskprogress task="NSE" time="1776139414" percent="88.31" remaining="20" etc="1776139434"/>
<taskprogress task="NSE" time="1776139454" percent="88.96" remaining="24" etc="1776139478"/>
<taskprogress task="NSE" time="1776139488" percent="88.96" remaining="28" etc="1776139516"/>
<taskprogress task="NSE" time="1776139530" percent="88.96" remaining="34" etc="1776139563"/>
<taskprogress task="NSE" time="1776139560" percent="98.39" remaining="5" etc="1776139565"/>
<taskprogress task="NSE" time="1776139590" percent="99.68" remaining="2" etc="1776139591"/>
<taskend task="NSE" time="1776139595"/>
<taskbegin task="NSE" time="1776139595"/>
<taskend task="NSE" time="1776139599"/>
<taskbegin task="NSE" time="1776139599"/>
<taskend task="NSE" time="1776139600"/>
<host starttime="1776139247" endtime="1776139600"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="passbolt.lan.ddnsgeek.com" type="user"/>
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-comments-displayer" output="&#xa;Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/&#xa; Line number: 49&#xa; Comment: &#xa; &lt;!-&#45; main -&#45;&gt;&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.10.0&#xa; Line number: 1&#xa; Comment: &#xa; /*! For license information please see api-vendors.js.LICENSE.txt */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/&#xa; Line number: 6&#xa; Comment: &#xa; &lt;!-&#45;&#xa; &#xa; ____ __ ____&#xa; / __ \____ _____ ____/ /_ ____ / / /_&#xa; / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/&#xa; / ____/ /_/ (__ )__ ) /_/ / /_/ / / /_&#xa; /_/ \__,_/____/____/_.___/\____/_/\__/&#xa; &#xa; Open source password manager for teams&#xa; Copyright (c) Passbolt SA (https://www.passbolt.com)&#xa; &#xa; &#xa; This program is free software: you can redistribute it and/or modify&#xa; it under the terms of the GNU Affero General Public License as&#xa; published by the Free Software Foundation, either version 3 of the&#xa; License, or (at your option) any later version.&#xa; &#xa; This program is distributed in the hope that it will be useful,&#xa; but WITHOUT ANY WARRANTY; without even the implied warranty of&#xa; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the&#xa; GNU Affero General Public License for more details.&#xa; &#xa; You should have received a copy of the GNU Affero General Public License&#xa; along with this program. If not, see http://www.gnu.org/licenses/.&#xa; &#xa; &#xa; -&#45;&gt;&#xa;"/><script id="http-headers" output="&#xa; Access-Control-Expose-Headers: X-GPGAuth-Verify-Response&#xa; Access-Control-Expose-Headers: X-GPGAuth-Progress&#xa; Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token&#xa; Access-Control-Expose-Headers: X-GPGAuth-Authenticated&#xa; Access-Control-Expose-Headers: X-GPGAuth-Refer&#xa; Access-Control-Expose-Headers: X-GPGAuth-Debug&#xa; Access-Control-Expose-Headers: X-GPGAuth-Error&#xa; Access-Control-Expose-Headers: X-GPGAuth-Pubkey&#xa; Access-Control-Expose-Headers: X-GPGAuth-Logout-Url&#xa; Access-Control-Expose-Headers: X-GPGAuth-Version&#xa; Cache-Control: no-store, no-cache, must-revalidate&#xa; Content-Security-Policy: default-src &apos;none&apos;; script-src &apos;self&apos;; style-src &apos;self&apos;; img-src &apos;self&apos;; font-src &apos;self&apos;; connect-src &apos;self&apos;; base-uri &apos;self&apos;; frame-src &apos;self&apos;; frame-ancestors &apos;none&apos;; form-action &apos;self&apos; https://*.duosecurity.com&#xa; Content-Type: text/html; charset=UTF-8&#xa; Date: Sun, 05 Apr 2026 08:43:47 GMT&#xa; Expires: Thu, 19 Nov 1981 08:52:00 GMT&#xa; Pragma: no-cache&#xa; Referrer-Policy: same-origin&#xa; Server: nginx&#xa; Set-Cookie: passbolt_session=0ef149b13c99d135c6c2a67b1a000b76; path=/; HttpOnly; SameSite=Lax&#xa; Set-Cookie: csrfToken=16d25e047084290e11d152a80a4d75f310aab333c9ce6f08261c78346adff7db300d53d7b6cd56f23b17dff875111a4d0f30c368a11fb6aed06ede845284953e; path=/&#xa; Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X-Content-Type-Options: nosniff&#xa; X-Download-Options: noopen&#xa; X-Frame-Options: SAMEORIGIN&#xa; X-Gpgauth-Authenticated: false&#xa; X-Gpgauth-Debug: There is no user associated with this key. No key id set.&#xa; X-Gpgauth-Error: true&#xa; X-Gpgauth-Login-Url: /auth/login&#xa; X-Gpgauth-Logout-Url: /auth/logout&#xa; X-Gpgauth-Progress: stage0&#xa; X-Gpgauth-Pubkey-Url: /auth/verify.json&#xa; X-Gpgauth-Verify-Url: /auth/verify&#xa; X-Gpgauth-Version: 1.3.0&#xa; X-Permitted-Cross-Domain-Policies: all&#xa; X-Xss-Protection: 1; mode=block&#xa; Connection: close&#xa; Transfer-Encoding: chunked&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-date" output="Sun, 05 Apr 2026 08:43:47 GMT; -2m53s from local time."><elem key="date">2026-04-05T08:43:47+00:00</elem>
<elem key="delta">-173.0</elem>
</script><script id="http-vhosts" output="&#xa;auth.lan.ddnsgeek.com : 200&#xa;127 names had status 404"/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-title" output="Passbolt | Open source password manager for teams&#xa;Requested resource was /auth/login?redirect=%2F"><elem key="title">Passbolt | Open source password manager for teams</elem>
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-comments-displayer" output="&#xa;Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/&#xa; Line number: 49&#xa; Comment: &#xa; &lt;!-&#45; main -&#45;&gt;&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 29&#xa; Comment: &#xa; /**&#xa; * Initialise to get the theme from stylesheet or OS preference&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 22&#xa; Comment: &#xa; /**&#xa; * Bind callbacks&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 79&#xa; Comment: &#xa; /**&#xa; * Is theme defined&#xa; * @returns {boolean}&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/&#xa; Line number: 6&#xa; Comment: &#xa; &lt;!-&#45;&#xa; &#xa; ____ __ ____&#xa; / __ \____ _____ ____/ /_ ____ / / /_&#xa; / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/&#xa; / ____/ /_/ (__ )__ ) /_/ / /_/ / / /_&#xa; /_/ \__,_/____/____/_.___/\____/_/\__/&#xa; &#xa; Open source password manager for teams&#xa; Copyright (c) Passbolt SA (https://www.passbolt.com)&#xa; &#xa; &#xa; This program is free software: you can redistribute it and/or modify&#xa; it under the terms of the GNU Affero General Public License as&#xa; published by the Free Software Foundation, either version 3 of the&#xa; License, or (at your option) any later version.&#xa; &#xa; This program is distributed in the hope that it will be useful,&#xa; but WITHOUT ANY WARRANTY; without even the implied warranty of&#xa; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the&#xa; GNU Affero General Public License for more details.&#xa; &#xa; You should have received a copy of the GNU Affero General Public License&#xa; along with this program. If not, see http://www.gnu.org/licenses/.&#xa; &#xa; &#xa; -&#45;&gt;&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 1&#xa; Comment: &#xa; /**&#xa; * Passbolt ~ Open source password manager for teams&#xa; * Copyright (c) Passbolt SARL (https://www.passbolt.com)&#xa; *&#xa; * Licensed under GNU Affero General Public License version 3 of the or any later version.&#xa; * For full copyright and license information, please see the LICENSE.txt&#xa; * Redistributions of files must retain the above copyright notice.&#xa; *&#xa; * @copyright Copyright (c) Passbolt SA (https://www.passbolt.com)&#xa; * @license https://opensource.org/licenses/AGPL-3.0 AGPL License&#xa; * @link https://www.passbolt.com Passbolt(tm)&#xa; * @since 3.3.2&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 59&#xa; Comment: &#xa; /**&#xa; * Get link tag&#xa; * @returns {Element}&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.11.0&#xa; Line number: 1&#xa; Comment: &#xa; /*! For license information please see api-vendors.js.LICENSE.txt */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 87&#xa; Comment: &#xa; /**&#xa; * Set theme according to the OS preference&#xa; * @param mediaQueryPreferColor&#xa; */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0&#xa; Line number: 1&#xa; Comment: &#xa; /*! For license information please see api-triage.js.LICENSE.txt */&#xa; &#xa; Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0&#xa; Line number: 44&#xa; Comment: &#xa; /**&#xa; * Update link reference with the theme&#xa; */&#xa;"/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-title" output="Passbolt | Open source password manager for teams&#xa;Requested resource was /auth/login?redirect=%2F"><elem key="tiLine truncated
<elem key="redirect_url">/auth/login?redirect=%2F</elem>
</script><script id="http-chrono" output="Request times for /; avg: 37139.25ms; min: 2126.65ms; max: 69794.57ms"/><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-02-05T19:02:28&#xa;Not valid after: 2026-05-06T19:02:27&#xa;MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2&#xa;SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71&#xa;SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI&#xa;KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby&#xa;BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH&#xa;AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV&#xa;HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG&#xa;Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv&#xa;MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr&#xa;TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ&#xa;cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk&#xa;bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA&#xa;AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN&#xa;8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB&#xa;AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR&#xa;lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3&#xa;6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL&#xa;4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP&#xa;vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq&#xa;Kpvre+eLUhbfX0oMhv69Ijo=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
</script><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: client&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
<table key="ciphers">
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
</table>
</table>
<table key="compressors">
<elem>NULL</elem>
</table>
<elem key="cipher preference">client</elem>
<table key="warnings">
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
</table>
</table>
<table key="TLSv1.3">
<table key="ciphers">
<table>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
</table>
<table>
<elem key="strength">A</elem>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
</table>
</table>
<elem key="cipher preference">server</elem>
</table>
<elem key="least strength">A</elem>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-waf-detect" output="IDS/IPS/WAF detected:&#xa;passbolt.lan.ddnsgeek.com:443/?p4yl04d3=&lt;script&gt;alert(document.cookie)&lt;/script&gt;"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-errors" output="&#xa;Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com&#xa; Found the following error pages: &#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s&#xa;"/><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X_Frame_Options: &#xa; Header: X-Frame-Options: SAMEORIGIN&#xa; Description: The browser must not display this content in any frame from a page of different origin than the content itself.&#xa; X_XSS_Protection: &#xa; Header: X-XSS-Protection: 1; mode=block&#xa; Description: The browser will prevent the rendering of the page when XSS is detected.&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
</table>
<table key="X_Frame_Options">
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
</table>
<table key="X_XSS_Protection">
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</table>
</script><script id="http-unsafe-output-escaping" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-chrono" output="Request times for /; avg: 29564.94ms; min: 2054.83ms; max: 131706.91ms"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-date" output="Tue, 14 Apr 2026 04:01:12 GMT; -19s from local time."><elem key="date">2026-04-14T04:01:12+00:00</elem>
<elem key="delta">-19.0</elem>
</script><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: /auth/login?redirect=%2F&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
<elem key="Redirected To">/auth/login?redirect=%2F</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
<elem>libwww</elem>
<elem>lwp-trivial</elem>
<elem>libcurl-agent/1.0</elem>
<elem>PHP/</elem>
<elem>Python-urllib/2.5</elem>
<elem>GT::WWW</elem>
<elem>Snoopy</elem>
<elem>MFC_Tear_Sample</elem>
<elem>HTTP::Lite</elem>
<elem>PHPCrawl</elem>
<elem>URI::Fetch</elem>
<elem>Zend_Http_Client</elem>
<elem>http client</elem>
<elem>PECL::HTTP</elem>
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-vhosts" output="&#xa;auth.lan.ddnsgeek.com : 200&#xa;127 names had status 404"/><script id="http-php-version" output="Logo query returned unknown hash 3282c083dbb29b35410366062b9400a1&#xa;Credits query returned unknown hash 3282c083dbb29b35410366062b9400a1"/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-grep" output="&#xa; (2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0: &#xa; (1) ip: &#xa; + 1.122.28.223&#xa; (1) email: &#xa; + you@organization.com"><table key="(2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0">
<table key="(1) ip">
<elem>+ 1.122.28.223</elem>
</table>
<table key="(1) email">
<elem>+ you@organization.com</elem>
</table>
</table>
</script><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; /&#xa; Other: 1; ico: 1; png: 6; svg: 1&#xa; /js/app/&#xa; js: 3&#xa; Longest directory structure:&#xa; Depth: 2&#xa; Dir: /js/app/&#xa; Total files found (by extension):&#xa; Other: 1; ico: 1; js: 3; png: 6; svg: 1&#xa;"/><script id="http-rfi-spider" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-traceroute" output="&#xa; Status Code&#xa; Hop #1: 404&#xa; Hop #2: 302&#xa; Hop #3: 302&#xa; server&#xa; Hop #1&#xa; Hop #2: nginx&#xa; Hop #3: nginx&#xa; content-type&#xa; Hop #1: text/plain; charset=utf-8&#xa; Hop #2: text/html; charset=UTF-8&#xa; Hop #3: text/html; charset=UTF-8&#xa; content-length&#xa; Hop #1: 19&#xa; Hop #2&#xa; Hop #3&#xa; location&#xa; Hop #1&#xa; Hop #2: /auth/login?redirect=%2F&#xa; Hop #3: /auth/login?redirect=%2F&#xa;"/><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com&#xa;Issuer: commonName=R12/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-07T00:44:25&#xa;Not valid after: 2026-07-06T00:44:24&#xa;MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712&#xa;SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7&#xa;SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM&#xa;BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV&#xa;HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI&#xa;KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh&#xa;c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD&#xa;VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN&#xa;BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR&#xa;c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE&#xa;Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a&#xa;9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9&#xa;AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj&#xa;IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB&#xa;ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v&#xa;+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF&#xa;MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc&#xa;k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj&#xa;MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw&#xa;YrarkoA+irmSeogYZBI+qKg=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<elem key="commonName">passbolt.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
<elem key="commonName">R13</elem>
<elem key="commonName">R12</elem>
<elem key="countryName">US</elem>
<elem key="organizationName">Let&apos;s Encrypt</elem>
</table>
@@ -82,7 +169,7 @@
</table>
<table>
<elem key="name">X509v3 Extended Key Usage</elem>
<elem key="value">TLS Web Server Authentication, TLS Web Client Authentication</elem>
<elem key="value">TLS Web Server Authentication</elem>
</table>
<table>
<elem key="name">X509v3 Basic Constraints</elem>
@@ -95,11 +182,11 @@
</table>
<table>
<elem key="name">X509v3 Authority Key Identifier</elem>
<elem key="value">E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33</elem>
<elem key="value">00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2</elem>
</table>
<table>
<elem key="name">Authority Information Access</elem>
<elem key="value">CA Issuers - URI:http://r13.i.lencr.org/</elem>
<elem key="value">CA Issuers - URI:http://r12.i.lencr.org/</elem>
</table>
<table>
<elem key="name">X509v3 Subject Alternative Name</elem>
@@ -111,134 +198,38 @@
</table>
<table>
<elem key="name">X509v3 CRL Distribution Points</elem>
<elem key="value">Full Name:&#xa; URI:http://r13.c.lencr.org/1.crl&#xa;</elem>
<elem key="value">Full Name:&#xa; URI:http://r12.c.lencr.org/23.crl&#xa;</elem>
</table>
<table>
<elem key="name">CT Precertificate SCTs</elem>
<elem key="value">Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:&#xa; 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0&#xa; Timestamp : Feb 5 20:00:59.205 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:&#xa; 9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:&#xa; 96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:&#xa; 49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:&#xa; 30:A4:6C:CB:EF:9E&#xa;Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:&#xa; DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21&#xa; Timestamp : Feb 5 20:00:59.234 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:&#xa; 0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:&#xa; 04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:&#xa; DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:&#xa; 17:F5:11:6E:F6:48:D5:30</elem>
<elem key="value">Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:&#xa; 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A&#xa; Timestamp : Apr 7 01:42:56.151 2026 GMT&#xa; Extensions: 00:00:05:00:06:1E:AA:29&#xa; Signature : ecdsa-with-SHA256&#xa; 30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:&#xa; 72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:&#xa; C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:&#xa; B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:&#xa; D5:DF:5A:F4:2E:62:45:E7&#xa;Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:&#xa; 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77&#xa; Timestamp : Apr 7 01:42:56.125 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:&#xa; 62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:&#xa; C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:&#xa; 9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:&#xa; AF:67:40:BF:8B:68:99</elem>
</table>
</table>
<elem key="sig_algo">sha256WithRSAEncryption</elem>
<table key="validity">
<elem key="notBefore">2026-02-05T19:02:28</elem>
<elem key="notAfter">2026-05-06T19:02:27</elem>
<elem key="notBefore">2026-04-07T00:44:25</elem>
<elem key="notAfter">2026-07-06T00:44:24</elem>
</table>
<elem key="md5">0e7e0f703cfe4113d4cba00c81d790e2</elem>
<elem key="sha1">abe4cbbccca9683b7709ed8f301751ea87bb4e71</elem>
<elem key="sha256">6ad206b208ded20b2ad4d8d0017ece21e103c2b579ad2c945515ee6cbe27b06c</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI&#xa;KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby&#xa;BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH&#xa;AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV&#xa;HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG&#xa;Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv&#xa;MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr&#xa;TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ&#xa;cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk&#xa;bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA&#xa;AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN&#xa;8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB&#xa;AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR&#xa;lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3&#xa;6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL&#xa;4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP&#xa;vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq&#xa;Kpvre+eLUhbfX0oMhv69Ijo=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-security-headers" output="&#xa; Strict_Transport_Security: &#xa; Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X_Frame_Options: &#xa; Header: X-Frame-Options: SAMEORIGIN&#xa; Description: The browser must not display this content in any frame from a page of different origin than the content itself.&#xa; X_XSS_Protection: &#xa; Header: X-XSS-Protection: 1; mode=block&#xa; Description: The browser will prevent the rendering of the page when XSS is detected.&#xa; X_Content_Type_Options: &#xa; Header: X-Content-Type-Options: nosniff&#xa; Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
</table>
<table key="X_Frame_Options">
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
</table>
<table key="X_XSS_Protection">
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
</table>
<table key="X_Content_Type_Options">
<elem>Header: X-Content-Type-Options: nosniff</elem>
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
</table>
</script><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-php-version" output="Credits query returned unknown hash 949c98d8d14d6d4da5caaf045903a8a1"/><script id="http-server-header" output="nginx"><elem>nginx</elem>
</script><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-backup-finder" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-waf-detect" output="IDS/IPS/WAF detected:&#xa;passbolt.lan.ddnsgeek.com:443/?p4yl04d3=&lt;script&gt;alert(document.cookie)&lt;/script&gt;"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: /auth/login?redirect=%2F&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34&#xa; Change in Status Code: &#xa; libwww: 404"><elem key="Status for browser useragent">200</elem>
<elem key="Redirected To">/auth/login?redirect=%2F</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
<elem>lwp-trivial</elem>
<elem>libcurl-agent/1.0</elem>
<elem>PHP/</elem>
<elem>Python-urllib/2.5</elem>
<elem>GT::WWW</elem>
<elem>Snoopy</elem>
<elem>MFC_Tear_Sample</elem>
<elem>HTTP::Lite</elem>
<elem>PHPCrawl</elem>
<elem>URI::Fetch</elem>
<elem>Zend_Http_Client</elem>
<elem>http client</elem>
<elem>PECL::HTTP</elem>
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
<table key="Change in Status Code">
<elem key="libwww">404</elem>
</table>
</script><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="ssl-enum-ciphers" output="&#xa; TLSv1.2: &#xa; ciphers: &#xa; TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A&#xa; TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A&#xa; compressors: &#xa; NULL&#xa; cipher preference: client&#xa; warnings: &#xa; Key exchange (secp256r1) of lower strength than certificate key&#xa; TLSv1.3: &#xa; ciphers: &#xa; TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A&#xa; TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A&#xa; cipher preference: server&#xa; least strength: A"><table key="TLSv1.2">
<table key="ciphers">
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">secp256r1</elem>
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="strength">A</elem>
</table>
</table>
<table key="compressors">
<elem>NULL</elem>
</table>
<elem key="cipher preference">client</elem>
<table key="warnings">
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
</table>
</table>
<table key="TLSv1.3">
<table key="ciphers">
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
<elem key="strength">A</elem>
</table>
<table>
<elem key="kex_info">X25519MLKEM768</elem>
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
<elem key="strength">A</elem>
</table>
</table>
<elem key="cipher preference">server</elem>
</table>
<elem key="least strength">A</elem>
</script><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem key="md5">467174a58d202b208b59f04dc9233712</elem>
<elem key="sha1">8af1359b3029214540949080649225087a445dd7</elem>
<elem key="sha256">f9804a631adacd62ceaf5760f7e0826ee9e174db65cdc69c2b5c474b36ac19e3</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM&#xa;BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV&#xa;HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI&#xa;KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh&#xa;c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD&#xa;VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN&#xa;BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR&#xa;c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE&#xa;Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a&#xa;9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9&#xa;AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj&#xa;IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB&#xa;ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v&#xa;+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF&#xa;MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc&#xa;k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj&#xa;MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw&#xa;YrarkoA+irmSeogYZBI+qKg=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-sql-injection" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
</table>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-errors" output="&#xa;Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com&#xa; Found the following error pages: &#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.10.0&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.10.0&#xa; &#xa; Error Code: 404&#xa; &#x9;https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var&#xa;"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; /&#xa; Other: 1; ico: 1; png: 5; svg: 1&#xa; /js/app/&#xa; js: 1&#xa; Longest directory structure:&#xa; Depth: 2&#xa; Dir: /js/app/&#xa; Total files found (by extension):&#xa; Other: 1; ico: 1; js: 1; png: 5; svg: 1&#xa;"/></port>
</script><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-server-header" output="nginx"><elem>nginx</elem>
</script><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-headers" output="&#xa; Access-Control-Expose-Headers: X-GPGAuth-Verify-Response&#xa; Access-Control-Expose-Headers: X-GPGAuth-Progress&#xa; Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token&#xa; Access-Control-Expose-Headers: X-GPGAuth-Authenticated&#xa; Access-Control-Expose-Headers: X-GPGAuth-Refer&#xa; Access-Control-Expose-Headers: X-GPGAuth-Debug&#xa; Access-Control-Expose-Headers: X-GPGAuth-Error&#xa; Access-Control-Expose-Headers: X-GPGAuth-Pubkey&#xa; Access-Control-Expose-Headers: X-GPGAuth-Logout-Url&#xa; Access-Control-Expose-Headers: X-GPGAuth-Version&#xa; Cache-Control: no-store, no-cache, must-revalidate&#xa; Content-Security-Policy: default-src &apos;none&apos;; script-src &apos;self&apos;; style-src &apos;self&apos;; img-src &apos;self&apos;; font-src &apos;self&apos;; connect-src &apos;self&apos;; base-uri &apos;self&apos;; frame-src &apos;self&apos;; frame-ancestors &apos;none&apos;; form-action &apos;self&apos; https://*.duosecurity.com&#xa; Content-Type: text/html; charset=UTF-8&#xa; Date: Tue, 14 Apr 2026 04:01:12 GMT&#xa; Expires: Thu, 19 Nov 1981 08:52:00 GMT&#xa; Permissions-Policy: unload=(*)&#xa; Pragma: no-cache&#xa; Referrer-Policy: same-origin&#xa; Server: nginx&#xa; Set-Cookie: passbolt_session=868f8b90de9733e71911be79a6ae943e; path=/; HttpOnly; SameSite=Lax&#xa; Set-Cookie: csrfToken=77f99ef8df307c0707c09f924bcade32f7909e5c61ff6c5d6eb225253b6553b25a55e5962129c071808a94301932f194403a7667eabb8ee2723fc58c636798ac; path=/&#xa; Strict-Transport-Security: max-age=15552000; includeSubDomains; preload&#xa; X-Content-Type-Options: nosniff&#xa; X-Download-Options: noopen&#xa; X-Frame-Options: SAMEORIGIN&#xa; X-Gpgauth-Authenticated: false&#xa; X-Gpgauth-Debug: There is no user associated with this key. No key id set.&#xa; X-Gpgauth-Error: true&#xa; X-Gpgauth-Login-Url: /auth/login&#xa; X-Gpgauth-Logout-Url: /auth/logout&#xa; X-Gpgauth-Progress: stage0&#xa; X-Gpgauth-Pubkey-Url: /auth/verify.json&#xa; X-Gpgauth-Verify-Url: /auth/verify&#xa; X-Gpgauth-Version: 1.3.0&#xa; X-Permitted-Cross-Domain-Policies: all&#xa; X-Xss-Protection: 1; mode=block&#xa; Connection: close&#xa; Transfer-Encoding: chunked&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-feed" output="Couldn&apos;t find any feeds."/></port>
</ports>
<times srtt="14248" rttvar="14248" to="100000"/>
<times srtt="13941" rttvar="13941" to="100000"/>
</host>
<taskbegin task="NSE" time="1775379959"/>
<taskend task="NSE" time="1775379959"/>
<taskbegin task="NSE" time="1775379959"/>
<taskend task="NSE" time="1775379959"/>
<taskbegin task="NSE" time="1775379959"/>
<taskend task="NSE" time="1775379959"/>
<runstats><finished time="1775379959" timestr="Sun Apr 5 09:05:59 2026" summary="Nmap done at Sun Apr 5 09:05:59 2026; 1 IP address (1 host up) scanned in 1586.00 seconds" elapsed="1586.00" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776139600"/>
<taskend task="NSE" time="1776139600"/>
<taskbegin task="NSE" time="1776139600"/>
<taskend task="NSE" time="1776139600"/>
<taskbegin task="NSE" time="1776139600"/>
<taskend task="NSE" time="1776139600"/>
<runstats><finished time="1776139600" timestr="Tue Apr 14 04:06:40 2026" summary="Nmap done at Tue Apr 14 04:06:40 2026; 1 IP address (1 host up) scanned in 361.20 seconds" elapsed="361.20" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 08:39:27 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:39:27 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt
+9 -8
View File
@@ -302,15 +302,16 @@ Configuration {
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.html => https://passbolt.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/] => https://passbolt.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.php => https://passbolt.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].txt => https://passbolt.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.asp => https://passbolt.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].txt => https://passbolt.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].html => https://passbolt.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.aspx => https://passbolt.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].php => https://passbolt.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.jsp => https://passbolt.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].php => https://passbolt.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].asp => https://passbolt.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].aspx => https://passbolt.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].jsp => https://passbolt.lan.ddnsgeek.com/].jsp
404 GET 0l 0w 64c https://passbolt.lan.ddnsgeek.com/environmental.asp
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/healthcheck
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/locales/
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/plain] => https://passbolt.lan.ddnsgeek.com/plain]
@@ -327,15 +328,15 @@ Configuration {
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].asp => https://passbolt.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].aspx => https://passbolt.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].jsp => https://passbolt.lan.ddnsgeek.com/quote].jsp
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_96.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/users/recover
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 08:39:26 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt
+23 -4
View File
@@ -1,3 +1,22 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -5,19 +24,19 @@
+ Target Hostname: passbolt.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 08:40:57 (GMT0)
+ Start Time: 2026-04-14 04:00:37 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 09:07:45 (GMT0) (1608 seconds)
+ End Time: 2026-04-14 04:13:28 (GMT0) (771 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt
+37 -241
View File
@@ -1,24 +1,49 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:39:28 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml passbolt.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:57:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
Host is up, received user-set (0.016s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:39:39 UTC for 998s
Scanned at 2026-04-14 03:58:32 UTC for 333s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-vhosts:
|_128 names had status 308
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-chrono: Request times for /; avg: 915.97ms; min: 799.65ms; max: 1032.68ms
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test
|_http-errors: Couldn't find any error pages.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-mobileversion-checker: No mobile version detected.
|_http-malware-host: Host appears to be clean
|_http-comments-displayer: Couldn't find any comments.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-date: Tue, 14 Apr 2026 04:00:43 GMT; -2s from local time.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-feed: Couldn't find any feeds.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-headers:
| Location: https://passbolt.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 04:00:56 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-chrono: Request times for /; avg: 812.55ms; min: 646.00ms; max: 1027.61ms
| http-useragent-tester:
| Status for browser useragent: 404
| Redirected To: /auth/login?redirect=%2F
@@ -40,236 +65,7 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
|_http-date: Sun, 05 Apr 2026 08:41:02 GMT; -3s from local time.
| http-headers:
| Location: https://passbolt.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 08:42:05 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-malware-host: Host appears to be clean
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-errors: Couldn't find any error pages.
|_http-feed: Couldn't find any feeds.
| http-wordpress-enum:
| Search limited to top 100 themes/plugins
| plugins
| wordpress-seo
| elementor
| jetpack
| wordfence
| woocommerce
| contact-form-7
| akismet
| wpforms-lite
| google-analytics-for-wordpress
| google-site-kit
| really-simple-ssl
| all-in-one-seo-pack
| all-in-one-wp-migration
| updraftplus
| seo-by-rank-math
| optinmonster
| litespeed-cache
| essential-addons-for-elementor-lite
| sg-cachepress
| classic-editor
| astra-sites
| the-events-calendar
| limit-login-attempts-reloaded
| insert-headers-and-footers
| wp-mail-smtp
| mailchimp-for-wp
| redirection
| advanced-custom-fields
| wp-smushit
| wordpress-importer
| wp-super-cache
| w3-total-cache
| wp-fastest-cache
| siteorigin-panels
| mailpoet
| ninja-forms
| wp-optimize
| google-analytics-dashboard-for-wp
| duplicator
| instagram-feed
| header-footer-elementor
| premium-addons-for-elementor
| gutenberg
| so-widgets-bundle
| facebook-for-woocommerce
| nextgen-gallery
| woocommerce-services
| ewww-image-optimizer
| autoptimize
| google-sitemap-generator
| woocommerce-gateway-stripe
| cookie-law-info
| duplicate-post
| elementskit-lite
| woocommerce-payments
| tinymce-advanced
| ultimate-addons-for-gutenberg
| better-wp-security
| google-listings-and-ads
| mainwp-child
| all-in-one-wp-security-and-firewall
| cookie-notice
| wp-statistics
| loco-translate
| ml-slider
| newsletter
| duplicate-page
| redux-framework
| sg-security
| coming-soon
| yith-woocommerce-wishlist
| kadence-blocks
| sucuri-scanner
| wp-file-manager
| wps-hide-login
| loginizer
| disable-comments
| wp-google-maps
| coblocks
| ocean-extra
| formidable
| polylang
| worker
| shortcodes-ultimate
| mailchimp-for-woocommerce
| regenerate-thumbnails
| complianz-gdpr
| creative-mail-by-constant-contact
| meta-box
| user-role-editor
| broken-link-checker
| custom-post-type-ui
| smart-slider-3
| cleantalk-spam-protect
| tablepress
| photo-gallery
| backwpup
| woocommerce-paypal-payments
| accelerated-mobile-pages
| woocommerce-pdf-invoices-packing-slips
| themes
| astra
| twentyseventeen
| twentyfifteen
| twentynineteen
| twentytwenty
| twentysixteen
| twentyfourteen
| twentytwentyone
| hello-elementor
| twentythirteen
| oceanwp
| twentytwelve
| storefront
| twentyeleven
| twentytwentytwo
| twentyten
| generatepress
| twentytwentythree
| neve
| responsive
| sydney
| blocksy
| hestia
| customizr
| colormag
| kadence
| vantage
| hueman
| twentytwentyfour
| spacious
| lightning
| virtue
| newsup
| onepress
| specia
| ashe
| mh-magazine-lite
| zakra
| sinatra
| phlox
| mesmerize
| evolve
| graphene
| shapely
| colibri-wp
| sparkling
| colorway
| enigma
| make
| flash
| customify
| total
| mantra
| appointment
| ifeature
| inspiro
| go
| covernews
| iconic-one
| popularfx
| minamaze
| omega
| twentytwentyfive
| catch-box
| bard
| bizberg
| dispatch
| poseidon
| page-builder-framework
| illdy
| coraline
| accelerate
| alexandria
| pinboard
| hemingway
| wallstreet
| royal-elementor-kit
| portfolio-press
| startkit
| radiate
| attitude
| nirvana
| arilewp
| avril
| custom-community
| argent
| blogus
| rife-free
| raindrops
| activello
| tempera
| spicepress
| mystique
| estore
| sela
| suevafree
| delicate
| travelify
| woostify
|_ agama
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:56:18 2026 -- 1 IP address (1 host up) scanned in 1011.65 seconds
# Nmap done at Tue Apr 14 04:04:05 2026 -- 1 IP address (1 host up) scanned in 389.23 seconds
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_passbolt.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt
+75839 -41335
View File
File diff suppressed because it is too large. Load diff
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt
+8 -7
View File
@@ -16,7 +16,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:43:36 GMT
Date: Tue, 14 Apr 2026 04:01:00 GMT
Content-Length: 17
Connection: close
@@ -99,12 +99,12 @@ HTTP Headers:
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:43:48 GMT
Date: Tue, 14 Apr 2026 04:01:12 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: /auth/login?redirect=%2F
Pragma: no-cache
Server: nginx
Set-Cookie: passbolt_session=996d036795d4f6b88ad6c0fbed7ff748; path=/; HttpOnly; SameSite=Lax
Set-Cookie: passbolt_session=bff9b1c3939940e6b1ed06d4c4542451; path=/; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
@@ -118,7 +118,7 @@ Title : Passbolt | Open source password manager for teams
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
@@ -162,7 +162,7 @@ Detected Plugins:
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
String : access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
@@ -203,12 +203,13 @@ HTTP Headers:
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:46:40 GMT
Date: Tue, 14 Apr 2026 04:01:24 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Permissions-Policy: unload=(*)
Pragma: no-cache
Referrer-Policy: same-origin
Server: nginx
Set-Cookie: csrfToken=ed154ab1727451a6923c86d61facb81e77d14b234e830561789897fec2577daccf9005ac69a9161ec06ea7df0b5b13e8b46715b1bf6525827f96699b014d863c; path=/
Set-Cookie: csrfToken=01aeb4bac9f26503e0861d4666eb163b6ea50bac303757f3436055ff52302361796cb8a695e33710d6ecb6a11e2a99e84c5f7b9e9032908442bbe954b341eaab; path=/
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml
+44 -1068
View File
File diff suppressed because it is too large. Load diff
results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml
+84 -133
View File
@@ -1,74 +1,52 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:29:22 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml passbolt.lan.ddnsgeek.com" start="1775377762" startstr="Sun Apr 5 08:29:22 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:57:38 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -p- -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml passbolt.lan.ddnsgeek.com" start="1776139058" startstr="Tue Apr 14 03:57:38 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="65535" services="1-65535"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775377964"/>
<taskend task="NSE" time="1775377964"/>
<taskbegin task="NSE" time="1775377964"/>
<taskend task="NSE" time="1775377964"/>
<taskbegin task="NSE" time="1775377964"/>
<taskend task="NSE" time="1775377964"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775377965"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775377965"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775377965"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775377965"/>
<taskbegin task="SYN Stealth Scan" time="1775377965"/>
<taskprogress task="SYN Stealth Scan" time="1775378053" percent="0.30"/>
<taskprogress task="SYN Stealth Scan" time="1775378083" percent="0.37"/>
<taskprogress task="SYN Stealth Scan" time="1775378113" percent="0.44"/>
<taskprogress task="SYN Stealth Scan" time="1775378143" percent="0.51"/>
<taskprogress task="SYN Stealth Scan" time="1775378173" percent="0.58"/>
<taskprogress task="SYN Stealth Scan" time="1775378203" percent="0.65"/>
<taskprogress task="SYN Stealth Scan" time="1775378233" percent="0.73"/>
<taskprogress task="SYN Stealth Scan" time="1775378263" percent="0.81"/>
<taskprogress task="SYN Stealth Scan" time="1775378293" percent="0.88"/>
<taskprogress task="SYN Stealth Scan" time="1775378323" percent="0.96"/>
<taskprogress task="SYN Stealth Scan" time="1775378353" percent="1.05" remaining="36715" etc="1775415068"/>
<taskprogress task="SYN Stealth Scan" time="1775378407" percent="1.27" remaining="34472" etc="1775412878"/>
<taskprogress task="SYN Stealth Scan" time="1775378494" percent="1.60" remaining="32594" etc="1775411087"/>
<taskprogress task="SYN Stealth Scan" time="1775378800" percent="2.71" remaining="29937" etc="1775408736"/>
<taskprogress task="SYN Stealth Scan" time="1775378854" percent="3.06" remaining="28169" etc="1775407023"/>
<taskprogress task="SYN Stealth Scan" time="1775380711" percent="9.33" remaining="26690" etc="1775407401"/>
<taskprogress task="SYN Stealth Scan" time="1775383222" percent="17.25" remaining="25212" etc="1775408434"/>
<taskprogress task="SYN Stealth Scan" time="1775384174" percent="20.77" remaining="23685" etc="1775407859"/>
<taskprogress task="SYN Stealth Scan" time="1775385020" percent="24.13" remaining="22178" etc="1775407197"/>
<taskprogress task="SYN Stealth Scan" time="1775386061" percent="28.13" remaining="20688" etc="1775406748"/>
<taskprogress task="SYN Stealth Scan" time="1775386823" percent="31.54" remaining="19225" etc="1775406047"/>
<taskprogress task="SYN Stealth Scan" time="1775386853" percent="34.17" remaining="17122" etc="1775403974"/>
<taskprogress task="SYN Stealth Scan" time="1775386883" percent="36.80" remaining="15314" etc="1775402197"/>
<taskprogress task="SYN Stealth Scan" time="1775386913" percent="39.42" remaining="13750" etc="1775400663"/>
<taskprogress task="SYN Stealth Scan" time="1775386943" percent="41.97" remaining="12412" etc="1775399355"/>
<taskprogress task="SYN Stealth Scan" time="1775386973" percent="44.55" remaining="11213" etc="1775398186"/>
<taskprogress task="SYN Stealth Scan" time="1775387003" percent="47.20" remaining="10111" etc="1775397114"/>
<taskprogress task="SYN Stealth Scan" time="1775387309" percent="50.52" remaining="9153" etc="1775396462"/>
<taskprogress task="SYN Stealth Scan" time="1775388500" percent="56.15" remaining="8227" etc="1775396727"/>
<taskprogress task="SYN Stealth Scan" time="1775389517" percent="61.32" remaining="7286" etc="1775396802"/>
<taskprogress task="SYN Stealth Scan" time="1775390405" percent="66.24" remaining="6341" etc="1775396745"/>
<taskprogress task="SYN Stealth Scan" time="1775391152" percent="70.95" remaining="5400" etc="1775396551"/>
<taskprogress task="SYN Stealth Scan" time="1775391728" percent="75.49" remaining="4470" etc="1775396197"/>
<taskprogress task="SYN Stealth Scan" time="1775392241" percent="80.05" remaining="3558" etc="1775395798"/>
<taskprogress task="SYN Stealth Scan" time="1775392697" percent="84.68" remaining="2665" etc="1775395361"/>
<taskprogress task="SYN Stealth Scan" time="1775393081" percent="89.39" remaining="1795" etc="1775394875"/>
<taskprogress task="SYN Stealth Scan" time="1775393420" percent="94.23" remaining="948" etc="1775394367"/>
<taskprogress task="SYN Stealth Scan" time="1775393762" percent="99.22" remaining="124" etc="1775393886"/>
<taskend task="SYN Stealth Scan" time="1775393816" extrainfo="65535 total ports"/>
<taskbegin task="Service scan" time="1775393817"/>
<taskend task="Service scan" time="1775393830" extrainfo="3 services on 1 host"/>
<taskbegin task="Traceroute" time="1775393835"/>
<taskend task="Traceroute" time="1775393835"/>
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1775393835"/>
<taskend task="Parallel DNS resolution of 7 hosts." time="1775393835"/>
<taskbegin task="NSE" time="1775393835"/>
<taskend task="NSE" time="1775393841"/>
<taskbegin task="NSE" time="1775393841"/>
<taskend task="NSE" time="1775393843"/>
<taskbegin task="NSE" time="1775393843"/>
<taskend task="NSE" time="1775393843"/>
<host starttime="1775377965" endtime="1775393843"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776139211"/>
<taskend task="NSE" time="1776139212"/>
<taskbegin task="NSE" time="1776139212"/>
<taskend task="NSE" time="1776139212"/>
<taskbegin task="NSE" time="1776139212"/>
<taskend task="NSE" time="1776139212"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139213"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139213"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139213"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139213"/>
<taskbegin task="SYN Stealth Scan" time="1776139213"/>
<taskprogress task="SYN Stealth Scan" time="1776139244" percent="3.27" remaining="917" etc="1776140161"/>
<taskprogress task="SYN Stealth Scan" time="1776139274" percent="8.74" remaining="637" etc="1776139911"/>
<taskprogress task="SYN Stealth Scan" time="1776139304" percent="14.03" remaining="558" etc="1776139862"/>
<taskprogress task="SYN Stealth Scan" time="1776139334" percent="19.16" remaining="511" etc="1776139845"/>
<taskprogress task="SYN Stealth Scan" time="1776139364" percent="24.23" remaining="473" etc="1776139836"/>
<taskprogress task="SYN Stealth Scan" time="1776139394" percent="30.36" remaining="416" etc="1776139809"/>
<taskprogress task="SYN Stealth Scan" time="1776139424" percent="36.44" remaining="369" etc="1776139792"/>
<taskprogress task="SYN Stealth Scan" time="1776139454" percent="42.37" remaining="328" etc="1776139782"/>
<taskprogress task="SYN Stealth Scan" time="1776139484" percent="48.12" remaining="293" etc="1776139776"/>
<taskprogress task="SYN Stealth Scan" time="1776139517" percent="53.70" remaining="263" etc="1776139779"/>
<taskprogress task="SYN Stealth Scan" time="1776139547" percent="59.73" remaining="226" etc="1776139772"/>
<taskprogress task="SYN Stealth Scan" time="1776139580" percent="65.07" remaining="197" etc="1776139777"/>
<taskprogress task="SYN Stealth Scan" time="1776139613" percent="70.75" remaining="166" etc="1776139778"/>
<taskprogress task="SYN Stealth Scan" time="1776139643" percent="76.89" remaining="130" etc="1776139772"/>
<taskprogress task="SYN Stealth Scan" time="1776139673" percent="82.82" remaining="96" etc="1776139768"/>
<taskprogress task="SYN Stealth Scan" time="1776139703" percent="89.33" remaining="59" etc="1776139762"/>
<taskend task="SYN Stealth Scan" time="1776139753" extrainfo="65535 total ports"/>
<taskbegin task="Service scan" time="1776139754"/>
<taskend task="Service scan" time="1776139766" extrainfo="3 services on 1 host"/>
<taskbegin task="Traceroute" time="1776139772"/>
<taskend task="Traceroute" time="1776139772"/>
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1776139772"/>
<taskend task="Parallel DNS resolution of 7 hosts." time="1776139773"/>
<taskbegin task="NSE" time="1776139773"/>
<taskend task="NSE" time="1776139778"/>
<taskbegin task="NSE" time="1776139778"/>
<taskend task="NSE" time="1776139780"/>
<taskbegin task="NSE" time="1776139780"/>
<taskend task="NSE" time="1776139780"/>
<host starttime="1776139213" endtime="1776139780"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="passbolt.lan.ddnsgeek.com" type="user"/>
@@ -77,19 +55,19 @@
<ports><extraports state="filtered" count="65531">
<extrareasons reason="no-response" count="65531" proto="tcp" ports="1-79,81-442,444-20000,20002-51412,51414-65535"/>
</extraports>
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-title" output="Did not follow redirect to https://passbolt.lan.ddnsgeek.com/"><elem key="redirect_url">https://passbolt.lan.ddnsgeek.com/</elem>
</script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-title" output="Did not follow redirect to https://passbolt.lan.ddnsgeek.com/"><elem key="redirect_url">https://passbolt.lan.ddnsgeek.com/</elem>
</script></port>
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-02-05T19:02:28&#xa;Not valid after: 2026-05-06T19:02:27&#xa;MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2&#xa;SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71&#xa;SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI&#xa;KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby&#xa;BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH&#xa;AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV&#xa;HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG&#xa;Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv&#xa;MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr&#xa;TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ&#xa;cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk&#xa;bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA&#xa;AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN&#xa;8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB&#xa;AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR&#xa;lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3&#xa;6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL&#xa;4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP&#xa;vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq&#xa;Kpvre+eLUhbfX0oMhv69Ijo=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com&#xa;Issuer: commonName=R12/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-07T00:44:25&#xa;Not valid after: 2026-07-06T00:44:24&#xa;MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712&#xa;SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7&#xa;SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM&#xa;BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV&#xa;HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI&#xa;KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh&#xa;c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD&#xa;VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN&#xa;BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR&#xa;c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE&#xa;Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a&#xa;9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9&#xa;AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj&#xa;IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB&#xa;ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v&#xa;+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF&#xa;MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc&#xa;k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj&#xa;MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw&#xa;YrarkoA+irmSeogYZBI+qKg=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<elem key="commonName">passbolt.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
<elem key="commonName">R13</elem>
<elem key="commonName">R12</elem>
<elem key="countryName">US</elem>
<elem key="organizationName">Let&apos;s Encrypt</elem>
</table>
@@ -107,7 +85,7 @@
</table>
<table>
<elem key="name">X509v3 Extended Key Usage</elem>
<elem key="value">TLS Web Server Authentication, TLS Web Client Authentication</elem>
<elem key="value">TLS Web Server Authentication</elem>
</table>
<table>
<elem key="name">X509v3 Basic Constraints</elem>
@@ -120,11 +98,11 @@
</table>
<table>
<elem key="name">X509v3 Authority Key Identifier</elem>
<elem key="value">E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33</elem>
<elem key="value">00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2</elem>
</table>
<table>
<elem key="name">Authority Information Access</elem>
<elem key="value">CA Issuers - URI:http://r13.i.lencr.org/</elem>
<elem key="value">CA Issuers - URI:http://r12.i.lencr.org/</elem>
</table>
<table>
<elem key="name">X509v3 Subject Alternative Name</elem>
@@ -136,91 +114,64 @@
</table>
<table>
<elem key="name">X509v3 CRL Distribution Points</elem>
<elem key="value">Full Name:&#xa; URI:http://r13.c.lencr.org/1.crl&#xa;</elem>
<elem key="value">Full Name:&#xa; URI:http://r12.c.lencr.org/23.crl&#xa;</elem>
</table>
<table>
<elem key="name">CT Precertificate SCTs</elem>
<elem key="value">Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:&#xa; 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0&#xa; Timestamp : Feb 5 20:00:59.205 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:&#xa; 9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:&#xa; 96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:&#xa; 49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:&#xa; 30:A4:6C:CB:EF:9E&#xa;Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:&#xa; DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21&#xa; Timestamp : Feb 5 20:00:59.234 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:&#xa; 0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:&#xa; 04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:&#xa; DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:&#xa; 17:F5:11:6E:F6:48:D5:30</elem>
<elem key="value">Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:&#xa; 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A&#xa; Timestamp : Apr 7 01:42:56.151 2026 GMT&#xa; Extensions: 00:00:05:00:06:1E:AA:29&#xa; Signature : ecdsa-with-SHA256&#xa; 30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:&#xa; 72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:&#xa; C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:&#xa; B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:&#xa; D5:DF:5A:F4:2E:62:45:E7&#xa;Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:&#xa; 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77&#xa; Timestamp : Apr 7 01:42:56.125 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:&#xa; 62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:&#xa; C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:&#xa; 9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:&#xa; AF:67:40:BF:8B:68:99</elem>
</table>
</table>
<elem key="sig_algo">sha256WithRSAEncryption</elem>
<table key="validity">
<elem key="notBefore">2026-02-05T19:02:28</elem>
<elem key="notAfter">2026-05-06T19:02:27</elem>
<elem key="notBefore">2026-04-07T00:44:25</elem>
<elem key="notAfter">2026-07-06T00:44:24</elem>
</table>
<elem key="md5">0e7e0f703cfe4113d4cba00c81d790e2</elem>
<elem key="sha1">abe4cbbccca9683b7709ed8f301751ea87bb4e71</elem>
<elem key="sha256">6ad206b208ded20b2ad4d8d0017ece21e103c2b579ad2c945515ee6cbe27b06c</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI&#xa;KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby&#xa;BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH&#xa;AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV&#xa;HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG&#xa;Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv&#xa;MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr&#xa;TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ&#xa;cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk&#xa;bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA&#xa;AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN&#xa;8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB&#xa;AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR&#xa;lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3&#xa;6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL&#xa;4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP&#xa;vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq&#xa;Kpvre+eLUhbfX0oMhv69Ijo=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem key="md5">467174a58d202b208b59f04dc9233712</elem>
<elem key="sha1">8af1359b3029214540949080649225087a445dd7</elem>
<elem key="sha256">f9804a631adacd62ceaf5760f7e0826ee9e174db65cdc69c2b5c474b36ac19e3</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM&#xa;BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV&#xa;HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI&#xa;KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh&#xa;c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD&#xa;VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN&#xa;BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR&#xa;c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE&#xa;Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a&#xa;9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9&#xa;AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj&#xa;IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB&#xa;ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v&#xa;+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF&#xa;MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc&#xa;k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj&#xa;MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw&#xa;YrarkoA+irmSeogYZBI+qKg=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="http-server-header" output="nginx"><elem>nginx</elem>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
</table>
</script><script id="http-server-header" output="nginx"><elem>nginx</elem>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Passbolt | Open source password manager for teams&#xa;Requested resource was /auth/login?redirect=%2F"><elem key="title">Passbolt | Open source password manager for teams</elem>
</script><script id="http-title" output="Passbolt | Open source password manager for teams&#xa;Requested resource was /auth/login?redirect=%2F"><elem key="title">Passbolt | Open source password manager for teams</elem>
<elem key="redirect_url">/auth/login?redirect=%2F</elem>
</script><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/></port>
</script></port>
<port protocol="tcp" portid="20001"><state state="closed" reason="reset" reason_ttl="57"/><service name="microsan" method="table" conf="3"/></port>
<port protocol="tcp" portid="51413"><state state="open" reason="syn-ack" reason_ttl="56"/><service name="tcpwrapped" method="probed" conf="8"/></port>
</ports>
<os><portused state="open" proto="tcp" portid="80"/>
<portused state="closed" proto="tcp" portid="20001"/>
<osmatch name="Linux 4.19 - 5.15" accuracy="94" line="70666">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="94"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
<osmatch name="Linux 5.4" accuracy="86" line="72822">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="86"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32" accuracy="89" line="57632">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="89"><cpe>cpe:/o:linux:linux_kernel:2.6.32</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32 or 3.10" accuracy="89" line="60129">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="89"><cpe>cpe:/o:linux:linux_kernel:2.6.32</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="3.X" accuracy="89"><cpe>cpe:/o:linux:linux_kernel:3.10</cpe></osclass>
</osmatch>
<osmatch name="Linux 4.0 - 4.4" accuracy="89" line="70090">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="89"><cpe>cpe:/o:linux:linux_kernel:4</cpe></osclass>
</osmatch>
<osmatch name="IPFire 2.27 (Linux 5.15 - 6.1)" accuracy="88" line="43915">
<osclass type="firewall" vendor="IPFire" osfamily="IPFire" osgen="2.X" accuracy="88"><cpe>cpe:/o:ipfire:ipfire:2.27</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="88"><cpe>cpe:/o:linux:linux_kernel:5.15</cpe></osclass>
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="6.X" accuracy="88"><cpe>cpe:/o:linux:linux_kernel:6.1</cpe></osclass>
</osmatch>
<osmatch name="Linux 4.15" accuracy="87" line="70477">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="4.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:4.15</cpe></osclass>
</osmatch>
<osmatch name="Linux 5.4" accuracy="87" line="72288">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="87"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32 - 2.6.35" accuracy="86" line="59620">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="86"><cpe>cpe:/o:linux:linux_kernel:2.6.32</cpe></osclass>
</osmatch>
<osmatch name="Linux 2.6.32 - 2.6.39" accuracy="85" line="59739">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="2.6.X" accuracy="85"><cpe>cpe:/o:linux:linux_kernel:2.6</cpe></osclass>
</osmatch>
<osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25C33%P=x86_64-pc-linux-gnu)&#xa;SEQ(SP=FB%GCD=1%ISR=100%TI=Z%TS=A)&#xa;SEQ(SP=FE%GCD=1%ISR=109%TI=Z%TS=A)&#xa;OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)&#xa;WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)&#xa;ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)&#xa;T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)&#xa;T2(R=N)&#xa;T3(R=N)&#xa;T4(R=N)&#xa;T5(R=N)&#xa;T5(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)&#xa;T6(R=N)&#xa;T7(R=N)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
<osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBE04%P=x86_64-pc-linux-gnu)&#xa;SEQ(SP=102%GCD=1%ISR=10B%TI=Z%TS=A)&#xa;SEQ(SP=FE%GCD=1%ISR=10C%TI=Z%TS=A)&#xa;OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)&#xa;WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)&#xa;ECN(R=N)&#xa;T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)&#xa;T2(R=N)&#xa;T3(R=N)&#xa;T4(R=N)&#xa;T5(R=N)&#xa;T6(R=N)&#xa;T7(R=N)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
</os>
<uptime seconds="1480771" lastboot="Thu Mar 19 09:37:52 2026"/>
<uptime seconds="4293141" lastboot="Mon Feb 23 11:37:19 2026"/>
<distance value="8"/>
<tcpsequence index="251" difficulty="Good luck!" values="D5FDFFCF,C4C5BAE1,D2BE5A13,C2E2B5EA,8E8EDB57,B158601E"/>
<tcpsequence index="254" difficulty="Good luck!" values="E2A48226,BA929E9A,5E3BD4A5,A46AE1B7,3517DF2,B6A02F9A"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="5842A047,5842A0AB,5842A10F,5842A173,5842A1D7,5842A240"/>
<tcptssequence class="1000HZ" values="FFE3F9BC,FFE3FA21,FFE3FA85,FFE3FAE9,FFE3FB4E,FFE3FBB9"/>
<trace port="20001" proto="tcp">
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.18"/>
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.35"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="3.03"/>
<hop ttl="4" ipaddr="172.105.160.102" rtt="0.41" host="lo0-0.gw2.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="45.127.173.7" rtt="2.12" host="4764.syd.equinix.com"/>
<hop ttl="6" ipaddr="10.241.1.187" rtt="12.00"/>
<hop ttl="7" ipaddr="10.241.2.26" rtt="12.61"/>
<hop ttl="8" ipaddr="167.179.167.166" rtt="27.98" host="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net"/>
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.16"/>
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.26"/>
<hop ttl="3" ipaddr="10.216.32.1" rtt="10.90"/>
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.46" host="lo0-0.gw1.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="45.127.173.7" rtt="3.29" host="4764.syd.equinix.com"/>
<hop ttl="6" ipaddr="10.241.1.187" rtt="11.70"/>
<hop ttl="7" ipaddr="10.241.2.26" rtt="12.45"/>
<hop ttl="8" ipaddr="167.179.167.166" rtt="14.32" host="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net"/>
</trace>
<times srtt="23762" rttvar="9197" to="100000"/>
<times srtt="14635" rttvar="535" to="100000"/>
</host>
<taskbegin task="NSE" time="1775393843"/>
<taskend task="NSE" time="1775393843"/>
<taskbegin task="NSE" time="1775393843"/>
<taskend task="NSE" time="1775393843"/>
<taskbegin task="NSE" time="1775393843"/>
<taskend task="NSE" time="1775393843"/>
<runstats><finished time="1775393843" timestr="Sun Apr 5 12:57:23 2026" summary="Nmap done at Sun Apr 5 12:57:23 2026; 1 IP address (1 host up) scanned in 16089.64 seconds" elapsed="16089.64" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776139780"/>
<taskend task="NSE" time="1776139780"/>
<taskbegin task="NSE" time="1776139780"/>
<taskend task="NSE" time="1776139780"/>
<taskbegin task="NSE" time="1776139780"/>
<taskend task="NSE" time="1776139780"/>
<runstats><finished time="1776139780" timestr="Tue Apr 14 04:09:40 2026" summary="Nmap done at Tue Apr 14 04:09:40 2026; 1 IP address (1 host up) scanned in 726.83 seconds" elapsed="726.83" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>
results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml
+66 -81
View File
@@ -1,52 +1,37 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:28:02 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml passbolt.lan.ddnsgeek.com" start="1775377682" startstr="Sun Apr 5 08:28:02 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 03:53:02 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -sC -&#45;version-all -A -&#45;osscan-guess -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml passbolt.lan.ddnsgeek.com" start="1776138782" startstr="Tue Apr 14 03:53:02 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1000" services="1,3-4,6-7,9,13,17,19-26,30,32-33,37,42-43,49,53,70,79-85,88-90,99-100,106,109-111,113,119,125,135,139,143-144,146,161,163,179,199,211-212,222,254-256,259,264,280,301,306,311,340,366,389,406-407,416-417,425,427,443-445,458,464-465,481,497,500,512-515,524,541,543-545,548,554-555,563,587,593,616-617,625,631,636,646,648,666-668,683,687,691,700,705,711,714,720,722,726,749,765,777,783,787,800-801,808,843,873,880,888,898,900-903,911-912,981,987,990,992-993,995,999-1002,1007,1009-1011,1021-1100,1102,1104-1108,1110-1114,1117,1119,1121-1124,1126,1130-1132,1137-1138,1141,1145,1147-1149,1151-1152,1154,1163-1166,1169,1174-1175,1183,1185-1187,1192,1198-1199,1201,1213,1216-1218,1233-1234,1236,1244,1247-1248,1259,1271-1272,1277,1287,1296,1300-1301,1309-1311,1322,1328,1334,1352,1417,1433-1434,1443,1455,1461,1494,1500-1501,1503,1521,1524,1533,1556,1580,1583,1594,1600,1641,1658,1666,1687-1688,1700,1717-1721,1723,1755,1761,1782-1783,1801,1805,1812,1839-1840,1862-1864,1875,1900,1914,1935,1947,1971-1972,1974,1984,1998-2010,2013,2020-2022,2030,2033-2035,2038,2040-2043,2045-2049,2065,2068,2099-2100,2103,2105-2107,2111,2119,2121,2126,2135,2144,2160-2161,2170,2179,2190-2191,2196,2200,2222,2251,2260,2288,2301,2323,2366,2381-2383,2393-2394,2399,2401,2492,2500,2522,2525,2557,2601-2602,2604-2605,2607-2608,2638,2701-2702,2710,2717-2718,2725,2800,2809,2811,2869,2875,2909-2910,2920,2967-2968,2998,3000-3001,3003,3005-3006,3011,3017,3030-3031,3052,3071,3077,3128,3168,3211,3221,3260-3261,3268-3269,3283,3300-3301,3306,3322-3325,3333,3351,3367,3369-3372,3389-3390,3404,3476,3493,3517,3527,3546,3551,3580,3659,3689-3690,3703,3737,3766,3784,3800-3801,3809,3814,3826-3828,3851,3869,3871,3878,3880,3889,3905,3914,3918,3920,3945,3971,3986,3995,3998,4000-4006,4045,4111,4125-4126,4129,4224,4242,4279,4321,4343,4443-4446,4449,4550,4567,4662,4848,4899-4900,4998,5000-5004,5009,5030,5033,5050-5051,5054,5060-5061,5080,5087,5100-5102,5120,5190,5200,5214,5221-5222,5225-5226,5269,5280,5298,5357,5405,5414,5431-5432,5440,5500,5510,5544,5550,5555,5560,5566,5631,5633,5666,5678-5679,5718,5730,5800-5802,5810-5811,5815,5822,5825,5850,5859,5862,5877,5900-5904,5906-5907,5910-5911,5915,5922,5925,5950,5952,5959-5963,5985-5989,5998-6007,6009,6025,6059,6100-6101,6106,6112,6123,6129,6156,6346,6389,6502,6510,6543,6547,6565-6567,6580,6646,6666-6669,6689,6692,6699,6779,6788-6789,6792,6839,6881,6901,6969,7000-7002,7004,7007,7019,7025,7070,7100,7103,7106,7200-7201,7402,7435,7443,7496,7512,7625,7627,7676,7741,7777-7778,7800,7911,7920-7921,7937-7938,7999-8002,8007-8011,8021-8022,8031,8042,8045,8080-8090,8093,8099-8100,8180-8181,8192-8194,8200,8222,8254,8290-8292,8300,8333,8383,8400,8402,8443,8500,8600,8649,8651-8652,8654,8701,8800,8873,8888,8899,8994,9000-9003,9009-9011,9040,9050,9071,9080-9081,9090-9091,9099-9103,9110-9111,9200,9207,9220,9290,9415,9418,9485,9500,9502-9503,9535,9575,9593-9595,9618,9666,9876-9878,9898,9900,9917,9929,9943-9944,9968,9998-10004,10009-10010,10012,10024-10025,10082,10180,10215,10243,10566,10616-10617,10621,10626,10628-10629,10778,11110-11111,11967,12000,12174,12265,12345,13456,13722,13782-13783,14000,14238,14441-14442,15000,15002-15004,15660,15742,16000-16001,16012,16016,16018,16080,16113,16992-16993,17877,17988,18040,18101,18988,19101,19283,19315,19350,19780,19801,19842,20000,20005,20031,20221-20222,20828,21571,22939,23502,24444,24800,25734-25735,26214,27000,27352-27353,27355-27356,27715,28201,30000,30718,30951,31038,31337,32768-32785,33354,33899,34571-34573,35500,38292,40193,40911,41511,42510,44176,44442-44443,44501,45100,48080,49152-49161,49163,49165,49167,49175-49176,49400,49999-50003,50006,50300,50389,50500,50636,50800,51103,51493,52673,52822,52848,52869,54045,54328,55055-55056,55555,55600,56737-56738,57294,57797,58080,60020,60443,61532,61900,62078,63331,64623,64680,65000,65129,65389"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775377696"/>
<taskend task="NSE" time="1775377696"/>
<taskbegin task="NSE" time="1775377696"/>
<taskend task="NSE" time="1775377696"/>
<taskbegin task="NSE" time="1775377696"/>
<taskend task="NSE" time="1775377696"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775377696"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775377697"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775377697"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775377697"/>
<taskbegin task="SYN Stealth Scan" time="1775377697"/>
<taskprogress task="SYN Stealth Scan" time="1775377728" percent="12.73" remaining="213" etc="1775377940"/>
<taskprogress task="SYN Stealth Scan" time="1775377758" percent="15.87" remaining="324" etc="1775378081"/>
<taskprogress task="SYN Stealth Scan" time="1775377788" percent="18.93" remaining="390" etc="1775378178"/>
<taskprogress task="SYN Stealth Scan" time="1775377818" percent="22.37" remaining="420" etc="1775378238"/>
<taskprogress task="SYN Stealth Scan" time="1775377848" percent="28.00" remaining="389" etc="1775378236"/>
<taskprogress task="SYN Stealth Scan" time="1775377893" percent="35.53" remaining="356" etc="1775378249"/>
<taskprogress task="SYN Stealth Scan" time="1775377926" percent="41.17" remaining="328" etc="1775378253"/>
<taskprogress task="SYN Stealth Scan" time="1775377956" percent="46.90" remaining="294" etc="1775378249"/>
<taskprogress task="SYN Stealth Scan" time="1775378007" percent="53.90" remaining="266" etc="1775378272"/>
<taskprogress task="SYN Stealth Scan" time="1775378055" percent="60.30" remaining="236" etc="1775378291"/>
<taskprogress task="SYN Stealth Scan" time="1775378094" percent="66.07" remaining="204" etc="1775378298"/>
<taskprogress task="SYN Stealth Scan" time="1775378130" percent="71.47" remaining="173" etc="1775378303"/>
<taskprogress task="SYN Stealth Scan" time="1775378169" percent="76.93" remaining="142" etc="1775378311"/>
<taskprogress task="SYN Stealth Scan" time="1775378202" percent="82.07" remaining="111" etc="1775378312"/>
<taskprogress task="SYN Stealth Scan" time="1775378235" percent="87.33" remaining="79" etc="1775378313"/>
<taskprogress task="SYN Stealth Scan" time="1775378268" percent="92.47" remaining="47" etc="1775378315"/>
<taskend task="SYN Stealth Scan" time="1775378320" extrainfo="1000 total ports"/>
<taskbegin task="Service scan" time="1775378325"/>
<taskend task="Service scan" time="1775378339" extrainfo="2 services on 1 host"/>
<taskbegin task="Traceroute" time="1775378347"/>
<taskend task="Traceroute" time="1775378347"/>
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1775378347"/>
<taskend task="Parallel DNS resolution of 7 hosts." time="1775378349"/>
<taskbegin task="NSE" time="1775378349"/>
<taskend task="NSE" time="1775378358"/>
<taskbegin task="NSE" time="1775378358"/>
<taskend task="NSE" time="1775378362"/>
<taskbegin task="NSE" time="1775378362"/>
<taskend task="NSE" time="1775378362"/>
<host starttime="1775377697" endtime="1775378362"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776138786"/>
<taskend task="NSE" time="1776138786"/>
<taskbegin task="NSE" time="1776138786"/>
<taskend task="NSE" time="1776138786"/>
<taskbegin task="NSE" time="1776138786"/>
<taskend task="NSE" time="1776138787"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138787"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138787"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776138787"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776138787"/>
<taskbegin task="SYN Stealth Scan" time="1776138787"/>
<taskend task="SYN Stealth Scan" time="1776138820" extrainfo="1000 total ports"/>
<taskbegin task="Service scan" time="1776138964"/>
<taskend task="Service scan" time="1776138979" extrainfo="2 services on 1 host"/>
<taskbegin task="Traceroute" time="1776138986"/>
<taskend task="Traceroute" time="1776138986"/>
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1776138986"/>
<taskend task="Parallel DNS resolution of 7 hosts." time="1776138987"/>
<taskbegin task="NSE" time="1776138987"/>
<taskprogress task="NSE" time="1776139041" percent="88.93" remaining="7" etc="1776139048"/>
<taskend task="NSE" time="1776139046"/>
<taskbegin task="NSE" time="1776139046"/>
<taskend task="NSE" time="1776139048"/>
<taskbegin task="NSE" time="1776139048"/>
<taskend task="NSE" time="1776139049"/>
<host starttime="1776138787" endtime="1776139048"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="passbolt.lan.ddnsgeek.com" type="user"/>
@@ -63,19 +48,16 @@
<elem>OPTIONS</elem>
</table>
</script></port>
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-server-header" output="nginx"><elem>nginx</elem>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-title" output="Passbolt | Open source password manager for teams&#xa;Requested resource was /auth/login?redirect=%2F"><elem key="title">Passbolt | Open source password manager for teams</elem>
<elem key="redirect_url">/auth/login?redirect=%2F</elem>
</script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
</table>
</script><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com&#xa;Issuer: commonName=R13/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-02-05T19:02:28&#xa;Not valid after: 2026-05-06T19:02:27&#xa;MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2&#xa;SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71&#xa;SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI&#xa;KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby&#xa;BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH&#xa;AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV&#xa;HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG&#xa;Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv&#xa;MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr&#xa;TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ&#xa;cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk&#xa;bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA&#xa;AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN&#xa;8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB&#xa;AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR&#xa;lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3&#xa;6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL&#xa;4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP&#xa;vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq&#xa;Kpvre+eLUhbfX0oMhv69Ijo=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
</script><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com&#xa;Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com&#xa;Issuer: commonName=R12/organizationName=Let&apos;s Encrypt/countryName=US&#xa;Public Key type: rsa&#xa;Public Key bits: 4096&#xa;Signature Algorithm: sha256WithRSAEncryption&#xa;Not valid before: 2026-04-07T00:44:25&#xa;Not valid after: 2026-07-06T00:44:24&#xa;MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712&#xa;SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7&#xa;SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3&#xa;-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM&#xa;BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV&#xa;HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI&#xa;KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh&#xa;c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD&#xa;VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN&#xa;BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR&#xa;c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE&#xa;Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a&#xa;9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9&#xa;AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj&#xa;IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB&#xa;ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v&#xa;+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF&#xa;MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc&#xa;k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj&#xa;MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw&#xa;YrarkoA+irmSeogYZBI+qKg=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;"><table key="subject">
<elem key="commonName">passbolt.lan.ddnsgeek.com</elem>
</table>
<table key="issuer">
<elem key="commonName">R13</elem>
<elem key="commonName">R12</elem>
<elem key="countryName">US</elem>
<elem key="organizationName">Let&apos;s Encrypt</elem>
</table>
@@ -93,7 +75,7 @@
</table>
<table>
<elem key="name">X509v3 Extended Key Usage</elem>
<elem key="value">TLS Web Server Authentication, TLS Web Client Authentication</elem>
<elem key="value">TLS Web Server Authentication</elem>
</table>
<table>
<elem key="name">X509v3 Basic Constraints</elem>
@@ -106,11 +88,11 @@
</table>
<table>
<elem key="name">X509v3 Authority Key Identifier</elem>
<elem key="value">E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33</elem>
<elem key="value">00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2</elem>
</table>
<table>
<elem key="name">Authority Information Access</elem>
<elem key="value">CA Issuers - URI:http://r13.i.lencr.org/</elem>
<elem key="value">CA Issuers - URI:http://r12.i.lencr.org/</elem>
</table>
<table>
<elem key="name">X509v3 Subject Alternative Name</elem>
@@ -122,53 +104,56 @@
</table>
<table>
<elem key="name">X509v3 CRL Distribution Points</elem>
<elem key="value">Full Name:&#xa; URI:http://r13.c.lencr.org/1.crl&#xa;</elem>
<elem key="value">Full Name:&#xa; URI:http://r12.c.lencr.org/23.crl&#xa;</elem>
</table>
<table>
<elem key="name">CT Precertificate SCTs</elem>
<elem key="value">Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:&#xa; 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0&#xa; Timestamp : Feb 5 20:00:59.205 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:&#xa; 9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:&#xa; 96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:&#xa; 49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:&#xa; 30:A4:6C:CB:EF:9E&#xa;Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:&#xa; DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21&#xa; Timestamp : Feb 5 20:00:59.234 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:&#xa; 0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:&#xa; 04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:&#xa; DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:&#xa; 17:F5:11:6E:F6:48:D5:30</elem>
<elem key="value">Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:&#xa; 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A&#xa; Timestamp : Apr 7 01:42:56.151 2026 GMT&#xa; Extensions: 00:00:05:00:06:1E:AA:29&#xa; Signature : ecdsa-with-SHA256&#xa; 30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:&#xa; 72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:&#xa; C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:&#xa; B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:&#xa; D5:DF:5A:F4:2E:62:45:E7&#xa;Signed Certificate Timestamp:&#xa; Version : v1 (0x0)&#xa; Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:&#xa; 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77&#xa; Timestamp : Apr 7 01:42:56.125 2026 GMT&#xa; Extensions: none&#xa; Signature : ecdsa-with-SHA256&#xa; 30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:&#xa; 62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:&#xa; C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:&#xa; 9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:&#xa; AF:67:40:BF:8B:68:99</elem>
</table>
</table>
<elem key="sig_algo">sha256WithRSAEncryption</elem>
<table key="validity">
<elem key="notBefore">2026-02-05T19:02:28</elem>
<elem key="notAfter">2026-05-06T19:02:27</elem>
<elem key="notBefore">2026-04-07T00:44:25</elem>
<elem key="notAfter">2026-07-06T00:44:24</elem>
</table>
<elem key="md5">0e7e0f703cfe4113d4cba00c81d790e2</elem>
<elem key="sha1">abe4cbbccca9683b7709ed8f301751ea87bb4e71</elem>
<elem key="sha256">6ad206b208ded20b2ad4d8d0017ece21e103c2b579ad2c945515ee6cbe27b06c</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI&#xa;KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby&#xa;BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH&#xa;AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV&#xa;HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG&#xa;Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv&#xa;MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr&#xa;TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ&#xa;cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk&#xa;bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA&#xa;AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN&#xa;8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB&#xa;AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR&#xa;lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3&#xa;6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL&#xa;4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP&#xa;vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq&#xa;Kpvre+eLUhbfX0oMhv69Ijo=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
<elem key="md5">467174a58d202b208b59f04dc9233712</elem>
<elem key="sha1">8af1359b3029214540949080649225087a445dd7</elem>
<elem key="sha256">f9804a631adacd62ceaf5760f7e0826ee9e174db65cdc69c2b5c474b36ac19e3</elem>
<elem key="pem">-&#45;&#45;&#45;&#45;BEGIN CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA&#xa;MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD&#xa;EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD&#xa;ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC&#xa;Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3&#xa;WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ&#xa;+nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs&#xa;BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P&#xa;YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE&#xa;eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE&#xa;d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R&#xa;ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS&#xa;6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw&#xa;TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6&#xa;6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA&#xa;AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM&#xa;BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV&#xa;HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI&#xa;KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh&#xa;c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD&#xa;VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN&#xa;BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR&#xa;c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE&#xa;Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a&#xa;9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9&#xa;AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj&#xa;IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB&#xa;ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v&#xa;+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF&#xa;MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc&#xa;k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj&#xa;MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw&#xa;YrarkoA+irmSeogYZBI+qKg=&#xa;-&#45;&#45;&#45;&#45;END CERTIFICATE-&#45;&#45;&#45;&#45;&#xa;</elem>
</script><script id="http-title" output="Passbolt | Open source password manager for teams&#xa;Requested resource was /auth/login?redirect=%2F"><elem key="title">Passbolt | Open source password manager for teams</elem>
<elem key="redirect_url">/auth/login?redirect=%2F</elem>
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-server-header" output="nginx"><elem>nginx</elem>
</script></port>
</ports>
<os><portused state="open" proto="tcp" portid="80"/>
<osmatch name="Linux 5.4" accuracy="91" line="72306">
<osmatch name="Linux 5.4" accuracy="91" line="72822">
<osclass type="general purpose" vendor="Linux" osfamily="Linux" osgen="5.X" accuracy="91"><cpe>cpe:/o:linux:linux_kernel:5.4</cpe></osclass>
</osmatch>
<osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21FBA%P=x86_64-pc-linux-gnu)&#xa;SEQ(SP=104%GCD=1%ISR=10D%TI=Z%TS=A)&#xa;SEQ(SP=F6%GCD=1%ISR=FF%TI=Z%TS=A)&#xa;OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)&#xa;WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)&#xa;ECN(R=N)&#xa;T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)&#xa;T2(R=N)&#xa;T3(R=N)&#xa;T4(R=N)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
<osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBB29%P=x86_64-pc-linux-gnu)&#xa;SEQ(TS=A)&#xa;SEQ(SP=104%GCD=1%ISR=10B%TI=Z%TS=A)&#xa;OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)&#xa;WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)&#xa;ECN(R=N)&#xa;T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)&#xa;T2(R=N)&#xa;T3(R=N)&#xa;T4(R=N)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
</os>
<uptime seconds="1465289" lastboot="Thu Mar 19 09:37:53 2026"/>
<uptime seconds="4292410" lastboot="Mon Feb 23 11:37:19 2026"/>
<distance value="8"/>
<tcpsequence index="246" difficulty="Good luck!" values="36A1D7B3,471BB372,5641A3D2,6EBF5DDC,9FFA930"/>
<ipidsequence class="All zeros" values="0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="57564658,575646C5,5756472E,5756479A,575648A1"/>
<tcpsequence index="260" difficulty="Good luck!" values="41C3DB45,48B77CD2,F6ECEFB0,ABC42395,FBB58E68,88249727"/>
<ipidsequence class="All zeros" values="0,0,0,0,0,0"/>
<tcptssequence class="1000HZ" values="FFD7FCE2,FFD7FD4F,FFD7FDB6,FFD7FE1A,FFD7FE81,FFD7FEF0"/>
<trace port="80" proto="tcp">
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.09"/>
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.23"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.98"/>
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.66" host="lo0-0.gw1.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="202.77.88.3" rtt="2.58" host="as4764.syd.edgeix.net.au"/>
<hop ttl="6" ipaddr="10.241.1.187" rtt="11.83"/>
<hop ttl="7" ipaddr="10.241.2.71" rtt="12.74"/>
<hop ttl="8" ipaddr="167.179.167.166" rtt="23.70" host="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net"/>
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.26"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.89"/>
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.57" host="lo0-0.gw1.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="45.127.173.7" rtt="3.93" host="4764.syd.equinix.com"/>
<hop ttl="6" ipaddr="10.241.1.185" rtt="11.64"/>
<hop ttl="7" ipaddr="10.241.2.26" rtt="12.76"/>
<hop ttl="8" ipaddr="167.179.167.166" rtt="14.27" host="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net"/>
</trace>
<times srtt="30792" rttvar="22770" to="121872"/>
<times srtt="18872" rttvar="7814" to="100000"/>
</host>
<taskbegin task="NSE" time="1775378362"/>
<taskend task="NSE" time="1775378362"/>
<taskbegin task="NSE" time="1775378362"/>
<taskend task="NSE" time="1775378362"/>
<taskbegin task="NSE" time="1775378362"/>
<taskend task="NSE" time="1775378362"/>
<runstats><finished time="1775378362" timestr="Sun Apr 5 08:39:22 2026" summary="Nmap done at Sun Apr 5 08:39:22 2026; 1 IP address (1 host up) scanned in 688.02 seconds" elapsed="688.02" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776139049"/>
<taskend task="NSE" time="1776139049"/>
<taskbegin task="NSE" time="1776139049"/>
<taskend task="NSE" time="1776139049"/>
<taskbegin task="NSE" time="1776139049"/>
<taskend task="NSE" time="1776139049"/>
<runstats><finished time="1776139049" timestr="Tue Apr 14 03:57:29 2026" summary="Nmap done at Tue Apr 14 03:57:29 2026; 1 IP address (1 host up) scanned in 270.25 seconds" elapsed="270.25" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>
results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml
+78 -82
View File
@@ -1,73 +1,69 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:33:32 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sU -A -&#45;top-ports 100 -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sU -A -&#45;top-ports 100 -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml passbolt.lan.ddnsgeek.com" start="1775378012" startstr="Sun Apr 5 08:33:32 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:00:46 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sU -A -&#45;top-ports 100 -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml passbolt.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sU -A -&#45;top-ports 100 -oN /root/results/passbolt.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml passbolt.lan.ddnsgeek.com" start="1776139246" startstr="Tue Apr 14 04:00:46 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="udp" protocol="udp" numservices="100" services="7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775378024"/>
<taskend task="NSE" time="1775378024"/>
<taskbegin task="NSE" time="1775378024"/>
<taskend task="NSE" time="1775378024"/>
<taskbegin task="NSE" time="1775378024"/>
<taskend task="NSE" time="1775378024"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775378025"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775378025"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775378025"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775378025"/>
<taskbegin task="UDP Scan" time="1775378025"/>
<taskend task="UDP Scan" time="1775378048" extrainfo="100 total ports"/>
<taskbegin task="Service scan" time="1775378048"/>
<taskprogress task="Service scan" time="1775378146" percent="1.00" remaining="9702" etc="1775387848"/>
<taskprogress task="Service scan" time="1775378244" percent="31.00" remaining="437" etc="1775378680"/>
<taskprogress task="Service scan" time="1775378342" percent="61.00" remaining="188" etc="1775378530"/>
<taskprogress task="Service scan" time="1775378445" percent="91.00" remaining="40" etc="1775378484"/>
<taskend task="Service scan" time="1775378452" extrainfo="100 services on 1 host"/>
<taskbegin task="Traceroute" time="1775378462"/>
<taskend task="Traceroute" time="1775378465"/>
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1775378465"/>
<taskend task="Parallel DNS resolution of 7 hosts." time="1775378465"/>
<taskbegin task="NSE" time="1775378466"/>
<taskprogress task="NSE" time="1775378556" percent="82.25" remaining="20" etc="1775378575"/>
<taskprogress task="NSE" time="1775378602" percent="84.62" remaining="25" etc="1775378627"/>
<taskprogress task="NSE" time="1775378632" percent="97.99" remaining="4" etc="1775378635"/>
<taskprogress task="NSE" time="1775378662" percent="98.93" remaining="3" etc="1775378664"/>
<taskprogress task="NSE" time="1775378692" percent="99.35" remaining="2" etc="1775378693"/>
<taskprogress task="NSE" time="1775378722" percent="99.36" remaining="2" etc="1775378724"/>
<taskprogress task="NSE" time="1775378752" percent="99.39" remaining="2" etc="1775378754"/>
<taskprogress task="NSE" time="1775378782" percent="99.41" remaining="2" etc="1775378784"/>
<taskprogress task="NSE" time="1775378812" percent="99.44" remaining="2" etc="1775378814"/>
<taskprogress task="NSE" time="1775378842" percent="99.46" remaining="3" etc="1775378844"/>
<taskprogress task="NSE" time="1775378872" percent="99.48" remaining="3" etc="1775378874"/>
<taskprogress task="NSE" time="1775378902" percent="99.51" remaining="3" etc="1775378904"/>
<taskprogress task="NSE" time="1775378932" percent="99.53" remaining="3" etc="1775378934"/>
<taskprogress task="NSE" time="1775378962" percent="99.54" remaining="3" etc="1775378964"/>
<taskprogress task="NSE" time="1775378992" percent="99.56" remaining="3" etc="1775378994"/>
<taskprogress task="NSE" time="1775379022" percent="99.59" remaining="3" etc="1775379024"/>
<taskprogress task="NSE" time="1775379052" percent="99.61" remaining="3" etc="1775379054"/>
<taskprogress task="NSE" time="1775379082" percent="99.63" remaining="3" etc="1775379084"/>
<taskprogress task="NSE" time="1775379112" percent="99.65" remaining="3" etc="1775379114"/>
<taskprogress task="NSE" time="1775379142" percent="99.66" remaining="3" etc="1775379144"/>
<taskprogress task="NSE" time="1775379172" percent="99.69" remaining="3" etc="1775379174"/>
<taskprogress task="NSE" time="1775379202" percent="99.71" remaining="3" etc="1775379204"/>
<taskprogress task="NSE" time="1775379232" percent="99.73" remaining="3" etc="1775379234"/>
<taskprogress task="NSE" time="1775379262" percent="99.76" remaining="2" etc="1775379264"/>
<taskprogress task="NSE" time="1775379292" percent="99.78" remaining="2" etc="1775379294"/>
<taskprogress task="NSE" time="1775379322" percent="99.80" remaining="2" etc="1775379324"/>
<taskprogress task="NSE" time="1775379352" percent="99.83" remaining="2" etc="1775379354"/>
<taskprogress task="NSE" time="1775379382" percent="99.85" remaining="2" etc="1775379383"/>
<taskprogress task="NSE" time="1775379412" percent="99.88" remaining="2" etc="1775379413"/>
<taskprogress task="NSE" time="1775379442" percent="99.90" remaining="1" etc="1775379443"/>
<taskprogress task="NSE" time="1775379472" percent="99.92" remaining="1" etc="1775379473"/>
<taskprogress task="NSE" time="1775379502" percent="99.95" remaining="1" etc="1775379503"/>
<taskprogress task="NSE" time="1775379532" percent="99.97" remaining="1" etc="1775379532"/>
<taskend task="NSE" time="1775379560"/>
<taskbegin task="NSE" time="1775379560"/>
<taskend task="NSE" time="1775379578"/>
<taskbegin task="NSE" time="1775379578"/>
<taskend task="NSE" time="1775379578"/>
<host starttime="1775378032" endtime="1775379578"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776139252"/>
<taskend task="NSE" time="1776139252"/>
<taskbegin task="NSE" time="1776139252"/>
<taskend task="NSE" time="1776139252"/>
<taskbegin task="NSE" time="1776139252"/>
<taskend task="NSE" time="1776139252"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139252"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139252"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139252"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139252"/>
<taskbegin task="UDP Scan" time="1776139252"/>
<taskend task="UDP Scan" time="1776139271" extrainfo="100 total ports"/>
<taskbegin task="Service scan" time="1776139271"/>
<taskprogress task="Service scan" time="1776139369" percent="1.00" remaining="9702" etc="1776149071"/>
<taskprogress task="Service scan" time="1776139467" percent="31.00" remaining="437" etc="1776139903"/>
<taskprogress task="Service scan" time="1776139564" percent="61.00" remaining="188" etc="1776139751"/>
<taskprogress task="Service scan" time="1776139667" percent="91.00" remaining="40" etc="1776139706"/>
<taskend task="Service scan" time="1776139672" extrainfo="100 services on 1 host"/>
<taskbegin task="Traceroute" time="1776139678"/>
<taskend task="Traceroute" time="1776139682"/>
<taskbegin task="Parallel DNS resolution of 7 hosts." time="1776139682"/>
<taskend task="Parallel DNS resolution of 7 hosts." time="1776139683"/>
<taskbegin task="NSE" time="1776139683"/>
<taskprogress task="NSE" time="1776139714" percent="99.31" remaining="1" etc="1776139714"/>
<taskprogress task="NSE" time="1776139744" percent="99.34" remaining="1" etc="1776139744"/>
<taskprogress task="NSE" time="1776139774" percent="99.36" remaining="1" etc="1776139775"/>
<taskprogress task="NSE" time="1776139804" percent="99.39" remaining="1" etc="1776139805"/>
<taskprogress task="NSE" time="1776139834" percent="99.41" remaining="1" etc="1776139835"/>
<taskprogress task="NSE" time="1776139864" percent="99.44" remaining="2" etc="1776139865"/>
<taskprogress task="NSE" time="1776139894" percent="99.46" remaining="2" etc="1776139895"/>
<taskprogress task="NSE" time="1776139924" percent="99.49" remaining="2" etc="1776139925"/>
<taskprogress task="NSE" time="1776139954" percent="99.51" remaining="2" etc="1776139955"/>
<taskprogress task="NSE" time="1776139984" percent="99.54" remaining="2" etc="1776139985"/>
<taskprogress task="NSE" time="1776140014" percent="99.56" remaining="2" etc="1776140015"/>
<taskprogress task="NSE" time="1776140044" percent="99.59" remaining="2" etc="1776140046"/>
<taskprogress task="NSE" time="1776140074" percent="99.61" remaining="2" etc="1776140076"/>
<taskprogress task="NSE" time="1776140104" percent="99.63" remaining="2" etc="1776140106"/>
<taskprogress task="NSE" time="1776140134" percent="99.66" remaining="2" etc="1776140136"/>
<taskprogress task="NSE" time="1776140164" percent="99.68" remaining="2" etc="1776140166"/>
<taskprogress task="NSE" time="1776140194" percent="99.70" remaining="2" etc="1776140196"/>
<taskprogress task="NSE" time="1776140224" percent="99.73" remaining="2" etc="1776140225"/>
<taskprogress task="NSE" time="1776140254" percent="99.75" remaining="2" etc="1776140255"/>
<taskprogress task="NSE" time="1776140284" percent="99.77" remaining="2" etc="1776140285"/>
<taskprogress task="NSE" time="1776140314" percent="99.79" remaining="2" etc="1776140315"/>
<taskprogress task="NSE" time="1776140344" percent="99.82" remaining="2" etc="1776140345"/>
<taskprogress task="NSE" time="1776140374" percent="99.84" remaining="2" etc="1776140375"/>
<taskprogress task="NSE" time="1776140404" percent="99.86" remaining="1" etc="1776140405"/>
<taskprogress task="NSE" time="1776140434" percent="99.89" remaining="1" etc="1776140435"/>
<taskprogress task="NSE" time="1776140464" percent="99.91" remaining="1" etc="1776140465"/>
<taskprogress task="NSE" time="1776140494" percent="99.94" remaining="1" etc="1776140495"/>
<taskprogress task="NSE" time="1776140524" percent="99.96" remaining="1" etc="1776140524"/>
<taskprogress task="NSE" time="1776140554" percent="99.99" remaining="1" etc="1776140554"/>
<taskend task="NSE" time="1776140567"/>
<taskbegin task="NSE" time="1776140567"/>
<taskend task="NSE" time="1776140591"/>
<taskbegin task="NSE" time="1776140591"/>
<taskend task="NSE" time="1776140591"/>
<host starttime="1776139256" endtime="1776140591"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="passbolt.lan.ddnsgeek.com" type="user"/>
@@ -77,27 +73,27 @@
<extrareasons reason="no-response" count="100" proto="udp" ports="7,9,17,19,49,53,67-69,80,88,111,120,123,135-139,158,161-162,177,427,443,445,497,500,514-515,518,520,593,623,626,631,996-999,1022-1023,1025-1030,1433-1434,1645-1646,1701,1718-1719,1812-1813,1900,2000,2048-2049,2222-2223,3283,3456,3703,4444,4500,5000,5060,5353,5632,9200,10000,17185,20031,30718,31337,32768-32769,32771,32815,33281,49152-49154,49156,49181-49182,49185-49186,49188,49190-49194,49200-49201,65024"/>
</extraports>
</ports>
<os><osfingerprint fingerprint="SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%DS=13%DC=T%G=N%TM=69D2247B%P=x86_64-pc-linux-gnu)&#xa;SEQ()&#xa;T3(R=Y%DF=Y%TG=40%W=1FA%S=O%A=O%F=A%O=NNT11%RD=0%Q=)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
<os><osfingerprint fingerprint="SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDC131%P=x86_64-pc-linux-gnu)&#xa;SEQ()&#xa;T2(R=Y%DF=Y%TG=40%W=FE88%S=O%A=O%F=AS%O=M5B4ST11NW7%RD=0%Q=)&#xa;U1(R=N)&#xa;IE(R=N)&#xa;"/>
</os>
<distance value="13"/>
<distance value="8"/>
<trace proto="icmp">
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.06"/>
<hop ttl="2" ipaddr="10.216.35.11" rtt="0.21"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="0.76"/>
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.41" host="lo0-0.gw1.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="202.77.88.3" rtt="2.38" host="as4764.syd.edgeix.net.au"/>
<hop ttl="6" ipaddr="10.241.1.187" rtt="11.62"/>
<hop ttl="7" ipaddr="10.241.2.71" rtt="12.66"/>
<hop ttl="13" ipaddr="167.179.167.166" rtt="686.21" host="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net"/>
<hop ttl="1" ipaddr="10.216.0.161" rtt="0.08"/>
<hop ttl="2" ipaddr="10.216.35.12" rtt="0.20"/>
<hop ttl="3" ipaddr="10.216.32.2" rtt="3.71"/>
<hop ttl="4" ipaddr="172.105.160.101" rtt="0.55" host="lo0-0.gw1.syd1.au.linode.com"/>
<hop ttl="5" ipaddr="202.77.88.3" rtt="2.62" host="as4764.syd.edgeix.net.au"/>
<hop ttl="6" ipaddr="10.241.1.185" rtt="11.67"/>
<hop ttl="7" ipaddr="10.241.2.26" rtt="12.82"/>
<hop ttl="8" ipaddr="167.179.167.166" rtt="1686.19" host="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net"/>
</trace>
<times srtt="686214" rttvar="686214" to="1250000"/>
<times srtt="1686186" rttvar="1686186" to="1250000"/>
</host>
<taskbegin task="NSE" time="1775379579"/>
<taskend task="NSE" time="1775379579"/>
<taskbegin task="NSE" time="1775379579"/>
<taskend task="NSE" time="1775379579"/>
<taskbegin task="NSE" time="1775379579"/>
<taskend task="NSE" time="1775379579"/>
<runstats><finished time="1775379579" timestr="Sun Apr 5 08:59:39 2026" summary="Nmap done at Sun Apr 5 08:59:39 2026; 1 IP address (1 host up) scanned in 1577.37 seconds" elapsed="1577.37" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776140593"/>
<taskend task="NSE" time="1776140593"/>
<taskbegin task="NSE" time="1776140593"/>
<taskend task="NSE" time="1776140593"/>
<taskbegin task="NSE" time="1776140593"/>
<taskend task="NSE" time="1776140593"/>
<runstats><finished time="1776140593" timestr="Tue Apr 14 04:23:13 2026" summary="Nmap done at Tue Apr 14 04:23:13 2026; 1 IP address (1 host up) scanned in 1352.29 seconds" elapsed="1352.29" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>