beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 08:39:27 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:39:27 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt
+9 -8
View File
@@ -302,15 +302,16 @@ Configuration {
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.html => https://passbolt.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/] => https://passbolt.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.php => https://passbolt.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].txt => https://passbolt.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.asp => https://passbolt.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].txt => https://passbolt.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].html => https://passbolt.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.aspx => https://passbolt.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].php => https://passbolt.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/[.jsp => https://passbolt.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].php => https://passbolt.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].asp => https://passbolt.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].aspx => https://passbolt.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/].jsp => https://passbolt.lan.ddnsgeek.com/].jsp
404 GET 0l 0w 64c https://passbolt.lan.ddnsgeek.com/environmental.asp
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/healthcheck
403 GET 2l 10w 63c https://passbolt.lan.ddnsgeek.com/locales/
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/plain] => https://passbolt.lan.ddnsgeek.com/plain]
@@ -327,15 +328,15 @@ Configuration {
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].asp => https://passbolt.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].aspx => https://passbolt.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://passbolt.lan.ddnsgeek.com/quote].jsp => https://passbolt.lan.ddnsgeek.com/quote].jsp
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_128.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fimage%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_96.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.ico
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_32.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_57.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_76.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_228.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon.svg
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Ffavicon_192.png
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/auth/login?redirect=%2Fusers%2Fjs%2F
200 GET 53l 271w 2958c https://passbolt.lan.ddnsgeek.com/users/recover
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 08:39:26 GMT
Date: Tue, 14 Apr 2026 03:57:34 GMT
Content-Length: 17
Moved Permanently
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt
+23 -4
View File
@@ -1,3 +1,22 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -5,19 +24,19 @@
+ Target Hostname: passbolt.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 08:40:57 (GMT0)
+ Start Time: 2026-04-14 04:00:37 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 09:07:45 (GMT0) (1608 seconds)
+ End Time: 2026-04-14 04:13:28 (GMT0) (771 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt
+37 -241
View File
@@ -1,24 +1,49 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:39:28 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml passbolt.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:57:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml passbolt.lan.ddnsgeek.com
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
Host is up, received user-set (0.016s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:39:39 UTC for 998s
Scanned at 2026-04-14 03:58:32 UTC for 333s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-vhosts:
|_128 names had status 308
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-chrono: Request times for /; avg: 915.97ms; min: 799.65ms; max: 1032.68ms
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test
|_http-errors: Couldn't find any error pages.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-mobileversion-checker: No mobile version detected.
|_http-malware-host: Host appears to be clean
|_http-comments-displayer: Couldn't find any comments.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-date: Tue, 14 Apr 2026 04:00:43 GMT; -2s from local time.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-feed: Couldn't find any feeds.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-headers:
| Location: https://passbolt.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 04:00:56 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-chrono: Request times for /; avg: 812.55ms; min: 646.00ms; max: 1027.61ms
| http-useragent-tester:
| Status for browser useragent: 404
| Redirected To: /auth/login?redirect=%2F
@@ -40,236 +65,7 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
|_http-date: Sun, 05 Apr 2026 08:41:02 GMT; -3s from local time.
| http-headers:
| Location: https://passbolt.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 08:42:05 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-malware-host: Host appears to be clean
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-errors: Couldn't find any error pages.
|_http-feed: Couldn't find any feeds.
| http-wordpress-enum:
| Search limited to top 100 themes/plugins
| plugins
| wordpress-seo
| elementor
| jetpack
| wordfence
| woocommerce
| contact-form-7
| akismet
| wpforms-lite
| google-analytics-for-wordpress
| google-site-kit
| really-simple-ssl
| all-in-one-seo-pack
| all-in-one-wp-migration
| updraftplus
| seo-by-rank-math
| optinmonster
| litespeed-cache
| essential-addons-for-elementor-lite
| sg-cachepress
| classic-editor
| astra-sites
| the-events-calendar
| limit-login-attempts-reloaded
| insert-headers-and-footers
| wp-mail-smtp
| mailchimp-for-wp
| redirection
| advanced-custom-fields
| wp-smushit
| wordpress-importer
| wp-super-cache
| w3-total-cache
| wp-fastest-cache
| siteorigin-panels
| mailpoet
| ninja-forms
| wp-optimize
| google-analytics-dashboard-for-wp
| duplicator
| instagram-feed
| header-footer-elementor
| premium-addons-for-elementor
| gutenberg
| so-widgets-bundle
| facebook-for-woocommerce
| nextgen-gallery
| woocommerce-services
| ewww-image-optimizer
| autoptimize
| google-sitemap-generator
| woocommerce-gateway-stripe
| cookie-law-info
| duplicate-post
| elementskit-lite
| woocommerce-payments
| tinymce-advanced
| ultimate-addons-for-gutenberg
| better-wp-security
| google-listings-and-ads
| mainwp-child
| all-in-one-wp-security-and-firewall
| cookie-notice
| wp-statistics
| loco-translate
| ml-slider
| newsletter
| duplicate-page
| redux-framework
| sg-security
| coming-soon
| yith-woocommerce-wishlist
| kadence-blocks
| sucuri-scanner
| wp-file-manager
| wps-hide-login
| loginizer
| disable-comments
| wp-google-maps
| coblocks
| ocean-extra
| formidable
| polylang
| worker
| shortcodes-ultimate
| mailchimp-for-woocommerce
| regenerate-thumbnails
| complianz-gdpr
| creative-mail-by-constant-contact
| meta-box
| user-role-editor
| broken-link-checker
| custom-post-type-ui
| smart-slider-3
| cleantalk-spam-protect
| tablepress
| photo-gallery
| backwpup
| woocommerce-paypal-payments
| accelerated-mobile-pages
| woocommerce-pdf-invoices-packing-slips
| themes
| astra
| twentyseventeen
| twentyfifteen
| twentynineteen
| twentytwenty
| twentysixteen
| twentyfourteen
| twentytwentyone
| hello-elementor
| twentythirteen
| oceanwp
| twentytwelve
| storefront
| twentyeleven
| twentytwentytwo
| twentyten
| generatepress
| twentytwentythree
| neve
| responsive
| sydney
| blocksy
| hestia
| customizr
| colormag
| kadence
| vantage
| hueman
| twentytwentyfour
| spacious
| lightning
| virtue
| newsup
| onepress
| specia
| ashe
| mh-magazine-lite
| zakra
| sinatra
| phlox
| mesmerize
| evolve
| graphene
| shapely
| colibri-wp
| sparkling
| colorway
| enigma
| make
| flash
| customify
| total
| mantra
| appointment
| ifeature
| inspiro
| go
| covernews
| iconic-one
| popularfx
| minamaze
| omega
| twentytwentyfive
| catch-box
| bard
| bizberg
| dispatch
| poseidon
| page-builder-framework
| illdy
| coraline
| accelerate
| alexandria
| pinboard
| hemingway
| wallstreet
| royal-elementor-kit
| portfolio-press
| startkit
| radiate
| attitude
| nirvana
| arilewp
| avril
| custom-community
| argent
| blogus
| rife-free
| raindrops
| activello
| tempera
| spicepress
| mystique
| estore
| sela
| suevafree
| delicate
| travelify
| woostify
|_ agama
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:56:18 2026 -- 1 IP address (1 host up) scanned in 1011.65 seconds
# Nmap done at Tue Apr 14 04:04:05 2026 -- 1 IP address (1 host up) scanned in 389.23 seconds
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_passbolt.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt
+75839 -41335
View File
File diff suppressed because it is too large. Load diff
results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt
+8 -7
View File
@@ -16,7 +16,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://passbolt.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:43:36 GMT
Date: Tue, 14 Apr 2026 04:01:00 GMT
Content-Length: 17
Connection: close
@@ -99,12 +99,12 @@ HTTP Headers:
Cache-Control: no-store, no-cache, must-revalidate
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:43:48 GMT
Date: Tue, 14 Apr 2026 04:01:12 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Location: /auth/login?redirect=%2F
Pragma: no-cache
Server: nginx
Set-Cookie: passbolt_session=996d036795d4f6b88ad6c0fbed7ff748; path=/; HttpOnly; SameSite=Lax
Set-Cookie: passbolt_session=bff9b1c3939940e6b1ed06d4c4542451; path=/; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
@@ -118,7 +118,7 @@ Title : Passbolt | Open source password manager for teams
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : Cookies[csrfToken], Django, HTML5, HTTPServer[nginx], nginx, Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
@@ -162,7 +162,7 @@ Detected Plugins:
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : access-control-expose-headers,content-security-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
String : access-control-expose-headers,content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-download-options,x-gpgauth-authenticated,x-gpgauth-debug,x-gpgauth-error,x-gpgauth-login-url,x-gpgauth-logout-url,x-gpgauth-progress,x-gpgauth-pubkey-url,x-gpgauth-verify-url,x-gpgauth-version,x-permitted-cross-domain-policies (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
@@ -203,12 +203,13 @@ HTTP Headers:
Content-Encoding: gzip
Content-Security-Policy: default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; base-uri 'self'; frame-src 'self'; frame-ancestors 'none'; form-action 'self' https://*.duosecurity.com
Content-Type: text/html; charset=UTF-8
Date: Sun, 05 Apr 2026 08:46:40 GMT
Date: Tue, 14 Apr 2026 04:01:24 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Permissions-Policy: unload=(*)
Pragma: no-cache
Referrer-Policy: same-origin
Server: nginx
Set-Cookie: csrfToken=ed154ab1727451a6923c86d61facb81e77d14b234e830561789897fec2577daccf9005ac69a9161ec06ea7df0b5b13e8b46715b1bf6525827f96699b014d863c; path=/
Set-Cookie: csrfToken=01aeb4bac9f26503e0861d4666eb163b6ea50bac303757f3436055ff52302361796cb8a695e33710d6ecb6a11e2a99e84c5f7b9e9032908442bbe954b341eaab; path=/
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml
+44 -1068
View File
File diff suppressed because it is too large. Load diff