beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/report.md/nextcloud.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md
+145 -94
View File
@@ -5,50 +5,88 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 08:16:04 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 03:49:00 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml nextcloud.lan.ddnsgeek.com
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.026s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 08:16:23 UTC for 705s
Scanned at 2026-04-14 03:49:13 UTC for 503s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-waf-detect: IDS/IPS/WAF detected:
|_nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-server-header: Apache/2.4.66 (Debian)
| http-headers:
| Cache-Control: no-cache, no-store, must-revalidate
| Content-Length: 16047
| Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
| Content-Type: text/html; charset=UTF-8
| Date: Sun, 05 Apr 2026 08:19:52 GMT
| Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
| Referrer-Policy: same-origin
| Server: Apache/2.4.66 (Debian)
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
| Set-Cookie: oc_sessionPassphrase=vaA75gLRczK4PR19LRVIdeCUbAH2eyCr84lwC0J%2FRs%2FAJzlQYpiLdt%2BxMWrssNRkSjTrifW2r%2Fg0sWzn7Cact8Zw3rXzotR6z4WBk4sSNdwp4UgXFlUAwNHKCMEVwmfq; path=/; secure; HttpOnly; SameSite=Lax
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
| Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
| Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
| Set-Cookie: ocexfs76yoe2=ec8e4644674a95fc3c6b23b49c28df1f; path=/; secure; HttpOnly; SameSite=Lax
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Frame-Options: SAMEORIGIN
| X-Permitted-Cross-Domain-Policies: none
| X-Powered-By: PHP/8.3.30
| X-Request-Id: 8l0zCl9BZ2uwysWABFY8
| X-Robots-Tag: noindex, nofollow
| X-Xss-Protection: 1; mode=block
| Connection: close
|
|_ (Request type: HEAD)
| http-title: Login \xE2\x80\x93 Nextcloud
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
| http-vhosts:
| 127 names had status 404
|_auth.lan.ddnsgeek.com : 200
|_http-feed: Couldn't find any feeds.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| ssl-cert: Subject: commonName=nextcloud.lan.ddnsgeek.com
| Subject Alternative Name: DNS:nextcloud.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-04-10T22:57:14
| Not valid after: 2026-07-09T22:57:13
| MD5: 3e9f 313a b74d 382e 83fc 5f1a 5a53 e40b
| SHA-1: 1937 4753 629c 2c83 886f ec53 de7e 0a3c de34 7039
| SHA-256: 3c52 054a efae 0d1d 5cf0 8226 e0ae 7ad0 478a 8c85 f5e7 a963 0ddd 072d d9c5 d129
| -----BEGIN CERTIFICATE-----
| MIIGDTCCBPWgAwIBAgISBrmm2MmqMNL/bqguwka5v7ahMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwNDEwMjI1NzE0WhcNMjYwNzA5MjI1NzEzWjAlMSMwIQYDVQQD
| ExpuZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
| ggIPADCCAgoCggIBAMfZPcsjUERAyRB3mvCx+kUJE/5gKelvulMMV3uCdil8yiop
| 3CgXHNN1E/9hsK8/gueXU1AbcpNUrHP1clNlrMku+GuwAQF4+eulJdycXM8UBOB4
| HkWO/CljSna1EZQlPx4FhDLMSki2uLP9mgNOM1/lBQ1qPG3B3EXLKOqGlEQ/zOjg
| /gyPEBxjWA3bYZZN4oiaFHnA32ontFN7CQ7COeCJCnRpr2zAUvpRO5U5uH2cfApt
| 4gha9FQSgAj6lAqFGDrRDLqUl1oGY4HM5DWDhYiYnJ/n34hDRoWOt1D02PpCjNQf
| O4CDs+6udQN7zBNQBZiSBEtpGnQn73EFeElRvoGqZMrQFJa6/VEle+oJxdQL5JIv
| yeqILlfJqlMgAiM4rItUKl9hTtWOfTuPCGbtPx7qDG6gdD2CDxdgPfPBseiKU6DV
| sbHAs6aAv17982O0FIf4LE7vSmkVSpzafYRXdx/F5I6Zi+t7SlsC+l7cZiYMAyfU
| DP6kmO7mCGRRQmxu1Ui6hZjIWEa2VJ6epueY7GtrEmsVulna+uq+jz2vI/uk99EF
| H2NZuc/65i67UAjUllYA/58dTcC6kX6/WO5CTRsCzkhY0cCY2xGrs2i6bok50TzQ
| 90IlIpa4IK19uDunxb6i7BFY/m56lmpKkYcyNflBCOrPtBSkVpUe45skVVdRAgMB
| AAGjggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUL6dJ4L43WNY8JT48fpK2N24MimwwHwYD
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpu
| ZXh0Y2xvdWQubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAu
| BgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEzLmMubGVuY3Iub3JnLzM0LmNybDCC
| AQsGCisGAQQB1nkCBAIEgfwEgfkA9wB2AMIxfldFGaNF7n843rKQQevHwiFaIr9/
| 1bWtdprZDlLNAAABnXnSsysAAAQDAEcwRQIgFjRX18ymII+LUj3/mn40hTZc54+w
| uO66VcsD1AWz0xECIQC1XYnN8iIHf+gMkzrZSl57qZMxDvxAj0KIEL+kcIuDqwB9
| AKgmy+MKxjUSRlM/4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnXnStdkACAAABQAG
| ZqdVBAMARjBEAiBzQI9gfXwLedWIC3sx8xgjoyD3p0Rf06uIVv7UE/IfsgIgOTTu
| GGd5gH4MWw7AmXB7oBWiZWcnJvR+gzq1RhHFtuwwDQYJKoZIhvcNAQELBQADggEB
| AG9ivSu820MYLxWacjStBZN9tZoJl6rI3E52h7pl70JXUFQ7hFr8SN0SCU9/Iz+L
| wDdrqUGC3T5lr5NeTqW1hRnsErVFGe8DygcQDEZyAwR6mi7ym1h3VwWJ+2y09We5
| euyyem+7J8l2KeaJMJZaboi9rKjp/D6nl8a7aUxD/k2WrcPfwI2pok7o+QVaHTzo
| oXUSiiowm5lU2Ir6WmDDShBc3Ddql9siUjULVqt5bUcTXXvrS2X8xItKS+Zz+J6N
| 3f6xHKzt8YFlHAoKYuRh1E7K/uKsBQ6oNEAv/fN7GJHuxbb9HHAwZJe+DTnCAPws
| 84ceLvP0DzJN/Socs95sKb4=
|_-----END CERTIFICATE-----
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
|_ libwww: 404
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
@@ -69,27 +107,27 @@ PORT STATE SERVICE REASON VERSION
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-errors:
| Spidering limited to: maxpagecount=40; withinhost=nextcloud.lan.ddnsgeek.com
| Found the following error pages:
|
| Error Code: 404
|_ http://nextcloud.lan.ddnsgeek.com:443/
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_ssl-date: TLS randomness does not represent time
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-referer-checker:
| Spidering limited to: maxpagecount=30
| https://nextcloud.lan.ddnsgeek.com:443/dist/core-common.js?v=e80d16a8-0
| https://nextcloud.lan.ddnsgeek.com:443/dist/core-login.js?v=e80d16a8-0
| https://nextcloud.lan.ddnsgeek.com:443/apps/theming/js/theming.js?v=e80d16a8-0
|_ https://nextcloud.lan.ddnsgeek.com:443/dist/core-main.js?v=e80d16a8-0
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-sitemap-generator:
| Directory structure:
| /index.php/
| Other: 1
| Longest directory structure:
| Depth: 1
| Dir: /index.php/
| Total files found (by extension):
|_ Other: 1
|_http-date: Sun, 05 Apr 2026 08:20:00 GMT; -6s from local time.
| http-waf-detect: IDS/IPS/WAF detected:
|_nextcloud.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-malware-host: Host appears to be clean
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
|_http-feed: Couldn't find any feeds.
|_http-date: Tue, 14 Apr 2026 03:52:41 GMT; -3s from local time.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-server-header: Apache/2.4.66 (Debian)
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
@@ -103,7 +141,7 @@ PORT STATE SERVICE REASON VERSION
| Header: X-Content-Type-Options: nosniff
| Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
| Content_Security_Policy:
| Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';script-src-elem 'strict-dynamic' 'nonce-UD/+8Gehnjv7KV5meNGH9n+8Zuy7Mo93L8fvPTLG4rg=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
| Header: Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
| Description: Define the base uri for relative uri.
| Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
| Description: Define which scripts the protected resource can execute.
@@ -122,39 +160,12 @@ PORT STATE SERVICE REASON VERSION
| Cookies are secured with Secure Flag in HTTPS Connection
| Cache_Control:
|_ Header: Cache-Control: no-cache, no-store, must-revalidate
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-chrono: Request times for /index.php/login; avg: 3919.89ms; min: 1656.25ms; max: 10499.33ms
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-mobileversion-checker: No mobile version detected.
|_http-php-version: Logo query returned unknown hash e473773cc5b8b9dc08c846c0dc434c15
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_ssl-date: TLS randomness does not represent time
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
| http-enum:
|_ /robots.txt: Robots file
|_http-comments-displayer: Couldn't find any comments.
|_http-chrono: Request times for /index.php/login; avg: 2458.85ms; min: 1703.33ms; max: 3689.52ms
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-mobileversion-checker: No mobile version detected.
| http-traceroute:
| Status Code
| Hop #1: 404
@@ -176,11 +187,51 @@ PORT STATE SERVICE REASON VERSION
| Hop #1
| Hop #2: https://nextcloud.lan.ddnsgeek.com/index.php/login
|_ Hop #3: https://nextcloud.lan.ddnsgeek.com/index.php/login
|_http-malware-host: Host appears to be clean
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
| http-php-version: Logo query returned unknown hash 7209a04a90229576f2e4ff38710cbbd5
| Credits query returned unknown hash 7209a04a90229576f2e4ff38710cbbd5
|_Version from header x-powered-by: PHP/8.3.30
| http-sitemap-generator:
| Directory structure:
| /index.php/
| Other: 1
| Longest directory structure:
| Depth: 1
| Dir: /index.php/
| Total files found (by extension):
|_ Other: 1
| http-headers:
| Cache-Control: no-cache, no-store, must-revalidate
| Content-Length: 16047
| Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';script-src-elem 'strict-dynamic' 'nonce-X594h5DgY3hTUT16aMu7aHJx7JGnNKQBMo8qHmmeJz4=';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://*.tile.openstreetmap.org;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self';frame-ancestors 'self';form-action 'self'
| Content-Type: text/html; charset=UTF-8
| Date: Tue, 14 Apr 2026 03:52:32 GMT
| Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'none';microphone 'none';payment 'none'
| Referrer-Policy: same-origin
| Server: Apache/2.4.66 (Debian)
| Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
| Set-Cookie: oc_sessionPassphrase=iqjM5ZelDa7FDYnEagm7YKi4xAYxY%2By8HsYpzip6EAIve%2Fcaq75I8p1eNvhJHnoBu6bc3eJ3eRe2BYmlguMWP2cXiG2GI4pZRqf%2F3ml0UkUEyZZ%2B1Fbc78rWd%2B%2Fr1SzL; path=/; secure; HttpOnly; SameSite=Lax
| Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
| Set-Cookie: __Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax
| Set-Cookie: __Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict
| Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
| Set-Cookie: ocexfs76yoe2=d6e07917a213bb55c27a45dc41105050; path=/; secure; HttpOnly; SameSite=Lax
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Frame-Options: SAMEORIGIN
| X-Permitted-Cross-Domain-Policies: none
| X-Powered-By: PHP/8.3.30
| X-Request-Id: StUWwRgKsFOpX9ZPeriD
| X-Robots-Tag: noindex, nofollow
| X-Xss-Protection: 1; mode=block
| Connection: close
|
|_ (Request type: HEAD)
| http-title: Login \xE2\x80\x93 Nextcloud
|_Requested resource was https://nextcloud.lan.ddnsgeek.com/index.php/login
|_http-errors: Couldn't find any error pages.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 08:28:09 2026 -- 1 IP address (1 host up) scanned in 727.15 seconds
# Nmap done at Tue Apr 14 03:57:36 2026 -- 1 IP address (1 host up) scanned in 517.53 seconds
```