fresh autorecon run
This commit is contained in:
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,24 +1,49 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:39:28 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml passbolt.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:57:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/passbolt.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml passbolt.lan.ddnsgeek.com
|
||||
Nmap scan report for passbolt.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
Host is up, received user-set (0.016s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:39:39 UTC for 998s
|
||||
Scanned at 2026-04-14 03:58:32 UTC for 333s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-chrono: Request times for /; avg: 915.97ms; min: 799.65ms; max: 1032.68ms
|
||||
|_http-title: Did not follow redirect to https://passbolt.lan.ddnsgeek.com/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-userdir-enum: Potential Users: root, admin, administrator, webadmin, sysadmin, netadmin, guest, user, web, test
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-date: Tue, 14 Apr 2026 04:00:43 GMT; -2s from local time.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-headers:
|
||||
| Location: https://passbolt.lan.ddnsgeek.com/
|
||||
| Date: Tue, 14 Apr 2026 04:00:56 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-chrono: Request times for /; avg: 812.55ms; min: 646.00ms; max: 1027.61ms
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Redirected To: /auth/login?redirect=%2F
|
||||
@@ -40,236 +65,7 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-date: Sun, 05 Apr 2026 08:41:02 GMT; -3s from local time.
|
||||
| http-headers:
|
||||
| Location: https://passbolt.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 08:42:05 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-wordpress-enum:
|
||||
| Search limited to top 100 themes/plugins
|
||||
| plugins
|
||||
| wordpress-seo
|
||||
| elementor
|
||||
| jetpack
|
||||
| wordfence
|
||||
| woocommerce
|
||||
| contact-form-7
|
||||
| akismet
|
||||
| wpforms-lite
|
||||
| google-analytics-for-wordpress
|
||||
| google-site-kit
|
||||
| really-simple-ssl
|
||||
| all-in-one-seo-pack
|
||||
| all-in-one-wp-migration
|
||||
| updraftplus
|
||||
| seo-by-rank-math
|
||||
| optinmonster
|
||||
| litespeed-cache
|
||||
| essential-addons-for-elementor-lite
|
||||
| sg-cachepress
|
||||
| classic-editor
|
||||
| astra-sites
|
||||
| the-events-calendar
|
||||
| limit-login-attempts-reloaded
|
||||
| insert-headers-and-footers
|
||||
| wp-mail-smtp
|
||||
| mailchimp-for-wp
|
||||
| redirection
|
||||
| advanced-custom-fields
|
||||
| wp-smushit
|
||||
| wordpress-importer
|
||||
| wp-super-cache
|
||||
| w3-total-cache
|
||||
| wp-fastest-cache
|
||||
| siteorigin-panels
|
||||
| mailpoet
|
||||
| ninja-forms
|
||||
| wp-optimize
|
||||
| google-analytics-dashboard-for-wp
|
||||
| duplicator
|
||||
| instagram-feed
|
||||
| header-footer-elementor
|
||||
| premium-addons-for-elementor
|
||||
| gutenberg
|
||||
| so-widgets-bundle
|
||||
| facebook-for-woocommerce
|
||||
| nextgen-gallery
|
||||
| woocommerce-services
|
||||
| ewww-image-optimizer
|
||||
| autoptimize
|
||||
| google-sitemap-generator
|
||||
| woocommerce-gateway-stripe
|
||||
| cookie-law-info
|
||||
| duplicate-post
|
||||
| elementskit-lite
|
||||
| woocommerce-payments
|
||||
| tinymce-advanced
|
||||
| ultimate-addons-for-gutenberg
|
||||
| better-wp-security
|
||||
| google-listings-and-ads
|
||||
| mainwp-child
|
||||
| all-in-one-wp-security-and-firewall
|
||||
| cookie-notice
|
||||
| wp-statistics
|
||||
| loco-translate
|
||||
| ml-slider
|
||||
| newsletter
|
||||
| duplicate-page
|
||||
| redux-framework
|
||||
| sg-security
|
||||
| coming-soon
|
||||
| yith-woocommerce-wishlist
|
||||
| kadence-blocks
|
||||
| sucuri-scanner
|
||||
| wp-file-manager
|
||||
| wps-hide-login
|
||||
| loginizer
|
||||
| disable-comments
|
||||
| wp-google-maps
|
||||
| coblocks
|
||||
| ocean-extra
|
||||
| formidable
|
||||
| polylang
|
||||
| worker
|
||||
| shortcodes-ultimate
|
||||
| mailchimp-for-woocommerce
|
||||
| regenerate-thumbnails
|
||||
| complianz-gdpr
|
||||
| creative-mail-by-constant-contact
|
||||
| meta-box
|
||||
| user-role-editor
|
||||
| broken-link-checker
|
||||
| custom-post-type-ui
|
||||
| smart-slider-3
|
||||
| cleantalk-spam-protect
|
||||
| tablepress
|
||||
| photo-gallery
|
||||
| backwpup
|
||||
| woocommerce-paypal-payments
|
||||
| accelerated-mobile-pages
|
||||
| woocommerce-pdf-invoices-packing-slips
|
||||
| themes
|
||||
| astra
|
||||
| twentyseventeen
|
||||
| twentyfifteen
|
||||
| twentynineteen
|
||||
| twentytwenty
|
||||
| twentysixteen
|
||||
| twentyfourteen
|
||||
| twentytwentyone
|
||||
| hello-elementor
|
||||
| twentythirteen
|
||||
| oceanwp
|
||||
| twentytwelve
|
||||
| storefront
|
||||
| twentyeleven
|
||||
| twentytwentytwo
|
||||
| twentyten
|
||||
| generatepress
|
||||
| twentytwentythree
|
||||
| neve
|
||||
| responsive
|
||||
| sydney
|
||||
| blocksy
|
||||
| hestia
|
||||
| customizr
|
||||
| colormag
|
||||
| kadence
|
||||
| vantage
|
||||
| hueman
|
||||
| twentytwentyfour
|
||||
| spacious
|
||||
| lightning
|
||||
| virtue
|
||||
| newsup
|
||||
| onepress
|
||||
| specia
|
||||
| ashe
|
||||
| mh-magazine-lite
|
||||
| zakra
|
||||
| sinatra
|
||||
| phlox
|
||||
| mesmerize
|
||||
| evolve
|
||||
| graphene
|
||||
| shapely
|
||||
| colibri-wp
|
||||
| sparkling
|
||||
| colorway
|
||||
| enigma
|
||||
| make
|
||||
| flash
|
||||
| customify
|
||||
| total
|
||||
| mantra
|
||||
| appointment
|
||||
| ifeature
|
||||
| inspiro
|
||||
| go
|
||||
| covernews
|
||||
| iconic-one
|
||||
| popularfx
|
||||
| minamaze
|
||||
| omega
|
||||
| twentytwentyfive
|
||||
| catch-box
|
||||
| bard
|
||||
| bizberg
|
||||
| dispatch
|
||||
| poseidon
|
||||
| page-builder-framework
|
||||
| illdy
|
||||
| coraline
|
||||
| accelerate
|
||||
| alexandria
|
||||
| pinboard
|
||||
| hemingway
|
||||
| wallstreet
|
||||
| royal-elementor-kit
|
||||
| portfolio-press
|
||||
| startkit
|
||||
| radiate
|
||||
| attitude
|
||||
| nirvana
|
||||
| arilewp
|
||||
| avril
|
||||
| custom-community
|
||||
| argent
|
||||
| blogus
|
||||
| rife-free
|
||||
| raindrops
|
||||
| activello
|
||||
| tempera
|
||||
| spicepress
|
||||
| mystique
|
||||
| estore
|
||||
| sela
|
||||
| suevafree
|
||||
| delicate
|
||||
| travelify
|
||||
| woostify
|
||||
|_ agama
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:56:18 2026 -- 1 IP address (1 host up) scanned in 1011.65 seconds
|
||||
# Nmap done at Tue Apr 14 04:04:05 2026 -- 1 IP address (1 host up) scanned in 389.23 seconds
|
||||
Reference in new issue
Block a user