fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -9,9 +9,8 @@ HTTP/2 404
|
||||
content-type: text/plain; charset=utf-8
|
||||
x-content-type-options: nosniff
|
||||
content-length: 19
|
||||
date: Sun, 05 Apr 2026 07:38:46 GMT
|
||||
date: Tue, 14 Apr 2026 03:25:53 GMT
|
||||
|
||||
404 page not found
|
||||
|
||||
|
||||
```
|
||||
+7
@@ -290,5 +290,12 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
404 GET 0l 0w 19c https://edge.lan.ddnsgeek.com/Photos54.txt
|
||||
404 GET 0l 0w 19c https://edge.lan.ddnsgeek.com/Plastic.jsp
|
||||
404 GET 0l 0w 19c https://edge.lan.ddnsgeek.com/PlugIn.html
|
||||
404 GET 0l 0w 19c https://edge.lan.ddnsgeek.com/Plone.html
|
||||
404 GET 0l 0w 19c https://edge.lan.ddnsgeek.com/PleaseWait.html
|
||||
404 GET 0l 0w 19c https://edge.lan.ddnsgeek.com/Plateau.aspx
|
||||
404 GET 0l 0w 19c https://edge.lan.ddnsgeek.com/Plymouth.txt
|
||||
|
||||
```
|
||||
+103
-103
@@ -5,119 +5,30 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
|
||||
[/root/results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 07:38:48 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/edge.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml edge.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:25:55 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/edge.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml edge.lan.ddnsgeek.com
|
||||
Nmap scan report for edge.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
Host is up, received user-set (0.014s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 07:39:00 UTC for 715s
|
||||
Scanned at 2026-04-14 03:26:06 UTC for 303s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
| ssl-cert: Subject: commonName=edge.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:edge.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-02-09T19:02:27
|
||||
| Not valid after: 2026-05-10T19:02:26
|
||||
| MD5: 984a c11f 575c 6340 ccf8 b895 593d eace
|
||||
| SHA-1: 822c 672a 1977 2e13 a869 24c0 3ef4 9c2a 6535 b765
|
||||
| SHA-256: f43d eda6 d3ca 5887 afb9 9398 52fb ad09 a67c c5a4 a0c2 927f df26 6200 c3b6 d216
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGDTCCBPWgAwIBAgISBuIJgdBv5H+NtMLDEN4CvrfBMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTMwHhcNMjYwMjA5MTkwMjI3WhcNMjYwNTEwMTkwMjI2WjAgMR4wHAYDVQQD
|
||||
| ExVlZGdlLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
|
||||
| ggIKAoICAQDRQvC2uBTIFyI5PZHhprgwvMKWUGI5lVb+Nyq/nIqj9cQj/48J29f/
|
||||
| 0jzgOR0qeQ/OzCl4zzLNe+7oPHvy4toCgEzS5kcYK5wkzga+f9r4fCtmtnNIxARj
|
||||
| FV++mv1otbeIN5H/niosyNInQIt+xdDs4oGnd/rZQQfpHDkT0Womnei/oxyOc7wg
|
||||
| OLo4rZWqAsbbP6g0M2AN/mVbzFWHEaaxg41RWtbLO4NTYl34YE3H+zEZpXrwdtIr
|
||||
| F5iaUpARsLX/5xbEVcMT2/h0mSS7CNrJIzaVZZ8PZkx+fzc2wC74wqYgEMK9hKuw
|
||||
| 1DnP33tY3y+fLG8DsUl4skPvF3JNigrGDJk77mdBIuV+K88KFFQ7FqeSm6g5tetH
|
||||
| 7VPjYUFWy6roJB5G0++33CRmnBPXEFTfXcGcTDS/ojYIUJ7ZNw+SqIjYnMTeoSlc
|
||||
| Vo1x/iLH+V/khueBk7nFkYHfJ7kScPHgkrWl9UO0UpY1M+Hvn7FCWwvOvGFGmSpS
|
||||
| NGUAwD+r0L/vPcJsGPF/xKGD8w+r5Zvg7mbIuF39MfJFUTC1o9BEfePyc4WKKxh1
|
||||
| sg/G3Xc+JH1VQbMGqb43UpStrPTU4zBg5V5fBDOJveqaAuLFQDnsg6AemXkTkRw1
|
||||
| pagjc/C5VriYwgqN72eswMCS9vGePF1RVMwtN+sTiJ/f2N/7vVTqXQIDAQABo4IC
|
||||
| LDCCAigwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
|
||||
| BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTAcSPzWeJGShEX5qXrmaurD6ut
|
||||
| VDAfBgNVHSMEGDAWgBTnq58PLDOgU9NeT3jIsoQOO9aSMzAzBggrBgEFBQcBAQQn
|
||||
| MCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTMuaS5sZW5jci5vcmcvMCAGA1UdEQQZ
|
||||
| MBeCFWVkZ2UubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAu
|
||||
| BgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzY2LmNybDCC
|
||||
| AQsGCisGAQQB1nkCBAIEgfwEgfkA9wB1AGQRxGykEuyniRyiAi4AvKtPKAfUHjUn
|
||||
| q+r+1QPJfc3wAAABnEP+Lk8AAAQDAEYwRAIgUo5Y3FORjc0g6vRO1VdTJHB9fH8Z
|
||||
| RNqZBsx0kICr8tECIBSeNuqeJN/8A0UfPGPckCx/0Qx+mtLw65bQyeWhQeaWAH4A
|
||||
| 4yON8o2iiOCq4Kzw+pDJhfC2v/XSpSewAfwcRFjEtugAAAGcQ/4utAAIAAAFADIO
|
||||
| K1oEAwBHMEUCIQDHMqSo5xGExEB0NfYJ1mp8J+f7m3IqP78K5Yd/vGDdvQIgTxAV
|
||||
| uUIt+Vpa2o2LUT9+GV/2qyMksE5hvmH3agWqyN0wDQYJKoZIhvcNAQELBQADggEB
|
||||
| ACwtWqBDwyQXXKjwL5ZP50TxAPon2VXpqKeH7RKHrpmxfLBJPby5CnlDshNTCNPR
|
||||
| pdfiARV34X+d40EAIL8EeA3hKyQJ+U/nUQtO0Qv2zj8ep5q0cnE38a6r+ihnGDzH
|
||||
| 0RU3Ksu5XIHhMeenw64JXApk6axLICUGO/xwGimNg3JRCbHDrZ9p7n4/Xo+YgMgH
|
||||
| 6WBGCuotn1o5Dh4/Q/27xs7mFi3E3qkmWvs7Yj2QRhCXeHb+OatiLjYQ9gf23K7s
|
||||
| tVVtKCB267dbgqwuuMqHZUTgoQND85jj2Uj7b7ZYRrKYeQ1iI6gi9oRldkTaA6gp
|
||||
| eUZAARP+FxOlUy5Obl0BmvI=
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Sun, 05 Apr 2026 07:41:14 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
| http-vhosts:
|
||||
| auth.lan.ddnsgeek.com : 200
|
||||
|_127 names had status 404
|
||||
|_http-chrono: Request times for /; avg: 12689.98ms; min: 1737.94ms; max: 27884.19ms
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-chrono: Request times for /; avg: 643.62ms; min: 493.39ms; max: 859.71ms
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-vhosts:
|
||||
| 127 names had status 404
|
||||
|_auth.lan.ddnsgeek.com : 200
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| HSTS not configured in HTTPS Server
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=edge.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ http://edge.lan.ddnsgeek.com:443/
|
||||
|_http-date: Tue, 14 Apr 2026 03:26:55 GMT; -3s from local time.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-date: Sun, 05 Apr 2026 07:39:46 GMT; -6s from local time.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
@@ -138,8 +49,16 @@ PORT STATE SERVICE REASON VERSION
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Tue, 14 Apr 2026 03:27:03 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
@@ -147,10 +66,91 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| ssl-cert: Subject: commonName=edge.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:edge.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-04-10T22:57:08
|
||||
| Not valid after: 2026-07-09T22:57:07
|
||||
| MD5: 2275 6a09 ffa7 0fa3 e9b4 d4d9 935b cc9c
|
||||
| SHA-1: 4254 b60e d6a3 e1d5 c688 5790 9077 4d48 6771 324a
|
||||
| SHA-256: ba13 37c3 b1ba da02 7a62 6127 b74b 5a55 a998 f162 5321 6d67 437b 83e4 75c9 9523
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGAjCCBOqgAwIBAgISBmcFwVupv+qAOWoPyvIdTxKjMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTIwHhcNMjYwNDEwMjI1NzA4WhcNMjYwNzA5MjI1NzA3WjAgMR4wHAYDVQQD
|
||||
| ExVlZGdlLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
|
||||
| ggIKAoICAQDRQvC2uBTIFyI5PZHhprgwvMKWUGI5lVb+Nyq/nIqj9cQj/48J29f/
|
||||
| 0jzgOR0qeQ/OzCl4zzLNe+7oPHvy4toCgEzS5kcYK5wkzga+f9r4fCtmtnNIxARj
|
||||
| FV++mv1otbeIN5H/niosyNInQIt+xdDs4oGnd/rZQQfpHDkT0Womnei/oxyOc7wg
|
||||
| OLo4rZWqAsbbP6g0M2AN/mVbzFWHEaaxg41RWtbLO4NTYl34YE3H+zEZpXrwdtIr
|
||||
| F5iaUpARsLX/5xbEVcMT2/h0mSS7CNrJIzaVZZ8PZkx+fzc2wC74wqYgEMK9hKuw
|
||||
| 1DnP33tY3y+fLG8DsUl4skPvF3JNigrGDJk77mdBIuV+K88KFFQ7FqeSm6g5tetH
|
||||
| 7VPjYUFWy6roJB5G0++33CRmnBPXEFTfXcGcTDS/ojYIUJ7ZNw+SqIjYnMTeoSlc
|
||||
| Vo1x/iLH+V/khueBk7nFkYHfJ7kScPHgkrWl9UO0UpY1M+Hvn7FCWwvOvGFGmSpS
|
||||
| NGUAwD+r0L/vPcJsGPF/xKGD8w+r5Zvg7mbIuF39MfJFUTC1o9BEfePyc4WKKxh1
|
||||
| sg/G3Xc+JH1VQbMGqb43UpStrPTU4zBg5V5fBDOJveqaAuLFQDnsg6AemXkTkRw1
|
||||
| pagjc/C5VriYwgqN72eswMCS9vGePF1RVMwtN+sTiJ/f2N/7vVTqXQIDAQABo4IC
|
||||
| ITCCAh0wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
|
||||
| EwEB/wQCMAAwHQYDVR0OBBYEFMBxI/NZ4kZKERfmpeuZq6sPq61UMB8GA1UdIwQY
|
||||
| MBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
|
||||
| BQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVZWRnZS5s
|
||||
| YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUw
|
||||
| I6AhoB+GHWh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMzYuY3JsMIIBCgYKKwYBBAHW
|
||||
| eQIEAgSB+wSB+AD2AH0ARq+GPTs+5Z+ld96oJF02sNntIqIj9GF3QSKUUu6VUF8A
|
||||
| AAGdedKZ2gAIAAAFAAOKNT0EAwBGMEQCIGPcg6NezMgaHv40uiaU8+IcHgymgBV1
|
||||
| e+5DPwpFYnRZAiA72f4Wj3x7nNnpw/E8F3dysgKaUMmT32F/JBEcwd0YeQB1ANgJ
|
||||
| VTuUT3r/yBYZb5RPhauw+Pxeh1UmDxXRLnK7RUsUAAABnXnSmegAAAQDAEYwRAIg
|
||||
| TBAY/jc9Uqm3KA5aTgoMQPl4bn5PkJs96v1bbiu0dsYCIGHcFdJe5b99a0Jam3oT
|
||||
| pQRtgVeMWr+fWWh6ZkFche2gMA0GCSqGSIb3DQEBCwUAA4IBAQCK5Zej1vaajKqy
|
||||
| zc3QTBJqzPG+n1gNi6K1dcSJcPNbb62mV1UY3XPgNIc/IwzV3I9DzPyNOVRCNYGc
|
||||
| S9879Y2jhyoTMS8iFg2VfH0tjnYsTbIiI1z9Zr2R5n8DKxcZbyzvCR618cKJG04M
|
||||
| t+RdfmfZNX2j8nvrDmwZdH97SoyvkDXWwBVG99OJarNpqpBE7Rm+BxEwzv1MWhY3
|
||||
| IjkK4Ezy8xNqoJjj69wC+S8VVJ+ZqAlL7rZjUR3iQgNthvNyzLd0tknJO0tWsgzd
|
||||
| DzZ5090yUDH7km5SJJq0N2WuHMCpUnlL+25SUaSXLnI9blwD1Vnmdub6cjrDIeyO
|
||||
| rWBgpRaT
|
||||
|_-----END CERTIFICATE-----
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=edge.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ http://edge.lan.ddnsgeek.com:443/
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 07:50:56 2026 -- 1 IP address (1 host up) scanned in 729.18 seconds
|
||||
# Nmap done at Tue Apr 14 03:31:09 2026 -- 1 IP address (1 host up) scanned in 315.49 seconds
|
||||
|
||||
```
|
||||
+50
-50
@@ -6,7 +6,7 @@ sslscan --show-certificate --no-colour edge.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
```
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
OpenSSL 3.5.5 27 Jan 2026
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
@@ -56,9 +56,9 @@ TLSv1.2 128 bits x25519
|
||||
SSL Certificate:
|
||||
Certificate blob:
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIGDTCCBPWgAwIBAgISBuIJgdBv5H+NtMLDEN4CvrfBMA0GCSqGSIb3DQEBCwUA
|
||||
MIIGAjCCBOqgAwIBAgISBmcFwVupv+qAOWoPyvIdTxKjMA0GCSqGSIb3DQEBCwUA
|
||||
MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
EwNSMTMwHhcNMjYwMjA5MTkwMjI3WhcNMjYwNTEwMTkwMjI2WjAgMR4wHAYDVQQD
|
||||
EwNSMTIwHhcNMjYwNDEwMjI1NzA4WhcNMjYwNzA5MjI1NzA3WjAgMR4wHAYDVQQD
|
||||
ExVlZGdlLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
|
||||
ggIKAoICAQDRQvC2uBTIFyI5PZHhprgwvMKWUGI5lVb+Nyq/nIqj9cQj/48J29f/
|
||||
0jzgOR0qeQ/OzCl4zzLNe+7oPHvy4toCgEzS5kcYK5wkzga+f9r4fCtmtnNIxARj
|
||||
@@ -71,31 +71,31 @@ Vo1x/iLH+V/khueBk7nFkYHfJ7kScPHgkrWl9UO0UpY1M+Hvn7FCWwvOvGFGmSpS
|
||||
NGUAwD+r0L/vPcJsGPF/xKGD8w+r5Zvg7mbIuF39MfJFUTC1o9BEfePyc4WKKxh1
|
||||
sg/G3Xc+JH1VQbMGqb43UpStrPTU4zBg5V5fBDOJveqaAuLFQDnsg6AemXkTkRw1
|
||||
pagjc/C5VriYwgqN72eswMCS9vGePF1RVMwtN+sTiJ/f2N/7vVTqXQIDAQABo4IC
|
||||
LDCCAigwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
|
||||
BQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTAcSPzWeJGShEX5qXrmaurD6ut
|
||||
VDAfBgNVHSMEGDAWgBTnq58PLDOgU9NeT3jIsoQOO9aSMzAzBggrBgEFBQcBAQQn
|
||||
MCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTMuaS5sZW5jci5vcmcvMCAGA1UdEQQZ
|
||||
MBeCFWVkZ2UubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAu
|
||||
BgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzY2LmNybDCC
|
||||
AQsGCisGAQQB1nkCBAIEgfwEgfkA9wB1AGQRxGykEuyniRyiAi4AvKtPKAfUHjUn
|
||||
q+r+1QPJfc3wAAABnEP+Lk8AAAQDAEYwRAIgUo5Y3FORjc0g6vRO1VdTJHB9fH8Z
|
||||
RNqZBsx0kICr8tECIBSeNuqeJN/8A0UfPGPckCx/0Qx+mtLw65bQyeWhQeaWAH4A
|
||||
4yON8o2iiOCq4Kzw+pDJhfC2v/XSpSewAfwcRFjEtugAAAGcQ/4utAAIAAAFADIO
|
||||
K1oEAwBHMEUCIQDHMqSo5xGExEB0NfYJ1mp8J+f7m3IqP78K5Yd/vGDdvQIgTxAV
|
||||
uUIt+Vpa2o2LUT9+GV/2qyMksE5hvmH3agWqyN0wDQYJKoZIhvcNAQELBQADggEB
|
||||
ACwtWqBDwyQXXKjwL5ZP50TxAPon2VXpqKeH7RKHrpmxfLBJPby5CnlDshNTCNPR
|
||||
pdfiARV34X+d40EAIL8EeA3hKyQJ+U/nUQtO0Qv2zj8ep5q0cnE38a6r+ihnGDzH
|
||||
0RU3Ksu5XIHhMeenw64JXApk6axLICUGO/xwGimNg3JRCbHDrZ9p7n4/Xo+YgMgH
|
||||
6WBGCuotn1o5Dh4/Q/27xs7mFi3E3qkmWvs7Yj2QRhCXeHb+OatiLjYQ9gf23K7s
|
||||
tVVtKCB267dbgqwuuMqHZUTgoQND85jj2Uj7b7ZYRrKYeQ1iI6gi9oRldkTaA6gp
|
||||
eUZAARP+FxOlUy5Obl0BmvI=
|
||||
ITCCAh0wDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
|
||||
EwEB/wQCMAAwHQYDVR0OBBYEFMBxI/NZ4kZKERfmpeuZq6sPq61UMB8GA1UdIwQY
|
||||
MBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
|
||||
BQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVZWRnZS5s
|
||||
YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC4GA1UdHwQnMCUw
|
||||
I6AhoB+GHWh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMzYuY3JsMIIBCgYKKwYBBAHW
|
||||
eQIEAgSB+wSB+AD2AH0ARq+GPTs+5Z+ld96oJF02sNntIqIj9GF3QSKUUu6VUF8A
|
||||
AAGdedKZ2gAIAAAFAAOKNT0EAwBGMEQCIGPcg6NezMgaHv40uiaU8+IcHgymgBV1
|
||||
e+5DPwpFYnRZAiA72f4Wj3x7nNnpw/E8F3dysgKaUMmT32F/JBEcwd0YeQB1ANgJ
|
||||
VTuUT3r/yBYZb5RPhauw+Pxeh1UmDxXRLnK7RUsUAAABnXnSmegAAAQDAEYwRAIg
|
||||
TBAY/jc9Uqm3KA5aTgoMQPl4bn5PkJs96v1bbiu0dsYCIGHcFdJe5b99a0Jam3oT
|
||||
pQRtgVeMWr+fWWh6ZkFche2gMA0GCSqGSIb3DQEBCwUAA4IBAQCK5Zej1vaajKqy
|
||||
zc3QTBJqzPG+n1gNi6K1dcSJcPNbb62mV1UY3XPgNIc/IwzV3I9DzPyNOVRCNYGc
|
||||
S9879Y2jhyoTMS8iFg2VfH0tjnYsTbIiI1z9Zr2R5n8DKxcZbyzvCR618cKJG04M
|
||||
t+RdfmfZNX2j8nvrDmwZdH97SoyvkDXWwBVG99OJarNpqpBE7Rm+BxEwzv1MWhY3
|
||||
IjkK4Ezy8xNqoJjj69wC+S8VVJ+ZqAlL7rZjUR3iQgNthvNyzLd0tknJO0tWsgzd
|
||||
DzZ5090yUDH7km5SJJq0N2WuHMCpUnlL+25SUaSXLnI9blwD1Vnmdub6cjrDIeyO
|
||||
rWBgpRaT
|
||||
-----END CERTIFICATE-----
|
||||
Version: 2
|
||||
Serial Number: 06:e2:09:81:d0:6f:e4:7f:8d:b4:c2:c3:10:de:02:be:b7:c1
|
||||
Serial Number: 06:67:05:c1:5b:a9:bf:ea:80:39:6a:0f:ca:f2:1d:4f:12:a3
|
||||
Signature Algorithm: sha256WithRSAEncryption
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
Not valid before: Feb 9 19:02:27 2026 GMT
|
||||
Not valid after: May 10 19:02:26 2026 GMT
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
Not valid before: Apr 10 22:57:08 2026 GMT
|
||||
Not valid after: Jul 9 22:57:07 2026 GMT
|
||||
Subject: /CN=edge.lan.ddnsgeek.com
|
||||
Public Key Algorithm: NULL
|
||||
RSA Public Key: (4096 bit)
|
||||
@@ -141,48 +141,48 @@ eUZAARP+FxOlUy5Obl0BmvI=
|
||||
X509v3 Key Usage: critical
|
||||
Digital Signature, Key Encipherment
|
||||
X509v3 Extended Key Usage:
|
||||
TLS Web Server Authentication, TLS Web Client Authentication
|
||||
TLS Web Server Authentication
|
||||
X509v3 Basic Constraints: critical
|
||||
CA:FALSE
|
||||
X509v3 Subject Key Identifier:
|
||||
C0:71:23:F3:59:E2:46:4A:11:17:E6:A5:EB:99:AB:AB:0F:AB:AD:54
|
||||
X509v3 Authority Key Identifier:
|
||||
E7:AB:9F:0F:2C:33:A0:53:D3:5E:4F:78:C8:B2:84:0E:3B:D6:92:33
|
||||
00:B5:29:F2:2D:8E:6F:31:E8:9B:4C:AD:78:3E:FA:DC:E9:0C:D1:D2
|
||||
Authority Information Access:
|
||||
CA Issuers - URI:http://r13.i.lencr.org/
|
||||
CA Issuers - URI:http://r12.i.lencr.org/
|
||||
X509v3 Subject Alternative Name:
|
||||
DNS:edge.lan.ddnsgeek.com
|
||||
X509v3 Certificate Policies:
|
||||
Policy: 2.23.140.1.2.1
|
||||
X509v3 CRL Distribution Points:
|
||||
Full Name:
|
||||
URI:http://r13.c.lencr.org/66.crl
|
||||
URI:http://r12.c.lencr.org/36.crl
|
||||
|
||||
CT Precertificate SCTs:
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
|
||||
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
|
||||
Timestamp : Feb 9 20:00:57.423 2026 GMT
|
||||
Extensions: none
|
||||
Log ID : 46:AF:86:3D:3B:3E:E5:9F:A5:77:DE:A8:24:5D:36:B0:
|
||||
D9:ED:22:A2:23:F4:61:77:41:22:94:52:EE:95:50:5F
|
||||
Timestamp : Apr 10 23:55:38.330 2026 GMT
|
||||
Extensions: 00:00:05:00:03:8A:35:3D
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:44:02:20:52:8E:58:DC:53:91:8D:CD:20:EA:F4:4E:
|
||||
D5:57:53:24:70:7D:7C:7F:19:44:DA:99:06:CC:74:90:
|
||||
80:AB:F2:D1:02:20:14:9E:36:EA:9E:24:DF:FC:03:45:
|
||||
1F:3C:63:DC:90:2C:7F:D1:0C:7E:9A:D2:F0:EB:96:D0:
|
||||
C9:E5:A1:41:E6:96
|
||||
30:44:02:20:63:DC:83:A3:5E:CC:C8:1A:1E:FE:34:BA:
|
||||
26:94:F3:E2:1C:1E:0C:A6:80:15:75:7B:EE:43:3F:0A:
|
||||
45:62:74:59:02:20:3B:D9:FE:16:8F:7C:7B:9C:D9:E9:
|
||||
C3:F1:3C:17:77:72:B2:02:9A:50:C9:93:DF:61:7F:24:
|
||||
11:1C:C1:DD:18:79
|
||||
Signed Certificate Timestamp:
|
||||
Version : v1 (0x0)
|
||||
Log ID : E3:23:8D:F2:8D:A2:88:E0:AA:E0:AC:F0:FA:90:C9:85:
|
||||
F0:B6:BF:F5:D2:A5:27:B0:01:FC:1C:44:58:C4:B6:E8
|
||||
Timestamp : Feb 9 20:00:57.524 2026 GMT
|
||||
Extensions: 00:00:05:00:32:0E:2B:5A
|
||||
Log ID : D8:09:55:3B:94:4F:7A:FF:C8:16:19:6F:94:4F:85:AB:
|
||||
B0:F8:FC:5E:87:55:26:0F:15:D1:2E:72:BB:45:4B:14
|
||||
Timestamp : Apr 10 23:55:38.344 2026 GMT
|
||||
Extensions: none
|
||||
Signature : ecdsa-with-SHA256
|
||||
30:45:02:21:00:C7:32:A4:A8:E7:11:84:C4:40:74:35:
|
||||
F6:09:D6:6A:7C:27:E7:FB:9B:72:2A:3F:BF:0A:E5:87:
|
||||
7F:BC:60:DD:BD:02:20:4F:10:15:B9:42:2D:F9:5A:5A:
|
||||
DA:8D:8B:51:3F:7E:19:5F:F6:AB:23:24:B0:4E:61:BE:
|
||||
61:F7:6A:05:AA:C8:DD
|
||||
30:44:02:20:4C:10:18:FE:37:3D:52:A9:B7:28:0E:5A:
|
||||
4E:0A:0C:40:F9:78:6E:7E:4F:90:9B:3D:EA:FD:5B:6E:
|
||||
2B:B4:76:C6:02:20:61:DC:15:D2:5E:E5:BF:7D:6B:42:
|
||||
5A:9B:7A:13:A5:04:6D:81:57:8C:5A:BF:9F:59:68:7A:
|
||||
66:41:5C:85:ED:A0
|
||||
Verify m:
|
||||
unable to get local issuer certificate
|
||||
|
||||
@@ -192,10 +192,10 @@ RSA Key Strength: 4096
|
||||
|
||||
Subject: edge.lan.ddnsgeek.com
|
||||
Altnames: DNS:edge.lan.ddnsgeek.com
|
||||
Issuer: R13
|
||||
Issuer: R12
|
||||
|
||||
Not valid before: Feb 9 19:02:27 2026 GMT
|
||||
Not valid after: May 10 19:02:26 2026 GMT
|
||||
Not valid before: Apr 10 22:57:08 2026 GMT
|
||||
Not valid after: Jul 9 22:57:07 2026 GMT
|
||||
|
||||
|
||||
```
|
||||
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://edge.lan.ddnsgeek.
|
||||
[/root/results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/edge.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -16,15 +35,15 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://edge.lan.ddnsgeek.
|
||||
CN: edge.lan.ddnsgeek.com
|
||||
SAN: edge.lan.ddnsgeek.com
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 07:39:26 (GMT0)
|
||||
+ Start Time: 2026-04-14 03:26:28 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
|
||||
```
|
||||
@@ -27,7 +27,7 @@ HTTP Headers:
|
||||
HTTP/1.1 404 Not Found
|
||||
Content-Type: text/plain; charset=utf-8
|
||||
X-Content-Type-Options: nosniff
|
||||
Date: Sun, 05 Apr 2026 07:39:58 GMT
|
||||
Date: Tue, 14 Apr 2026 03:26:43 GMT
|
||||
Content-Length: 19
|
||||
Connection: close
|
||||
|
||||
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://edge.lan.ddnsgeek.com:80/robots.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://edge.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 07:38:45 GMT
|
||||
Date: Tue, 14 Apr 2026 03:25:53 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
@@ -7,7 +7,7 @@ curl -sSik http://edge.lan.ddnsgeek.com:80/
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://edge.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 07:38:45 GMT
|
||||
Date: Tue, 14 Apr 2026 03:25:53 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+4
-3
@@ -290,18 +290,18 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/] => https://edge.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/[ => https://edge.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/] => https://edge.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/[.txt => https://edge.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/].txt => https://edge.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/[.html => https://edge.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/].html => https://edge.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/[.php => https://edge.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/].php => https://edge.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/].asp => https://edge.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/[.asp => https://edge.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/].aspx => https://edge.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/[.aspx => https://edge.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/].asp => https://edge.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/].aspx => https://edge.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/[.jsp => https://edge.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/].jsp => https://edge.lan.ddnsgeek.com/].jsp
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/plain] => https://edge.lan.ddnsgeek.com/plain]
|
||||
@@ -318,5 +318,6 @@ Configuration {
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/quote].asp => https://edge.lan.ddnsgeek.com/quote].asp
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/quote].aspx => https://edge.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://edge.lan.ddnsgeek.com/quote].jsp => https://edge.lan.ddnsgeek.com/quote].jsp
|
||||
404 GET 0l 0w 19c https://edge.lan.ddnsgeek.com/CustomErrorFiles.aspx
|
||||
|
||||
```
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://edge.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://edge.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 07:38:45 GMT
|
||||
Date: Tue, 14 Apr 2026 03:25:53 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+6
-65
@@ -5,76 +5,17 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
|
||||
[/root/results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 07:38:46 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/edge.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml edge.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:25:53 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/edge.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml edge.lan.ddnsgeek.com
|
||||
Nmap scan report for edge.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
Host is up, received user-set.
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 07:38:58 UTC for 969s
|
||||
Scanned at 2026-04-14 03:25:59 UTC for 1s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-title: Did not follow redirect to https://edge.lan.ddnsgeek.com/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-headers:
|
||||
| Location: https://edge.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 07:39:42 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-chrono: Request times for /; avg: 1690.07ms; min: 1248.08ms; max: 2348.25ms
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 404
|
||||
| Redirected To: https://edge.lan.ddnsgeek.com/
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-date: Sun, 05 Apr 2026 07:39:16 GMT; -2s from local time.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp filtered http no-response
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 07:55:08 2026 -- 1 IP address (1 host up) scanned in 983.26 seconds
|
||||
# Nmap done at Tue Apr 14 03:26:07 2026 -- 1 IP address (1 host up) scanned in 14.37 seconds
|
||||
|
||||
```
|
||||
+97667
-14118
File diff suppressed because it is too large.
Load diff
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://edge.lan.ddnsgeek.c
|
||||
[/root/results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/edge.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://edge.lan.ddnsgeek.c
|
||||
+ Target Hostname: edge.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 07:39:23 (GMT0)
|
||||
+ Start Time: 2026-04-14 03:26:28 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [999979] /.tools/webmail: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7885 requests: 1 error and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 07:54:51 (GMT0) (928 seconds)
|
||||
+ 7900 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-14 03:36:46 (GMT0) (618 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
|
||||
@@ -23,7 +23,7 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://edge.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 07:39:55 GMT
|
||||
Date: Tue, 14 Apr 2026 03:26:42 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
@@ -49,7 +49,7 @@ HTTP Headers:
|
||||
HTTP/1.1 404 Not Found
|
||||
Content-Type: text/plain; charset=utf-8
|
||||
X-Content-Type-Options: nosniff
|
||||
Date: Sun, 05 Apr 2026 07:43:00 GMT
|
||||
Date: Tue, 14 Apr 2026 03:26:57 GMT
|
||||
Content-Length: 19
|
||||
Connection: close
|
||||
|
||||
|
||||
Reference in new issue
Block a user