fresh autorecon run
This commit is contained in:
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,7 +1,5 @@
|
||||
CVE Identified: CVE-2003-1418
|
||||
|
||||
Nmap script found a potential vulnerability. (State: VULNERABLE)
|
||||
|
||||
CVE Identified: CVE-2005-3299
|
||||
|
||||
CVE Identified: CVE-2005-3299
|
||||
@@ -12,3 +10,21 @@ CVE Identified: CVE-2009-3733
|
||||
|
||||
CVE Identified: CVE-2009-3733
|
||||
|
||||
CVE Identified: CVE-2011-0966
|
||||
|
||||
CVE Identified: CVE-2011-0966
|
||||
|
||||
CVE Identified: CVE-2011-0966
|
||||
|
||||
CVE Identified: CVE-2011-0966
|
||||
|
||||
CVE Identified: CVE-2018-10822
|
||||
|
||||
CVE Identified: CVE-2018-10824
|
||||
|
||||
CVE Identified: CVE-2019-1653
|
||||
|
||||
CVE Identified: CVE-2019-1653
|
||||
|
||||
CVE Identified: CVE-2013-6235
|
||||
|
||||
+21
-21
@@ -5,20 +5,22 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
|
||||
[/root/results/familytree.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/familytree.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 07:38:07 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/familytree.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/familytree.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml familytree.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:25:21 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/familytree.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/familytree.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml familytree.lan.ddnsgeek.com
|
||||
Nmap scan report for familytree.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.017s latency).
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 07:38:10 UTC for 796s
|
||||
Scanned at 2026-04-14 03:25:23 UTC for 466s
|
||||
Not shown: 65531 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Did not follow redirect to https://familytree.lan.ddnsgeek.com/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://familytree.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-favicon: Unknown favicon MD5: FECE0FA9B3C6B50FC82F28435E4EFF02
|
||||
|_http-server-header: gunicorn
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-title: Gramps Web
|
||||
|_http-favicon: Unknown favicon MD5: AE281E38F470F8AC807DD34D28F8D40D
|
||||
| ssl-cert: Subject: commonName=familytree.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:familytree.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -65,10 +67,8 @@ PORT STATE SERVICE REASON VERSION
|
||||
| e6tGtVhxAxtcrVaDUq5FXmKaCVMgHtU76lV2sHOeldUlLh9y9aM53ILrln2eS3L2
|
||||
| x5kvhutAzOLKXVX2cA==
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-server-header: gunicorn
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET OPTIONS POST HEAD
|
||||
|_ Supported Methods: POST GET OPTIONS HEAD
|
||||
20001/tcp closed microsan reset ttl 57
|
||||
51413/tcp open tcpwrapped syn-ack ttl 56
|
||||
Device type: general purpose
|
||||
@@ -78,9 +78,9 @@ OS fingerprint not ideal because: Didn't receive UDP response. Please try again
|
||||
Aggressive OS guesses: Linux 5.4 (86%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D2147F%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=107%GCD=1%ISR=106%TI=Z%TS=A)
|
||||
SEQ(SP=107%GCD=1%ISR=10A%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDB575%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=106%GCD=1%ISR=10A%TI=Z%TS=A)
|
||||
SEQ(SP=FF%GCD=1%ISR=105%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=N)
|
||||
@@ -94,24 +94,24 @@ T7(R=N)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 16.926 days (since Thu Mar 19 09:37:52 2026)
|
||||
Uptime guess: 49.664 days (since Mon Feb 23 11:37:19 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=263 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=262 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 20001/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.15 ms 10.216.0.161
|
||||
2 0.24 ms 10.216.35.11
|
||||
3 0.90 ms 10.216.32.2
|
||||
4 0.26 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 2.45 ms 4764.syd.equinix.com (45.127.173.7)
|
||||
6 11.74 ms 10.241.1.187
|
||||
7 16.71 ms 10.241.2.26
|
||||
8 14.13 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
2 0.28 ms 10.216.35.11
|
||||
3 0.83 ms 10.216.32.1
|
||||
4 0.33 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 1.43 ms 4764.syd.equinix.com (45.127.173.7)
|
||||
6 11.65 ms 10.241.1.185
|
||||
7 12.47 ms 10.241.2.26
|
||||
8 14.11 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 07:51:27 2026 -- 1 IP address (1 host up) scanned in 802.04 seconds
|
||||
# Nmap done at Tue Apr 14 03:33:09 2026 -- 1 IP address (1 host up) scanned in 468.21 seconds
|
||||
|
||||
```
|
||||
+13
-11
@@ -5,34 +5,36 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/familytree.l
|
||||
[/root/results/familytree.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/familytree.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 07:38:07 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/familytree.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/familytree.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml familytree.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:25:21 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/familytree.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/familytree.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml familytree.lan.ddnsgeek.com
|
||||
Nmap scan report for familytree.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set.
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 07:38:10 UTC for 1513s
|
||||
Scanned at 2026-04-14 03:25:23 UTC for 1136s
|
||||
All 100 scanned ports on familytree.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
|
||||
Not shown: 100 open|filtered udp ports (no-response)
|
||||
Too many fingerprints match this host to give specific OS details
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%G=N%TM=69D2174C%P=x86_64-pc-linux-gnu)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%G=N%TM=69DDB813%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
T2(R=Y%DF=Y%TG=40%W=1FA%S=O%A=O%F=AP%O=NNT11%RD=0%Q=)
|
||||
T4(R=Y%DF=Y%TG=40%W=1FA%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
|
||||
TRACEROUTE (using proto 1/icmp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.25 ms 10.216.35.11
|
||||
3 0.97 ms 10.216.32.2
|
||||
4 0.35 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 3.33 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.87 ms 10.241.1.187
|
||||
7 13.08 ms 10.241.2.71
|
||||
1 0.10 ms 10.216.0.161
|
||||
2 0.31 ms 10.216.35.12
|
||||
3 0.83 ms 10.216.32.2
|
||||
4 0.59 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 2.96 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.65 ms 10.241.1.185
|
||||
7 12.61 ms 10.241.2.26
|
||||
8 ... 30
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:03:24 2026 -- 1 IP address (1 host up) scanned in 1518.46 seconds
|
||||
# Nmap done at Tue Apr 14 03:44:19 2026 -- 1 IP address (1 host up) scanned in 1138.42 seconds
|
||||
|
||||
```
|
||||
+25
-25
@@ -5,20 +5,18 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
|
||||
[/root/results/familytree.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/familytree.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 07:38:07 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/familytree.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/familytree.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml familytree.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:25:21 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/familytree.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/familytree.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml familytree.lan.ddnsgeek.com
|
||||
Nmap scan report for familytree.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.014s latency).
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 07:38:10 UTC for 30s
|
||||
Scanned at 2026-04-14 03:25:23 UTC for 28s
|
||||
Not shown: 998 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Did not follow redirect to https://familytree.lan.ddnsgeek.com/
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://familytree.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-favicon: Unknown favicon MD5: FECE0FA9B3C6B50FC82F28435E4EFF02
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
| ssl-cert: Subject: commonName=familytree.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:familytree.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -65,21 +63,23 @@ PORT STATE SERVICE REASON VERSION
|
||||
| e6tGtVhxAxtcrVaDUq5FXmKaCVMgHtU76lV2sHOeldUlLh9y9aM53ILrln2eS3L2
|
||||
| x5kvhutAzOLKXVX2cA==
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-server-header: gunicorn
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET OPTIONS POST HEAD
|
||||
|_http-favicon: Unknown favicon MD5: AE281E38F470F8AC807DD34D28F8D40D
|
||||
|_http-title: Gramps Web
|
||||
| http-methods:
|
||||
|_ Supported Methods: POST GET OPTIONS HEAD
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-server-header: gunicorn
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose|router|storage-misc
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (92%), Synology DiskStation Manager 5.X (87%)
|
||||
Running (JUST GUESSING): Linux 4.X|5.X|6.X|2.6.X|3.X (93%), MikroTik RouterOS 7.X (93%), Synology DiskStation Manager 5.X (85%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:mikrotik:routeros:7 cpe:/o:linux:linux_kernel:5.6.3 cpe:/o:linux:linux_kernel:6.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/a:synology:diskstation_manager:5.2
|
||||
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), Linux 4.19 (92%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (92%), Linux 6.0 (90%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%), Linux 3.10 - 4.11 (87%)
|
||||
Aggressive OS guesses: Linux 4.15 - 5.19 (93%), Linux 4.19 (93%), Linux 5.0 - 5.14 (93%), OpenWrt 21.02 (Linux 5.4) (93%), MikroTik RouterOS 7.2 - 7.5 (Linux 5.6.3) (93%), Linux 6.0 (92%), Linux 6.15 (90%), Linux 5.4 - 5.10 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D21180%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=FF%GCD=1%ISR=107%TI=Z%TS=A)
|
||||
SEQ(SP=FF%GCD=1%ISR=10C%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDB3BF%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=100%GCD=1%ISR=10D%TI=Z%TS=A)
|
||||
SEQ(SP=104%GCD=1%ISR=10D%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
|
||||
@@ -90,24 +90,24 @@ T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 16.917 days (since Thu Mar 19 09:37:52 2026)
|
||||
Uptime guess: 49.659 days (since Mon Feb 23 11:37:20 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=255 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=260 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 80/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.37 ms 10.216.0.161
|
||||
2 0.50 ms 10.216.35.11
|
||||
3 0.97 ms 10.216.32.2
|
||||
4 0.51 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 3.33 ms 4764.syd.equinix.com (45.127.173.7)
|
||||
6 11.72 ms 10.241.1.185
|
||||
7 12.62 ms 10.241.2.26
|
||||
8 14.00 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
1 0.19 ms 10.216.0.161
|
||||
2 0.25 ms 10.216.35.12
|
||||
3 0.95 ms 10.216.32.2
|
||||
4 0.39 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 4.67 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.65 ms 10.241.1.187
|
||||
7 14.69 ms 10.241.2.71
|
||||
8 14.35 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 07:38:40 2026 -- 1 IP address (1 host up) scanned in 34.28 seconds
|
||||
# Nmap done at Tue Apr 14 03:25:51 2026 -- 1 IP address (1 host up) scanned in 30.80 seconds
|
||||
|
||||
```
|
||||
+4
-4
@@ -10,9 +10,9 @@ accept-ranges: bytes
|
||||
cache-control: no-cache
|
||||
content-disposition: inline; filename=index.html
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 07:38:53 GMT
|
||||
etag: "1775239884.0-1497-1563297874"
|
||||
last-modified: Fri, 03 Apr 2026 18:11:24 GMT
|
||||
date: Tue, 14 Apr 2026 03:25:57 GMT
|
||||
etag: "1775817020.0-1497-1563297874"
|
||||
last-modified: Fri, 10 Apr 2026 10:30:20 GMT
|
||||
server: gunicorn
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept-Encoding
|
||||
@@ -21,5 +21,5 @@ x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 1497
|
||||
|
||||
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover"><meta name="description" content="Gramps Web - research & organize your family tree together"><base href="/"><link rel="stylesheet" href="webawesome-styles/themes/default.css"><link rel="stylesheet" href="fonts/fonts.css"><link rel="stylesheet" href="global.css"><link rel="stylesheet" href="tippy.css"><link rel="icon" href="images/favicon.ico"><link rel="manifest" href="manifest.json" crossorigin="use-credentials"><meta name="theme-color" content="#6D4C41"><meta name="mobile-web-app-capable" content="yes"><meta name="application-name" content="Gramps"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar" content="#6D4C41"><meta name="apple-mobile-web-app-title" content="Gramps"><link rel="apple-touch-icon" sizes="192x192" href="images/icon192.png"><title>Gramps Web</title><link rel="preload" href="./BuK25s6o.js" as="script" crossorigin="anonymous"><link rel="preload" href="./config.js" as="script" crossorigin="anonymous"></head><body><gramps-js></gramps-js><script type="module" src="./BuK25s6o.js"></script><script>"serviceWorker"in navigator&&window.addEventListener("load",function(){navigator.serviceWorker.register("./sw.js").then(function(){console.log("ServiceWorker registered.")}).catch(function(e){console.log("ServiceWorker registration failed: ",e)})})</script></body></html>
|
||||
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover"><meta name="description" content="Gramps Web - research & organize your family tree together"><base href="/"><link rel="stylesheet" href="webawesome-styles/themes/default.css"><link rel="stylesheet" href="fonts/fonts.css"><link rel="stylesheet" href="global.css"><link rel="stylesheet" href="tippy.css"><link rel="icon" href="images/favicon.ico"><link rel="manifest" href="manifest.json" crossorigin="use-credentials"><meta name="theme-color" content="#6D4C41"><meta name="mobile-web-app-capable" content="yes"><meta name="application-name" content="Gramps"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar" content="#6D4C41"><meta name="apple-mobile-web-app-title" content="Gramps"><link rel="apple-touch-icon" sizes="192x192" href="images/icon192.png"><title>Gramps Web</title><link rel="preload" href="./BGN_lyBA.js" as="script" crossorigin="anonymous"><link rel="preload" href="./config.js" as="script" crossorigin="anonymous"></head><body><gramps-js></gramps-js><script type="module" src="./BGN_lyBA.js"></script><script>"serviceWorker"in navigator&&window.addEventListener("load",function(){navigator.serviceWorker.register("./sw.js").then(function(){console.log("ServiceWorker registered.")}).catch(function(e){console.log("ServiceWorker registration failed: ",e)})})</script></body></html>
|
||||
```
|
||||
+4
-4
@@ -10,9 +10,9 @@ accept-ranges: bytes
|
||||
cache-control: no-cache
|
||||
content-disposition: inline; filename=index.html
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 07:38:53 GMT
|
||||
etag: "1775239884.0-1497-1563297874"
|
||||
last-modified: Fri, 03 Apr 2026 18:11:24 GMT
|
||||
date: Tue, 14 Apr 2026 03:25:56 GMT
|
||||
etag: "1775817020.0-1497-1563297874"
|
||||
last-modified: Fri, 10 Apr 2026 10:30:20 GMT
|
||||
server: gunicorn
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept-Encoding
|
||||
@@ -21,6 +21,6 @@ x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 1497
|
||||
|
||||
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover"><meta name="description" content="Gramps Web - research & organize your family tree together"><base href="/"><link rel="stylesheet" href="webawesome-styles/themes/default.css"><link rel="stylesheet" href="fonts/fonts.css"><link rel="stylesheet" href="global.css"><link rel="stylesheet" href="tippy.css"><link rel="icon" href="images/favicon.ico"><link rel="manifest" href="manifest.json" crossorigin="use-credentials"><meta name="theme-color" content="#6D4C41"><meta name="mobile-web-app-capable" content="yes"><meta name="application-name" content="Gramps"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar" content="#6D4C41"><meta name="apple-mobile-web-app-title" content="Gramps"><link rel="apple-touch-icon" sizes="192x192" href="images/icon192.png"><title>Gramps Web</title><link rel="preload" href="./BuK25s6o.js" as="script" crossorigin="anonymous"><link rel="preload" href="./config.js" as="script" crossorigin="anonymous"></head><body><gramps-js></gramps-js><script type="module" src="./BuK25s6o.js"></script><script>"serviceWorker"in navigator&&window.addEventListener("load",function(){navigator.serviceWorker.register("./sw.js").then(function(){console.log("ServiceWorker registered.")}).catch(function(e){console.log("ServiceWorker registration failed: ",e)})})</script></body></html>
|
||||
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover"><meta name="description" content="Gramps Web - research & organize your family tree together"><base href="/"><link rel="stylesheet" href="webawesome-styles/themes/default.css"><link rel="stylesheet" href="fonts/fonts.css"><link rel="stylesheet" href="global.css"><link rel="stylesheet" href="tippy.css"><link rel="icon" href="images/favicon.ico"><link rel="manifest" href="manifest.json" crossorigin="use-credentials"><meta name="theme-color" content="#6D4C41"><meta name="mobile-web-app-capable" content="yes"><meta name="application-name" content="Gramps"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar" content="#6D4C41"><meta name="apple-mobile-web-app-title" content="Gramps"><link rel="apple-touch-icon" sizes="192x192" href="images/icon192.png"><title>Gramps Web</title><link rel="preload" href="./BGN_lyBA.js" as="script" crossorigin="anonymous"><link rel="preload" href="./config.js" as="script" crossorigin="anonymous"></head><body><gramps-js></gramps-js><script type="module" src="./BGN_lyBA.js"></script><script>"serviceWorker"in navigator&&window.addEventListener("load",function(){navigator.serviceWorker.register("./sw.js").then(function(){console.log("ServiceWorker registered.")}).catch(function(e){console.log("ServiceWorker registration failed: ",e)})})</script></body></html>
|
||||
|
||||
```
|
||||
+54149
-97
File diff suppressed because it is too large.
Load diff
+4
-4
@@ -10,9 +10,9 @@ accept-ranges: bytes
|
||||
cache-control: no-cache
|
||||
content-disposition: inline; filename=index.html
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 07:38:53 GMT
|
||||
etag: "1775239884.0-1497-1563297874"
|
||||
last-modified: Fri, 03 Apr 2026 18:11:24 GMT
|
||||
date: Tue, 14 Apr 2026 03:25:56 GMT
|
||||
etag: "1775817020.0-1497-1563297874"
|
||||
last-modified: Fri, 10 Apr 2026 10:30:20 GMT
|
||||
server: gunicorn
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
vary: Accept-Encoding
|
||||
@@ -21,5 +21,5 @@ x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 1497
|
||||
|
||||
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover"><meta name="description" content="Gramps Web - research & organize your family tree together"><base href="/"><link rel="stylesheet" href="webawesome-styles/themes/default.css"><link rel="stylesheet" href="fonts/fonts.css"><link rel="stylesheet" href="global.css"><link rel="stylesheet" href="tippy.css"><link rel="icon" href="images/favicon.ico"><link rel="manifest" href="manifest.json" crossorigin="use-credentials"><meta name="theme-color" content="#6D4C41"><meta name="mobile-web-app-capable" content="yes"><meta name="application-name" content="Gramps"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar" content="#6D4C41"><meta name="apple-mobile-web-app-title" content="Gramps"><link rel="apple-touch-icon" sizes="192x192" href="images/icon192.png"><title>Gramps Web</title><link rel="preload" href="./BuK25s6o.js" as="script" crossorigin="anonymous"><link rel="preload" href="./config.js" as="script" crossorigin="anonymous"></head><body><gramps-js></gramps-js><script type="module" src="./BuK25s6o.js"></script><script>"serviceWorker"in navigator&&window.addEventListener("load",function(){navigator.serviceWorker.register("./sw.js").then(function(){console.log("ServiceWorker registered.")}).catch(function(e){console.log("ServiceWorker registration failed: ",e)})})</script></body></html>
|
||||
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover"><meta name="description" content="Gramps Web - research & organize your family tree together"><base href="/"><link rel="stylesheet" href="webawesome-styles/themes/default.css"><link rel="stylesheet" href="fonts/fonts.css"><link rel="stylesheet" href="global.css"><link rel="stylesheet" href="tippy.css"><link rel="icon" href="images/favicon.ico"><link rel="manifest" href="manifest.json" crossorigin="use-credentials"><meta name="theme-color" content="#6D4C41"><meta name="mobile-web-app-capable" content="yes"><meta name="application-name" content="Gramps"><meta name="apple-mobile-web-app-capable" content="yes"><meta name="apple-mobile-web-app-status-bar" content="#6D4C41"><meta name="apple-mobile-web-app-title" content="Gramps"><link rel="apple-touch-icon" sizes="192x192" href="images/icon192.png"><title>Gramps Web</title><link rel="preload" href="./BGN_lyBA.js" as="script" crossorigin="anonymous"><link rel="preload" href="./config.js" as="script" crossorigin="anonymous"></head><body><gramps-js></gramps-js><script type="module" src="./BGN_lyBA.js"></script><script>"serviceWorker"in navigator&&window.addEventListener("load",function(){navigator.serviceWorker.register("./sw.js").then(function(){console.log("ServiceWorker registered.")}).catch(function(e){console.log("ServiceWorker registration failed: ",e)})})</script></body></html>
|
||||
```
|
||||
+2217
-421
File diff suppressed because it is too large.
Load diff
+1
-1
@@ -6,7 +6,7 @@ sslscan --show-certificate --no-colour familytree.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
```
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
OpenSSL 3.5.5 27 Jan 2026
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
|
||||
+43
-3
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://familytree.lan.ddn
|
||||
[/root/results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/familytree.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -18,15 +37,36 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://familytree.lan.ddn
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 07:39:32 (GMT0)
|
||||
+ Start Time: 2026-04-14 03:26:38 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: gunicorn
|
||||
+ [999984] /: Server may leak inodes via ETags, header found with file /, inode: 1775239884.0, size: 1497, mtime: 1563297874. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1418
|
||||
+ [999984] /: Server may leak inodes via ETags, header found with file /, inode: 1775817020.0, size: 1497, mtime: 1563297874. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-1418
|
||||
+ [999100] /: Uncommon header(s) 'content-disposition' found, with contents: inline; filename=index.html.
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [999966] /: The Content-Encoding header is set to "deflate" which may mean that the server is vulnerable to the BREACH attack. See: http://breachattack.com/
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [999990] OPTIONS: Allowed HTTP Methods: POST, GET, OPTIONS, HEAD .
|
||||
+ [002739] /.htpasswd: Contains authorization information.
|
||||
+ [002743] /.bash_history: A user's home directory may be set to the web root, the shell history was retrieved. This should not be accessible via the web.
|
||||
+ [002756] /.sh_history: A user's home directory may be set to the web root, the shell history was retrieved. This should not be accessible via the web.
|
||||
+ [007203] /userdata.json: This might be interesting.
|
||||
+ [007204] /login.json: This might be interesting.
|
||||
+ [007205] /master.json: This might be interesting.
|
||||
+ [007206] /masters.json: This might be interesting.
|
||||
+ [007207] /connections.json: This might be interesting.
|
||||
+ [007208] /connection.json: This might be interesting.
|
||||
+ [007210] /PasswordsData.json: This might be interesting.
|
||||
+ [007211] /users.json: This might be interesting.
|
||||
+ [007212] /conndb.json: This might be interesting.
|
||||
+ [007213] /conn.json: This might be interesting.
|
||||
+ [007215] /accounts.json: This might be interesting.
|
||||
+ [007303] /JAMonAdmin.jsp: JAMon - Java Application Monitor Admin interface identified. Versions 2.7 and earlier contain XSS vulnerabilities. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6235
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 8627 requests: 16 errors and 23 items reported on the remote host
|
||||
+ End Time: 2026-04-14 04:08:23 (GMT0) (2505 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
```
|
||||
+3
-3
@@ -69,9 +69,9 @@ HTTP Headers:
|
||||
Content-Disposition: inline; filename=index.html
|
||||
Content-Encoding: deflate
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 07:43:01 GMT
|
||||
Etag: "1775239884.0-1497-1563297874:deflate"
|
||||
Last-Modified: Fri, 03 Apr 2026 18:11:24 GMT
|
||||
Date: Tue, 14 Apr 2026 03:26:54 GMT
|
||||
Etag: "1775817020.0-1497-1563297874:deflate"
|
||||
Last-Modified: Fri, 10 Apr 2026 10:30:20 GMT
|
||||
Server: gunicorn
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
Vary: Accept-Encoding
|
||||
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://familytree.lan.ddnsgeek.com:80/robots.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://familytree.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 07:38:49 GMT
|
||||
Date: Tue, 14 Apr 2026 03:25:54 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSik http://familytree.lan.ddnsgeek.com:80/
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://familytree.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 07:38:51 GMT
|
||||
Date: Tue, 14 Apr 2026 03:25:55 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+47934
-118
File diff suppressed because it is too large.
Load diff
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://familytree.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://familytree.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 07:38:49 GMT
|
||||
Date: Tue, 14 Apr 2026 03:25:54 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+38
-38
@@ -5,50 +5,27 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
|
||||
[/root/results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 07:38:52 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/familytree.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml familytree.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:25:56 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/familytree.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml familytree.lan.ddnsgeek.com
|
||||
Nmap scan report for familytree.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.016s latency).
|
||||
Host is up, received user-set (0.023s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 07:39:06 UTC for 698s
|
||||
Scanned at 2026-04-14 03:26:06 UTC for 238s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-chrono: Request times for /; avg: 4590.23ms; min: 3509.79ms; max: 5839.74ms
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-headers:
|
||||
| Location: https://familytree.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 07:40:18 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-date: Sun, 05 Apr 2026 07:39:25 GMT; -2s from local time.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-date: Tue, 14 Apr 2026 03:26:31 GMT; -4s from local time.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-title: Did not follow redirect to https://familytree.lan.ddnsgeek.com/
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://familytree.lan.ddnsgeek.com/
|
||||
@@ -70,11 +47,34 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
| http-headers:
|
||||
| Location: https://familytree.lan.ddnsgeek.com/
|
||||
| Date: Tue, 14 Apr 2026 03:26:43 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-title: Did not follow redirect to https://familytree.lan.ddnsgeek.com/
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-chrono: Request times for /; avg: 665.15ms; min: 570.07ms; max: 709.19ms
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 07:50:45 2026 -- 1 IP address (1 host up) scanned in 714.79 seconds
|
||||
# Nmap done at Tue Apr 14 03:30:05 2026 -- 1 IP address (1 host up) scanned in 249.43 seconds
|
||||
|
||||
```
|
||||
+89389
-10495
File diff suppressed because it is too large.
Load diff
+24
-5
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://familytree.lan.ddns
|
||||
[/root/results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/familytree.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://familytree.lan.ddns
|
||||
+ Target Hostname: familytree.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 07:39:28 (GMT0)
|
||||
+ Start Time: 2026-04-14 03:26:33 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [999979] /apple-app-site-association: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7885 requests: 1 error and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 07:54:51 (GMT0) (923 seconds)
|
||||
+ 7900 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-14 03:36:48 (GMT0) (615 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
|
||||
+4
-4
@@ -23,7 +23,7 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://familytree.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 07:40:02 GMT
|
||||
Date: Tue, 14 Apr 2026 03:26:42 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
@@ -91,9 +91,9 @@ HTTP Headers:
|
||||
Content-Disposition: inline; filename=index.html
|
||||
Content-Encoding: deflate
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 07:42:59 GMT
|
||||
Etag: "1775239884.0-1497-1563297874:deflate"
|
||||
Last-Modified: Fri, 03 Apr 2026 18:11:24 GMT
|
||||
Date: Tue, 14 Apr 2026 03:26:58 GMT
|
||||
Etag: "1775817020.0-1497-1563297874:deflate"
|
||||
Last-Modified: Fri, 10 Apr 2026 10:30:20 GMT
|
||||
Server: gunicorn
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
Vary: Accept-Encoding
|
||||
|
||||
Reference in new issue
Block a user