beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/prometheus.lan.ddnsgeek.com/report/notes.txt
-8
View File
@@ -2,14 +2,6 @@
[*] http found on tcp/443.
[*] http found on tcp/80.
[*] unknown found on tcp/51413.
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Commands.md
+1 -23
View File
@@ -17,31 +17,9 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
ffuf -u http://prometheus.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.prometheus.lan.ddnsgeek.com" -mc all -fs 17 -r -noninteractive -s | tee "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_prometheus.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/prometheus.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/prometheus.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" prometheus.lan.ddnsgeek.com
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" prometheus.lan.ddnsgeek.com
whatweb --color=never --no-errors -a 3 -v http://prometheus.lan.ddnsgeek.com:80 2>&1
feroxbuster -u https://prometheus.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
curl -sSikf https://prometheus.lan.ddnsgeek.com:443/.well-known/security.txt
curl -sSikf https://prometheus.lan.ddnsgeek.com:443/robots.txt
curl -sSik https://prometheus.lan.ddnsgeek.com:443/
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://prometheus.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
sslscan --show-certificate --no-colour prometheus.lan.ddnsgeek.com:443 2>&1
ffuf -u https://prometheus.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.prometheus.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_prometheus.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
whatweb --color=never --no-errors -a 3 -v https://prometheus.lan.ddnsgeek.com:443 2>&1
feroxbuster -u https://prometheus.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt"
sslscan --show-certificate --no-colour prometheus.lan.ddnsgeek.com:80 2>&1
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/prometheus.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/prometheus.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" prometheus.lan.ddnsgeek.com
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Manual Commands.md
-40
View File
@@ -19,45 +19,5 @@
wpscan --url http://prometheus.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_wpscan.txt"
[*] http on tcp/443
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
feroxbuster -u https://prometheus.lan.ddnsgeek.com:443 -t 10 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -e -r -o /root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt
[-] Credential bruteforcing commands (don't run these without modifying them):
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_hydra.txt" https-get://prometheus.lan.ddnsgeek.com/path/to/auth/area
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_auth_medusa.txt" -M http -h prometheus.lan.ddnsgeek.com -m DIR:/path/to/auth/area
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 443 -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_hydra.txt" https-post-form://prometheus.lan.ddnsgeek.com/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 443 -O "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_form_medusa.txt" -M web-form -h prometheus.lan.ddnsgeek.com -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
wpscan --url https://prometheus.lan.ddnsgeek.com:443/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_wpscan.txt"
[*] http on tcp/80
[-] (feroxbuster) Multi-threaded recursive directory/file enumeration for web servers using various wordlists:
feroxbuster -u https://prometheus.lan.ddnsgeek.com:80 -t 10 -w /usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -e -r -o /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt
[-] Credential bruteforcing commands (don't run these without modifying them):
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_auth_hydra.txt" https-get://prometheus.lan.ddnsgeek.com/path/to/auth/area
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_auth_medusa.txt" -M http -h prometheus.lan.ddnsgeek.com -m DIR:/path/to/auth/area
hydra -L "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e nsr -s 80 -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_form_hydra.txt" https-post-form://prometheus.lan.ddnsgeek.com/path/to/login.php:"username=^USER^&password=^PASS^":"invalid-login-message"
medusa -U "/usr/share/seclists/Usernames/top-usernames-shortlist.txt" -P "/usr/share/seclists/Passwords/darkweb2017-top100.txt" -e ns -n 80 -O "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_form_medusa.txt" -M web-form -h prometheus.lan.ddnsgeek.com -m FORM:/path/to/login.php -m FORM-DATA:"post?username=&password=" -m DENY-SIGNAL:"invalid login message"
[-] (wpscan) WordPress Security Scanner (useful if WordPress is found):
wpscan --url https://prometheus.lan.ddnsgeek.com:80/ --no-update -e vp,vt,tt,cb,dbe,u,m --plugins-detection aggressive --plugins-version-detection aggressive -f cli-no-color 2>&1 | tee "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_wpscan.txt"
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Patterns.md
-2514
View File
File diff suppressed because it is too large. Load diff
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md
+83 -184
View File
@@ -5,194 +5,92 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
[/root/results/prometheus.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:53:28 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/prometheus.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml prometheus.lan.ddnsgeek.com
adjust_timeouts2: packet supposedly had rtt of -51656 microseconds. Ignoring time.
adjust_timeouts2: packet supposedly had rtt of -51656 microseconds. Ignoring time.
# Nmap 7.99 scan initiated Tue Apr 14 04:08:39 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/prometheus.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml prometheus.lan.ddnsgeek.com
Nmap scan report for prometheus.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.022s latency).
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:53:38 UTC for 1704s
Not shown: 65531 filtered tcp ports (no-response)
Scanned at 2026-04-14 04:08:40 UTC for 1669s
Not shown: 65532 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_ssl-date: TLS randomness does not represent time
|_http-title: Did not follow redirect to https://prometheus.lan.ddnsgeek.com/
| ssl-cert: Subject: commonName=prometheus.lan.ddnsgeek.com
| Subject Alternative Name: DNS:prometheus.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-17T12:33:51
| Not valid after: 2026-05-18T12:33:50
| MD5: 0cd9 74e8 abac b9ad 4a4b 0657 c9c9 82d3
| SHA-1: dc73 85de 62a8 5635 7ef6 064f cf79 855c 8a64 3c8b
| SHA-256: 4848 2b20 cd55 53dc 4336 489a d103 ba7b 20e3 8d2c eefe 4184 8274 781b 23b9 fdf2
| -----BEGIN CERTIFICATE-----
| MIIGCTCCBPGgAwIBAgISBg0+gZSOMXCS5AoRmD5pvahwMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjE3MTIzMzUxWhcNMjYwNTE4MTIzMzUwWjAmMSQwIgYDVQQD
| Extwcm9tZXRoZXVzLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUA
| A4ICDwAwggIKAoICAQCtAoXFxFZOFcr4+svCltzMpPs9/wbCcMDf+/4W62b78GQh
| ase0DUbkUx6azppbLnQHUa9Qy/QN/14NJk4xVEv9U/ICKsPKqQCnwCGlXNgwlwQW
| tiYenMjbnME4FqohzoxM0HPuTDs1imUx3qj+S7tgkaMcYk5GyKuOyToa6rID7Elt
| iMBb5imfEsv0M0UVjgYwCOL1cWEhnNBi0VZydaDjAh0ZFXdpsU+98CaXTSzJcgaz
| XZKIJ4Ci3n1+5pCdyw9wlGeMxbcRZPzsvIQ5Dc8+JuXGmHG7pZL4uYVluVeHO5Ow
| 7O/WKDCqL81831glofjV+n9GO2aYjV2lpboGt9+PoRlDAgmD4AYJC3KxriDAeHJh
| nWGkQT7EqB00XO3zo5VT/kJ7YEUPfHRBVQ+hn3RkAgAvbAyTOv3ITUpf984l4DnA
| 00SWOJYoqQiUir0B6dc0lumtlB7rajHREwAzBHXO5l09v5qEbItOtHx0KgOdw6Fl
| VXZf/SZtQuL/co7wvVEEQsTnmzm+MlA3hSItSngBHk1k0svHUVSqKgQr3J7HccDk
| t0kTcMz6oePKdeD+JLzZSU8jUC71Gb4L7ZvnS0wH9VrkiiuJ0QzGi0McgbtPHjqI
| gHDy0wO0MPXRQ67v55zM7bSUlIkvR998HUnjLNR6rG9ZDp57K819TXOnEkIMUwID
| AQABo4ICIjCCAh4wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB
| MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHMgMChVU3b/7gZ3tXhv0Kv5UYmfMB8G
| A1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAj
| BggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJgYDVR0RBB8wHYIb
| cHJvbWV0aGV1cy5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB
| MC8GA1UdHwQoMCYwJKAioCCGHmh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTEzLmNy
| bDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEmcm2neHXzs/DbezYdkprhbrwqH
| gBnRVVL76esp3fjDAAABnGvNSJ8AAAQDAEcwRQIhALJY99SvB2ZLeNal2bwpELMF
| FXmP16PZfZZ1HnBabOYrAiB0MjNKFgU4D8GHCzCp9FepVs32qAq54aJ0ejhhr11J
| EAB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8PyqnGAAABnGvNSOQAAAQD
| AEcwRQIgXQESJz2KpTYUdJy6TVhaNedBba+dWUySs35g+nmzm8kCIQDvXnPobldt
| 8uYr9Xcbri+v9dEQBZ+jLT9cRwlqp1ULeDANBgkqhkiG9w0BAQsFAAOCAQEAyu/S
| Lni0z7O+f8LLL3Nrg3FjureWg1z/wxbtHhQYdPc/gOe071JVlmla5yqH3R2Hut4U
| BBrAfQROxGeqYdkFZdhSP168Gv7SFW41YVpiojAiDjvqLxBnASEpv06fMIbZxf2i
| hXto5Ydx85eoSEHeFIUeEjLVu27SGDgyRn76neWBGwXgCQXn9yaFcDhnnPrzbKbJ
| yp22O2TrMf3OxC3rpry73w9EPYjtNirAko4YGr6F6HXnc2VOBEmhBa3/Q0EvEbf1
| UHxU2pKgyHdM6B5xv5QQqZM330YNGIyZ4CBMR73tdr86U1JZTBbwaaHjyaV0DX2B
| DVfa0K07ZYqWBUw76g==
|_-----END CERTIFICATE-----
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-auth:
| HTTP/1.1 401 Unauthorized\x0D
|_ Server returned status 401 but no WWW-Authenticate header.
|_ssl-date: TLS randomness does not represent time
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
| ssl-cert: Subject: commonName=prometheus.lan.ddnsgeek.com
| Subject Alternative Name: DNS:prometheus.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-17T12:33:51
| Not valid after: 2026-05-18T12:33:50
| MD5: 0cd9 74e8 abac b9ad 4a4b 0657 c9c9 82d3
| SHA-1: dc73 85de 62a8 5635 7ef6 064f cf79 855c 8a64 3c8b
| SHA-256: 4848 2b20 cd55 53dc 4336 489a d103 ba7b 20e3 8d2c eefe 4184 8274 781b 23b9 fdf2
| -----BEGIN CERTIFICATE-----
| MIIGCTCCBPGgAwIBAgISBg0+gZSOMXCS5AoRmD5pvahwMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjE3MTIzMzUxWhcNMjYwNTE4MTIzMzUwWjAmMSQwIgYDVQQD
| Extwcm9tZXRoZXVzLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUA
| A4ICDwAwggIKAoICAQCtAoXFxFZOFcr4+svCltzMpPs9/wbCcMDf+/4W62b78GQh
| ase0DUbkUx6azppbLnQHUa9Qy/QN/14NJk4xVEv9U/ICKsPKqQCnwCGlXNgwlwQW
| tiYenMjbnME4FqohzoxM0HPuTDs1imUx3qj+S7tgkaMcYk5GyKuOyToa6rID7Elt
| iMBb5imfEsv0M0UVjgYwCOL1cWEhnNBi0VZydaDjAh0ZFXdpsU+98CaXTSzJcgaz
| XZKIJ4Ci3n1+5pCdyw9wlGeMxbcRZPzsvIQ5Dc8+JuXGmHG7pZL4uYVluVeHO5Ow
| 7O/WKDCqL81831glofjV+n9GO2aYjV2lpboGt9+PoRlDAgmD4AYJC3KxriDAeHJh
| nWGkQT7EqB00XO3zo5VT/kJ7YEUPfHRBVQ+hn3RkAgAvbAyTOv3ITUpf984l4DnA
| 00SWOJYoqQiUir0B6dc0lumtlB7rajHREwAzBHXO5l09v5qEbItOtHx0KgOdw6Fl
| VXZf/SZtQuL/co7wvVEEQsTnmzm+MlA3hSItSngBHk1k0svHUVSqKgQr3J7HccDk
| t0kTcMz6oePKdeD+JLzZSU8jUC71Gb4L7ZvnS0wH9VrkiiuJ0QzGi0McgbtPHjqI
| gHDy0wO0MPXRQ67v55zM7bSUlIkvR998HUnjLNR6rG9ZDp57K819TXOnEkIMUwID
| AQABo4ICIjCCAh4wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB
| MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHMgMChVU3b/7gZ3tXhv0Kv5UYmfMB8G
| A1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAj
| BggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJgYDVR0RBB8wHYIb
| cHJvbWV0aGV1cy5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB
| MC8GA1UdHwQoMCYwJKAioCCGHmh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTEzLmNy
| bDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEmcm2neHXzs/DbezYdkprhbrwqH
| gBnRVVL76esp3fjDAAABnGvNSJ8AAAQDAEcwRQIhALJY99SvB2ZLeNal2bwpELMF
| FXmP16PZfZZ1HnBabOYrAiB0MjNKFgU4D8GHCzCp9FepVs32qAq54aJ0ejhhr11J
| EAB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8PyqnGAAABnGvNSOQAAAQD
| AEcwRQIgXQESJz2KpTYUdJy6TVhaNedBba+dWUySs35g+nmzm8kCIQDvXnPobldt
| 8uYr9Xcbri+v9dEQBZ+jLT9cRwlqp1ULeDANBgkqhkiG9w0BAQsFAAOCAQEAyu/S
| Lni0z7O+f8LLL3Nrg3FjureWg1z/wxbtHhQYdPc/gOe071JVlmla5yqH3R2Hut4U
| BBrAfQROxGeqYdkFZdhSP168Gv7SFW41YVpiojAiDjvqLxBnASEpv06fMIbZxf2i
| hXto5Ydx85eoSEHeFIUeEjLVu27SGDgyRn76neWBGwXgCQXn9yaFcDhnnPrzbKbJ
| yp22O2TrMf3OxC3rpry73w9EPYjtNirAko4YGr6F6HXnc2VOBEmhBa3/Q0EvEbf1
| UHxU2pKgyHdM6B5xv5QQqZM330YNGIyZ4CBMR73tdr86U1JZTBbwaaHjyaV0DX2B
| DVfa0K07ZYqWBUw76g==
|_-----END CERTIFICATE-----
20001/tcp closed microsan reset ttl 57
51413/tcp open unknown syn-ack ttl 56
| fingerprint-strings:
| Kerberos:
| Rw/ENE
| o5F6
| nSmf=
| B8LN
| 8y?<
| gK@,
| EAP.Z
| JuDV
| SMBProgNeg:
| cF)>(
| @iIv~r
| fg4Ah
| <q{~^v
| u!_iv
| Fbk{H
| *j]y
| SSLv23SessionReq:
| A%N8s=
| *JIcGgD
| TLSSessionReq:
| 9sO+
| yi{A
| \xa3fL
|_ ,2_M8
| }IFf
|_ T9Y5h-1
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port51413-TCP:V=7.98%I=9%D=4/5%Time=69D2268A%P=x86_64-pc-linux-gnu%r(TL
SF:SSessionReq,1E1,"\xff\xb2Jv\x0e~\xa6p\x01\xefT\xa6\x01l\xef\xf4\xf9\x87
SF:\xe0\t\x86\xfd\xc1\xdb\xeeB\xc3\r\x95I\x848g\xbd\xf3y\xd5\xb9l\xd4\xba\
SF:x20\xd4\xef\xd9\x9bl\xa1\0\xff\xef\x9d\x9ew2\xb8\xe4\x8ajO\xe1\xca\[\xd
SF:f\xa9\x87\x0f_6\$\xae\xbc6\xdb\x8e\xb8\x1aO&\x1d\xfdSF1\x0f9sO\+\xae\x0
SF:7\x1d\xa5\xf5\xf51\xc7Qe\xeai\x1f\xdb\xf1\xd1\x7f\x80\xde\xc7\xdd\x12\x
SF:ba-\x14\x8f\xb0\+\xf3tF\xefY\xfek\x88D\xbd\xea\xf7\xa4\"\xfe\x80\xbd\xb
SF:9t\xdfg\xd2l\\/\xd4\xc8,k\xaf\xec\x95\xcc\xac\xd9eRM\x93\xe4\xd3\xaf\xa
SF:8OC\xe2\x03\xcb\xbf\xcc\xdb\x08\xc5\xb7\xf0d7\xec\xebB\x1a\xdfY\x16\xd3
SF:Z\xf6\xab\xaa\x1cj\xac\xf3C\xdaD}\xac\xec\xd4\xbd2\xbe\xf2\xaf\x0f\x05=
SF:\xd3\x14\$'X\x0e\x9a&\xa71\xc7\x0f\xcf\xd2\xbf\x92\xb5\xe0\xe1\xf2\xdaJ
SF:'\x7f\xad\x142eg\xe4\x1b\x12m\xc4\x81\xfd\x92\x86\xa4\x19v\x1c\xacyi{A\
SF:xb6\xa7\x8f\xd2\xde7\xa7M\xcdN\xb5\$\[#\xf5\x85@\xee}\x11b7\xa4\xf2\xcd
SF:\\\xa3fL\x12M\xcb/Y\x85\xb1\xce\xb0\xf3\xc8\x08u\x19gF8\xdfc\x03Lr\x0e\
SF:x92\xc5\x962Y\xb4\xb7\xbf\x7f\xce\xb0_\xb9\xd8\xaf\x90\xb1t\x1d\xf1\xb7
SF:\x937\x13\x88\xe6vi\xd2Q\.\x18R\x16\x9b\x9a\xd9k=\xf4\xd6G\+%\x20\x04\x
SF:f9\x07Z\xe4g\xc8\x7f\xbam\(\xb8\x91\?\xbd\xdb\xca\xe2\x0f\x0b\x9fY\xc9~
SF:\xb6\x91,2_M8\xed#\xdf48\x87\xe0\x0b{\$\xc0\*\xf6V\x7f\x19\xf3\xd4\x7f\
SF:x9c\+\xfb\x8dy\xd0\xfbT\xea\xca\xae\x9a\x13\xc3\xdb\x9c\x9e\xe6\xd2F\(\
SF:xc3C\xd447\xf2\xd5\xf5V\xad\x08\xfe\x8d\x03\x97\xbb\x84\xd0\(f\xb5S\x06
SF:\xbf\x08N\xa4\xcd\x1f\x06\x18\xbd\xbd\x1d\xaa\xd7\\Q_\.\xe1\x0e\xfeuH\x
SF:efi\xb0\x02,\x16\xd3\xc1\x0e\x11}s\xce\x83\x16\xe1")%r(SSLv23SessionReq
SF:,95,"\xb5\xd9\x1d\x94\x16\xcf\n\x17\xd4\xe5Q\xf1\xd8\xba5\xb4=\xbdr\xa5
SF:\x85\xb3\xae}\x11\xe5=\xb5\x1e\xa7\x16\x12&\.b\xb6\xe3\|q\x04\"\xf1\^\x
SF:a6\x7fy\xaeTP\xbc\xdc\x0c\x9b\x02I\xd1\xea\xe9U\x9f\x92\xdc3\n\xa0&\xee
SF:\xd5\xba\x9f1\xef\xaa\x8d#\xaa6\x9f\\7\xef/\x14\xdf`D\xddgE\xf1\x03A%N8
SF:s=\xa6!e\x06\$\xd6B\xfc\x03\xad\xa0G\xfdy\x8f\xc7\x94R<;\xec\x94f=\nIU\
SF:xa7W\xd8\xae\x1f\xf0V:%\x88\xf7#\xef\.\xd9\xf32W:\xe5;\xf5T\n\xe5")%r(K
SF:erberos,259,"\(Z\xff\xae\xb4\xcf\xd4\xd5}\xab\xda\xddQ\xb6\xe7\x0c\xa8\
SF:?\xf2\^u\x96\xe2\xdd\xd8R\xcf\x1f\xae\xcf\x84\xf4\xcev\xae\xfb\xaa\xcc\
SF:x1d_\x95\x998v\x18\x9e\x0eE\xfe\n%\xf6\$Z\xe4\xd9\]\xe0\x10\xa2:\xf4\[\
SF:x01\x16\t\x1e\xf1N\x0e\x8et1N\xed\xa4\x0b\x95\x90\xa9O\xff\xd2\xa0Rw/EN
SF:E\xb6\^\)z\x01\x106Y\x10C8\xdbk\xfe\x0fx\"\xa8\x1a\xd1<\xd6\x90\x19\.\x
SF:d0\xf6\x82\xb7\xd9\"\xcb\xb8\x0c\xfb\x86=\)7\xd0\x19\xa6D\xfa\xd9\"\xb8
SF:\x1f\x89PO\r:b\x87\x1e\x9a\xd6\x87\x8cW\x90\xffY\xe5\x009M\xef\xfd\x95:
SF:\x993\*\?\x0co\xc1\xa9\xeeL\x16c!\x80>a\x9djv\x8cB\^X\xec;\x1b\xb1\xfb\
SF:x88\x99K\x12\xa1\x01r\x92Z\xb3\|\x19\xd8\x922\xad\x97C\xa5\xfaN\xe6\x97
SF:\xf0\x08\x06\xd1\x06\x88\x8c\x07\xa4w\x9fP\xe2\xc3\xe9\xee\xad\x89\xdc\
SF:x07\x80\xca\xbewKf\x20-\xcc;U\x97\xa8\x8b\xf4\xa6\xd8\x04\x82\xda\x02\x
SF:ec\x1eDO\.\xa7\xc5\xd2o5F6\xc9e\xc8\xb7\xaf\x83\xf9\xbc}\xca%H\x8f\"\xe
SF:bk\xc7X\x17\x8dd\xa1\x87\]{6\x13\xf4#\x85\xf2VN{\0\x88\xdb\x0e\x95\x91\
SF:x189\xf4\x0c\x8c\x0f\x1c\xef\xf9\x069,\|\ry\xfb\xe7\x9b\x0f\rz&\x9e\xa7
SF:\xbe\xae\xf9\x16\x84\x8c\x80tZ<\xad\xa8q0\x81\xfe\x1e\xdfE\xde\xe8w\xce
SF:\xbcX\xda\xb9A\+\xcf\xdb\x9f\x8a\xbah%\xb3\xd5\xd8b\xb1\?\x90\xbbU\x87;
SF:\xba\xe8\xc9\|\x99\x15\xed\x8a\x99\x16&\?\x20\xc8\x8e%\xa9ar\xa3\x9b\x1
SF:f\x01\x0fW\xf4\xf5yd\xedV\xebv\x9aC\xe9\xb1I\xab2\x03@\xc7`\xaf\x0c\xdf
SF:\x01\x95x\xc2\x17\xcf\x1b}l\x9c\x04\x8a\x8cp{\x19\x9a!\xbf~c\xbb7T\x02#
SF:\x10'j\xb8\xcf\x1d\xbcq\x15W\xbf\x9a\x02\x87\xad\xe5\xe9\$\x07\x0c\xaen
SF:Smf=\xe7\xe18\xedm_\xd5\xbb\xc7{\x04B8LN\xfd\xc9\xd5\xb2\xe0F\x1b\xad&\
SF:x90\xf4z\x17\.\xf6\xdc\x05\x9e\xb8\x04\xb6\xa1t\xc3'\x0f\xeb\xaa0\x1d\x
SF:f0\x15Q\xd9\xc1\xe4k\]\xa1\xceg\xccSwx\x1cR\xec\xbc\xfa\?\xb13\xf9\x1f_
SF:\xb7\xd9Tu%\xc6\^\xa88y\?<\x18\xf2\$A\x20N\xa7D\x95\xcfn\xe6;-\xf3\n!y\
SF:xbc\xe6\x9f-\0\xb7\xfb\xa0\xb6sD\xb8\^o\x91\x1cZ\t\xfe\xa8\|\xf0WO");
OS fingerprint not ideal because: maxTimingRatio (2.634000e+00) is greater than 1.4
No OS matches for host
SF-Port51413-TCP:V=7.99%I=9%D=4/14%Time=69DDC238%P=x86_64-pc-linux-gnu%r(T
SF:LSSessionReq,CB,"\"\x83\xfa\xb5\x8e\xdf\x01S\xee\*\x92\x83\xa2\x16\xd2\
SF:xac}IFf\xc6\xda\xba\.2d\xa5\xf8\x19I\xdd7\x89\xa5\r\?\xf1#o\x20\x12c\xe
SF:f8\xac\xb3\xb7\xcdYe\xf0\x1b\x89\xcb\xb8\xbf\xce>\xe3g\x1f\xce\xc9X7\x9
SF:e\xf5\x82\xbd7\x842\^\x82\x04\xb4\xdf\xceg\x9e\xfe\xdb0\x13\xa2<\]v\xcd
SF:l\xf5S\xd5\x94\x8e\xc7\xf4f\xe8b\xa6\xbd}\nH\xf9<\xc5\xc4\x1a\x03\xbc\x
SF:9br\xbbaV\xbd\xd1\xf4\$\|2\xdc\x86Z\^\x9e\x11\xc6\xd9\x19\x92\x05\x88\x
SF:bf\xfc\x0f\xcd\x1e\.G\xcf:\xa93J\xc1\xe2qA\xfb\xea\xb6\xb7\x8b\xe8X\x07
SF:\x04-mb\xca\xe2\xbd\xa8NR\xea\(\xf7\x9fcD/\xd4`\x82&t\x93\xe3_\x8d\xba\
SF:xccT9Y5h-1\xd0\"\xa6\)\x05\x02Vh\xb7")%r(SSLv23SessionReq,7E,"\(\xef\xd
SF:7\xb0\x8e\rv\xc5\xa2\x7f\0\xf1\*JIcGgD\xd9\*'2\xd5\x05\xed\xcfJ\xbd\xac
SF:\xc5x\xb3\xcdq\x9d{,\xe7W\x13\x05G-\xfa\x20\xc9\xac\xe4\xb2\x98\x0b\xc0
SF:\x01\x90up\xe6\xc5\xba\xe5\xc6C\xdda\x01b\x8c\xea\xb6x\x8a\x1b\xa7\xf3\
SF:xc0\x9a\x83\x1d\x96m\x07\xfd\xc4Ig\x83\xcd\x0b\xe6\x89M\xd10\x02s\xbf\x
SF:d4\x90\x19\x95\x15y\xe5\xe2\x9b\xdf\x1fl\x83\xf2\xaczd\x01\xa5N\xa6J\x8
SF:a\x0c\*\x1aP\*\x94")%r(Kerberos,AC,"\xe1\xafgK@,\x93w\0\^k\x14\xaf\x0c\
SF:xdf\xca\xec\xc6\xe4\x99\x9e\"F\xa0\x8d\x86\xc5\xb5\x18\x8fn\xe2\x8cOn\x
SF:d5\xed\xdfde\xf9\x83\xed\x11\xf8K\r\xdbY\xc6\)\xce6\xb2\x8d\xc8\xd2h\"\
SF:xa8y\x83\x19\xa7T\x9a2\xab\xb2v\x1dr\xe7\xd9\xaarl\x9d\x1b\r\xb6\x8fdXc
SF:\x87\xf4\xf7\xc6\xec\x08EAP\.Z\xd2\x88G\xa0\xec\xdb\xdc\n\x90\xd2\xc4#A
SF:\xbaj\x9fl\xaa0\x13\xaf3,'\xd8\x92\xcbJuDV\xa2\x9c\xb8o\x8f\xce-;\xdb\x
SF:b1X\x82l\x8e\x85\xf2\x03\xe2\xa8\xfaD\x16\x85\xc70=\xb9\xa6\xef\x96\xe3
SF:\xce\x12\xc7\xb3\x9c\xefI\xd2\xed\x94\x01\x195t")%r(SMBProgNeg,1BB,"5~\
SF:xc2\xba\xa0\x9bn\xb8\^\xd1u\"l\xf7B\xcfcF\)>\(\x87gZ\x10\xca\t\x17\xb7\
SF:x8b\.\xe14:\x08\xa9\xf1@iI\\v~r\x05\xdfM\x7f\xe0\x1b\xf9\x1b\xd6\.\xf95
SF:U\xb4\xc9\xcb\xc7\x8c\xafeq\x95\xad\xc4{e\xe5fg4Ah\x19\x97\xe3\xedLi\xe
SF:1\]Ci\xb3;\xcdT\xc5\xb1\x844;\xaa\x20,Z\xba\x98\x9d\xb0\xd2\xc7sN\xe5\x
SF:1c\xb3g\"\x84D\xc4x\xdb\x9f\xcd\xef\x91/\xb765\xe9\xf8R\xe7\x81\x05\x0f
SF:\x8b>'X\x1d\x08\x03\xef!\.\xfb\xbe\x9e\xa1\xe4\$\xc4\x8b3\xdb\xc93\x81\
SF:xc4ob\x086\xcfuW\x07\xae\xc3\xa7\x9d\xc4\x86\xcc\x89\xec\x0c\xc4\x88\xd
SF:8\xc1\$\x02\x1a\x9f\xc3\r\xaa\xd6\xa5\xfa\xcc\x81\xa0,d\xa5\xc4\xc2\xf3
SF:<q{~\^v\xc5Vak\xc1\.\|\xee\xee\xf6\xf5h\xf9\xc2}\xc0}\xa2\?\xbf\x07\x20
SF:L\xbc\xf2u!_iv\x99\xab\x1e\xbeh\0\x06\xfe\xf3\x20\x89N\xa2\xef\xfd0\xa1
SF:\xd2\x91\rv\xb0\xae\x9e~\xb6\xde\x9f\x9b\x0b_O\xa9\x17\xefc\x9f\0\x9b\x
SF:b0\xe3\xd3~\xb2\xbc\x19p\x8b\xfd\xa13\xb0\xd2\xe8\xa9\x0b\x87\x04\x83\x
SF:da\x8a\x14\x0c\xaa\x207\xfa\xce\x11\x87\xedd\x19\x8e\x90\x12w=\xca&\xc0
SF:\xb5\xfa\xa07\xe5bg\x89k-\xc3\xbf\xe6\xcf\xda\|5\x08\xce'Ne\xc2\xd8\x06
SF:\xd8r\x91\x0bw\x03\xa14\xdaL\x9dk\xf4\x137\xcd\x06}\xe4E\xc7>\xec\xabb\
SF:xa9\xddqTy\xdb\xc9Da\xbb\xc8\xf3\xe4\xdfET\x81\x02pE\xb9\xc1F\x03\xf4\x
SF:e6\n\xdc6\xef2U\xb3\xc2Fbk{H\xb2\xa4\xc0y\xd5\xab\x9b\xea\xfd\x02\x8f\x
SF:ba\x17b\xfc\x88x\xc2\x83\xeb\.\xd2\x03A\x88\xfb\*j\]y\x17\xbc\x87\xb6\x
SF:87\xf2f\x1d\x11\xc3");
Device type: general purpose
Running (JUST GUESSING): Linux 5.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: maxTimingRatio (1.476000e+00) is greater than 1.4
Aggressive OS guesses: Linux 5.4 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D229BB%P=x86_64-pc-linux-gnu)
SEQ(TI=Z%TS=A)
SEQ(SP=104%GCD=1%ISR=108%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDC44D%P=x86_64-pc-linux-gnu)
SEQ(SP=103%GCD=1%ISR=109%TI=Z%TS=A)
SEQ(SP=104%GCD=1%ISR=10D%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
@@ -204,23 +102,24 @@ T7(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 16.989 days (since Thu Mar 19 09:37:53 2026)
Uptime guess: 49.708 days (since Mon Feb 23 11:37:19 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=259 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 20001/tcp)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.26 ms 10.216.35.12
3 0.80 ms 10.216.32.1
4 0.53 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.06 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.61 ms 10.241.1.187
7 15.00 ms 10.241.2.71
8 13.88 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.09 ms 10.216.0.161
2 0.22 ms 10.216.35.11
3 0.95 ms 10.216.32.2
4 0.40 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.59 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.90 ms 10.241.1.185
7 12.63 ms 10.241.2.26
8 14.51 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:22:03 2026 -- 1 IP address (1 host up) scanned in 1721.06 seconds
# Nmap done at Tue Apr 14 04:36:30 2026 -- 1 IP address (1 host up) scanned in 1672.24 seconds
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md
+12 -15
View File
@@ -5,38 +5,35 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/prometheus.l
[/root/results/prometheus.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:59:52 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/prometheus.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml prometheus.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:09:11 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/prometheus.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml prometheus.lan.ddnsgeek.com
Nmap scan report for prometheus.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.23s latency).
Host is up, received user-set (0.33s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:00:01 UTC for 1667s
Scanned at 2026-04-14 04:09:13 UTC for 1538s
All 100 scanned ports on prometheus.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Too many fingerprints match this host to give specific OS details
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%G=N%TM=69D22B15%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%G=N%TM=69DDC3EB%P=x86_64-pc-linux-gnu)
SEQ()
T1(R=Y%DF=Y%TG=40%S=O%A=O%F=A%RD=0%Q=)
T2(R=Y%DF=Y%TG=40%W=1FA%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T4(R=Y%DF=Y%TG=40%W=1F9%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T6(R=Y%DF=Y%TG=40%W=14F%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
T6(R=Y%DF=Y%TG=40%W=1F9%S=O%A=O%F=AP%O=NNT11%RD=0%Q=)
U1(R=N)
IE(R=N)
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.07 ms 10.216.0.161
2 0.21 ms 10.216.35.11
3 11.08 ms 10.216.32.2
1 0.13 ms 10.216.0.161
2 0.25 ms 10.216.35.12
3 18.10 ms 10.216.32.2
4 0.43 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.67 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.67 ms 10.241.1.187
7 12.52 ms 10.241.2.71
5 1.62 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.93 ms 10.241.1.185
7 12.63 ms 10.241.2.26
8 ... 30
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:27:50 2026 -- 1 IP address (1 host up) scanned in 1683.28 seconds
# Nmap done at Tue Apr 14 04:34:52 2026 -- 1 IP address (1 host up) scanned in 1542.55 seconds
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md
+29 -72
View File
@@ -5,99 +5,56 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
[/root/results/prometheus.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:49:53 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/prometheus.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml prometheus.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:08:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/prometheus.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml prometheus.lan.ddnsgeek.com
Nmap scan report for prometheus.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:50:04 UTC for 194s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
Scanned at 2026-04-14 04:08:07 UTC for 30s
Not shown: 999 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Did not follow redirect to https://prometheus.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://prometheus.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_ssl-date: TLS randomness does not represent time
| http-auth:
| HTTP/1.1 401 Unauthorized\x0D
|_ Server returned status 401 but no WWW-Authenticate header.
| ssl-cert: Subject: commonName=prometheus.lan.ddnsgeek.com
| Subject Alternative Name: DNS:prometheus.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-17T12:33:51
| Not valid after: 2026-05-18T12:33:50
| MD5: 0cd9 74e8 abac b9ad 4a4b 0657 c9c9 82d3
| SHA-1: dc73 85de 62a8 5635 7ef6 064f cf79 855c 8a64 3c8b
| SHA-256: 4848 2b20 cd55 53dc 4336 489a d103 ba7b 20e3 8d2c eefe 4184 8274 781b 23b9 fdf2
| -----BEGIN CERTIFICATE-----
| MIIGCTCCBPGgAwIBAgISBg0+gZSOMXCS5AoRmD5pvahwMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjE3MTIzMzUxWhcNMjYwNTE4MTIzMzUwWjAmMSQwIgYDVQQD
| Extwcm9tZXRoZXVzLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUA
| A4ICDwAwggIKAoICAQCtAoXFxFZOFcr4+svCltzMpPs9/wbCcMDf+/4W62b78GQh
| ase0DUbkUx6azppbLnQHUa9Qy/QN/14NJk4xVEv9U/ICKsPKqQCnwCGlXNgwlwQW
| tiYenMjbnME4FqohzoxM0HPuTDs1imUx3qj+S7tgkaMcYk5GyKuOyToa6rID7Elt
| iMBb5imfEsv0M0UVjgYwCOL1cWEhnNBi0VZydaDjAh0ZFXdpsU+98CaXTSzJcgaz
| XZKIJ4Ci3n1+5pCdyw9wlGeMxbcRZPzsvIQ5Dc8+JuXGmHG7pZL4uYVluVeHO5Ow
| 7O/WKDCqL81831glofjV+n9GO2aYjV2lpboGt9+PoRlDAgmD4AYJC3KxriDAeHJh
| nWGkQT7EqB00XO3zo5VT/kJ7YEUPfHRBVQ+hn3RkAgAvbAyTOv3ITUpf984l4DnA
| 00SWOJYoqQiUir0B6dc0lumtlB7rajHREwAzBHXO5l09v5qEbItOtHx0KgOdw6Fl
| VXZf/SZtQuL/co7wvVEEQsTnmzm+MlA3hSItSngBHk1k0svHUVSqKgQr3J7HccDk
| t0kTcMz6oePKdeD+JLzZSU8jUC71Gb4L7ZvnS0wH9VrkiiuJ0QzGi0McgbtPHjqI
| gHDy0wO0MPXRQ67v55zM7bSUlIkvR998HUnjLNR6rG9ZDp57K819TXOnEkIMUwID
| AQABo4ICIjCCAh4wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB
| MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFHMgMChVU3b/7gZ3tXhv0Kv5UYmfMB8G
| A1UdIwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAj
| BggrBgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wJgYDVR0RBB8wHYIb
| cHJvbWV0aGV1cy5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIB
| MC8GA1UdHwQoMCYwJKAioCCGHmh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTEzLmNy
| bDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEmcm2neHXzs/DbezYdkprhbrwqH
| gBnRVVL76esp3fjDAAABnGvNSJ8AAAQDAEcwRQIhALJY99SvB2ZLeNal2bwpELMF
| FXmP16PZfZZ1HnBabOYrAiB0MjNKFgU4D8GHCzCp9FepVs32qAq54aJ0ejhhr11J
| EAB2AJaXZL9VWJet90OHaDcIQnfp8DrV9qTzNm5GpD8PyqnGAAABnGvNSOQAAAQD
| AEcwRQIgXQESJz2KpTYUdJy6TVhaNedBba+dWUySs35g+nmzm8kCIQDvXnPobldt
| 8uYr9Xcbri+v9dEQBZ+jLT9cRwlqp1ULeDANBgkqhkiG9w0BAQsFAAOCAQEAyu/S
| Lni0z7O+f8LLL3Nrg3FjureWg1z/wxbtHhQYdPc/gOe071JVlmla5yqH3R2Hut4U
| BBrAfQROxGeqYdkFZdhSP168Gv7SFW41YVpiojAiDjvqLxBnASEpv06fMIbZxf2i
| hXto5Ydx85eoSEHeFIUeEjLVu27SGDgyRn76neWBGwXgCQXn9yaFcDhnnPrzbKbJ
| yp22O2TrMf3OxC3rpry73w9EPYjtNirAko4YGr6F6HXnc2VOBEmhBa3/Q0EvEbf1
| UHxU2pKgyHdM6B5xv5QQqZM330YNGIyZ4CBMR73tdr86U1JZTBbwaaHjyaV0DX2B
| DVfa0K07ZYqWBUw76g==
|_-----END CERTIFICATE-----
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 5.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Aggressive OS guesses: Linux 5.4 (89%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D222FE%P=x86_64-pc-linux-gnu)
SEQ()
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBDC5%P=x86_64-pc-linux-gnu)
SEQ(TS=A)
SEQ(SP=FF%GCD=1%ISR=10B%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=N)
T1(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 49.688 days (since Mon Feb 23 11:37:20 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=255 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 443/tcp)
TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.19 ms 10.216.35.12
3 20.99 ms 10.216.32.2
4 0.45 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 3.49 ms 4764.syd.equinix.com (45.127.173.7)
6 11.68 ms 10.241.1.187
7 12.57 ms 10.241.2.26
8 14.11 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.10 ms 10.216.0.161
2 0.26 ms 10.216.35.12
3 0.96 ms 10.216.32.1
4 0.53 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 1.53 ms 4764.syd.equinix.com (45.127.173.7)
6 11.71 ms 10.241.1.187
7 12.55 ms 10.241.2.26
8 14.17 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:53:19 2026 -- 1 IP address (1 host up) scanned in 279.91 seconds
# Nmap done at Tue Apr 14 04:08:37 2026 -- 1 IP address (1 host up) scanned in 33.98 seconds
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md
-23
View File
@@ -1,23 +0,0 @@
```bash
curl -sSikf https://prometheus.lan.ddnsgeek.com:443/robots.txt
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl-robots.txt):
```
HTTP/2 302
content-type: text/html; charset=utf-8
date: Sun, 05 Apr 2026 09:28:31 GMT
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2Frobots.txt&rm=GET
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
set-cookie: authelia_session=-8C$Gx4p2G2AUNj8VsDGod2u6NHmLSFc; expires=Sun, 05 Apr 2026 10:28:31 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 123
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2Frobots.txt&amp;rm=GET">302 Found</a>
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md
-24
View File
@@ -1,24 +0,0 @@
```bash
curl -sSik https://prometheus.lan.ddnsgeek.com:443/
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_curl.html):
```
HTTP/2 302
content-type: text/html; charset=utf-8
date: Sun, 05 Apr 2026 09:28:32 GMT
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
set-cookie: authelia_session=a!HR42e$MKziG#plwoO%LxgA3MGvKJ*m; expires=Sun, 05 Apr 2026 10:28:32 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 113
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&amp;rm=GET">302 Found</a>
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md
-297
View File
@@ -1,297 +0,0 @@
```bash
feroxbuster -u https://prometheus.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt):
```
Configuration {
kind: "configuration",
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
config: "/etc/feroxbuster/ferox-config.toml",
proxy: "",
replay_proxy: "",
server_certs: [],
client_cert: "",
client_key: "",
target_url: "https://prometheus.lan.ddnsgeek.com/",
status_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
replay_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
filter_status: [],
client: Client {
accepts: Accepts,
proxies: [
Matcher,
],
redirect_policy: "Policy(Custom)",
referer: true,
default_headers: {
"accept": "*/*",
"user-agent": "feroxbuster/2.13.1",
},
reqwest::config::RequestTimeout: 7s,
},
replay_client: None,
threads: 10,
timeout: 7,
verbosity: 1,
silent: false,
quiet: true,
output_level: Quiet,
auto_bail: false,
auto_tune: false,
requester_policy: Default,
json: false,
output: "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt",
debug_log: "",
user_agent: "feroxbuster/2.13.1",
random_agent: false,
redirects: true,
insecure: true,
extensions: [
"txt",
"html",
"php",
"asp",
"aspx",
"jsp",
],
methods: [
"GET",
],
data: [],
headers: {},
queries: [],
no_recursion: true,
extract_links: true,
add_slash: false,
stdin: false,
cached_stdin: [],
depth: 4,
scan_limit: 0,
parallel: 0,
rate_limit: 0,
filter_size: [],
filter_line_count: [],
filter_word_count: [],
filter_regex: [],
dont_filter: false,
resumed: false,
resume_from: "",
save_state: true,
time_limit: "",
filter_similar: [],
url_denylist: [],
regex_denylist: [],
scope: [
Url {
scheme: "https",
cannot_be_a_base: false,
username: "",
password: None,
host: Some(
Domain(
"prometheus.lan.ddnsgeek.com",
),
),
port: None,
path: "/",
query: None,
fragment: None,
},
],
collect_extensions: false,
dont_collect: [
"woff2",
"woff",
"ttf",
"otf",
"eot",
"tif",
"tiff",
"ico",
"cur",
"bmp",
"webp",
"svg",
"png",
"jpg",
"jpeg",
"jfif",
"gif",
"avif",
"apng",
"pjpeg",
"pjp",
"mov",
"wav",
"mpg",
"mpeg",
"mp3",
"mp4",
"m4a",
"m4p",
"m4v",
"ogg",
"webm",
"ogv",
"oga",
"flac",
"aac",
"3gp",
"css",
"zip",
"xls",
"xml",
"gz",
"tgz",
],
collect_backups: false,
backup_extensions: [
"~",
".bak",
".bak2",
".old",
".1",
],
collect_words: false,
force_recursion: false,
update_app: false,
scan_dir_listings: false,
request_file: "",
protocol: "https",
limit_bars: 0,
unique: false,
response_size_limit: 4194304,
}
302 GET 0l 0w 122c https://prometheus.lan.ddnsgeek.com/15756.jsp => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F15756.jsp&rm=GET
302 GET 0l 0w 122c https://prometheus.lan.ddnsgeek.com/15740.jsp => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F15740.jsp&rm=GET
302 GET 0l 0w 128c https://prometheus.lan.ddnsgeek.com/espaceperso.php => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2Fespaceperso.php&rm=GET
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md
-23
View File
@@ -1,23 +0,0 @@
```bash
curl -sSikf https://prometheus.lan.ddnsgeek.com:443/.well-known/security.txt
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_known-security.txt):
```
HTTP/2 302
content-type: text/html; charset=utf-8
date: Sun, 05 Apr 2026 09:28:29 GMT
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F.well-known%2Fsecurity.txt&rm=GET
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
set-cookie: authelia_session=-8ihw#QAwhLm8L#-JfLeJn3uOL!r6rFm; expires=Sun, 05 Apr 2026 10:28:30 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 139
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F.well-known%2Fsecurity.txt&amp;rm=GET">302 Found</a>
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md
-1619
View File
File diff suppressed because it is too large. Load diff
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md
-201
View File
@@ -1,201 +0,0 @@
```bash
sslscan --show-certificate --no-colour prometheus.lan.ddnsgeek.com:443 2>&1
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_sslscan.html):
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
Connected to 167.179.167.166
Testing SSL server prometheus.lan.ddnsgeek.com on port 443 using SNI name prometheus.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 06:0d:3e:81:94:8e:31:70:92:e4:0a:11:98:3e:69:bd:a8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R12
Not valid before: Feb 17 12:33:51 2026 GMT
Not valid after: May 18 12:33:50 2026 GMT
Subject: /CN=prometheus.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:ad:02:85:c5:c4:56:4e:15:ca:f8:fa:cb:c2:96:
dc:cc:a4:fb:3d:ff:06:c2:70:c0:df:fb:fe:16:eb:
66:fb:f0:64:21:6a:c7:b4:0d:46:e4:53:1e:9a:ce:
9a:5b:2e:74:07:51:af:50:cb:f4:0d:ff:5e:0d:26:
4e:31:54:4b:fd:53:f2:02:2a:c3:ca:a9:00:a7:c0:
21:a5:5c:d8:30:97:04:16:b6:26:1e:9c:c8:db:9c:
c1:38:16:aa:21:ce:8c:4c:d0:73:ee:4c:3b:35:8a:
65:31:de:a8:fe:4b:bb:60:91:a3:1c:62:4e:46:c8:
ab:8e:c9:3a:1a:ea:b2:03:ec:49:6d:88:c0:5b:e6:
29:9f:12:cb:f4:33:45:15:8e:06:30:08:e2:f5:71:
61:21:9c:d0:62:d1:56:72:75:a0:e3:02:1d:19:15:
77:69:b1:4f:bd:f0:26:97:4d:2c:c9:72:06:b3:5d:
92:88:27:80:a2:de:7d:7e:e6:90:9d:cb:0f:70:94:
67:8c:c5:b7:11:64:fc:ec:bc:84:39:0d:cf:3e:26:
e5:c6:98:71:bb:a5:92:f8:b9:85:65:b9:57:87:3b:
93:b0:ec:ef:d6:28:30:aa:2f:cd:7c:df:58:25:a1:
f8:d5:fa:7f:46:3b:66:98:8d:5d:a5:a5:ba:06:b7:
df:8f:a1:19:43:02:09:83:e0:06:09:0b:72:b1:ae:
20:c0:78:72:61:9d:61:a4:41:3e:c4:a8:1d:34:5c:
ed:f3:a3:95:53:fe:42:7b:60:45:0f:7c:74:41:55:
0f:a1:9f:74:64:02:00:2f:6c:0c:93:3a:fd:c8:4d:
4a:5f:f7:ce:25:e0:39:c0:d3:44:96:38:96:28:a9:
08:94:8a:bd:01:e9:d7:34:96:e9:ad:94:1e:eb:6a:
31:d1:13:00:33:04:75:ce:e6:5d:3d:bf:9a:84:6c:
8b:4e:b4:7c:74:2a:03:9d:c3:a1:65:55:76:5f:fd:
26:6d:42:e2:ff:72:8e:f0:bd:51:04:42:c4:e7:9b:
39:be:32:50:37:85:22:2d:4a:78:01:1e:4d:64:d2:
cb:c7:51:54:aa:2a:04:2b:dc:9e:c7:71:c0:e4:b7:
49:13:70:cc:fa:a1:e3:ca:75:e0:fe:24:bc:d9:49:
4f:23:50:2e:f5:19:be:0b:ed:9b:e7:4b:4c:07:f5:
5a:e4:8a:2b:89:d1:0c:c6:8b:43:1c:81:bb:4f:1e:
3a:88:80:70:f2:d3:03:b4:30:f5:d1:43:ae:ef:e7:
9c:cc:ed:b4:94:94:89:2f:47:df:7c:1d:49:e3:2c:
d4:7a:ac:6f:59:0e:9e:7b:2b:cd:7d:4d:73:a7:12:
42:0c:53
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
73:20:30:28:55:53:76:FF:EE:06:77:B5:78:6F:D0:AB:F9:51:89:9F
X509v3 Authority Key Identifier:
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
Authority Information Access:
CA Issuers - URI:http://r12.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:prometheus.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r12.c.lencr.org/113.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
Timestamp : Feb 17 13:32:21.535 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B2:58:F7:D4:AF:07:66:4B:78:D6:A5:
D9:BC:29:10:B3:05:15:79:8F:D7:A3:D9:7D:96:75:1E:
70:5A:6C:E6:2B:02:20:74:32:33:4A:16:05:38:0F:C1:
87:0B:30:A9:F4:57:A9:56:CD:F6:A8:0A:B9:E1:A2:74:
7A:38:61:AF:5D:49:10
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
Timestamp : Feb 17 13:32:21.604 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:5D:01:12:27:3D:8A:A5:36:14:74:9C:BA:
4D:58:5A:35:E7:41:6D:AF:9D:59:4C:92:B3:7E:60:FA:
79:B3:9B:C9:02:21:00:EF:5E:73:E8:6E:57:6D:F2:E6:
2B:F5:77:1B:AE:2F:AF:F5:D1:10:05:9F:A3:2D:3F:5C:
47:09:6A:A7:55:0B:78
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: prometheus.lan.ddnsgeek.com
Altnames: DNS:prometheus.lan.ddnsgeek.com
Issuer: R12
Not valid before: Feb 17 12:33:51 2026 GMT
Not valid after: May 18 12:33:50 2026 GMT
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/Virtual Host Enumeration.md
-9
View File
@@ -1,9 +0,0 @@
```bash
ffuf -u https://prometheus.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.prometheus.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_prometheus.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_prometheus.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_prometheus.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt):
```
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md
-29
View File
@@ -1,29 +0,0 @@
```bash
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://prometheus.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
```
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
+ Target IP: 167.179.167.166
+ Target Hostname: prometheus.lan.ddnsgeek.com
+ Target Port: 443
---------------------------------------------------------------------------
+ SSL Info: Subject: /CN=prometheus.lan.ddnsgeek.com
CN: prometheus.lan.ddnsgeek.com
SAN: prometheus.lan.ddnsgeek.com
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R12
+ Platform: Unknown
+ Start Time: 2026-04-05 09:34:34 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md
-153
View File
@@ -1,153 +0,0 @@
```bash
whatweb --color=never --no-errors -a 3 -v https://prometheus.lan.ddnsgeek.com:443 2>&1
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_whatweb.txt):
```
WhatWeb report for https://prometheus.lan.ddnsgeek.com:443
Status : 302 Found
Title : <None>
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[authelia_session], HttpOnly[authelia_session], RedirectLocation[https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
Display the names of cookies in the HTTP headers. The
values are not returned to save on space.
String : authelia_session
[ HttpOnly ]
If the HttpOnly flag is included in the HTTP set-cookie
response header and the browser supports it then the cookie
cannot be accessed through client side script - More Info:
http://en.wikipedia.org/wiki/HTTP_cookie
String : authelia_session
[ RedirectLocation ]
HTTP Server string location. used with http-status 301 and
302
String : https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET (from location)
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 302 Found
Content-Length: 113
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 10:09:50 GMT
Location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: authelia_session=z6Rq!dAg0p^_k353mhu2r#MGRW5u#wNV; expires=Sun, 05 Apr 2026 11:09:50 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
WhatWeb report for https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET
Status : 200 OK
Title : <None>
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 2675
Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-0M77mCsxmiasPtKCQTlnU4IDdnCS4agD' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 10:09:59 GMT
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://prometheus.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://prometheus.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 08:56:20 GMT
Date: Tue, 14 Apr 2026 04:08:38 GMT
Content-Length: 17
Moved Permanently
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSik http://prometheus.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://prometheus.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:56:22 GMT
Date: Tue, 14 Apr 2026 04:08:38 GMT
Content-Length: 17
Moved Permanently
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md
+6 -8
View File
@@ -1,8 +1,8 @@
```bash
feroxbuster -u https://prometheus.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt"
feroxbuster -u http://prometheus.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt):
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt):
```
Configuration {
@@ -14,7 +14,7 @@ Configuration {
server_certs: [],
client_cert: "",
client_key: "",
target_url: "https://prometheus.lan.ddnsgeek.com:80/",
target_url: "http://prometheus.lan.ddnsgeek.com/",
status_codes: [
100,
101,
@@ -168,7 +168,7 @@ Configuration {
auto_tune: false,
requester_policy: Default,
json: false,
output: "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt",
output: "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt",
debug_log: "",
user_agent: "feroxbuster/2.13.1",
random_agent: false,
@@ -211,7 +211,7 @@ Configuration {
regex_denylist: [],
scope: [
Url {
scheme: "https",
scheme: "http",
cannot_be_a_base: false,
username: "",
password: None,
@@ -220,9 +220,7 @@ Configuration {
"prometheus.lan.ddnsgeek.com",
),
),
port: Some(
80,
),
port: None,
path: "/",
query: None,
fragment: None,
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://prometheus.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://prometheus.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 08:54:37 GMT
Date: Tue, 14 Apr 2026 04:08:38 GMT
Content-Length: 17
Moved Permanently
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md
+35 -35
View File
@@ -5,17 +5,44 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:56:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml prometheus.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:08:38 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml prometheus.lan.ddnsgeek.com
Nmap scan report for prometheus.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.036s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:56:43 UTC for 369s
Scanned at 2026-04-14 04:08:39 UTC for 200s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-malware-host: Host appears to be clean
| http-vhosts:
|_128 names had status 308
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
|_http-errors: Couldn't find any error pages.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-title: Did not follow redirect to https://prometheus.lan.ddnsgeek.com/
|_http-date: Tue, 14 Apr 2026 04:08:54 GMT; 0s from local time.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-chrono: Request times for /; avg: 253.45ms; min: 176.58ms; max: 336.45ms
| http-useragent-tester:
| Status for browser useragent: 401
| Status for browser useragent: false
| Redirected To: https://prometheus.lan.ddnsgeek.com/
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
@@ -35,46 +62,19 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-errors: Couldn't find any error pages.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-title: Did not follow redirect to https://prometheus.lan.ddnsgeek.com/
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-date: Sun, 05 Apr 2026 08:57:02 GMT; -3s from local time.
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-vhosts:
|_128 names had status 308
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-comments-displayer: Couldn't find any comments.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-malware-host: Host appears to be clean
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-feed: Couldn't find any feeds.
|_http-chrono: Request times for /; avg: 1083.92ms; min: 620.75ms; max: 1815.03ms
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-headers:
| Location: https://prometheus.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 08:57:16 GMT
| Date: Tue, 14 Apr 2026 04:08:55 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-mobileversion-checker: No mobile version detected.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-referer-checker: Couldn't find any cross-domain scripts.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:02:53 2026 -- 1 IP address (1 host up) scanned in 380.40 seconds
# Nmap done at Tue Apr 14 04:12:00 2026 -- 1 IP address (1 host up) scanned in 202.72 seconds
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/SSL Scan.md
-201
View File
@@ -1,201 +0,0 @@
```bash
sslscan --show-certificate --no-colour prometheus.lan.ddnsgeek.com:80 2>&1
```
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_sslscan.html](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_sslscan.html):
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
Connected to 167.179.167.166
Testing SSL server prometheus.lan.ddnsgeek.com on port 80 using SNI name prometheus.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 06:0d:3e:81:94:8e:31:70:92:e4:0a:11:98:3e:69:bd:a8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R12
Not valid before: Feb 17 12:33:51 2026 GMT
Not valid after: May 18 12:33:50 2026 GMT
Subject: /CN=prometheus.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:ad:02:85:c5:c4:56:4e:15:ca:f8:fa:cb:c2:96:
dc:cc:a4:fb:3d:ff:06:c2:70:c0:df:fb:fe:16:eb:
66:fb:f0:64:21:6a:c7:b4:0d:46:e4:53:1e:9a:ce:
9a:5b:2e:74:07:51:af:50:cb:f4:0d:ff:5e:0d:26:
4e:31:54:4b:fd:53:f2:02:2a:c3:ca:a9:00:a7:c0:
21:a5:5c:d8:30:97:04:16:b6:26:1e:9c:c8:db:9c:
c1:38:16:aa:21:ce:8c:4c:d0:73:ee:4c:3b:35:8a:
65:31:de:a8:fe:4b:bb:60:91:a3:1c:62:4e:46:c8:
ab:8e:c9:3a:1a:ea:b2:03:ec:49:6d:88:c0:5b:e6:
29:9f:12:cb:f4:33:45:15:8e:06:30:08:e2:f5:71:
61:21:9c:d0:62:d1:56:72:75:a0:e3:02:1d:19:15:
77:69:b1:4f:bd:f0:26:97:4d:2c:c9:72:06:b3:5d:
92:88:27:80:a2:de:7d:7e:e6:90:9d:cb:0f:70:94:
67:8c:c5:b7:11:64:fc:ec:bc:84:39:0d:cf:3e:26:
e5:c6:98:71:bb:a5:92:f8:b9:85:65:b9:57:87:3b:
93:b0:ec:ef:d6:28:30:aa:2f:cd:7c:df:58:25:a1:
f8:d5:fa:7f:46:3b:66:98:8d:5d:a5:a5:ba:06:b7:
df:8f:a1:19:43:02:09:83:e0:06:09:0b:72:b1:ae:
20:c0:78:72:61:9d:61:a4:41:3e:c4:a8:1d:34:5c:
ed:f3:a3:95:53:fe:42:7b:60:45:0f:7c:74:41:55:
0f:a1:9f:74:64:02:00:2f:6c:0c:93:3a:fd:c8:4d:
4a:5f:f7:ce:25:e0:39:c0:d3:44:96:38:96:28:a9:
08:94:8a:bd:01:e9:d7:34:96:e9:ad:94:1e:eb:6a:
31:d1:13:00:33:04:75:ce:e6:5d:3d:bf:9a:84:6c:
8b:4e:b4:7c:74:2a:03:9d:c3:a1:65:55:76:5f:fd:
26:6d:42:e2:ff:72:8e:f0:bd:51:04:42:c4:e7:9b:
39:be:32:50:37:85:22:2d:4a:78:01:1e:4d:64:d2:
cb:c7:51:54:aa:2a:04:2b:dc:9e:c7:71:c0:e4:b7:
49:13:70:cc:fa:a1:e3:ca:75:e0:fe:24:bc:d9:49:
4f:23:50:2e:f5:19:be:0b:ed:9b:e7:4b:4c:07:f5:
5a:e4:8a:2b:89:d1:0c:c6:8b:43:1c:81:bb:4f:1e:
3a:88:80:70:f2:d3:03:b4:30:f5:d1:43:ae:ef:e7:
9c:cc:ed:b4:94:94:89:2f:47:df:7c:1d:49:e3:2c:
d4:7a:ac:6f:59:0e:9e:7b:2b:cd:7d:4d:73:a7:12:
42:0c:53
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
73:20:30:28:55:53:76:FF:EE:06:77:B5:78:6F:D0:AB:F9:51:89:9F
X509v3 Authority Key Identifier:
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
Authority Information Access:
CA Issuers - URI:http://r12.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:prometheus.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r12.c.lencr.org/113.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
Timestamp : Feb 17 13:32:21.535 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B2:58:F7:D4:AF:07:66:4B:78:D6:A5:
D9:BC:29:10:B3:05:15:79:8F:D7:A3:D9:7D:96:75:1E:
70:5A:6C:E6:2B:02:20:74:32:33:4A:16:05:38:0F:C1:
87:0B:30:A9:F4:57:A9:56:CD:F6:A8:0A:B9:E1:A2:74:
7A:38:61:AF:5D:49:10
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
Timestamp : Feb 17 13:32:21.604 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:5D:01:12:27:3D:8A:A5:36:14:74:9C:BA:
4D:58:5A:35:E7:41:6D:AF:9D:59:4C:92:B3:7E:60:FA:
79:B3:9B:C9:02:21:00:EF:5E:73:E8:6E:57:6D:F2:E6:
2B:F5:77:1B:AE:2F:AF:F5:D1:10:05:9F:A3:2D:3F:5C:
47:09:6A:A7:55:0B:78
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: prometheus.lan.ddnsgeek.com
Altnames: DNS:prometheus.lan.ddnsgeek.com
Issuer: R12
Not valid before: Feb 17 12:33:51 2026 GMT
Not valid after: May 18 12:33:50 2026 GMT
```
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md
+59353 -59115
View File
File diff suppressed because it is too large. Load diff
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md
+22 -3
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://prometheus.lan.ddns
[/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://prometheus.lan.ddns
+ Target Hostname: prometheus.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 08:56:49 (GMT0)
+ Start Time: 2026-04-14 04:08:42 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 09:26:44 (GMT0) (1795 seconds)
+ End Time: 2026-04-14 04:23:02 (GMT0) (860 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/prometheus.lan.ddnsgeek.com/report/report.md/prometheus.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md
+1 -144
View File
@@ -23,153 +23,10 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://prometheus.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:27:20 GMT
Date: Tue, 14 Apr 2026 04:08:45 GMT
Content-Length: 17
Connection: close
WhatWeb report for https://prometheus.lan.ddnsgeek.com/
Status : 302 Found
Title : <None>
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[authelia_session], HttpOnly[authelia_session], RedirectLocation[https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
Display the names of cookies in the HTTP headers. The
values are not returned to save on space.
String : authelia_session
[ HttpOnly ]
If the HttpOnly flag is included in the HTTP set-cookie
response header and the browser supports it then the cookie
cannot be accessed through client side script - More Info:
http://en.wikipedia.org/wiki/HTTP_cookie
String : authelia_session
[ RedirectLocation ]
HTTP Server string location. used with http-status 301 and
302
String : https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET (from location)
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 302 Found
Content-Length: 113
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 09:27:43 GMT
Location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: authelia_session=fScndqxw%LzYAq4GIiLploGOPYfFeLr%; expires=Sun, 05 Apr 2026 10:27:43 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
WhatWeb report for https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET
Status : 200 OK
Title : <None>
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 2675
Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-ELyeXmX8rrHoVo0pU3holfFxya5EGFjq' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 09:27:55 GMT
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
```