fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -2,12 +2,12 @@ HTTP/2 302
|
||||
cache-control: no-store, no-cache, must-revalidate
|
||||
content-security-policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
|
||||
content-type: text/html; charset=UTF-8
|
||||
date: Sun, 05 Apr 2026 08:39:31 GMT
|
||||
date: Tue, 14 Apr 2026 04:00:21 GMT
|
||||
expires: Thu, 19 Nov 1981 08:52:00 GMT
|
||||
location: /auth/login?redirect=%2F
|
||||
pragma: no-cache
|
||||
server: nginx
|
||||
set-cookie: passbolt_session=19de39a55e7976fc68a4690d270f2c3c; path=/; HttpOnly; SameSite=Lax
|
||||
set-cookie: passbolt_session=b3790e501b3588785049c60b517a2320; path=/; HttpOnly; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-frame-options: SAMEORIGIN
|
||||
|
||||
+10
-10
@@ -288,8 +288,8 @@ Configuration {
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fapp
|
||||
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/css/
|
||||
200 GET 1l 2w 360c https://passbolt.lan.ddnsgeek.com/favicon.ico
|
||||
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/fonts/
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Ffolders
|
||||
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/fonts/
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fgroups
|
||||
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/img/
|
||||
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/js/
|
||||
@@ -299,15 +299,15 @@ Configuration {
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers
|
||||
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/healthcheck
|
||||
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/locales/
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_96.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
|
||||
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/users/recover
|
||||
@@ -1,3 +1,22 @@
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -9,21 +28,23 @@
|
||||
CN: passbolt.lan.ddnsgeek.com
|
||||
SAN: passbolt.lan.ddnsgeek.com
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 08:41:00 (GMT0)
|
||||
+ Start Time: 2026-04-14 04:00:47 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: nginx
|
||||
+ [999961] /: Cookie passbolt_session created without the secure flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-login-url' found, with contents: /auth/login.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-error' found, with contents: true.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-version' found, with contents: 1.3.0.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-verify-url' found, with contents: /auth/verify.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-logout-url' found, with contents: /auth/logout.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-debug' found, with contents: There is no user associated with this key. No key id set..
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-progress' found, with contents: stage0.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-error' found, with contents: true.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-pubkey-url' found, with contents: /auth/verify.json.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-logout-url' found, with contents: /auth/logout.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-verify-url' found, with contents: /auth/verify.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-login-url' found, with contents: /auth/login.
|
||||
+ [999100] /auth/login?redirect=%2F: Uncommon header(s) 'x-gpgauth-authenticated' found, with contents: false.
|
||||
+ [999961] /auth/login?redirect=%2F: Cookie csrfToken created without the secure flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
|
||||
+ [95] /auth/login?redirect=%2F: Cookie csrfToken created without the httponly flag. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
@@ -1,12 +1,11 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:39:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:00:39 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
|
||||
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.014s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:39:44 UTC for 1574s
|
||||
Scanned at 2026-04-14 04:00:47 UTC for 353s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-comments-displayer:
|
||||
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com
|
||||
|
|
||||
@@ -15,10 +14,27 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Comment:
|
||||
| <!-- main -->
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.10.0
|
||||
| Line number: 1
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 29
|
||||
| Comment:
|
||||
| /*! For license information please see api-vendors.js.LICENSE.txt */
|
||||
| /**
|
||||
| * Initialise to get the theme from stylesheet or OS preference
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 22
|
||||
| Comment:
|
||||
| /**
|
||||
| * Bind callbacks
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 79
|
||||
| Comment:
|
||||
| /**
|
||||
| * Is theme defined
|
||||
| * @returns {boolean}
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/
|
||||
| Line number: 6
|
||||
@@ -49,146 +65,60 @@ PORT STATE SERVICE REASON VERSION
|
||||
| along with this program. If not, see http://www.gnu.org/licenses/.
|
||||
|
|
||||
|
|
||||
|_ -->
|
||||
| http-headers:
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Progress
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Authenticated
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Refer
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Debug
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Error
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Pubkey
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Version
|
||||
| Cache-Control: no-store, no-cache, must-revalidate
|
||||
| Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
|
||||
| Content-Type: text/html; charset=UTF-8
|
||||
| Date: Sun, 05 Apr 2026 08:43:47 GMT
|
||||
| Expires: Thu, 19 Nov 1981 08:52:00 GMT
|
||||
| Pragma: no-cache
|
||||
| Referrer-Policy: same-origin
|
||||
| Server: nginx
|
||||
| Set-Cookie: passbolt_session=0ef149b13c99d135c6c2a67b1a000b76; path=/; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: csrfToken=16d25e047084290e11d152a80a4d75f310aab333c9ce6f08261c78346adff7db300d53d7b6cd56f23b17dff875111a4d0f30c368a11fb6aed06ede845284953e; path=/
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Download-Options: noopen
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Gpgauth-Authenticated: false
|
||||
| X-Gpgauth-Debug: There is no user associated with this key. No key id set.
|
||||
| X-Gpgauth-Error: true
|
||||
| X-Gpgauth-Login-Url: /auth/login
|
||||
| X-Gpgauth-Logout-Url: /auth/logout
|
||||
| X-Gpgauth-Progress: stage0
|
||||
| X-Gpgauth-Pubkey-Url: /auth/verify.json
|
||||
| X-Gpgauth-Verify-Url: /auth/verify
|
||||
| X-Gpgauth-Version: 1.3.0
|
||||
| X-Permitted-Cross-Domain-Policies: all
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
| Transfer-Encoding: chunked
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-date: Sun, 05 Apr 2026 08:43:47 GMT; -2m53s from local time.
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
| -->
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 1
|
||||
| Comment:
|
||||
| /**
|
||||
| * Passbolt ~ Open source password manager for teams
|
||||
| * Copyright (c) Passbolt SARL (https://www.passbolt.com)
|
||||
| *
|
||||
| * Licensed under GNU Affero General Public License version 3 of the or any later version.
|
||||
| * For full copyright and license information, please see the LICENSE.txt
|
||||
| * Redistributions of files must retain the above copyright notice.
|
||||
| *
|
||||
| * @copyright Copyright (c) Passbolt SA (https://www.passbolt.com)
|
||||
| * @license https://opensource.org/licenses/AGPL-3.0 AGPL License
|
||||
| * @link https://www.passbolt.com Passbolt(tm)
|
||||
| * @since 3.3.2
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 59
|
||||
| Comment:
|
||||
| /**
|
||||
| * Get link tag
|
||||
| * @returns {Element}
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.11.0
|
||||
| Line number: 1
|
||||
| Comment:
|
||||
| /*! For license information please see api-vendors.js.LICENSE.txt */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 87
|
||||
| Comment:
|
||||
| /**
|
||||
| * Set theme according to the OS preference
|
||||
| * @param mediaQueryPreferColor
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0
|
||||
| Line number: 1
|
||||
| Comment:
|
||||
| /*! For license information please see api-triage.js.LICENSE.txt */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 44
|
||||
| Comment:
|
||||
| /**
|
||||
| * Update link reference with the theme
|
||||
|_ */
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-title: Passbolt | Open source password manager for teams
|
||||
|_Requested resource was /auth/login?redirect=%2F
|
||||
|_http-chrono: Request times for /; avg: 37139.25ms; min: 2126.65ms; max: 69794.57ms
|
||||
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-02-05T19:02:28
|
||||
| Not valid after: 2026-05-06T19:02:27
|
||||
| MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
|
||||
| SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
|
||||
| SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
|
||||
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
|
||||
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
|
||||
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
|
||||
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
|
||||
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
|
||||
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
|
||||
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
|
||||
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
|
||||
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
|
||||
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
|
||||
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
|
||||
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
|
||||
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
|
||||
| KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
|
||||
| BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
|
||||
| AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
|
||||
| HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
|
||||
| Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
|
||||
| MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
|
||||
| TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
|
||||
| cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
|
||||
| bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
|
||||
| AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
|
||||
| 8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
|
||||
| AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
|
||||
| lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
|
||||
| 6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
|
||||
| 4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
|
||||
| vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
|
||||
| Kpvre+eLUhbfX0oMhv69Ijo=
|
||||
|_-----END CERTIFICATE-----
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-php-version: Credits query returned unknown hash 949c98d8d14d6d4da5caaf045903a8a1
|
||||
|_http-server-header: nginx
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-backup-finder: ERROR: Script execution failed (use -d to debug)
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: /auth/login?redirect=%2F
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
| WWW-Mechanize/1.34
|
||||
| Change in Status Code:
|
||||
|_ libwww: 404
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
@@ -209,45 +139,207 @@ PORT STATE SERVICE REASON VERSION
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.10.0
|
||||
|
|
||||
| Error Code: 404
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case
|
||||
|
|
||||
| Error Code: 404
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|
||||
|
|
||||
| Error Code: 404
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.10.0
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_ https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-unsafe-output-escaping: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
|
||||
|_http-chrono: Request times for /; avg: 29564.94ms; min: 2054.83ms; max: 131706.91ms
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-date: Tue, 14 Apr 2026 04:01:12 GMT; -19s from local time.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: /auth/login?redirect=%2F
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
| http-php-version: Logo query returned unknown hash 3282c083dbb29b35410366062b9400a1
|
||||
|_Credits query returned unknown hash 3282c083dbb29b35410366062b9400a1
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-grep:
|
||||
| (2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0:
|
||||
| (1) ip:
|
||||
| + 1.122.28.223
|
||||
| (1) email:
|
||||
|_ + you@organization.com
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /
|
||||
| Other: 1; ico: 1; png: 5; svg: 1
|
||||
| Other: 1; ico: 1; png: 6; svg: 1
|
||||
| /js/app/
|
||||
| js: 1
|
||||
| js: 3
|
||||
| Longest directory structure:
|
||||
| Depth: 2
|
||||
| Dir: /js/app/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1; ico: 1; js: 1; png: 5; svg: 1
|
||||
|_ Other: 1; ico: 1; js: 3; png: 6; svg: 1
|
||||
|_http-rfi-spider: ERROR: Script execution failed (use -d to debug)
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 404
|
||||
| Hop #2: 302
|
||||
| Hop #3: 302
|
||||
| server
|
||||
| Hop #1
|
||||
| Hop #2: nginx
|
||||
| Hop #3: nginx
|
||||
| content-type
|
||||
| Hop #1: text/plain; charset=utf-8
|
||||
| Hop #2: text/html; charset=UTF-8
|
||||
| Hop #3: text/html; charset=UTF-8
|
||||
| content-length
|
||||
| Hop #1: 19
|
||||
| Hop #2
|
||||
| Hop #3
|
||||
| location
|
||||
| Hop #1
|
||||
| Hop #2: /auth/login?redirect=%2F
|
||||
|_ Hop #3: /auth/login?redirect=%2F
|
||||
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
|
||||
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-04-07T00:44:25
|
||||
| Not valid after: 2026-07-06T00:44:24
|
||||
| MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
|
||||
| SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
|
||||
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
|
||||
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
|
||||
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
|
||||
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
|
||||
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
|
||||
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
|
||||
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
|
||||
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
|
||||
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
|
||||
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
|
||||
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
|
||||
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
|
||||
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
|
||||
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
|
||||
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
|
||||
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
|
||||
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
|
||||
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
|
||||
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
|
||||
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
|
||||
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
|
||||
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
|
||||
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
|
||||
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
|
||||
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
|
||||
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
|
||||
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
|
||||
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
|
||||
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
|
||||
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
|
||||
| YrarkoA+irmSeogYZBI+qKg=
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-sql-injection: ERROR: Script execution failed (use -d to debug)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-server-header: nginx
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-headers:
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Progress
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Authenticated
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Refer
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Debug
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Error
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Pubkey
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Version
|
||||
| Cache-Control: no-store, no-cache, must-revalidate
|
||||
| Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
|
||||
| Content-Type: text/html; charset=UTF-8
|
||||
| Date: Tue, 14 Apr 2026 04:01:12 GMT
|
||||
| Expires: Thu, 19 Nov 1981 08:52:00 GMT
|
||||
| Permissions-Policy: unload=(*)
|
||||
| Pragma: no-cache
|
||||
| Referrer-Policy: same-origin
|
||||
| Server: nginx
|
||||
| Set-Cookie: passbolt_session=868f8b90de9733e71911be79a6ae943e; path=/; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: csrfToken=77f99ef8df307c0707c09f924bcade32f7909e5c61ff6c5d6eb225253b6553b25a55e5962129c071808a94301932f194403a7667eabb8ee2723fc58c636798ac; path=/
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Download-Options: noopen
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Gpgauth-Authenticated: false
|
||||
| X-Gpgauth-Debug: There is no user associated with this key. No key id set.
|
||||
| X-Gpgauth-Error: true
|
||||
| X-Gpgauth-Login-Url: /auth/login
|
||||
| X-Gpgauth-Logout-Url: /auth/logout
|
||||
| X-Gpgauth-Progress: stage0
|
||||
| X-Gpgauth-Pubkey-Url: /auth/verify.json
|
||||
| X-Gpgauth-Verify-Url: /auth/verify
|
||||
| X-Gpgauth-Version: 1.3.0
|
||||
| X-Permitted-Cross-Domain-Policies: all
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
| Transfer-Encoding: chunked
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 09:05:59 2026 -- 1 IP address (1 host up) scanned in 1586.00 seconds
|
||||
# Nmap done at Tue Apr 14 04:06:40 2026 -- 1 IP address (1 host up) scanned in 361.20 seconds
|
||||
@@ -77,12 +77,12 @@ HTTP Headers:
|
||||
Cache-Control: no-store, no-cache, must-revalidate
|
||||
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:55:19 GMT
|
||||
Date: Tue, 14 Apr 2026 04:02:47 GMT
|
||||
Expires: Thu, 19 Nov 1981 08:52:00 GMT
|
||||
Location: /auth/login?redirect=%2F
|
||||
Pragma: no-cache
|
||||
Server: nginx
|
||||
Set-Cookie: passbolt_session=5925bd4bd383c843e3979f650a0c87bd; path=/; HttpOnly; SameSite=Lax
|
||||
Set-Cookie: passbolt_session=f885d8dff46c5731c197be09a984fb40; path=/; HttpOnly; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
@@ -96,7 +96,7 @@ Title : Passbolt | Open source password manager for teams
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Cookies ]
|
||||
@@ -140,7 +140,7 @@ Detected Plugins:
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
|
||||
String : access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
@@ -181,12 +181,13 @@ HTTP Headers:
|
||||
Content-Encoding: gzip
|
||||
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
|
||||
Content-Type: text/html; charset=UTF-8
|
||||
Date: Sun, 05 Apr 2026 08:55:31 GMT
|
||||
Date: Tue, 14 Apr 2026 04:02:56 GMT
|
||||
Expires: Thu, 19 Nov 1981 08:52:00 GMT
|
||||
Permissions-Policy: unload=(*)
|
||||
Pragma: no-cache
|
||||
Referrer-Policy: same-origin
|
||||
Server: nginx
|
||||
Set-Cookie: csrfToken=30469be09d90fab9190421d696b29af29e3f6c1267b000a93dcfaf466dfacb51f4b035ffe5c9f5992cf225972b00892236c707fff8865bef925eaa306dabe310; path=/
|
||||
Set-Cookie: csrfToken=2d978b238a37ff133e36f80d9258db7e3d28ef00c0b5f15beaa8e1f7b5b46cbb060f7447262c0ade3b058c8527a0de71940c878c587d89380ccab965766f6a6a; path=/
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Download-Options: noopen
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
OpenSSL 3.5.5 27 Jan 2026
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
@@ -49,9 +49,9 @@ TLSv1.2 128 bits x25519
|
||||
SSL Certificate:
|
||||
Certificate blob:
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
|
||||
MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
|
||||
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
|
||||
EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
|
||||
ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
|
||||
Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
|
||||
WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
|
||||
@@ -64,31 +64,31 @@ ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
|
||||
6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
|
||||
TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
|
||||
6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
|
||||
AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
|
||||
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
|
||||
BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
|
||||
AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
|
||||
HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
|
||||
Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
|
||||
MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
|
||||
TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
|
||||
cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
|
||||
bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
|
||||
AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
|
||||
8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
|
||||
AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
|
||||
lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
|
||||
6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
|
||||
4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
|
||||
vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
|
||||
Kpvre+eLUhbfX0oMhv69Ijo=
|
||||
AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
|
||||
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
|
||||
HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
|
||||
KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
|
||||
c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
|
||||
VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
|
||||
BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
|
||||
c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
|
||||
Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
|
||||
9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
|
||||
AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
|
||||
IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
|
||||
ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
|
||||
+3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
|
||||
MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
|
||||
k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
|
||||
MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
|
||||
YrarkoA+irmSeogYZBI+qKg=
|
||||
-----END CERTIFICATE-----
|
||||
Version: 2
|
||||
Serial Number: 06:b1:d7:0b:1a:8a:64:6e:ec:4a:80:43:f3:c3:4b:cc:d8:00
|
||||
Serial Number: 06:8c:58:25:86:ad:cb:b5:14:71:53:b8:79:36:ec:23:91:96
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
Not valid before: Feb 5 19:02:28 2026 GMT
|
||||
Not valid after: May 6 19:02:27 2026 GMT
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
Not valid before: Apr 7 00:44:25 2026 GMT
|
||||
Not valid after: Jul 6 00:44:24 2026 GMT
|
||||
Subject: /CN=passbolt.lan.ddnsgeek.com
|
||||
Public Key Algorithm: NULL
|
||||
RSA Public Key: (4096 bit)
|
||||
@@ -134,48 +134,48 @@ Kpvre+eLUhbfX0oMhv69Ijo=
|
||||
X509v3 Key Usage: critical
|
||||
Digital Signature, Key Encipherment
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, TLS Web Client Authentication
|
||||
TLS Web Server Authentication
|
||||
X509v3 Basic Constraints: critical
|
||||
CA:FALSE
|
||||
X509v3 Subject Key Identifier:
|
||||
9B:4B:96:AB:A2:A1:CD:3E:D1:8D:85:EF:C9:E6:F2:04:B4:6A:63:2C
|
||||
X509v3 Authority Key Identifier:
|
||||
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
|
||||
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
|
||||
Authority Information Access:
|
||||
CA Issuers - URI:http://r13.i.lencr.org/
|
||||
CA Issuers - URI:http://r12.i.lencr.org/
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:passbolt.lan.ddnsgeek.com
|
||||
X509v3 Certificate Policies:
|
||||
Policy: 2.23.140.1.2.1
|
||||
X509v3 CRL Distribution Points:
|
||||
Full Name:
|
||||
URI:http://r13.c.lencr.org/1.crl
|
||||
URI:http://r12.c.lencr.org/23.crl
|
||||
|
||||
CT Precertificate SCTs:
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
|
||||
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
|
||||
Timestamp : Feb 5 20:00:59.205 2026 GMT
|
||||
Extensions: none
|
||||
Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:
|
||||
1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A
|
||||
Timestamp : Apr 7 01:42:56.151 2026 GMT
|
||||
Extensions: 00:00:05:00:06:1E:AA:29
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:
|
||||
9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:
|
||||
96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:
|
||||
49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:
|
||||
30:A4:6C:CB:EF:9E
|
||||
30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:
|
||||
72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:
|
||||
C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:
|
||||
B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:
|
||||
D5:DF:5A:F4:2E:62:45:E7
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
|
||||
DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
|
||||
Timestamp : Feb 5 20:00:59.234 2026 GMT
|
||||
Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
|
||||
82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
|
||||
Timestamp : Apr 7 01:42:56.125 2026 GMT
|
||||
Extensions: none
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:
|
||||
0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:
|
||||
04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:
|
||||
DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:
|
||||
17:F5:11:6E:F6:48:D5:30
|
||||
30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:
|
||||
62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:
|
||||
C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:
|
||||
9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:
|
||||
AF:67:40:BF:8B:68:99
|
||||
Verify m:
|
||||
unable to get local issuer certificate
|
||||
|
||||
@@ -185,8 +185,8 @@ RSA Key Strength: 4096
|
||||
|
||||
Subject: passbolt.lan.ddnsgeek.com
|
||||
Altnames: DNS:passbolt.lan.ddnsgeek.com
|
||||
Issuer: R13
|
||||
Issuer: R12
|
||||
|
||||
Not valid before: Feb 5 19:02:28 2026 GMT
|
||||
Not valid after: May 6 19:02:27 2026 GMT
|
||||
Not valid before: Apr 7 00:44:25 2026 GMT
|
||||
Not valid after: Jul 6 00:44:24 2026 GMT
|
||||
|
||||
@@ -1,70 +1,157 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:39:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com" start="1775378374" startstr="Sun Apr 5 08:39:34 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:00:39 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com" start="1776139239" startstr="Tue Apr 14 04:00:39 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775378384"/>
|
||||
<taskend task="NSE" time="1775378384"/>
|
||||
<taskbegin task="NSE" time="1775378384"/>
|
||||
<taskend task="NSE" time="1775378384"/>
|
||||
<taskbegin task="NSE" time="1775378384"/>
|
||||
<taskend task="NSE" time="1775378384"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775378384"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775378384"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775378384"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775378384"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775378384"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775378384" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775378387"/>
|
||||
<taskend task="Service scan" time="1775378463" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775378463"/>
|
||||
<taskprogress task="NSE" time="1775378611" percent="47.24" remaining="166" etc="1775378776"/>
|
||||
<taskprogress task="NSE" time="1775378647" percent="83.16" remaining="38" etc="1775378684"/>
|
||||
<taskprogress task="NSE" time="1775378705" percent="82.89" remaining="50" etc="1775378755"/>
|
||||
<taskprogress task="NSE" time="1775378735" percent="82.89" remaining="57" etc="1775378791"/>
|
||||
<taskprogress task="NSE" time="1775378774" percent="83.22" remaining="63" etc="1775378837"/>
|
||||
<taskprogress task="NSE" time="1775378804" percent="83.61" remaining="67" etc="1775378871"/>
|
||||
<taskprogress task="NSE" time="1775378870" percent="86.64" remaining="63" etc="1775378933"/>
|
||||
<taskprogress task="NSE" time="1775378999" percent="86.97" remaining="81" etc="1775379079"/>
|
||||
<taskprogress task="NSE" time="1775379186" percent="86.97" remaining="109" etc="1775379294"/>
|
||||
<taskprogress task="NSE" time="1775379309" percent="86.97" remaining="127" etc="1775379436"/>
|
||||
<taskprogress task="NSE" time="1775379373" percent="86.97" remaining="137" etc="1775379509"/>
|
||||
<taskprogress task="NSE" time="1775379429" percent="86.97" remaining="145" etc="1775379574"/>
|
||||
<taskprogress task="NSE" time="1775379478" percent="87.30" remaining="148" etc="1775379626"/>
|
||||
<taskprogress task="NSE" time="1775379520" percent="87.62" remaining="150" etc="1775379669"/>
|
||||
<taskprogress task="NSE" time="1775379566" percent="87.62" remaining="156" etc="1775379722"/>
|
||||
<taskprogress task="NSE" time="1775379614" percent="87.66" remaining="162" etc="1775379776"/>
|
||||
<taskprogress task="NSE" time="1775379654" percent="87.66" remaining="168" etc="1775379822"/>
|
||||
<taskprogress task="NSE" time="1775379694" percent="87.66" remaining="174" etc="1775379867"/>
|
||||
<taskprogress task="NSE" time="1775379730" percent="87.99" remaining="173" etc="1775379903"/>
|
||||
<taskprogress task="NSE" time="1775379765" percent="88.96" remaining="162" etc="1775379927"/>
|
||||
<taskprogress task="NSE" time="1775379801" percent="90.26" remaining="145" etc="1775379945"/>
|
||||
<taskprogress task="NSE" time="1775379832" percent="92.21" remaining="116" etc="1775379948"/>
|
||||
<taskprogress task="NSE" time="1775379879" percent="96.44" remaining="53" etc="1775379931"/>
|
||||
<taskprogress task="NSE" time="1775379927" percent="98.39" remaining="24" etc="1775379951"/>
|
||||
<taskend task="NSE" time="1775379951"/>
|
||||
<taskbegin task="NSE" time="1775379951"/>
|
||||
<taskend task="NSE" time="1775379958"/>
|
||||
<taskbegin task="NSE" time="1775379958"/>
|
||||
<taskend task="NSE" time="1775379958"/>
|
||||
<host starttime="1775378384" endtime="1775379958"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776139246"/>
|
||||
<taskend task="NSE" time="1776139246"/>
|
||||
<taskbegin task="NSE" time="1776139246"/>
|
||||
<taskend task="NSE" time="1776139246"/>
|
||||
<taskbegin task="NSE" time="1776139246"/>
|
||||
<taskend task="NSE" time="1776139247"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139247"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776139247"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139247"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776139247"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776139247"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776139248" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776139251"/>
|
||||
<taskend task="Service scan" time="1776139264" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776139264"/>
|
||||
<taskprogress task="NSE" time="1776139295" percent="84.36" remaining="6" etc="1776139301"/>
|
||||
<taskprogress task="NSE" time="1776139347" percent="87.66" remaining="12" etc="1776139359"/>
|
||||
<taskprogress task="NSE" time="1776139378" percent="87.66" remaining="17" etc="1776139394"/>
|
||||
<taskprogress task="NSE" time="1776139414" percent="88.31" remaining="20" etc="1776139434"/>
|
||||
<taskprogress task="NSE" time="1776139454" percent="88.96" remaining="24" etc="1776139478"/>
|
||||
<taskprogress task="NSE" time="1776139488" percent="88.96" remaining="28" etc="1776139516"/>
|
||||
<taskprogress task="NSE" time="1776139530" percent="88.96" remaining="34" etc="1776139563"/>
|
||||
<taskprogress task="NSE" time="1776139560" percent="98.39" remaining="5" etc="1776139565"/>
|
||||
<taskprogress task="NSE" time="1776139590" percent="99.68" remaining="2" etc="1776139591"/>
|
||||
<taskend task="NSE" time="1776139595"/>
|
||||
<taskbegin task="NSE" time="1776139595"/>
|
||||
<taskend task="NSE" time="1776139599"/>
|
||||
<taskbegin task="NSE" time="1776139599"/>
|
||||
<taskend task="NSE" time="1776139600"/>
|
||||
<host starttime="1776139247" endtime="1776139600"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="passbolt.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-feed" output="Couldn't find any feeds."/><script id="http-comments-displayer" output="
Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com
 
 Path: https://passbolt.lan.ddnsgeek.com:443/
 Line number: 49
 Comment: 
 <!-- main -->
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.10.0
 Line number: 1
 Comment: 
 /*! For license information please see api-vendors.js.LICENSE.txt */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/
 Line number: 6
 Comment: 
 <!--
 
 ____ __ ____
 / __ \____ _____ ____/ /_ ____ / / /_
 / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
 / ____/ /_/ (__ )__ ) /_/ / /_/ / / /_
 /_/ \__,_/____/____/_.___/\____/_/\__/
 
 Open source password manager for teams
 Copyright (c) Passbolt SA (https://www.passbolt.com)
 
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as
 published by the Free Software Foundation, either version 3 of the
 License, or (at your option) any later version.
 
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 GNU Affero General Public License for more details.
 
 You should have received a copy of the GNU Affero General Public License
 along with this program. If not, see http://www.gnu.org/licenses/.
 
 
 -->
"/><script id="http-headers" output="
 Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
 Access-Control-Expose-Headers: X-GPGAuth-Progress
 Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
 Access-Control-Expose-Headers: X-GPGAuth-Authenticated
 Access-Control-Expose-Headers: X-GPGAuth-Refer
 Access-Control-Expose-Headers: X-GPGAuth-Debug
 Access-Control-Expose-Headers: X-GPGAuth-Error
 Access-Control-Expose-Headers: X-GPGAuth-Pubkey
 Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
 Access-Control-Expose-Headers: X-GPGAuth-Version
 Cache-Control: no-store, no-cache, must-revalidate
 Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
 Content-Type: text/html; charset=UTF-8
 Date: Sun, 05 Apr 2026 08:43:47 GMT
 Expires: Thu, 19 Nov 1981 08:52:00 GMT
 Pragma: no-cache
 Referrer-Policy: same-origin
 Server: nginx
 Set-Cookie: passbolt_session=0ef149b13c99d135c6c2a67b1a000b76; path=/; HttpOnly; SameSite=Lax
 Set-Cookie: csrfToken=16d25e047084290e11d152a80a4d75f310aab333c9ce6f08261c78346adff7db300d53d7b6cd56f23b17dff875111a4d0f30c368a11fb6aed06ede845284953e; path=/
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Download-Options: noopen
 X-Frame-Options: SAMEORIGIN
 X-Gpgauth-Authenticated: false
 X-Gpgauth-Debug: There is no user associated with this key. No key id set.
 X-Gpgauth-Error: true
 X-Gpgauth-Login-Url: /auth/login
 X-Gpgauth-Logout-Url: /auth/logout
 X-Gpgauth-Progress: stage0
 X-Gpgauth-Pubkey-Url: /auth/verify.json
 X-Gpgauth-Verify-Url: /auth/verify
 X-Gpgauth-Version: 1.3.0
 X-Permitted-Cross-Domain-Policies: all
 X-Xss-Protection: 1; mode=block
 Connection: close
 Transfer-Encoding: chunked
 
 (Request type: GET)
"/><script id="http-date" output="Sun, 05 Apr 2026 08:43:47 GMT; -2m53s from local time."><elem key="date">2026-04-05T08:43:47+00:00</elem>
|
||||
<elem key="delta">-173.0</elem>
|
||||
</script><script id="http-vhosts" output="
auth.lan.ddnsgeek.com : 200
127 names had status 404"/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-title" output="Passbolt | Open source password manager for teams
Requested resource was /auth/login?redirect=%2F"><elem key="title">Passbolt | Open source password manager for teams</elem>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-comments-displayer" output="
Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com
 
 Path: https://passbolt.lan.ddnsgeek.com:443/
 Line number: 49
 Comment: 
 <!-- main -->
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
 Line number: 29
 Comment: 
 /**
 * Initialise to get the theme from stylesheet or OS preference
 */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
 Line number: 22
 Comment: 
 /**
 * Bind callbacks
 */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
 Line number: 79
 Comment: 
 /**
 * Is theme defined
 * @returns {boolean}
 */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/
 Line number: 6
 Comment: 
 <!--
 
 ____ __ ____
 / __ \____ _____ ____/ /_ ____ / / /_
 / /_/ / __ `/ ___/ ___/ __ \/ __ \/ / __/
 / ____/ /_/ (__ )__ ) /_/ / /_/ / / /_
 /_/ \__,_/____/____/_.___/\____/_/\__/
 
 Open source password manager for teams
 Copyright (c) Passbolt SA (https://www.passbolt.com)
 
 
 This program is free software: you can redistribute it and/or modify
 it under the terms of the GNU Affero General Public License as
 published by the Free Software Foundation, either version 3 of the
 License, or (at your option) any later version.
 
 This program is distributed in the hope that it will be useful,
 but WITHOUT ANY WARRANTY; without even the implied warranty of
 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 GNU Affero General Public License for more details.
 
 You should have received a copy of the GNU Affero General Public License
 along with this program. If not, see http://www.gnu.org/licenses/.
 
 
 -->
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
 Line number: 1
 Comment: 
 /**
 * Passbolt ~ Open source password manager for teams
 * Copyright (c) Passbolt SARL (https://www.passbolt.com)
 *
 * Licensed under GNU Affero General Public License version 3 of the or any later version.
 * For full copyright and license information, please see the LICENSE.txt
 * Redistributions of files must retain the above copyright notice.
 *
 * @copyright Copyright (c) Passbolt SA (https://www.passbolt.com)
 * @license https://opensource.org/licenses/AGPL-3.0 AGPL License
 * @link https://www.passbolt.com Passbolt(tm)
 * @since 3.3.2
 */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
 Line number: 59
 Comment: 
 /**
 * Get link tag
 * @returns {Element}
 */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.11.0
 Line number: 1
 Comment: 
 /*! For license information please see api-vendors.js.LICENSE.txt */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
 Line number: 87
 Comment: 
 /**
 * Set theme according to the OS preference
 * @param mediaQueryPreferColor
 */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0
 Line number: 1
 Comment: 
 /*! For license information please see api-triage.js.LICENSE.txt */
 
 Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
 Line number: 44
 Comment: 
 /**
 * Update link reference with the theme
 */
"/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-title" output="Passbolt | Open source password manager for teams
Requested resource was /auth/login?redirect=%2F"><elem key="tiLine truncated
|
||||
<elem key="redirect_url">/auth/login?redirect=%2F</elem>
|
||||
</script><script id="http-chrono" output="Request times for /; avg: 37139.25ms; min: 2126.65ms; max: 69794.57ms"/><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com
Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-02-05T19:02:28
Not valid after: 2026-05-06T19:02:27
MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
</script><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="compressors">
|
||||
<elem>NULL</elem>
|
||||
</table>
|
||||
<elem key="cipher preference">client</elem>
|
||||
<table key="warnings">
|
||||
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="TLSv1.3">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="strength">A</elem>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-waf-detect" output="IDS/IPS/WAF detected:
passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case
 
 Error Code: 404
 	https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
 
 Error Code: 404
 	https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
"/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
|
||||
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
|
||||
</table>
|
||||
<table key="X_XSS_Protection">
|
||||
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
|
||||
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
</script><script id="http-unsafe-output-escaping" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-chrono" output="Request times for /; avg: 29564.94ms; min: 2054.83ms; max: 131706.91ms"/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-date" output="Tue, 14 Apr 2026 04:01:12 GMT; -19s from local time."><elem key="date">2026-04-14T04:01:12+00:00</elem>
|
||||
<elem key="delta">-19.0</elem>
|
||||
</script><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: /auth/login?redirect=%2F
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">/auth/login?redirect=%2F</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-vhosts" output="
auth.lan.ddnsgeek.com : 200
127 names had status 404"/><script id="http-php-version" output="Logo query returned unknown hash 3282c083dbb29b35410366062b9400a1
Credits query returned unknown hash 3282c083dbb29b35410366062b9400a1"/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-grep" output="
 (2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0: 
 (1) ip: 
 + 1.122.28.223
 (1) email: 
 + you@organization.com"><table key="(2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0">
|
||||
<table key="(1) ip">
|
||||
<elem>+ 1.122.28.223</elem>
|
||||
</table>
|
||||
<table key="(1) email">
|
||||
<elem>+ you@organization.com</elem>
|
||||
</table>
|
||||
</table>
|
||||
</script><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-sitemap-generator" output="
 Directory structure:
 /
 Other: 1; ico: 1; png: 6; svg: 1
 /js/app/
 js: 3
 Longest directory structure:
 Depth: 2
 Dir: /js/app/
 Total files found (by extension):
 Other: 1; ico: 1; js: 3; png: 6; svg: 1
"/><script id="http-rfi-spider" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-traceroute" output="
 Status Code
 Hop #1: 404
 Hop #2: 302
 Hop #3: 302
 server
 Hop #1
 Hop #2: nginx
 Hop #3: nginx
 content-type
 Hop #1: text/plain; charset=utf-8
 Hop #2: text/html; charset=UTF-8
 Hop #3: text/html; charset=UTF-8
 content-length
 Hop #1: 19
 Hop #2
 Hop #3
 location
 Hop #1
 Hop #2: /auth/login?redirect=%2F
 Hop #3: /auth/login?redirect=%2F
"/><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="ssl-cert" output="Subject: commonName=passbolt.lan.ddnsgeek.com
Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
Public Key type: rsa
Public Key bits: 4096
Signature Algorithm: sha256WithRSAEncryption
Not valid before: 2026-04-07T00:44:25
Not valid after: 2026-07-06T00:44:24
MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"><table key="subject">
|
||||
<elem key="commonName">passbolt.lan.ddnsgeek.com</elem>
|
||||
</table>
|
||||
<table key="issuer">
|
||||
<elem key="commonName">R13</elem>
|
||||
<elem key="commonName">R12</elem>
|
||||
<elem key="countryName">US</elem>
|
||||
<elem key="organizationName">Let's Encrypt</elem>
|
||||
</table>
|
||||
@@ -82,7 +169,7 @@
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Extended Key Usage</elem>
|
||||
<elem key="value">TLS Web Server Authentication, TLS Web Client Authentication</elem>
|
||||
<elem key="value">TLS Web Server Authentication</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Basic Constraints</elem>
|
||||
@@ -95,11 +182,11 @@
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Authority Key Identifier</elem>
|
||||
<elem key="value">E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33</elem>
|
||||
<elem key="value">00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">Authority Information Access</elem>
|
||||
<elem key="value">CA Issuers - URI:http://r13.i.lencr.org/</elem>
|
||||
<elem key="value">CA Issuers - URI:http://r12.i.lencr.org/</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 Subject Alternative Name</elem>
|
||||
@@ -111,134 +198,38 @@
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">X509v3 CRL Distribution Points</elem>
|
||||
<elem key="value">Full Name:
 URI:http://r13.c.lencr.org/1.crl
</elem>
|
||||
<elem key="value">Full Name:
 URI:http://r12.c.lencr.org/23.crl
</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="name">CT Precertificate SCTs</elem>
|
||||
<elem key="value">Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
 4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
 Timestamp : Feb 5 20:00:59.205 2026 GMT
 Extensions: none
 Signature : ecdsa-with-SHA256
 30:44:02:20:7D:4A:2A:04:73:A4:57:CC:14:E3:F6:12:
 9B:09:70:35:4E:A4:47:19:B4:30:45:05:E3:2C:D0:D4:
 96:3C:97:74:02:20:54:86:03:4E:88:A3:E5:89:85:05:
 49:EC:49:96:06:A4:DB:34:9F:A2:56:20:EA:60:89:76:
 30:A4:6C:CB:EF:9E
Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:
 DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21
 Timestamp : Feb 5 20:00:59.234 2026 GMT
 Extensions: none
 Signature : ecdsa-with-SHA256
 30:46:02:21:00:BD:05:6D:6E:6E:1C:49:29:7E:FC:6E:
 0A:94:8C:0F:C8:07:65:9C:78:D0:76:54:FB:4A:33:36:
 04:5B:CE:70:A9:02:21:00:BB:FC:8D:F0:DC:44:58:04:
 DC:27:34:65:6B:EB:19:58:A4:86:49:92:C4:18:10:3F:
 17:F5:11:6E:F6:48:D5:30</elem>
|
||||
<elem key="value">Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:
 1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A
 Timestamp : Apr 7 01:42:56.151 2026 GMT
 Extensions: 00:00:05:00:06:1E:AA:29
 Signature : ecdsa-with-SHA256
 30:46:02:21:00:A3:FA:62:22:80:72:B4:59:3F:0E:FD:
 72:3A:C4:4D:BD:75:5E:88:B2:9F:4F:A5:5D:4D:65:72:
 C4:36:EF:BF:7A:02:21:00:AF:F6:6A:B2:B4:F6:32:17:
 B2:9D:79:C3:81:8C:EC:F3:CC:3D:19:02:26:6E:D0:24:
 D5:DF:5A:F4:2E:62:45:E7
Signed Certificate Timestamp:
 Version : v1 (0x0)
 Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:
 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77
 Timestamp : Apr 7 01:42:56.125 2026 GMT
 Extensions: none
 Signature : ecdsa-with-SHA256
 30:45:02:21:00:89:0A:F2:8D:79:32:DF:9D:99:69:5B:
 62:C9:1F:D8:E8:57:FF:F7:65:59:A1:DB:4E:2A:F3:7D:
 C1:4F:A8:77:04:02:20:15:13:23:21:54:DC:8B:31:27:
 9D:E2:42:B9:5D:76:0F:A9:4C:57:2B:68:CC:6D:F4:32:
 AF:67:40:BF:8B:68:99</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="sig_algo">sha256WithRSAEncryption</elem>
|
||||
<table key="validity">
|
||||
<elem key="notBefore">2026-02-05T19:02:28</elem>
|
||||
<elem key="notAfter">2026-05-06T19:02:27</elem>
|
||||
<elem key="notBefore">2026-04-07T00:44:25</elem>
|
||||
<elem key="notAfter">2026-07-06T00:44:24</elem>
|
||||
</table>
|
||||
<elem key="md5">0e7e0f703cfe4113d4cba00c81d790e2</elem>
|
||||
<elem key="sha1">abe4cbbccca9683b7709ed8f301751ea87bb4e71</elem>
|
||||
<elem key="sha256">6ad206b208ded20b2ad4d8d0017ece21e103c2b579ad2c945515ee6cbe27b06c</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
|
||||
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
|
||||
</table>
|
||||
<table key="X_XSS_Protection">
|
||||
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
|
||||
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
</script><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-php-version" output="Credits query returned unknown hash 949c98d8d14d6d4da5caaf045903a8a1"/><script id="http-server-header" output="nginx"><elem>nginx</elem>
|
||||
</script><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-backup-finder" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-waf-detect" output="IDS/IPS/WAF detected:
passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: /auth/login?redirect=%2F
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34
 Change in Status Code: 
 libwww: 404"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">/auth/login?redirect=%2F</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
<table key="Change in Status Code">
|
||||
<elem key="libwww">404</elem>
|
||||
</table>
|
||||
</script><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="ssl-enum-ciphers" output="
 TLSv1.2: 
 ciphers: 
 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
 compressors: 
 NULL
 cipher preference: client
 warnings: 
 Key exchange (secp256r1) of lower strength than certificate key
 TLSv1.3: 
 ciphers: 
 TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
 TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
 TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
 cipher preference: server
 least strength: A"><table key="TLSv1.2">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">secp256r1</elem>
|
||||
<elem key="name">TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="compressors">
|
||||
<elem>NULL</elem>
|
||||
</table>
|
||||
<elem key="cipher preference">client</elem>
|
||||
<table key="warnings">
|
||||
<elem>Key exchange (secp256r1) of lower strength than certificate key</elem>
|
||||
</table>
|
||||
</table>
|
||||
<table key="TLSv1.3">
|
||||
<table key="ciphers">
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_128_GCM_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_AES_256_GCM_SHA384</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
<table>
|
||||
<elem key="kex_info">X25519MLKEM768</elem>
|
||||
<elem key="name">TLS_AKE_WITH_CHACHA20_POLY1305_SHA256</elem>
|
||||
<elem key="strength">A</elem>
|
||||
</table>
|
||||
</table>
|
||||
<elem key="cipher preference">server</elem>
|
||||
</table>
|
||||
<elem key="least strength">A</elem>
|
||||
</script><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-methods" output="
 Supported Methods: GET HEAD POST"><table key="Supported Methods">
|
||||
<elem key="md5">467174a58d202b208b59f04dc9233712</elem>
|
||||
<elem key="sha1">8af1359b3029214540949080649225087a445dd7</elem>
|
||||
<elem key="sha256">f9804a631adacd62ceaf5760f7e0826ee9e174db65cdc69c2b5c474b36ac19e3</elem>
|
||||
<elem key="pem">-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</elem>
|
||||
</script><script id="http-sql-injection" output="ERROR: Script execution failed (use -d to debug)"/><script id="http-methods" output="
 Supported Methods: GET HEAD POST"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
</table>
|
||||
</script><script id="ssl-date" output="TLS randomness does not represent time"></script><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.10.0
 
 Error Code: 404
 	https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case
 
 Error Code: 404
 	https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
 
 Error Code: 404
 	https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.10.0
 
 Error Code: 404
 	https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-favicon" output="Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-sitemap-generator" output="
 Directory structure:
 /
 Other: 1; ico: 1; png: 5; svg: 1
 /js/app/
 js: 1
 Longest directory structure:
 Depth: 2
 Dir: /js/app/
 Total files found (by extension):
 Other: 1; ico: 1; js: 1; png: 5; svg: 1
"/></port>
|
||||
</script><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-server-header" output="nginx"><elem>nginx</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-headers" output="
 Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
 Access-Control-Expose-Headers: X-GPGAuth-Progress
 Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
 Access-Control-Expose-Headers: X-GPGAuth-Authenticated
 Access-Control-Expose-Headers: X-GPGAuth-Refer
 Access-Control-Expose-Headers: X-GPGAuth-Debug
 Access-Control-Expose-Headers: X-GPGAuth-Error
 Access-Control-Expose-Headers: X-GPGAuth-Pubkey
 Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
 Access-Control-Expose-Headers: X-GPGAuth-Version
 Cache-Control: no-store, no-cache, must-revalidate
 Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
 Content-Type: text/html; charset=UTF-8
 Date: Tue, 14 Apr 2026 04:01:12 GMT
 Expires: Thu, 19 Nov 1981 08:52:00 GMT
 Permissions-Policy: unload=(*)
 Pragma: no-cache
 Referrer-Policy: same-origin
 Server: nginx
 Set-Cookie: passbolt_session=868f8b90de9733e71911be79a6ae943e; path=/; HttpOnly; SameSite=Lax
 Set-Cookie: csrfToken=77f99ef8df307c0707c09f924bcade32f7909e5c61ff6c5d6eb225253b6553b25a55e5962129c071808a94301932f194403a7667eabb8ee2723fc58c636798ac; path=/
 Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X-Content-Type-Options: nosniff
 X-Download-Options: noopen
 X-Frame-Options: SAMEORIGIN
 X-Gpgauth-Authenticated: false
 X-Gpgauth-Debug: There is no user associated with this key. No key id set.
 X-Gpgauth-Error: true
 X-Gpgauth-Login-Url: /auth/login
 X-Gpgauth-Logout-Url: /auth/logout
 X-Gpgauth-Progress: stage0
 X-Gpgauth-Pubkey-Url: /auth/verify.json
 X-Gpgauth-Verify-Url: /auth/verify
 X-Gpgauth-Version: 1.3.0
 X-Permitted-Cross-Domain-Policies: all
 X-Xss-Protection: 1; mode=block
 Connection: close
 Transfer-Encoding: chunked
 
 (Request type: GET)
"/><script id="http-feed" output="Couldn't find any feeds."/></port>
|
||||
</ports>
|
||||
<times srtt="14248" rttvar="14248" to="100000"/>
|
||||
<times srtt="13941" rttvar="13941" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775379959"/>
|
||||
<taskend task="NSE" time="1775379959"/>
|
||||
<taskbegin task="NSE" time="1775379959"/>
|
||||
<taskend task="NSE" time="1775379959"/>
|
||||
<taskbegin task="NSE" time="1775379959"/>
|
||||
<taskend task="NSE" time="1775379959"/>
|
||||
<runstats><finished time="1775379959" timestr="Sun Apr 5 09:05:59 2026" summary="Nmap done at Sun Apr 5 09:05:59 2026; 1 IP address (1 host up) scanned in 1586.00 seconds" elapsed="1586.00" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776139600"/>
|
||||
<taskend task="NSE" time="1776139600"/>
|
||||
<taskbegin task="NSE" time="1776139600"/>
|
||||
<taskend task="NSE" time="1776139600"/>
|
||||
<taskbegin task="NSE" time="1776139600"/>
|
||||
<taskend task="NSE" time="1776139600"/>
|
||||
<runstats><finished time="1776139600" timestr="Tue Apr 14 04:06:40 2026" summary="Nmap done at Tue Apr 14 04:06:40 2026; 1 IP address (1 host up) scanned in 361.20 seconds" elapsed="361.20" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user