beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://gotify.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://gotify.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 07:44:04 GMT
Date: Tue, 14 Apr 2026 03:27:10 GMT
Content-Length: 17
Moved Permanently
results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSik http://gotify.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://gotify.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 07:44:07 GMT
Date: Tue, 14 Apr 2026 03:27:11 GMT
Content-Length: 17
Moved Permanently
results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://gotify.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://gotify.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 07:44:04 GMT
Date: Tue, 14 Apr 2026 03:27:09 GMT
Content-Length: 17
Moved Permanently
results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md
+30 -32
View File
@@ -5,33 +5,41 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 07:44:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gotify.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:27:13 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/gotify.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml gotify.lan.ddnsgeek.com
Nmap scan report for gotify.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
Host is up, received user-set (0.017s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 07:45:05 UTC for 390s
Scanned at 2026-04-14 03:27:20 UTC for 216s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-mobileversion-checker: No mobile version detected.
| http-headers:
| Location: https://gotify.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 03:27:50 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-title: Did not follow redirect to https://gotify.lan.ddnsgeek.com/
|_http-comments-displayer: Couldn't find any comments.
|_http-malware-host: Host appears to be clean
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-chrono: Request times for /; avg: 651.35ms; min: 481.99ms; max: 876.62ms
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-title: Did not follow redirect to https://gotify.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-mobileversion-checker: No mobile version detected.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-vhosts:
| 126 names had status 308
| lab.lan.ddnsgeek.com : 404
|_svn.lan.ddnsgeek.com : 404
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-comments-displayer: Couldn't find any comments.
|_http-date: Sun, 05 Apr 2026 07:46:12 GMT; -17s from local time.
|_128 names had status 308
|_http-feed: Couldn't find any feeds.
| http-useragent-tester:
| Status for browser useragent: 200
| Status for browser useragent: false
| Redirected To: https://gotify.lan.ddnsgeek.com/
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
@@ -51,7 +59,9 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-errors: Couldn't find any error pages.
|_http-date: Tue, 14 Apr 2026 03:27:33 GMT; -1s from local time.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
@@ -59,24 +69,12 @@ PORT STATE SERVICE REASON VERSION
| Dir: /
| Total files found (by extension):
|_
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-feed: Couldn't find any feeds.
|_http-chrono: Request times for /; avg: 867.56ms; min: 649.49ms; max: 1088.71ms
| http-headers:
| Location: https://gotify.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 07:50:58 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-errors: Couldn't find any error pages.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 07:51:36 2026 -- 1 IP address (1 host up) scanned in 430.55 seconds
# Nmap done at Tue Apr 14 03:30:56 2026 -- 1 IP address (1 host up) scanned in 224.20 seconds
```
results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md
+91918 -19800
View File
File diff suppressed because it is too large. Load diff
results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md
+24 -5
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://gotify.lan.ddnsgeek
[/root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/gotify.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://gotify.lan.ddnsgeek
+ Target Hostname: gotify.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 07:45:39 (GMT0)
+ Start Time: 2026-04-14 03:27:32 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7901 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 08:04:25 (GMT0) (1126 seconds)
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-14 03:37:19 (GMT0) (587 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/report.md/gotify.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md
+1 -65
View File
@@ -23,74 +23,10 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://gotify.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 07:51:45 GMT
Date: Tue, 14 Apr 2026 03:27:56 GMT
Content-Length: 17
Connection: close
WhatWeb report for https://gotify.lan.ddnsgeek.com/
Status : 200 OK
Title : Gotify
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
HTML version 5, detected by the doctype declaration
[ Script ]
This plugin detects instances of script HTML elements and
returns the script language/type.
String : module
[ Strict-Transport-Security ]
Strict-Transport-Security is an HTTP header that restricts
a web browser from accessing a website without the security
of the HTTPS protocol.
String : max-age=15552000; includeSubDomains; preload
[ UncommonHeaders ]
Uncommon HTTP server headers. The blacklist includes all
the standard headers and many non standard but common ones.
Interesting but fairly common headers should have their own
plugins, eg. x-powered-by, server and x-aspnet-version.
Info about headers can be found at www.http-stats.com
String : x-content-type-options (from headers)
[ X-Frame-Options ]
This plugin retrieves the X-Frame-Options value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : SAMEORIGIN
[ X-XSS-Protection ]
This plugin retrieves the X-XSS-Protection value from the
HTTP header. - More Info:
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
aspx
String : 1; mode=block
HTTP Headers:
HTTP/1.1 200 OK
Content-Encoding: gzip
Content-Length: 769
Content-Type: text/html
Date: Sun, 05 Apr 2026 07:52:04 GMT
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Xss-Protection: 1; mode=block
Connection: close
```