fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,12 +1,11 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:39:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:00:39 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml passbolt.lan.ddnsgeek.com
|
||||
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.014s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:39:44 UTC for 1574s
|
||||
Scanned at 2026-04-14 04:00:47 UTC for 353s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-comments-displayer:
|
||||
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=passbolt.lan.ddnsgeek.com
|
||||
|
|
||||
@@ -15,10 +14,27 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Comment:
|
||||
| <!-- main -->
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.10.0
|
||||
| Line number: 1
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 29
|
||||
| Comment:
|
||||
| /*! For license information please see api-vendors.js.LICENSE.txt */
|
||||
| /**
|
||||
| * Initialise to get the theme from stylesheet or OS preference
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 22
|
||||
| Comment:
|
||||
| /**
|
||||
| * Bind callbacks
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 79
|
||||
| Comment:
|
||||
| /**
|
||||
| * Is theme defined
|
||||
| * @returns {boolean}
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/
|
||||
| Line number: 6
|
||||
@@ -49,146 +65,60 @@ PORT STATE SERVICE REASON VERSION
|
||||
| along with this program. If not, see http://www.gnu.org/licenses/.
|
||||
|
|
||||
|
|
||||
|_ -->
|
||||
| http-headers:
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Progress
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Authenticated
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Refer
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Debug
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Error
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Pubkey
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Version
|
||||
| Cache-Control: no-store, no-cache, must-revalidate
|
||||
| Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
|
||||
| Content-Type: text/html; charset=UTF-8
|
||||
| Date: Sun, 05 Apr 2026 08:43:47 GMT
|
||||
| Expires: Thu, 19 Nov 1981 08:52:00 GMT
|
||||
| Pragma: no-cache
|
||||
| Referrer-Policy: same-origin
|
||||
| Server: nginx
|
||||
| Set-Cookie: passbolt_session=0ef149b13c99d135c6c2a67b1a000b76; path=/; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: csrfToken=16d25e047084290e11d152a80a4d75f310aab333c9ce6f08261c78346adff7db300d53d7b6cd56f23b17dff875111a4d0f30c368a11fb6aed06ede845284953e; path=/
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Download-Options: noopen
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Gpgauth-Authenticated: false
|
||||
| X-Gpgauth-Debug: There is no user associated with this key. No key id set.
|
||||
| X-Gpgauth-Error: true
|
||||
| X-Gpgauth-Login-Url: /auth/login
|
||||
| X-Gpgauth-Logout-Url: /auth/logout
|
||||
| X-Gpgauth-Progress: stage0
|
||||
| X-Gpgauth-Pubkey-Url: /auth/verify.json
|
||||
| X-Gpgauth-Verify-Url: /auth/verify
|
||||
| X-Gpgauth-Version: 1.3.0
|
||||
| X-Permitted-Cross-Domain-Policies: all
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
| Transfer-Encoding: chunked
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-date: Sun, 05 Apr 2026 08:43:47 GMT; -2m53s from local time.
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
| -->
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 1
|
||||
| Comment:
|
||||
| /**
|
||||
| * Passbolt ~ Open source password manager for teams
|
||||
| * Copyright (c) Passbolt SARL (https://www.passbolt.com)
|
||||
| *
|
||||
| * Licensed under GNU Affero General Public License version 3 of the or any later version.
|
||||
| * For full copyright and license information, please see the LICENSE.txt
|
||||
| * Redistributions of files must retain the above copyright notice.
|
||||
| *
|
||||
| * @copyright Copyright (c) Passbolt SA (https://www.passbolt.com)
|
||||
| * @license https://opensource.org/licenses/AGPL-3.0 AGPL License
|
||||
| * @link https://www.passbolt.com Passbolt(tm)
|
||||
| * @since 3.3.2
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 59
|
||||
| Comment:
|
||||
| /**
|
||||
| * Get link tag
|
||||
| * @returns {Element}
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-vendors.js?v=5.11.0
|
||||
| Line number: 1
|
||||
| Comment:
|
||||
| /*! For license information please see api-vendors.js.LICENSE.txt */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 87
|
||||
| Comment:
|
||||
| /**
|
||||
| * Set theme according to the OS preference
|
||||
| * @param mediaQueryPreferColor
|
||||
| */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0
|
||||
| Line number: 1
|
||||
| Comment:
|
||||
| /*! For license information please see api-triage.js.LICENSE.txt */
|
||||
|
|
||||
| Path: https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.11.0
|
||||
| Line number: 44
|
||||
| Comment:
|
||||
| /**
|
||||
| * Update link reference with the theme
|
||||
|_ */
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-title: Passbolt | Open source password manager for teams
|
||||
|_Requested resource was /auth/login?redirect=%2F
|
||||
|_http-chrono: Request times for /; avg: 37139.25ms; min: 2126.65ms; max: 69794.57ms
|
||||
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-02-05T19:02:28
|
||||
| Not valid after: 2026-05-06T19:02:27
|
||||
| MD5: 0e7e 0f70 3cfe 4113 d4cb a00c 81d7 90e2
|
||||
| SHA-1: abe4 cbbc cca9 683b 7709 ed8f 3017 51ea 87bb 4e71
|
||||
| SHA-256: 6ad2 06b2 08de d20b 2ad4 d8d0 017e ce21 e103 c2b5 79ad 2c94 5515 ee6c be27 b06c
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGDTCCBPWgAwIBAgISBrHXCxqKZG7sSoBD88NLzNgAMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTMwHhcNMjYwMjA1MTkwMjI4WhcNMjYwNTA2MTkwMjI3WjAkMSIwIAYDVQQD
|
||||
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
|
||||
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
|
||||
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
|
||||
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
|
||||
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
|
||||
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
|
||||
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
|
||||
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
|
||||
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
|
||||
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
|
||||
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
|
||||
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
|
||||
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
|
||||
| KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUm0uWq6KhzT7RjYXvyeby
|
||||
| BLRqYywwHwYDVR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUH
|
||||
| AQEEJzAlMCMGCCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAkBgNV
|
||||
| HREEHTAbghlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYG
|
||||
| Z4EMAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcv
|
||||
| MS5jcmwwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQBkEcRspBLsp4kcogIuALyr
|
||||
| TygH1B41J6vq/tUDyX3N8AAAAZwvZMVFAAAEAwBGMEQCIH1KKgRzpFfMFOP2EpsJ
|
||||
| cDVOpEcZtDBFBeMs0NSWPJd0AiBUhgNOiKPliYUFSexJlgak2zSfolYg6mCJdjCk
|
||||
| bMvvngB3AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABnC9kxWIA
|
||||
| AAQDAEgwRgIhAL0FbW5uHEkpfvxuCpSMD8gHZZx40HZU+0ozNgRbznCpAiEAu/yN
|
||||
| 8NxEWATcJzRla+sZWKSGSZLEGBA/F/URbvZI1TAwDQYJKoZIhvcNAQELBQADggEB
|
||||
| AH6EoSrx4pAJK1ZfZm4U2h6MbtOt5pg+ZNQOO3zyNI6J/+DBNsFWtkOimNYCycNR
|
||||
| lF3RDbkk7n+gFG9hMCyRcc+JUduRTS1quL1guB6+qHnjn2gUE5duNKHqVx/69Vp3
|
||||
| 6X3YyQp2QU+sM0cFkRMHkdUD2BJ9SdpnvgOctGdVPraRJTuFqUgQw/uFflfBQZaL
|
||||
| 4qdBZ5UTWMd34tfWK2/ghqjpX65upzF6cS044IVhA6CfRyvVl40WnjvnrnY4ZpAP
|
||||
| vJQ9KLvWPjsPVJ9jqMxHFMPavTK5N3wrRbQgPcKtthYtYUqd1/wO6F4JcurIFBiq
|
||||
| Kpvre+eLUhbfX0oMhv69Ijo=
|
||||
|_-----END CERTIFICATE-----
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-php-version: Credits query returned unknown hash 949c98d8d14d6d4da5caaf045903a8a1
|
||||
|_http-server-header: nginx
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-backup-finder: ERROR: Script execution failed (use -d to debug)
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: /auth/login?redirect=%2F
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
| WWW-Mechanize/1.34
|
||||
| Change in Status Code:
|
||||
|_ libwww: 404
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
@@ -209,45 +139,207 @@ PORT STATE SERVICE REASON VERSION
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_passbolt.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=passbolt.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/stylesheet.js?v=5.10.0
|
||||
|
|
||||
| Error Code: 404
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/s.src1%7D%7Dbreak;case
|
||||
|
|
||||
| Error Code: 404
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|
||||
|
|
||||
| Error Code: 404
|
||||
| https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.10.0
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ https://passbolt.lan.ddnsgeek.com:443/js/app/e1110;var
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_ https://passbolt.lan.ddnsgeek.com:443/js/app/e1setTimeout1function11%7Bdocument.body.removeChild1u1%7D13331%7Dif1r1s
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-unsafe-output-escaping: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
|
||||
|_http-chrono: Request times for /; avg: 29564.94ms; min: 2054.83ms; max: 131706.91ms
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-date: Tue, 14 Apr 2026 04:01:12 GMT; -19s from local time.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: /auth/login?redirect=%2F
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
| http-php-version: Logo query returned unknown hash 3282c083dbb29b35410366062b9400a1
|
||||
|_Credits query returned unknown hash 3282c083dbb29b35410366062b9400a1
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-grep:
|
||||
| (2) https://passbolt.lan.ddnsgeek.com:443/js/app/api-triage.js?v=5.11.0:
|
||||
| (1) ip:
|
||||
| + 1.122.28.223
|
||||
| (1) email:
|
||||
|_ + you@organization.com
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /
|
||||
| Other: 1; ico: 1; png: 5; svg: 1
|
||||
| Other: 1; ico: 1; png: 6; svg: 1
|
||||
| /js/app/
|
||||
| js: 1
|
||||
| js: 3
|
||||
| Longest directory structure:
|
||||
| Depth: 2
|
||||
| Dir: /js/app/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1; ico: 1; js: 1; png: 5; svg: 1
|
||||
|_ Other: 1; ico: 1; js: 3; png: 6; svg: 1
|
||||
|_http-rfi-spider: ERROR: Script execution failed (use -d to debug)
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 404
|
||||
| Hop #2: 302
|
||||
| Hop #3: 302
|
||||
| server
|
||||
| Hop #1
|
||||
| Hop #2: nginx
|
||||
| Hop #3: nginx
|
||||
| content-type
|
||||
| Hop #1: text/plain; charset=utf-8
|
||||
| Hop #2: text/html; charset=UTF-8
|
||||
| Hop #3: text/html; charset=UTF-8
|
||||
| content-length
|
||||
| Hop #1: 19
|
||||
| Hop #2
|
||||
| Hop #3
|
||||
| location
|
||||
| Hop #1
|
||||
| Hop #2: /auth/login?redirect=%2F
|
||||
|_ Hop #3: /auth/login?redirect=%2F
|
||||
|_http-favicon: Unknown favicon MD5: 82C6406C68D91356C9A729ED456EECF4
|
||||
| ssl-cert: Subject: commonName=passbolt.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:passbolt.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-04-07T00:44:25
|
||||
| Not valid after: 2026-07-06T00:44:24
|
||||
| MD5: 4671 74a5 8d20 2b20 8b59 f04d c923 3712
|
||||
| SHA-1: 8af1 359b 3029 2145 4094 9080 6492 2508 7a44 5dd7
|
||||
| SHA-256: f980 4a63 1ada cd62 ceaf 5760 f7e0 826e e9e1 74db 65cd c69c 2b5c 474b 36ac 19e3
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGDTCCBPWgAwIBAgISBoxYJYaty7UUcVO4eTbsI5GWMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTIwHhcNMjYwNDA3MDA0NDI1WhcNMjYwNzA2MDA0NDI0WjAkMSIwIAYDVQQD
|
||||
| ExlwYXNzYm9sdC5sYW4uZGRuc2dlZWsuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC
|
||||
| Ag8AMIICCgKCAgEA7sz8Hd9oRf6MEwM8iJZNjEvfC19hS9Djs4iBeLW8ijyv4Uv3
|
||||
| WC2xSrnglAFDU4EHPD/Ahzz0xgkSn0LsSvXn7Bzga6MPEyTwi3m55OUAY7xAvCBJ
|
||||
| +nDzV0gXwPZ/jtQFnOsI5D06BMPB2buTpA+MBFXxR2ba2g1kSkd1+lC4lvN+V7Vs
|
||||
| BieUYJO4K+YLa9F8udHUWWXD9SHoUAk2BMuVON1bH6rCZF84ufvubhBNLIp8Ip+P
|
||||
| YUHctE2WEsfKMlrQWeu8wv/hdvYzmWCaVfzSF/t9L8wW5lGEY/+NIvOTxbZIKQoE
|
||||
| eLnOZMtTMrnrHn0KXw3+Fztyl/ANwgG9OsOYIrbHvzkJxIDLKr1BxYsy2F+PwbUE
|
||||
| d1JrjQ+7OMvP8J+hrMYPO3sBq31vyMOjCHra5Ghog3RXpmHzCydQwU7BF/RPwF1R
|
||||
| ZAJh8t3ajicVoq+WlWW0064jbPNjFHOujJGpiV18M0xnnm29jRSEqdV+kf/4nXmS
|
||||
| 6zqLLg4q5QgU0hpi9GQpRhsBnuljlJH+AguPOXHc9KGXlPF00jiNWJCUBoyKNTNw
|
||||
| TR9LH6jDKkAfUzPrbdamq9gIumTj2oM9msHnFC+n4v/b4PoB9+FvtakLKBeMjCX6
|
||||
| 6FHoX8v8wJS+8as3RejprdVw4CQheJ/y0T7G55K0DkLJsw3HEVTi1+QZwzkCAwEA
|
||||
| AaOCAigwggIkMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
|
||||
| BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbS5aroqHNPtGNhe/J5vIEtGpjLDAfBgNV
|
||||
| HSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcBAQQnMCUwIwYI
|
||||
| KwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCQGA1UdEQQdMBuCGXBh
|
||||
| c3Nib2x0Lmxhbi5kZG5zZ2Vlay5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwLgYD
|
||||
| VR0fBCcwJTAjoCGgH4YdaHR0cDovL3IxMi5jLmxlbmNyLm9yZy8yMy5jcmwwggEN
|
||||
| BgorBgEEAdZ5AgQCBIH+BIH7APkAfwBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDR
|
||||
| c4CeGBjrOgAAAZ1lm2WXAAgAAAUABh6qKQQDAEgwRgIhAKP6YiKAcrRZPw79cjrE
|
||||
| Tb11Xoiyn0+lXU1lcsQ27796AiEAr/ZqsrT2MheynXnDgYzs88w9GQImbtAk1d9a
|
||||
| 9C5iRecAdgDXbX0Q0af1d8LH6V/XAL/5gskzWmXh0LMBcxfAyMVpdwAAAZ1lm2V9
|
||||
| AAAEAwBHMEUCIQCJCvKNeTLfnZlpW2LJH9joV//3ZVmh204q833BT6h3BAIgFRMj
|
||||
| IVTcizEnneJCuV12D6lMVytozG30Mq9nQL+LaJkwDQYJKoZIhvcNAQELBQADggEB
|
||||
| ADJvFmDqJCU2H/u85aY7J2bngr24B066w3D0o1yjp4sg4ak2RqCT5ayhpw6PuB7v
|
||||
| +3mahFuMTvYqyK41wSDTJJcx0VMM5msNtBcZgubx+e4hnx5CqrviKOsCg9KN9qlF
|
||||
| MT1EsHR4rMKbx8kfrRAfA1KFQ1NF488fWFDAib0tljQxaTaPjGy1x+JROb3mrewc
|
||||
| k5cP8orNiJeX8ZY2BJus9PuA32pT8dSbJ0DdrfU69zp/iVkxrLuRfytI45H/k9mj
|
||||
| MbYSpeBZvUM+bRYBzqdmsFI+Lxw7F0e1Q55Fr1C0VGJ1hZSwiWPqDu5w7xhyeUxw
|
||||
| YrarkoA+irmSeogYZBI+qKg=
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-sql-injection: ERROR: Script execution failed (use -d to debug)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-server-header: nginx
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-headers:
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Verify-Response
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Progress
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-User-Auth-Token
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Authenticated
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Refer
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Debug
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Error
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Pubkey
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Logout-Url
|
||||
| Access-Control-Expose-Headers: X-GPGAuth-Version
|
||||
| Cache-Control: no-store, no-cache, must-revalidate
|
||||
| Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
|
||||
| Content-Type: text/html; charset=UTF-8
|
||||
| Date: Tue, 14 Apr 2026 04:01:12 GMT
|
||||
| Expires: Thu, 19 Nov 1981 08:52:00 GMT
|
||||
| Permissions-Policy: unload=(*)
|
||||
| Pragma: no-cache
|
||||
| Referrer-Policy: same-origin
|
||||
| Server: nginx
|
||||
| Set-Cookie: passbolt_session=868f8b90de9733e71911be79a6ae943e; path=/; HttpOnly; SameSite=Lax
|
||||
| Set-Cookie: csrfToken=77f99ef8df307c0707c09f924bcade32f7909e5c61ff6c5d6eb225253b6553b25a55e5962129c071808a94301932f194403a7667eabb8ee2723fc58c636798ac; path=/
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Download-Options: noopen
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Gpgauth-Authenticated: false
|
||||
| X-Gpgauth-Debug: There is no user associated with this key. No key id set.
|
||||
| X-Gpgauth-Error: true
|
||||
| X-Gpgauth-Login-Url: /auth/login
|
||||
| X-Gpgauth-Logout-Url: /auth/logout
|
||||
| X-Gpgauth-Progress: stage0
|
||||
| X-Gpgauth-Pubkey-Url: /auth/verify.json
|
||||
| X-Gpgauth-Verify-Url: /auth/verify
|
||||
| X-Gpgauth-Version: 1.3.0
|
||||
| X-Permitted-Cross-Domain-Policies: all
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
| Transfer-Encoding: chunked
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 09:05:59 2026 -- 1 IP address (1 host up) scanned in 1586.00 seconds
|
||||
# Nmap done at Tue Apr 14 04:06:40 2026 -- 1 IP address (1 host up) scanned in 361.20 seconds
|
||||
Reference in new issue
Block a user