beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/passbolt.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt
+7 -6
View File
@@ -77,12 +77,12 @@ HTTP Headers:
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:55:19 GMT
Date: Tue, 14 Apr 2026 04:02:47 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: /auth/login?redirect=%2F
Pragma: no-cache
Server: nginx
Set-Cookie: passbolt_session=5925bd4bd383c843e3979f650a0c87bd; path=/; HttpOnly; SameSite=Lax
Set-Cookie: passbolt_session=f885d8dff46c5731c197be09a984fb40; path=/; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
@@ -96,7 +96,7 @@ Title : Passbolt | Open source password manager for teams
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
@@ -140,7 +140,7 @@ Detected Plugins:
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
String : access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
@@ -181,12 +181,13 @@ HTTP Headers:
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:55:31 GMT
Date: Tue, 14 Apr 2026 04:02:56 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Permissions-Policy: unload=(*)
Pragma: no-cache
Referrer-Policy: same-origin
Server: nginx
Set-Cookie: csrfToken=30469be09d90fab9190421d696b29af29e3f6c1267b000a93dcfaf466dfacb51f4b035ffe5c9f5992cf225972b00892236c707fff8865bef925eaa306dabe310; path=/
Set-Cookie: csrfToken=2d978b238a37ff133e36f80d9258db7e3d28ef00c0b5f15beaa8e1f7b5b46cbb060f7447262c0ade3b058c8527a0de71940c878c587d89380ccab965766f6a6a; path=/
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen