beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md
+2 -2
View File
@@ -7,10 +7,10 @@ curl -sSikf https://searxng.lan.ddnsgeek.com:443/robots.txt
```
HTTP/2 200
content-type: text/plain; charset=utf-8
date: Sun, 05 Apr 2026 09:09:11 GMT
date: Tue, 14 Apr 2026 04:10:38 GMT
referrer-policy: no-referrer
server: granian
server-timing: total;dur=0.906, render;dur=0
server-timing: total;dur=4.658, render;dur=0
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-download-options: noopen
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md
+6 -6
View File
@@ -7,17 +7,17 @@ curl -sSik https://searxng.lan.ddnsgeek.com:443/
```
HTTP/2 200
content-type: text/html; charset=utf-8
date: Sun, 05 Apr 2026 09:09:12 GMT
date: Tue, 14 Apr 2026 04:10:41 GMT
referrer-policy: no-referrer
server: granian
server-timing: total;dur=9.667, render;dur=1.174
server-timing: total;dur=4.329, render;dur=2.512
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-robots-tag: noindex, nofollow
x-xss-protection: 1; mode=block
content-length: 6340
content-length: 6342
<!DOCTYPE html>
<html class="no-js theme-auto center-alignment-no" lang="en-EN" >
@@ -26,12 +26,12 @@ content-length: 6340
<meta name="endpoint" content="index">
<meta name="description" content="SearXNG — a privacy-respecting, open metasearch engine">
<meta name="keywords" content="SearXNG, search, search engine, metasearch, meta search">
<meta name="generator" content="searxng/2026.4.5+474b0a55b">
<meta name="generator" content="searxng/2026.4.11+9e08a6771">
<meta name="referrer" content="no-referrer">
<meta name="robots" content="noarchive">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>SearXNG</title>
<script type="module" src="/static/themes/simple/sxng-core.min.js" client_settings="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"></script>
<script type="module" src="/static/themes/simple/sxng-core.min.js" client_settings="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"></script>
<link rel="stylesheet" href="/static/themes/simple/sxng-ltr.min.css" type="text/css" media="screen">
<link title="SearXNG" type="application/opensearchdescription+xml" rel="search" href="/opensearch.xml?method=POST&amp;autocomplete=">
<link rel="icon" href="/static/themes/simple/img/favicon.png" sizes="any">
@@ -65,7 +65,7 @@ content-length: 6340
</main>
<footer>
<p>
Powered by <a href="/info/en/about">SearXNG</a> - 2026.4.5+474b0a55b — a privacy-respecting, open metasearch engine<br>
Powered by <a href="/info/en/about">SearXNG</a> - 2026.4.11+9e08a6771 — a privacy-respecting, open metasearch engine<br>
<a href="https://github.com/searxng/searxng">Source code</a>
| <a href="https://github.com/searxng/searxng/issues">Issue tracker</a>
| <a href="/stats">Engine stats</a> | <a href="https://searx.space">Public instances</a>
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md
+12 -10
View File
@@ -290,22 +290,24 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/
200 GET 100l 757w 7942c https://searxng.lan.ddnsgeek.com/info/en/about
200 GET 303l 863w 16197c https://searxng.lan.ddnsgeek.com/stats
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/en/
400 GET 2l 11w 65c https://searxng.lan.ddnsgeek.com/image_proxy
200 GET 100l 757w 7940c https://searxng.lan.ddnsgeek.com/info/en/about
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/
200 GET 277l 800w 14797c https://searxng.lan.ddnsgeek.com/stats
200 GET 257l 14416w 323603c https://searxng.lan.ddnsgeek.com/preferences
200 GET 25l 42w 522c https://searxng.lan.ddnsgeek.com/manifest.json
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.png
200 GET 14l 43w 884c https://searxng.lan.ddnsgeek.com/opensearch.xml
200 GET 3l 93w 4936c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-core.min.js
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.png
200 GET 1l 37w 726c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.svg
200 GET 3l 93w 4936c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-core.min.js
200 GET 2l 1863w 85693c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-ltr.min.css
200 GET 54l 484w 6342c https://searxng.lan.ddnsgeek.com/search
200 GET 54l 484w 6340c https://searxng.lan.ddnsgeek.com/
200 GET 1l 196w 100341c https://searxng.lan.ddnsgeek.com/config
200 GET 54l 484w 6344c https://searxng.lan.ddnsgeek.com/search
200 GET 25l 42w 522c https://searxng.lan.ddnsgeek.com/manifest.json
200 GET 257l 14536w 325173c https://searxng.lan.ddnsgeek.com/preferences
200 GET 54l 484w 6342c https://searxng.lan.ddnsgeek.com/
200 GET 1l 196w 100342c https://searxng.lan.ddnsgeek.com/config
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/favicon.ico
200 GET 47l 193w 15716c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/searxng.png
200 GET 142l 726w 8253c https://searxng.lan.ddnsgeek.com/info/en/search-syntax
200 GET 6l 12w 117c https://searxng.lan.ddnsgeek.com/robots.txt
200 GET 1l 2w 8c https://searxng.lan.ddnsgeek.com/autocompleter
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md
+6 -200
View File
@@ -5,211 +5,17 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
[/root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:22:26 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml searxng.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:12:03 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml searxng.lan.ddnsgeek.com
Nmap scan report for searxng.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
Host is up, received user-set.
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:22:31 UTC for 1160s
Scanned at 2026-04-14 04:12:09 UTC for 1s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-headers:
| Content-Length: 6340
| Content-Type: text/html; charset=utf-8
| Date: Sun, 05 Apr 2026 09:27:01 GMT
| Referrer-Policy: no-referrer
| Server: granian
| Server-Timing: total;dur=27.312, render;dur=20.734
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X-Content-Type-Options: nosniff
| X-Download-Options: noopen
| X-Frame-Options: SAMEORIGIN
| X-Robots-Tag: noindex, nofollow
| X-Xss-Protection: 1; mode=block
| Connection: close
|
|_ (Request type: HEAD)
| http-useragent-tester:
| Status for browser useragent: 200
| Allowed User Agents:
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
| MFC_Tear_Sample
| HTTP::Lite
| PHPCrawl
| URI::Fetch
| Zend_Http_Client
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-feed: Couldn't find any feeds.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-server-header: granian
| http-waf-detect: IDS/IPS/WAF detected:
|_searxng.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
| http-sitemap-generator:
| Directory structure:
| /
| Other: 4; json: 1; xml: 1
| /info/en/
| Other: 1
| /static/themes/simple/
| css: 1; js: 1
| Longest directory structure:
| Depth: 3
| Dir: /static/themes/simple/
| Total files found (by extension):
|_ Other: 5; css: 1; js: 1; json: 1; xml: 1
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-sql-injection:
| Possible sqli for forms:
| Form at path: /search, form's action: /search. Fields that might be vulnerable:
| q
| Form at path: /, form's action: /search. Fields that might be vulnerable:
|_ q
|_ssl-date: TLS randomness does not represent time
|_http-malware-host: Host appears to be clean
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-php-version: Logo query returned unknown hash 4a17502ae0c6bf21a2cfc344d4356de9
|_Credits query returned unknown hash 4a17502ae0c6bf21a2cfc344d4356de9
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| ssl-cert: Subject: commonName=searxng.lan.ddnsgeek.com
| Subject Alternative Name: DNS:searxng.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:34
| Not valid after: 2026-05-06T19:02:33
| MD5: d452 b841 8ae5 9c53 aae2 46be 8019 715e
| SHA-1: 121d b257 a1bb cab9 334f 2b22 a6a4 56ee c043 067d
| SHA-256: 932a 826c f2c5 58ed 9bb5 1c11 7af8 4f92 fcfe c32c 7cea d546 1b54 2e04 350f 40b7
| -----BEGIN CERTIFICATE-----
| MIIGFDCCBPygAwIBAgISBlZiftnDPAhsaH/H+7tDcyKkMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjA1MTkwMjM0WhcNMjYwNTA2MTkwMjMzWjAjMSEwHwYDVQQD
| ExhzZWFyeG5nLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
| DwAwggIKAoICAQC2Nco6YK5yss+y5+fA0w93a1CMjv2yqZKNZsWXnl9ac2FNpmf2
| kU9yWr9o+vjxhlFiyAsDIZlI+1pnObefQs41bvxCmVzzvFE9pYnBsMoZkaUKDXLn
| /shOh1XA/9yU8U/kDlGF8l9a4a64Dt/vnIJeudu7/zCtaTV0cITF9Oe5iBoYNbtr
| 2V81YeUc/egUrkpLJv+BOLXCSFbAMbbx6RuIZEjj/4oB0kZa0+D7hARsYN2wpsEt
| lggem4xr3RoeHodr0rM5hQNg7OvazMUB1d+R6kgBndVrhv+TzGW4GAvxF/bcKZyV
| 832TsDOoWIisgqKaDiArbv4NBwyhaY6kf577rxkz7spq4ogQBnvq7YL0CDnNWQL4
| CczJIzYjoHy66hDnpq2j/5Ng7vWcjvL6tlC8LRsU5C2xtCJJj7wecrzGHc10UzRs
| 849h9q7NDxkdUaoHS24vmuXbEuhExrDF0XYiIDjNDaf4OUtYGHYjDkmgxqqT8qzu
| 8J26oGDRf66gQ2zMBCQCSbGjuA+dVdFkeFY9ofwXPhf773iDq/kMEbScdkxUK704
| ZWO/NwJ4nb73//igiQb5Lg8OCt1Lfov30T3uRPJuWCrXy0JESEIvDl7fRv4ayFZc
| M8RW30mJyvJP2pvT4eZvt1EFLKa9cMCWwqidccWNnd3sRt4ME4fzzWj8YwIDAQAB
| o4ICMDCCAiwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
| BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQFXVj+MJo4fhyXCZcGODA6
| 73UeSTAfBgNVHSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcB
| AQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCMGA1Ud
| EQQcMBqCGHNlYXJ4bmcubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeB
| DAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEyLmMubGVuY3Iub3JnLzM3
| LmNybDCCAQwGCisGAQQB1nkCBAIEgf0EgfoA+AB2AGQRxGykEuyniRyiAi4AvKtP
| KAfUHjUnq+r+1QPJfc3wAAABnC9k2UcAAAQDAEcwRQIhAKVGx7XzgAVqrDTK3qsG
| JX/jiybYX2Hvxgm0W++qoIbmAiB7Pmuf0z35gA3Lla7iyepOsiR8UQrbD3OaaY6C
| eAtMnAB+AKXJeJJdV0YXgocN2IlmC1xVZIt9AEDy7AdoUdGIaRn3AAABnC9k2z4A
| CAAABQAxQN/aBAMARzBFAiEA6Xphv+k9t0JiJ1svG9bhk1mDzXppmeDElTKCY49B
| nO4CIA3WnzRPiAXKQCsGoq+uSn/Anm1S9/7QoPxWPeyOaZmLMA0GCSqGSIb3DQEB
| CwUAA4IBAQAHYFjcVlOzGUj3F0qROoW96jCVbJd5NIYi99RERwM5OwKEdN4TpZ+v
| oF2K4ukI+J1RrW1JLKNymUkLbY/jCZh2bPrIijWQO7BT5GICFEcJWgRu6+Z6TopT
| QMcIqZZegLvQOTAdlK2LonBT4/IY5ND8Nw/WoPAF3kkC/wN2dz6W9wA/K85fj0zC
| 4+31dDr7ir7bjbLpjVV60FgeNSooGmiMpffKSUCztteydblWqCZzgBQowu/+A2IA
| 3CTF5DTIlu1sqUnCnOsgAgycj15zOocoOsAFqpGJ/tUuKOJe1MpgjIR6a1uOmW1+
| klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
|_-----END CERTIFICATE-----
|_http-mobileversion-checker: No mobile version detected.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
| http-robots.txt: 4 disallowed entries
|_/stats /image_proxy /preferences /*?*q=*
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-date: Sun, 05 Apr 2026 09:27:02 GMT; -2s from local time.
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-chrono: Request times for /; avg: 7141.21ms; min: 820.07ms; max: 15815.55ms
| http-csrf:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=searxng.lan.ddnsgeek.com
| Found the following possible CSRF vulnerabilities:
|
| Path: http://searxng.lan.ddnsgeek.com:443/
| Form id: search
| Form action: /search
|
| Path: http://searxng.lan.ddnsgeek.com:443/search
| Form id: search
| Form action: /search
|
| Path: https://searxng.lan.ddnsgeek.com:443/
| Form id: search
|_ Form action: /search
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-comments-displayer:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=searxng.lan.ddnsgeek.com
|
| Path: https://searxng.lan.ddnsgeek.com:443/static/themes/simple/sxng-ltr.min.css
| Line number: 1
| Comment:
|_ /*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */
|_http-favicon: Unknown favicon MD5: 39D42DD43FA010D699534A85CCA0881B
|_http-title: SearXNG
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-errors:
| Spidering limited to: maxpagecount=40; withinhost=searxng.lan.ddnsgeek.com
| Found the following error pages:
|
| Error Code: 404
| http://searxng.lan.ddnsgeek.com:443/info/en/search-syntax
|
| Error Code: 404
|_ http://searxng.lan.ddnsgeek.com:443/None
PORT STATE SERVICE REASON VERSION
443/tcp filtered https no-response
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:41:52 2026 -- 1 IP address (1 host up) scanned in 1166.52 seconds
# Nmap done at Tue Apr 14 04:12:11 2026 -- 1 IP address (1 host up) scanned in 8.49 seconds
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md
+45 -45
View File
@@ -6,7 +6,7 @@ sslscan --show-certificate --no-colour searxng.lan.ddnsgeek.com:443 2>&1
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
@@ -56,9 +56,9 @@ TLSv1.2 128 bits x25519
SSL Certificate:
Certificate blob:
-----BEGIN CERTIFICATE-----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@@ -71,31 +71,31 @@ CczJIzYjoHy66hDnpq2j/5Ng7vWcjvL6tlC8LRsU5C2xtCJJj7wecrzGHc10UzRs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o4ICJjCCAiIwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG
A1UdEwEB/wQCMAAwHQYDVR0OBBYEFAVdWP4wmjh+HJcJlwY4MDrvdR5JMB8GA1Ud
IwQYMBaAFAC1KfItjm8x6JtMrXg++tzpDNHSMDMGCCsGAQUFBwEBBCcwJTAjBggr
BgEFBQcwAoYXaHR0cDovL3IxMi5pLmxlbmNyLm9yZy8wIwYDVR0RBBwwGoIYc2Vh
cnhuZy5sYW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC8GA1Ud
HwQoMCYwJKAioCCGHmh0dHA6Ly9yMTIuYy5sZW5jci5vcmcvMTEzLmNybDCCAQsG
CisGAQQB1nkCBAIEgfwEgfkA9wB1AMs49xWJfIShRF9bwd37yW7ymlnNRwppBYWw
yxTDFFjnAAABnWWbhvsAAAQDAEYwRAIgYeLYQse3OQmeZ4bnf4nfZVwiJuPIgQk0
uai2b3xSo18CIC2iZXBWePi++6+LwtNcJYKlX8uRh6pkjJCamQ/xMP7rAH4AqCbL
4wrGNRJGUz/gZfFPGdluGQgTxB3ZbXkAsxI8VScAAAGdZZuKGQAIAAAFAAXkmSwE
AwBHMEUCIQC1+nMHUb8YR5UL4hHDuQ0dlU6kJ5beCFGDSTTrvYYiPgIgPfCn8ndZ
nYx1kGwz7kW7MdGVjZiCcmHNTSrguRtVnfgwDQYJKoZIhvcNAQELBQADggEBAFQh
FXnwXbkDc3H2yXkDnzxZ7KDE/DG5OP4XK4qYUZ7O+KfVEAMw8KH6IimaryftC0q2
2ru+glbhAro9g4knBNbS52BwXWnJrWXMeeO3pg+MHyh15eawrSMWW211Tds7nMYd
Fx5uxpJglhIob8inqNf0T3xmAAYxinmOkD7OH8oBKo61+Pe+yGw4X5kBL7Owpl3k
hVpJm2pRcC8bopwWD00d/lP2IqSbMAniBSsWDrIAE+Pzkz+R7pmTkNjJfVSrLVQb
13u5NDtG2PTyweFtNuCtUwN+mtDv2ZDKIjQx+ksn4Inqp10HqZtaSVPTJGHZtAqK
exPZpzI9ocSVGMygmJg=
-----END CERTIFICATE-----
Version: 2
Serial Number: 06:56:62:7e:d9:c3:3c:08:6c:68:7f:c7:fb:bb:43:73:22:a4
Serial Number: 06:87:81:61:34:72:6a:82:16:7e:88:79:e2:04:fc:fa:1f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: /C=US/O=Let's Encrypt/CN=R12
Not valid before: Feb 5 19:02:34 2026 GMT
Not valid after: May 6 19:02:33 2026 GMT
Not valid before: Apr 7 00:44:34 2026 GMT
Not valid after: Jul 6 00:44:33 2026 GMT
Subject: /CN=searxng.lan.ddnsgeek.com
Public Key Algorithm: NULL
RSA Public Key: (4096 bit)
@@ -141,7 +141,7 @@ klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
TLS Web Server Authentication
X509v3 Basic Constraints: critical
CA:FALSE
X509v3 Subject Key Identifier:
@@ -156,33 +156,33 @@ klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
Policy: 2.23.140.1.2.1
X509v3 CRL Distribution Points:
Full Name:
URI:http://r12.c.lencr.org/37.crl
URI:http://r12.c.lencr.org/113.crl
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 64:11:C4:6C:A4:12:EC:A7:89:1C:A2:02:2E:00:BC:AB:
4F:28:07:D4:1E:35:27:AB:EA:FE:D5:03:C9:7D:CD:F0
Timestamp : Feb 5 20:01:04.327 2026 GMT
Log ID : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:
F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7
Timestamp : Apr 7 01:43:04.699 2026 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:A5:46:C7:B5:F3:80:05:6A:AC:34:CA:
DE:AB:06:25:7F:E3:8B:26:D8:5F:61:EF:C6:09:B4:5B:
EF:AA:A0:86:E6:02:20:7B:3E:6B:9F:D3:3D:F9:80:0D:
CB:95:AE:E2:C9:EA:4E:B2:24:7C:51:0A:DB:0F:73:9A:
69:8E:82:78:0B:4C:9C
30:44:02:20:61:E2:D8:42:C7:B7:39:09:9E:67:86:E7:
7F:89:DF:65:5C:22:26:E3:C8:81:09:34:B9:A8:B6:6F:
7C:52:A3:5F:02:20:2D:A2:65:70:56:78:F8:BE:FB:AF:
8B:C2:D3:5C:25:82:A5:5F:CB:91:87:AA:64:8C:90:9A:
99:0F:F1:30:FE:EB
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : A5:C9:78:92:5D:57:46:17:82:87:0D:D8:89:66:0B:5C:
55:64:8B:7D:00:40:F2:EC:07:68:51:D1:88:69:19:F7
Timestamp : Feb 5 20:01:04.830 2026 GMT
Extensions: 00:00:05:00:31:40:DF:DA
Log ID : A8:26:CB:E3:0A:C6:35:12:46:53:3F:E0:65:F1:4F:19:
D9:6E:19:08:13:C4:1D:D9:6D:79:00:B3:12:3C:55:27
Timestamp : Apr 7 01:43:05.497 2026 GMT
Extensions: 00:00:05:00:05:E4:99:2C
Signature : ecdsa-with-SHA256
30:45:02:21:00:E9:7A:61:BF:E9:3D:B7:42:62:27:5B:
2F:1B:D6:E1:93:59:83:CD:7A:69:99:E0:C4:95:32:82:
63:8F:41:9C:EE:02:20:0D:D6:9F:34:4F:88:05:CA:40:
2B:06:A2:AF:AE:4A:7F:C0:9E:6D:52:F7:FE:D0:A0:FC:
56:3D:EC:8E:69:99:8B
30:45:02:21:00:B5:FA:73:07:51:BF:18:47:95:0B:E2:
11:C3:B9:0D:1D:95:4E:A4:27:96:DE:08:51:83:49:34:
EB:BD:86:22:3E:02:20:3D:F0:A7:F2:77:59:9D:8C:75:
90:6C:33:EE:45:BB:31:D1:95:8D:98:82:72:61:CD:4D:
2A:E0:B9:1B:55:9D:F8
Verify m:
unable to get local issuer certificate
@@ -194,8 +194,8 @@ Subject: searxng.lan.ddnsgeek.com
Altnames: DNS:searxng.lan.ddnsgeek.com
Issuer: R12
Not valid before: Feb 5 19:02:34 2026 GMT
Not valid after: May 6 19:02:33 2026 GMT
Not valid before: Apr 7 00:44:34 2026 GMT
Not valid after: Jul 6 00:44:33 2026 GMT
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md
+21 -2
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://searxng.lan.ddnsge
[/root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -18,12 +37,12 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://searxng.lan.ddnsge
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R12
+ Platform: Windows
+ Start Time: 2026-04-05 09:21:58 (GMT0)
+ Start Time: 2026-04-14 04:11:06 (GMT0)
---------------------------------------------------------------------------
+ Server: granian
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [999996] /robots.txt: contains 5 entries which should be manually viewed. See: https://developer.mozilla.org/en-US/docs/Glossary/Robots.txt
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md
+5 -5
View File
@@ -11,7 +11,7 @@ Title : SearXNG
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.5+474b0a55b], OpenSearch[/opensearch.xml?method=POST&amp;autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.11+9e08a6771], OpenSearch[/opensearch.xml?method=POST&amp;autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
@@ -28,7 +28,7 @@ Detected Plugins:
This plugin identifies meta generator tags and extracts its
value.
String : searxng/2026.4.5+474b0a55b
String : searxng/2026.4.11+9e08a6771
[ OpenSearch ]
This plugin identifies open search and extracts the URL.
@@ -77,12 +77,12 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 6340
Content-Length: 6342
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 09:27:23 GMT
Date: Tue, 14 Apr 2026 04:12:58 GMT
Referrer-Policy: no-referrer
Server: granian
Server-Timing: total;dur=2.321, render;dur=0.755
Server-Timing: total;dur=2.507, render;dur=0.955
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://searxng.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://searxng.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 09:07:05 GMT
Date: Tue, 14 Apr 2026 04:10:28 GMT
Content-Length: 17
Moved Permanently
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSik http://searxng.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://searxng.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:07:06 GMT
Date: Tue, 14 Apr 2026 04:10:28 GMT
Content-Length: 17
Moved Permanently
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md
+24 -14
View File
@@ -290,28 +290,39 @@ Configuration {
unique: false,
response_size_limit: 4194304,
}
400 GET 2l 11w 65c https://searxng.lan.ddnsgeek.com/image_proxy
200 GET 277l 800w 14797c https://searxng.lan.ddnsgeek.com/stats
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/
404 GET 2l 12w 64c https://searxng.lan.ddnsgeek.com/info/en/
200 GET 100l 757w 7940c https://searxng.lan.ddnsgeek.com/info/en/about
200 GET 257l 14416w 323603c https://searxng.lan.ddnsgeek.com/preferences
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.png
200 GET 1l 37w 726c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.svg
200 GET 54l 484w 6342c https://searxng.lan.ddnsgeek.com/search
400 GET 2l 11w 65c https://searxng.lan.ddnsgeek.com/image_proxy
200 GET 303l 863w 16197c https://searxng.lan.ddnsgeek.com/stats
200 GET 100l 757w 7942c https://searxng.lan.ddnsgeek.com/info/en/about
200 GET 25l 42w 522c https://searxng.lan.ddnsgeek.com/manifest.json
200 GET 3l 93w 4936c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-core.min.js
200 GET 2l 1863w 85693c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-ltr.min.css
200 GET 14l 43w 884c https://searxng.lan.ddnsgeek.com/opensearch.xml
200 GET 3l 93w 4936c https://searxng.lan.ddnsgeek.com/static/themes/simple/sxng-core.min.js
200 GET 25l 42w 522c https://searxng.lan.ddnsgeek.com/manifest.json
200 GET 54l 484w 6340c https://searxng.lan.ddnsgeek.com/
200 GET 1l 196w 100341c https://searxng.lan.ddnsgeek.com/config
200 GET 257l 14536w 325173c https://searxng.lan.ddnsgeek.com/preferences
200 GET 54l 484w 6344c https://searxng.lan.ddnsgeek.com/search
200 GET 1l 37w 726c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.svg
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/favicon.png
200 GET 54l 484w 6342c https://searxng.lan.ddnsgeek.com/
200 GET 1l 196w 100342c https://searxng.lan.ddnsgeek.com/config
200 GET 15l 121w 8956c https://searxng.lan.ddnsgeek.com/favicon.ico
200 GET 142l 726w 8253c https://searxng.lan.ddnsgeek.com/info/en/search-syntax
200 GET 47l 193w 15716c https://searxng.lan.ddnsgeek.com/static/themes/simple/img/searxng.png
200 GET 6l 12w 117c https://searxng.lan.ddnsgeek.com/robots.txt
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[ => https://searxng.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/] => https://searxng.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.txt => https://searxng.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.html => https://searxng.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.php => https://searxng.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/] => https://searxng.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.asp => https://searxng.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].txt => https://searxng.lan.ddnsgeek.com/].txt
404 GET 0l 0w 64c https://searxng.lan.ddnsgeek.com/PrivacyPolicy.jsp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].html => https://searxng.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.aspx => https://searxng.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/[.jsp => https://searxng.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].php => https://searxng.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].asp => https://searxng.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].aspx => https://searxng.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/].jsp => https://searxng.lan.ddnsgeek.com/].jsp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/plain] => https://searxng.lan.ddnsgeek.com/plain]
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/plain].txt => https://searxng.lan.ddnsgeek.com/plain].txt
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/plain].html => https://searxng.lan.ddnsgeek.com/plain].html
@@ -326,7 +337,6 @@ Configuration {
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/quote].asp => https://searxng.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/quote].aspx => https://searxng.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://searxng.lan.ddnsgeek.com/quote].jsp => https://searxng.lan.ddnsgeek.com/quote].jsp
404 GET 0l 0w 64c https://searxng.lan.ddnsgeek.com/Livezilla
200 GET 1l 2w 8c https://searxng.lan.ddnsgeek.com/autocompleter
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://searxng.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://searxng.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 09:07:03 GMT
Date: Tue, 14 Apr 2026 04:10:28 GMT
Content-Length: 17
Moved Permanently
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md
+30 -30
View File
@@ -5,41 +5,43 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:07:49 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml searxng.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:10:29 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml searxng.lan.ddnsgeek.com
Nmap scan report for searxng.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:07:57 UTC for 1556s
Scanned at 2026-04-14 04:10:35 UTC for 328s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-malware-host: Host appears to be clean
|_http-comments-displayer: Couldn't find any comments.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-errors: Couldn't find any error pages.
|_http-chrono: Request times for /; avg: 912.39ms; min: 432.23ms; max: 1691.72ms
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-title: Did not follow redirect to https://searxng.lan.ddnsgeek.com/
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-feed: Couldn't find any feeds.
|_http-date: Tue, 14 Apr 2026 04:11:02 GMT; -3s from local time.
|_http-errors: Couldn't find any error pages.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-headers:
| Location: https://searxng.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 09:08:39 GMT
| Date: Tue, 14 Apr 2026 04:11:10 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
| http-vhosts:
|_128 names had status 308
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-malware-host: Host appears to be clean
|_http-title: Did not follow redirect to https://searxng.lan.ddnsgeek.com/
|_http-date: Sun, 05 Apr 2026 09:08:14 GMT; -1s from local time.
|_http-feed: Couldn't find any feeds.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-mobileversion-checker: No mobile version detected.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: https://searxng.lan.ddnsgeek.com/
@@ -61,20 +63,18 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-chrono: Request times for /; avg: 4102.72ms; min: 2048.02ms; max: 7134.03ms
|_http-mobileversion-checker: No mobile version detected.
|_http-comments-displayer: Couldn't find any comments.
| http-vhosts:
|_128 names had status 308
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:34:16 2026 -- 1 IP address (1 host up) scanned in 1586.71 seconds
# Nmap done at Tue Apr 14 04:16:04 2026 -- 1 IP address (1 host up) scanned in 336.10 seconds
```
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md
+59159 -58917
View File
File diff suppressed because it is too large. Load diff
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md
+24 -5
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://searxng.lan.ddnsgee
[/root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/searxng.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://searxng.lan.ddnsgee
+ Target Hostname: searxng.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 09:07:30 (GMT0)
+ Start Time: 2026-04-14 04:10:51 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7901 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 09:58:36 (GMT0) (3066 seconds)
+ 7902 requests: 17 errors and 8 items reported on the remote host
+ End Time: 2026-04-14 04:29:33 (GMT0) (1122 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/report.md/searxng.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md
+6 -6
View File
@@ -23,7 +23,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://searxng.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:09:11 GMT
Date: Tue, 14 Apr 2026 04:11:09 GMT
Content-Length: 17
Connection: close
@@ -33,7 +33,7 @@ Title : SearXNG
IP : 167.179.167.166
Country : NEW ZEALAND, NZ
Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.5+474b0a55b], OpenSearch[/opensearch.xml?method=POST&amp;autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Summary : HTML5, HTTPServer[granian], MetaGenerator[searxng/2026.4.11+9e08a6771], OpenSearch[/opensearch.xml?method=POST&amp;autocomplete=], Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[referrer-policy,server-timing,x-content-type-options,x-download-options,x-robots-tag], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
Detected Plugins:
[ HTML5 ]
@@ -50,7 +50,7 @@ Detected Plugins:
This plugin identifies meta generator tags and extracts its
value.
String : searxng/2026.4.5+474b0a55b
String : searxng/2026.4.11+9e08a6771
[ OpenSearch ]
This plugin identifies open search and extracts the URL.
@@ -99,12 +99,12 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 200 OK
Content-Length: 6340
Content-Length: 6342
Content-Type: text/html; charset=utf-8
Date: Sun, 05 Apr 2026 09:09:21 GMT
Date: Tue, 14 Apr 2026 04:11:20 GMT
Referrer-Policy: no-referrer
Server: granian
Server-Timing: total;dur=2.974, render;dur=1.538
Server-Timing: total;dur=3.457, render;dur=1.749
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
X-Content-Type-Options: nosniff
X-Download-Options: noopen