beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl-robots.txt
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://prometheus.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 08:56:20 GMT
Date: Tue, 14 Apr 2026 04:08:38 GMT
Content-Length: 17
Moved Permanently
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_curl.html
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://prometheus.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 08:56:22 GMT
Date: Tue, 14 Apr 2026 04:08:38 GMT
Content-Length: 17
Moved Permanently
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt
-27
View File
@@ -283,30 +283,3 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/] => https://prometheus.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/[ => https://prometheus.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/[.txt => https://prometheus.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/].txt => https://prometheus.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/[.html => https://prometheus.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/].html => https://prometheus.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/].php => https://prometheus.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/].asp => https://prometheus.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/].aspx => https://prometheus.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/].jsp => https://prometheus.lan.ddnsgeek.com/].jsp
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/plain] => https://prometheus.lan.ddnsgeek.com/plain]
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/plain].txt => https://prometheus.lan.ddnsgeek.com/plain].txt
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/plain].html => https://prometheus.lan.ddnsgeek.com/plain].html
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/plain].php => https://prometheus.lan.ddnsgeek.com/plain].php
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/plain].asp => https://prometheus.lan.ddnsgeek.com/plain].asp
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/plain].aspx => https://prometheus.lan.ddnsgeek.com/plain].aspx
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/plain].jsp => https://prometheus.lan.ddnsgeek.com/plain].jsp
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/quote] => https://prometheus.lan.ddnsgeek.com/quote]
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/quote].txt => https://prometheus.lan.ddnsgeek.com/quote].txt
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/quote].html => https://prometheus.lan.ddnsgeek.com/quote].html
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/quote].php => https://prometheus.lan.ddnsgeek.com/quote].php
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/quote].asp => https://prometheus.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/quote].aspx => https://prometheus.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://prometheus.lan.ddnsgeek.com/quote].jsp => https://prometheus.lan.ddnsgeek.com/quote].jsp
302 GET 0l 0w 124c https://prometheus.lan.ddnsgeek.com/floater.jsp => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2Ffloater.jsp&rm=GET
302 GET 0l 0w 125c https://prometheus.lan.ddnsgeek.com/florists.jsp => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2Fflorists.jsp&rm=GET
302 GET 0l 0w 128c https://prometheus.lan.ddnsgeek.com/mail_files.aspx => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2Fmail_files.aspx&rm=GET
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_known-security.txt
+1 -1
View File
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://prometheus.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 08:54:37 GMT
Date: Tue, 14 Apr 2026 04:08:38 GMT
Content-Length: 17
Moved Permanently
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt
+22 -3
View File
@@ -1,3 +1,22 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -5,19 +24,19 @@
+ Target Hostname: prometheus.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 08:56:49 (GMT0)
+ Start Time: 2026-04-14 04:08:42 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 09:26:44 (GMT0) (1795 seconds)
+ End Time: 2026-04-14 04:23:02 (GMT0) (860 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt
+35 -35
View File
@@ -1,14 +1,41 @@
# Nmap 7.98 scan initiated Sun Apr 5 08:56:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml prometheus.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:08:38 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml prometheus.lan.ddnsgeek.com
Nmap scan report for prometheus.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.036s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:56:43 UTC for 369s
Scanned at 2026-04-14 04:08:39 UTC for 200s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-malware-host: Host appears to be clean
| http-vhosts:
|_128 names had status 308
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
|_http-errors: Couldn't find any error pages.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-title: Did not follow redirect to https://prometheus.lan.ddnsgeek.com/
|_http-date: Tue, 14 Apr 2026 04:08:54 GMT; 0s from local time.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-chrono: Request times for /; avg: 253.45ms; min: 176.58ms; max: 336.45ms
| http-useragent-tester:
| Status for browser useragent: 401
| Status for browser useragent: false
| Redirected To: https://prometheus.lan.ddnsgeek.com/
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
@@ -28,44 +55,17 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-errors: Couldn't find any error pages.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-title: Did not follow redirect to https://prometheus.lan.ddnsgeek.com/
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-date: Sun, 05 Apr 2026 08:57:02 GMT; -3s from local time.
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-vhosts:
|_128 names had status 308
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-comments-displayer: Couldn't find any comments.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-malware-host: Host appears to be clean
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-feed: Couldn't find any feeds.
|_http-chrono: Request times for /; avg: 1083.92ms; min: 620.75ms; max: 1815.03ms
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-headers:
| Location: https://prometheus.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 08:57:16 GMT
| Date: Tue, 14 Apr 2026 04:08:55 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-mobileversion-checker: No mobile version detected.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-referer-checker: Couldn't find any cross-domain scripts.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:02:53 2026 -- 1 IP address (1 host up) scanned in 380.40 seconds
# Nmap done at Tue Apr 14 04:12:00 2026 -- 1 IP address (1 host up) scanned in 202.72 seconds
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_prometheus.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt
+59353 -59115
View File
File diff suppressed because it is too large. Load diff
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_whatweb.txt
+1 -144
View File
@@ -16,151 +16,8 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://prometheus.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:27:20 GMT
Date: Tue, 14 Apr 2026 04:08:45 GMT
Content-Length: 17
Connection: close
WhatWeb report for https://prometheus.lan.ddnsgeek.com/
Status : 302 Found
Title : <None>
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : Cookies[authelia_session], HttpOnly[authelia_session], RedirectLocation[https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ Cookies ]
Display the names of cookies in the HTTP headers. The
values are not returned to save on space.
String : authelia_session
[ HttpOnly ]
If the HttpOnly flag is included in the HTTP set-cookie
response header and the browser supports it then the cookie
cannot be accessed through client side script - More Info:
http://en.wikipedia.org/wiki/HTTP_cookie
String : authelia_session
[ RedirectLocation ]
HTTP Server string location. used with http-status 301 and
302
String : https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET (from location)
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 302 Found
Content-Length: 113
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 09:27:43 GMT
Location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
Referrer-Policy: strict-origin-when-cross-origin
Set-Cookie: authelia_session=fScndqxw%LzYAq4GIiLploGOPYfFeLr%; expires=Sun, 05 Apr 2026 10:27:43 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
WhatWeb report for https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Fprometheus.lan.ddnsgeek.com%2F&rm=GET
Status : 200 OK
Title : <None>
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 2675
Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-ELyeXmX8rrHoVo0pU3holfFxya5EGFjq' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 09:27:55 GMT
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt
-287
View File
@@ -1,287 +0,0 @@
Configuration {
kind: "configuration",
wordlist: "/root/.local/share/AutoRecon/wordlists/dirbuster.txt",
config: "/etc/feroxbuster/ferox-config.toml",
proxy: "",
replay_proxy: "",
server_certs: [],
client_cert: "",
client_key: "",
target_url: "https://prometheus.lan.ddnsgeek.com:80/",
status_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
replay_codes: [
100,
101,
102,
200,
201,
202,
203,
204,
205,
206,
207,
208,
226,
300,
301,
302,
303,
304,
305,
307,
308,
400,
401,
402,
403,
404,
405,
406,
407,
408,
409,
410,
411,
412,
413,
414,
415,
416,
417,
418,
421,
422,
423,
424,
426,
428,
429,
431,
451,
500,
501,
502,
503,
504,
505,
506,
507,
508,
510,
511,
103,
425,
],
filter_status: [],
client: Client {
accepts: Accepts,
proxies: [
Matcher,
],
redirect_policy: "Policy(Custom)",
referer: true,
default_headers: {
"accept": "*/*",
"user-agent": "feroxbuster/2.13.1",
},
reqwest::config::RequestTimeout: 7s,
},
replay_client: None,
threads: 10,
timeout: 7,
verbosity: 1,
silent: false,
quiet: true,
output_level: Quiet,
auto_bail: false,
auto_tune: false,
requester_policy: Default,
json: false,
output: "/root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_https_feroxbuster_dirbuster.txt",
debug_log: "",
user_agent: "feroxbuster/2.13.1",
random_agent: false,
redirects: true,
insecure: true,
extensions: [
"txt",
"html",
"php",
"asp",
"aspx",
"jsp",
],
methods: [
"GET",
],
data: [],
headers: {},
queries: [],
no_recursion: true,
extract_links: true,
add_slash: false,
stdin: false,
cached_stdin: [],
depth: 4,
scan_limit: 0,
parallel: 0,
rate_limit: 0,
filter_size: [],
filter_line_count: [],
filter_word_count: [],
filter_regex: [],
dont_filter: false,
resumed: false,
resume_from: "",
save_state: true,
time_limit: "",
filter_similar: [],
url_denylist: [],
regex_denylist: [],
scope: [
Url {
scheme: "https",
cannot_be_a_base: false,
username: "",
password: None,
host: Some(
Domain(
"prometheus.lan.ddnsgeek.com",
),
),
port: Some(
80,
),
path: "/",
query: None,
fragment: None,
},
],
collect_extensions: false,
dont_collect: [
"woff2",
"woff",
"ttf",
"otf",
"eot",
"tif",
"tiff",
"ico",
"cur",
"bmp",
"webp",
"svg",
"png",
"jpg",
"jpeg",
"jfif",
"gif",
"avif",
"apng",
"pjpeg",
"pjp",
"mov",
"wav",
"mpg",
"mpeg",
"mp3",
"mp4",
"m4a",
"m4p",
"m4v",
"ogg",
"webm",
"ogv",
"oga",
"flac",
"aac",
"3gp",
"css",
"zip",
"xls",
"xml",
"gz",
"tgz",
],
collect_backups: false,
backup_extensions: [
"~",
".bak",
".bak2",
".old",
".1",
],
collect_words: false,
force_recursion: false,
update_app: false,
scan_dir_listings: false,
request_file: "",
protocol: "https",
limit_bars: 0,
unique: false,
response_size_limit: 4194304,
}
results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_sslscan.html
-192
View File
@@ -1,192 +0,0 @@
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
Connected to 167.179.167.166
Testing SSL server prometheus.lan.ddnsgeek.com on port 80 using SNI name prometheus.lan.ddnsgeek.com
SSL/TLS Protocols:
SSLv2 disabled
SSLv3 disabled
TLSv1.0 disabled
TLSv1.1 disabled
TLSv1.2 enabled
TLSv1.3 enabled
TLS Fallback SCSV:
Server supports TLS Fallback SCSV
TLS renegotiation:
Session renegotiation not supported
TLS Compression:
Compression disabled
Heartbleed:
TLSv1.3 not vulnerable to heartbleed
TLSv1.2 not vulnerable to heartbleed
Supported Server Cipher(s):
Preferred TLSv1.3 128 bits TLS_AES_128_GCM_SHA256
Accepted TLSv1.3 256 bits TLS_AES_256_GCM_SHA384
Accepted TLSv1.3 256 bits TLS_CHACHA20_POLY1305_SHA256
Preferred TLSv1.2 128 bits ECDHE-RSA-AES128-GCM-SHA256 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-GCM-SHA384 Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-CHACHA20-POLY1305 Curve 25519 DHE 253
Accepted TLSv1.2 128 bits ECDHE-RSA-AES128-SHA Curve 25519 DHE 253
Accepted TLSv1.2 256 bits ECDHE-RSA-AES256-SHA Curve 25519 DHE 253
Server Key Exchange Group(s):
TLSv1.3 128 bits secp256r1 (NIST P-256)
TLSv1.3 192 bits secp384r1 (NIST P-384)
TLSv1.3 260 bits secp521r1 (NIST P-521)
TLSv1.3 128 bits x25519
TLSv1.2 128 bits secp256r1 (NIST P-256)
TLSv1.2 192 bits secp384r1 (NIST P-384)
TLSv1.2 260 bits secp521r1 (NIST P-521)
TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Version: 2
Serial Number: 06:0d:3e:81:94:8e:31:70:92:e4:0a:11:98:3e:69:bd:a8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R12
Not valid before: Feb 17 12:33:51 2026 GMT
Not valid after: May 18 12:33:50 2026 GMT
Subject: /CN=prometheus.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
RSA Public-Key: (4096 bit)
Modulus:
00:ad:02:85:c5:c4:56:4e:15:ca:f8:fa:cb:c2:96:
dc:cc:a4:fb:3d:ff:06:c2:70:c0:df:fb:fe:16:eb:
66:fb:f0:64:21:6a:c7:b4:0d:46:e4:53:1e:9a:ce:
9a:5b:2e:74:07:51:af:50:cb:f4:0d:ff:5e:0d:26:
4e:31:54:4b:fd:53:f2:02:2a:c3:ca:a9:00:a7:c0:
21:a5:5c:d8:30:97:04:16:b6:26:1e:9c:c8:db:9c:
c1:38:16:aa:21:ce:8c:4c:d0:73:ee:4c:3b:35:8a:
65:31:de:a8:fe:4b:bb:60:91:a3:1c:62:4e:46:c8:
ab:8e:c9:3a:1a:ea:b2:03:ec:49:6d:88:c0:5b:e6:
29:9f:12:cb:f4:33:45:15:8e:06:30:08:e2:f5:71:
61:21:9c:d0:62:d1:56:72:75:a0:e3:02:1d:19:15:
77:69:b1:4f:bd:f0:26:97:4d:2c:c9:72:06:b3:5d:
92:88:27:80:a2:de:7d:7e:e6:90:9d:cb:0f:70:94:
67:8c:c5:b7:11:64:fc:ec:bc:84:39:0d:cf:3e:26:
e5:c6:98:71:bb:a5:92:f8:b9:85:65:b9:57:87:3b:
93:b0:ec:ef:d6:28:30:aa:2f:cd:7c:df:58:25:a1:
f8:d5:fa:7f:46:3b:66:98:8d:5d:a5:a5:ba:06:b7:
df:8f:a1:19:43:02:09:83:e0:06:09:0b:72:b1:ae:
20:c0:78:72:61:9d:61:a4:41:3e:c4:a8:1d:34:5c:
ed:f3:a3:95:53:fe:42:7b:60:45:0f:7c:74:41:55:
0f:a1:9f:74:64:02:00:2f:6c:0c:93:3a:fd:c8:4d:
4a:5f:f7:ce:25:e0:39:c0:d3:44:96:38:96:28:a9:
08:94:8a:bd:01:e9:d7:34:96:e9:ad:94:1e:eb:6a:
31:d1:13:00:33:04:75:ce:e6:5d:3d:bf:9a:84:6c:
8b:4e:b4:7c:74:2a:03:9d:c3:a1:65:55:76:5f:fd:
26:6d:42:e2:ff:72:8e:f0:bd:51:04:42:c4:e7:9b:
39:be:32:50:37:85:22:2d:4a:78:01:1e:4d:64:d2:
cb:c7:51:54:aa:2a:04:2b:dc:9e:c7:71:c0:e4:b7:
49:13:70:cc:fa:a1:e3:ca:75:e0:fe:24:bc:d9:49:
4f:23:50:2e:f5:19:be:0b:ed:9b:e7:4b:4c:07:f5:
5a:e4:8a:2b:89:d1:0c:c6:8b:43:1c:81:bb:4f:1e:
3a:88:80:70:f2:d3:03:b4:30:f5:d1:43:ae:ef:e7:
9c:cc:ed:b4:94:94:89:2f:47:df:7c:1d:49:e3:2c:
d4:7a:ac:6f:59:0e:9e:7b:2b:cd:7d:4d:73:a7:12:
42:0c:53
Exponent: 65537 (0x10001)
X509v3 Extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
73:20:30:28:55:53:76:FF:EE:06:77:B5:78:6F:D0:AB:F9:51:89:9F
X509v3 Authority Key Identifier:
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
Authority Information Access:
CA Issuers - URI:http://r12.i.lencr.org/
X509v3 Subject Alternative Name:
DNS:prometheus.lan.ddnsgeek.com
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r12.c.lencr.org/113.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 49:9C:9B:69:DE:1D:7C:EC:FC:36:DE:CD:87:64:A6:B8:
5B:AF:0A:87:80:19:D1:55:52:FB:E9:EB:29:DD:F8:C3
Timestamp : Feb 17 13:32:21.535 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:B2:58:F7:D4:AF:07:66:4B:78:D6:A5:
D9:BC:29:10:B3:05:15:79:8F:D7:A3:D9:7D:96:75:1E:
70:5A:6C:E6:2B:02:20:74:32:33:4A:16:05:38:0F:C1:
87:0B:30:A9:F4:57:A9:56:CD:F6:A8:0A:B9:E1:A2:74:
7A:38:61:AF:5D:49:10
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 96:97:64:BF:55:58:97:AD:F7:43:87:68:37:08:42:77:
E9:F0:3A:D5:F6:A4:F3:36:6E:46:A4:3F:0F:CA:A9:C6
Timestamp : Feb 17 13:32:21.604 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:5D:01:12:27:3D:8A:A5:36:14:74:9C:BA:
4D:58:5A:35:E7:41:6D:AF:9D:59:4C:92:B3:7E:60:FA:
79:B3:9B:C9:02:21:00:EF:5E:73:E8:6E:57:6D:F2:E6:
2B:F5:77:1B:AE:2F:AF:F5:D1:10:05:9F:A3:2D:3F:5C:
47:09:6A:A7:55:0B:78
Verify m:
unable to get local issuer certificate
SSL Certificate:
Signature Algorithm: sha256WithRSAEncryption
RSA Key Strength: 4096
Subject: prometheus.lan.ddnsgeek.com
Altnames: DNS:prometheus.lan.ddnsgeek.com
Issuer: R12
Not valid before: Feb 17 12:33:51 2026 GMT
Not valid after: May 18 12:33:50 2026 GMT
results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml
+49 -54
View File
@@ -1,49 +1,54 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 08:56:34 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml prometheus.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml prometheus.lan.ddnsgeek.com" start="1775379394" startstr="Sun Apr 5 08:56:34 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:08:38 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml prometheus.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/prometheus.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml prometheus.lan.ddnsgeek.com" start="1776139718" startstr="Tue Apr 14 04:08:38 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="80"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775379402"/>
<taskend task="NSE" time="1775379402"/>
<taskbegin task="NSE" time="1775379402"/>
<taskend task="NSE" time="1775379402"/>
<taskbegin task="NSE" time="1775379402"/>
<taskend task="NSE" time="1775379402"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775379402"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775379402"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775379402"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775379403"/>
<taskbegin task="SYN Stealth Scan" time="1775379403"/>
<taskend task="SYN Stealth Scan" time="1775379403" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775379406"/>
<taskend task="Service scan" time="1775379413" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775379414"/>
<taskprogress task="NSE" time="1775379445" percent="91.23" remaining="3" etc="1775379448"/>
<taskprogress task="NSE" time="1775379475" percent="99.03" remaining="1" etc="1775379476"/>
<taskprogress task="NSE" time="1775379505" percent="99.68" remaining="1" etc="1775379505"/>
<taskprogress task="NSE" time="1775379535" percent="99.68" remaining="1" etc="1775379535"/>
<taskprogress task="NSE" time="1775379565" percent="99.68" remaining="1" etc="1775379565"/>
<taskprogress task="NSE" time="1775379595" percent="99.68" remaining="1" etc="1775379596"/>
<taskprogress task="NSE" time="1775379625" percent="99.68" remaining="1" etc="1775379626"/>
<taskprogress task="NSE" time="1775379655" percent="99.68" remaining="1" etc="1775379656"/>
<taskprogress task="NSE" time="1775379685" percent="99.68" remaining="1" etc="1775379686"/>
<taskprogress task="NSE" time="1775379715" percent="99.68" remaining="1" etc="1775379716"/>
<taskprogress task="NSE" time="1775379745" percent="99.68" remaining="2" etc="1775379746"/>
<taskend task="NSE" time="1775379771"/>
<taskbegin task="NSE" time="1775379771"/>
<taskend task="NSE" time="1775379772"/>
<taskbegin task="NSE" time="1775379772"/>
<taskend task="NSE" time="1775379772"/>
<host starttime="1775379403" endtime="1775379772"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776139719"/>
<taskend task="NSE" time="1776139719"/>
<taskbegin task="NSE" time="1776139719"/>
<taskend task="NSE" time="1776139719"/>
<taskbegin task="NSE" time="1776139719"/>
<taskend task="NSE" time="1776139719"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139719"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139719"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776139719"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776139719"/>
<taskbegin task="SYN Stealth Scan" time="1776139719"/>
<taskend task="SYN Stealth Scan" time="1776139719" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776139720"/>
<taskend task="Service scan" time="1776139726" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776139726"/>
<taskprogress task="NSE" time="1776139757" percent="99.68" remaining="1" etc="1776139757"/>
<taskprogress task="NSE" time="1776139787" percent="99.68" remaining="1" etc="1776139787"/>
<taskprogress task="NSE" time="1776139817" percent="99.68" remaining="1" etc="1776139817"/>
<taskprogress task="NSE" time="1776139847" percent="99.68" remaining="1" etc="1776139847"/>
<taskprogress task="NSE" time="1776139877" percent="99.68" remaining="1" etc="1776139877"/>
<taskprogress task="NSE" time="1776139907" percent="99.68" remaining="1" etc="1776139908"/>
<taskend task="NSE" time="1776139919"/>
<taskbegin task="NSE" time="1776139919"/>
<taskend task="NSE" time="1776139919"/>
<taskbegin task="NSE" time="1776139919"/>
<taskend task="NSE" time="1776139919"/>
<host starttime="1776139719" endtime="1776139919"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="prometheus.lan.ddnsgeek.com" type="user"/>
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 401&#xa; Redirected To: https://prometheus.lan.ddnsgeek.com/&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">401</elem>
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-vhosts" output="&#xa;128 names had status 308"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-security-headers" output=""></script><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-title" output="Did not follow redirect to https://prometheus.lan.ddnsgeek.com/"><elem key="redirect_url">https://prometheus.lan.ddnsgeek.com/</elem>
</script><script id="http-date" output="Tue, 14 Apr 2026 04:08:54 GMT; 0s from local time."><elem key="date">2026-04-14T04:08:54+00:00</elem>
<elem key="delta">0.0</elem>
</script><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-chrono" output="Request times for /; avg: 253.45ms; min: 176.58ms; max: 336.45ms"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: false&#xa; Redirected To: https://prometheus.lan.ddnsgeek.com/&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">false</elem>
<elem key="Redirected To">https://prometheus.lan.ddnsgeek.com/</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
@@ -64,26 +69,16 @@
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
</script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-title" output="Did not follow redirect to https://prometheus.lan.ddnsgeek.com/"><elem key="redirect_url">https://prometheus.lan.ddnsgeek.com/</elem>
</script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-date" output="Sun, 05 Apr 2026 08:57:02 GMT; -3s from local time."><elem key="date">2026-04-05T08:57:02+00:00</elem>
<elem key="delta">-3.0</elem>
</script><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-vhosts" output="&#xa;128 names had status 308"/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-security-headers" output=""></script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-chrono" output="Request times for /; avg: 1083.92ms; min: 620.75ms; max: 1815.03ms"/><script id="http-headers" output="&#xa; Location: https://prometheus.lan.ddnsgeek.com/&#xa; Date: Sun, 05 Apr 2026 08:57:16 GMT&#xa; Content-Length: 17&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/></port>
</script><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-headers" output="&#xa; Location: https://prometheus.lan.ddnsgeek.com/&#xa; Date: Tue, 14 Apr 2026 04:08:55 GMT&#xa; Content-Length: 17&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/></port>
</ports>
<times srtt="35992" rttvar="35992" to="179960"/>
<times srtt="14352" rttvar="14352" to="100000"/>
</host>
<taskbegin task="NSE" time="1775379772"/>
<taskend task="NSE" time="1775379772"/>
<taskbegin task="NSE" time="1775379772"/>
<taskend task="NSE" time="1775379772"/>
<taskbegin task="NSE" time="1775379772"/>
<taskend task="NSE" time="1775379772"/>
<runstats><finished time="1775379773" timestr="Sun Apr 5 09:02:53 2026" summary="Nmap done at Sun Apr 5 09:02:53 2026; 1 IP address (1 host up) scanned in 380.40 seconds" elapsed="380.40" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776139920"/>
<taskend task="NSE" time="1776139920"/>
<taskbegin task="NSE" time="1776139920"/>
<taskend task="NSE" time="1776139920"/>
<taskbegin task="NSE" time="1776139920"/>
<taskend task="NSE" time="1776139920"/>
<runstats><finished time="1776139920" timestr="Tue Apr 14 04:12:00 2026" summary="Nmap done at Tue Apr 14 04:12:00 2026; 1 IP address (1 host up) scanned in 202.72 seconds" elapsed="202.72" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>