fresh autorecon run
This commit is contained in:
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
+25
-44
@@ -5,33 +5,25 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
|
||||
[/root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 08:15:02 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 03:48:59 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/nextcloud.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml nextcloud.lan.ddnsgeek.com
|
||||
Nmap scan report for nextcloud.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
Host is up, received user-set (0.024s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 08:15:16 UTC for 1235s
|
||||
Scanned at 2026-04-14 03:49:06 UTC for 823s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-traceroute:
|
||||
| Status Code
|
||||
| Hop #1: 301
|
||||
| Hop #2: 301
|
||||
| Hop #3: 404
|
||||
| content-type
|
||||
| Hop #1
|
||||
| Hop #2
|
||||
| Hop #3: text/plain; charset=utf-8
|
||||
| content-length
|
||||
| Hop #1: 17
|
||||
| Hop #2: 17
|
||||
| Hop #3: 19
|
||||
| location
|
||||
| Hop #1: https://nextcloud.lan.ddnsgeek.com/
|
||||
| Hop #2: https://nextcloud.lan.ddnsgeek.com/
|
||||
|_ Hop #3
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://nextcloud.lan.ddnsgeek.com/index.php/login
|
||||
@@ -53,37 +45,26 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-date: Sun, 05 Apr 2026 08:16:39 GMT; -2m03s from local time.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-chrono: Request times for /; avg: 900.47ms; min: 649.96ms; max: 1155.19ms
|
||||
|_http-date: Tue, 14 Apr 2026 03:52:20 GMT; -3s from local time.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-headers:
|
||||
| Location: https://nextcloud.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 08:18:48 GMT
|
||||
| Date: Tue, 14 Apr 2026 03:52:32 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-vhosts:
|
||||
| 126 names had status 308
|
||||
| news.lan.ddnsgeek.com : 404
|
||||
|_intra.lan.ddnsgeek.com : 404
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-title: Did not follow redirect to https://nextcloud.lan.ddnsgeek.com/
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-chrono: Request times for /; avg: 1469.81ms; min: 1340.59ms; max: 1702.87ms
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
@@ -94,6 +75,6 @@ PORT STATE SERVICE REASON VERSION
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 08:35:52 2026 -- 1 IP address (1 host up) scanned in 1251.73 seconds
|
||||
# Nmap done at Tue Apr 14 04:02:49 2026 -- 1 IP address (1 host up) scanned in 831.14 seconds
|
||||
|
||||
```
|
||||
Reference in new issue
Block a user