fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -13,20 +13,20 @@ curl -sSik http://shifts.lan.ddnsgeek.com:80/
|
||||
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://shifts.lan.ddnsgeek.com:80 2>&1 | tee "/root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt"
|
||||
|
||||
curl -sSikf https://shifts.lan.ddnsgeek.com:443/robots.txt
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt" -oX "/root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml" shifts.lan.ddnsgeek.com
|
||||
|
||||
ffuf -u http://shifts.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.shifts.lan.ddnsgeek.com" -mc all -fs 17 -r -noninteractive -s | tee "/root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_shifts.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/shifts.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/shifts.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" shifts.lan.ddnsgeek.com
|
||||
|
||||
ffuf -u http://shifts.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.shifts.lan.ddnsgeek.com" -mc all -fs 17 -r -noninteractive -s | tee "/root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_shifts.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
|
||||
|
||||
whatweb --color=never --no-errors -a 3 -v http://shifts.lan.ddnsgeek.com:80 2>&1
|
||||
|
||||
feroxbuster -u https://shifts.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
|
||||
|
||||
curl -sSikf https://shifts.lan.ddnsgeek.com:443/.well-known/security.txt
|
||||
|
||||
curl -sSikf https://shifts.lan.ddnsgeek.com:443/robots.txt
|
||||
|
||||
curl -sSik https://shifts.lan.ddnsgeek.com:443/
|
||||
|
||||
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://shifts.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
|
||||
|
||||
@@ -1,8 +0,0 @@
|
||||
Nmap script found a potential vulnerability. (State: VULNERABLE)
|
||||
|
||||
CVE Identified: CVE-2011-3192
|
||||
|
||||
CVE Identified: CVE-2011-3192
|
||||
|
||||
Identified HTTP Server: nginx/1.29.7
|
||||
|
||||
@@ -5,24 +5,28 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
|
||||
[/root/results/shifts.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/shifts.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 09:34:44 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/shifts.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml shifts.lan.ddnsgeek.com
|
||||
Increasing send delay for 167.179.167.166 from 0 to 5 due to 22 out of 54 dropped probes since last increase.
|
||||
adjust_timeouts2: packet supposedly had rtt of -63127 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -63127 microseconds. Ignoring time.
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:14:18 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/shifts.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml shifts.lan.ddnsgeek.com
|
||||
adjust_timeouts2: packet supposedly had rtt of -686055 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -686055 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -338029 microseconds. Ignoring time.
|
||||
adjust_timeouts2: packet supposedly had rtt of -338029 microseconds. Ignoring time.
|
||||
Nmap scan report for shifts.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.022s latency).
|
||||
Host is up, received user-set (0.014s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 09:34:50 UTC for 10678s
|
||||
Scanned at 2026-04-14 04:14:24 UTC for 2215s
|
||||
Not shown: 65531 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Did not follow redirect to https://shifts.lan.ddnsgeek.com/
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Chrona \xC2\xB7 Intelligent shift tracking
|
||||
|_http-title: Did not follow redirect to https://shifts.lan.ddnsgeek.com/
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD
|
||||
|_http-server-header: nginx/1.29.7
|
||||
|_http-favicon: Unknown favicon MD5: 201CC5A3633DB9EDF3FF294B124BCC5D
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
| ssl-cert: Subject: commonName=shifts.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:shifts.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
@@ -69,11 +73,69 @@ PORT STATE SERVICE REASON VERSION
|
||||
| oTGj3mlk7tR6vk/w8EjKiromakRLHU2OWzRu/eUyy6mbsKn6EFTIzwKrOIBrATNz
|
||||
| XNmVDbwlfwWaV+2mu9A=
|
||||
|_-----END CERTIFICATE-----
|
||||
|_http-favicon: Unknown favicon MD5: 201CC5A3633DB9EDF3FF294B124BCC5D
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-server-header: nginx/1.29.7
|
||||
20001/tcp closed microsan reset ttl 57
|
||||
51413/tcp open tcpwrapped syn-ack ttl 56
|
||||
20001/tcp closed microsan reset ttl 57
|
||||
51413/tcp open unknown syn-ack ttl 56
|
||||
| fingerprint-strings:
|
||||
| Kerberos:
|
||||
| \xb1
|
||||
| oLxLf\xa2
|
||||
| .f8D
|
||||
| \xae
|
||||
| h"@B3
|
||||
| @ybR
|
||||
| ~-J%W
|
||||
| SSLv23SessionReq:
|
||||
| |IBE
|
||||
| TLSSessionReq:
|
||||
| S,9p
|
||||
| #bK$
|
||||
| ]8v9
|
||||
| c{9iC
|
||||
|_ hF3&
|
||||
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
|
||||
SF-Port51413-TCP:V=7.99%I=9%D=4/14%Time=69DDC5D8%P=x86_64-pc-linux-gnu%r(T
|
||||
SF:LSSessionReq,1A0,"\x1b}\x10Pb\xbe@4\xc5\x95\x8eS,9p\xd4hp\x15\x8e2\xd7U
|
||||
SF:w\xe8r\xd8L\x1c\xa0\xdd\x08q\xa3\xc0j\xbb\x1e\xd5\xa2\xc5\xab!\x85\x86Q
|
||||
SF:x\xfa\xad\xf3\x10\+l\xedm\x93c\xb9,\x15\x81\xd4A\xb7\xcf\xdf\xfc\xdf3\x
|
||||
SF:f1\x1aP\x8d\x89\x10\r-S:\x05\|\xa4\x8a\(D\xbc:L\xab\x8b\xf2\xd5\xab\xe6
|
||||
SF:\x1d\xd3\xe2\xef\|n\xc2\x04\xe8/m\x7f\x1e\xfaZ\xc7T\xd9\xe9Xu\xb7\x80\x
|
||||
SF:d5\xa5\x17\xc5j3\xc0\.\x05S\xb8\x85\?\xb6\x82Ud@\xab\x82YS\xbf\xc0\xa9\
|
||||
SF:"B\xd40\xd4b\xaa\xc6\x15I\xb3\r\x07/\xe6><\x08\xcb\x85\xa6sPp\x98#bK\$\
|
||||
SF:xa3\xb75u\x9d\x86\xdf7\xf0d\xcf\xdb\x93r\x15\x8b\xf1\x14Vt\xa7\xd5\xae3
|
||||
SF:\xce\x1c7n\xc2r\xc7\+Q2\xb8\x9f\xc1\0vN\xf4\x9fo\xe7\"\xc0h\x1e\?\xfa\x
|
||||
SF:af\x9az\x04t\xb4\xb8\"\xaa\xdf\x82Z\x10\x9d\x8e1{\x8f#\x16\xa0\)@\xba\x
|
||||
SF:b0I\x15@\xb5\xf2\x07\x84o!\x0e\xc3\x05\xcb%5\xf8Z\x19\xbe\xda\xce\xee\]
|
||||
SF:8v9\xba\x18\x9e\xe0\xd7\xdcm\xe6\xa6\xf4\xb3\x13\[Oi\x99\x0e\xcb\xe8H\x
|
||||
SF:92\[\x03\[\x16\x90\x87\x80C\x1a91\xdd4\x89\xaa3:I\r\x9f\x18\x12\xf3\xe9
|
||||
SF:\x9bc{9iC\xecV\x96\x98\(\xed\x15\xd4\xf4\xae\xd6\x05\xa2\xe4\x19\xf62\x
|
||||
SF:a5\x13\x87\x84hO\x7fhF3&\x9e\xa0\xbf\x0f\xaal\$\x97\+\xc9z\xef\xe2\xc8\
|
||||
SF:xc8\xda#\xee\xac\xb7\x1d\xd6-\x8f\xd46\x03j\+\x1b8\x9cO\xe6\xd8'i\x1b\x
|
||||
SF:10r\xf6\xad\x94\x8dOT\xac\x05s\x88r\xa9\x88\x03F\xc7\xcboY\x124\xc8\x9f
|
||||
SF:8\)")%r(SSLv23SessionReq,B1,"\0l\xb6\x9f#Z\x18M\*\xf4\xfdL\x08\"\x94\xa
|
||||
SF:3\xfeH\x89\xa3\xb6\xd0\x98\|IBE\x17Ufc\t\xb2\xa5\$\xa5!\xc8\x1c\x1e\x97
|
||||
SF:\xb4M\xaazj\x16\xac\xd7\xd8\x1bf\t\xec\xb3_\xd4\xc3RjM\x1b\x07\xbdq7\xf
|
||||
SF:d\x0b\xa6\?\x18I\xd7\x8a\*\\z\xe2\x87t\xab\xe1\xbf\x18M\x90\x12\x01\xc4
|
||||
SF:\xc4\x0b\xcd\xa1\xcdp\x85\xf7\xf4=QD\xd5\xc3&o\x03\xce\xcb\0\x1b\x1a\x8
|
||||
SF:2\xa0\x9c7\xbcd\x99\x93\x02\xdd\xd8\x10w\xc4\xce\+R\x89\x14\xc4M\xd5#\x
|
||||
SF:0b\x87\xdc\xf8\xd5\xc49\x80\xa8\xd1\x14{\xf5\xd7\x80\xc3\xb2\?\x9e\x18{
|
||||
SF:\xb8\xdd\xf6\xe3\xec\xde\xfbx\xd5\xd0\xc7\xb7eI\xfe\x0c;\x08h\xf5\x1b-"
|
||||
SF:)%r(Kerberos,18A,"\xbak\x93\x9d\x0b\\\xb1\xfa\x98\xbbM\x88\x83\xe9s\xac
|
||||
SF:N\x14oLxLf\\\xa2\x837N\xa9\xef\x9c@Q\x16\xd7\x93\xc8Q\xddQ\xb3\xa5\+\xc
|
||||
SF:c\.f8D\x82\xb5\xa9\xc9\x0b2\xf42\xb6\^\xafTF\xe0\x90I\xaa\xd0\x9f;\x9c\
|
||||
SF:x89f\n\xa7\\\xae\xad\x8c\x8d\x91\xce\x1b\xf4\xbd\.}\xf7\x1f\x1e\x90\xc3
|
||||
SF:\x1e9\x96\xac\xb3-\xdef0\?\xc7\xc5\xf7{\x81\xa8W\xaf\x11\xfb\x9f\x9a\x9
|
||||
SF:1J\xdd\xb8\xa4\.\xd5\xd15\x04\xe8j\x04\xe3\xaa\x07\x94F\xf8@B\x9d\xa2\x
|
||||
SF:e4\x94\xfc\x8f\rN\xd3\t\xdb\x01\x08\xbd\xb2:\xacS~\xa2\xc4\x08\xaf#10\x
|
||||
SF:1c\xb7\xee#\x0e\xfdO\x0b\x85\xb9P\xe2\xd2\xabh\"@B3\x7f@ybR\xc5:\x83\xe
|
||||
SF:9\xb8\x1e\x0c~-J%W\rD\xe7m\x91B\xb0\xd2\xad\+\xe6\x87\x1e\xee\xfa\xa1Z\
|
||||
SF:xad\xcb\xbd\+\x89f\xf9\xeaj\xb3\x04\xf9q\x83\xf7%aV\xb4\xb7\x11\x1d\xfb
|
||||
SF:\x18'\x9c\xc0\xa4\xfe\xea\xa5hp-\x1d\xebBP\x9f~\xec\xd58\xc5\x9ds\"\x8c
|
||||
SF:\x80\\@q\xb3\xeb\x94\xf08\xd6W\xde\xe8\xd4p\xb3c\xbc\x17\xcf\x9d\xb3\]\
|
||||
SF:xb6\x9c\x96K\xa3q\"\xf1_\x98\xb8\xf82\xfa\x03\n\xe2\|\xed\xe3\x9b\xf7\^
|
||||
SF:K\x0b\x1aR\rA\xbd\^\xc4\xd3\xde\xc4\x9f\xf7\xf3\xe7\xcbX\)\x86\xe9Ylq\x
|
||||
SF:18bm\xb7\xd1\xac\x92\xcf:n7\xca\x20\xab\xe7\x16I\xc0\xa7\x8e_v\xf5\xf9j
|
||||
SF:\x0f\x913\xc1\x8b\xe0\xe3\xf8\xe5@W\xb9\x97\x98\x03\xfc\x1d\xed\xea\x90
|
||||
SF:\x89X\x06\\5<\xe8\xfd\xc8\x14\xae\xacFev\x12\x06\xdb\x93");
|
||||
Device type: general purpose
|
||||
Running (JUST GUESSING): Linux 5.X (86%)
|
||||
OS CPE: cpe:/o:linux:linux_kernel:5.4
|
||||
@@ -81,9 +143,9 @@ OS fingerprint not ideal because: Didn't receive UDP response. Please try again
|
||||
Aggressive OS guesses: Linux 5.4 (86%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D25670%P=x86_64-pc-linux-gnu)
|
||||
SEQ(TI=Z%TS=A)
|
||||
SEQ(SP=103%GCD=1%ISR=10A%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDC7C7%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=103%GCD=1%ISR=10B%TI=Z%TS=A)
|
||||
SEQ(SP=106%GCD=1%ISR=108%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=N)
|
||||
@@ -94,28 +156,27 @@ T4(R=N)
|
||||
T5(R=N)
|
||||
T6(R=N)
|
||||
T7(R=N)
|
||||
T7(R=Y%DF=Y%TG=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 17.121 days (since Thu Mar 19 09:37:52 2026)
|
||||
Uptime guess: 0.008 days (since Tue Apr 14 04:40:07 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=259 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=262 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 20001/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.07 ms 10.216.0.161
|
||||
2 0.21 ms 10.216.35.12
|
||||
3 2.00 ms 10.216.32.2
|
||||
4 0.26 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 3.24 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.65 ms 10.241.1.187
|
||||
7 13.72 ms 10.241.2.71
|
||||
8 15.33 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
1 0.09 ms 10.216.0.161
|
||||
2 0.42 ms 10.216.35.11
|
||||
3 0.99 ms 10.216.32.2
|
||||
4 0.69 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
|
||||
5 2.61 ms 4764.syd.equinix.com (45.127.173.7)
|
||||
6 11.64 ms 10.241.1.185
|
||||
7 14.88 ms 10.241.2.71
|
||||
8 14.03 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 12:32:48 2026 -- 1 IP address (1 host up) scanned in 10688.24 seconds
|
||||
# Nmap done at Tue Apr 14 04:51:19 2026 -- 1 IP address (1 host up) scanned in 2225.02 seconds
|
||||
|
||||
```
|
||||
+14
-14
@@ -5,16 +5,16 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/shifts.lan.d
|
||||
[/root/results/shifts.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/shifts.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 09:48:24 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/shifts.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml shifts.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:15:11 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/shifts.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml shifts.lan.ddnsgeek.com
|
||||
Nmap scan report for shifts.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.54s latency).
|
||||
Host is up, received user-set (0.065s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 09:48:31 UTC for 1471s
|
||||
Scanned at 2026-04-14 04:15:25 UTC for 1369s
|
||||
All 100 scanned ports on shifts.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
|
||||
Not shown: 100 open|filtered udp ports (no-response)
|
||||
Too many fingerprints match this host to give specific OS details
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%DS=10%DC=T%G=N%TM=69D235AE%P=x86_64-pc-linux-gnu)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%DS=10%DC=T%G=N%TM=69DDC4B6%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
@@ -22,19 +22,19 @@ IE(R=N)
|
||||
Network Distance: 10 hops
|
||||
|
||||
TRACEROUTE (using proto 1/icmp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.27 ms 10.216.35.11
|
||||
3 0.92 ms 10.216.32.2
|
||||
4 0.32 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 3.83 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.72 ms 10.241.1.187
|
||||
7 12.48 ms 10.241.2.71
|
||||
HOP RTT ADDRESS
|
||||
1 0.06 ms 10.216.0.161
|
||||
2 0.18 ms 10.216.35.12
|
||||
3 0.81 ms 10.216.32.2
|
||||
4 0.34 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 3.12 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.66 ms 10.241.1.185
|
||||
7 12.40 ms 10.241.2.26
|
||||
8 ... 9
|
||||
10 860.21 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
10 64.59 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 10:13:03 2026 -- 1 IP address (1 host up) scanned in 1481.19 seconds
|
||||
# Nmap done at Tue Apr 14 04:38:15 2026 -- 1 IP address (1 host up) scanned in 1388.91 seconds
|
||||
|
||||
```
|
||||
@@ -5,71 +5,17 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
|
||||
[/root/results/shifts.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/shifts.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 09:28:00 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/shifts.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml shifts.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:13:30 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/shifts.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml shifts.lan.ddnsgeek.com
|
||||
Nmap scan report for shifts.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.018s latency).
|
||||
Host is up, received user-set (0.014s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 09:28:08 UTC for 389s
|
||||
Not shown: 998 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-title: Did not follow redirect to https://shifts.lan.ddnsgeek.com/
|
||||
Scanned at 2026-04-14 04:13:36 UTC for 36s
|
||||
Not shown: 999 filtered tcp ports (no-response)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| ssl-cert: Subject: commonName=shifts.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:shifts.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-03-31T03:04:05
|
||||
| Not valid after: 2026-06-29T03:04:04
|
||||
| MD5: c3d1 fb74 73dc 5b68 6f54 b13a dac8 86c2
|
||||
| SHA-1: 3fa4 51ca 75eb 6f8c a112 3b2e 14c9 9f5b bec8 8ad3
|
||||
| SHA-256: bc5f 25c2 95e4 bd28 c356 90a0 e1e4 b558 e9e8 21c5 1148 3965 540d 5c25 fe5f 208a
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGCjCCBPKgAwIBAgISBsLb1bx7gFH5NhOK7fPJaGtyMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTMwHhcNMjYwMzMxMDMwNDA1WhcNMjYwNjI5MDMwNDA0WjAiMSAwHgYDVQQD
|
||||
| ExdzaGlmdHMubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
|
||||
| ADCCAgoCggIBAOFTQguvhZIWkVyicive/yfgrKHyxBdvR8+c1zcvxV9xPx2VTweK
|
||||
| RDxR+GLs6rNN+Oo/Zk+S8w0qYKAKZ/Jeen+8U2QsvMYtzOTRRtLLWCelRJHpkRXI
|
||||
| e7xvvYdb36X/G+fcdiMbXKo64ITh+zhA6PXRfvdv3hJz8ibX2pcZJQQQjD2DdhAU
|
||||
| dGXut1h37BXD4ZpQ3dgKZ9mCgv8rOXvPCsSoi3ueOZ1dL5Bt8vzF0SwgHlWEcO/V
|
||||
| iUhxNyPMY3ORt9uDzcudtgpUyyoaWHSKMIs5JEpNmsuaDP50AWSKTnWMrj9RLu1o
|
||||
| jJZgFzm3e01RDVJilcMccvLzxZJfhcaTXmU5g0iD7c5vyiCo0rNWsGmMDAcRGMCs
|
||||
| b+H8aklOPgc8yvD7e8p08LSU6i6mwVkjsRWjaw4+sLnKgag5au1x7y15CL3+6nVt
|
||||
| F7o/lNuUbIUCP9xqlzzNNB70fSU11yCUUx4EpOnn6u33XN/O9eNyc2MoeZbeFoFM
|
||||
| WLU0ASPhitO9YXXXzFIsdKuzBh82x2zRvSPaJh0oiYpxGOPCmRtHA8jIqhc4evsj
|
||||
| N8351FbwwUkXFztbhgU1gC09e3gGF9/73HD2S0xccF5GjQkcSHN5yloIGf0+MqBw
|
||||
| Lpf3vYqOvNiqSDU0B7XxxzvmxSKM7aRnTlqSO5h545JTNhR0SH8z0helAgMBAAGj
|
||||
| ggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
|
||||
| VR0TAQH/BAIwADAdBgNVHQ4EFgQUh9xjMBozVdPfLtVnzdCS0ZSLOJQwHwYDVR0j
|
||||
| BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG
|
||||
| AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdzaGlm
|
||||
| dHMubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAvBgNVHR8E
|
||||
| KDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzExNS5jcmwwggENBgor
|
||||
| BgEEAdZ5AgQCBIH+BIH7APkAfwCoJsvjCsY1EkZTP+Bl8U8Z2W4ZCBPEHdlteQCz
|
||||
| EjxVJwAAAZ1CDsFSAAgAAAUABOYyUgQDAEgwRgIhAK1V3FZ4YQCDzeJU3pB81bAD
|
||||
| LG+6Qxi2Q06zKewS34hWAiEAvOnMiYZHXkydYeqK5RmTUthlAfsr/VeM8uEXiknX
|
||||
| i3YAdgDRbqmlaAd+ZjWgPzel3bwDpTxBEhTUiBj16TGzI8uVBAAAAZ1CDr/GAAAE
|
||||
| AwBHMEUCIQDeQsHb4m3Avs/mXWBHrJrYRtZn7fx8N8cb8rmuT5kaCQIgFZTwg0AH
|
||||
| juXF8+Eep1ES1OhTt9TyhTrF/YKgjFLh5zowDQYJKoZIhvcNAQELBQADggEBAFHP
|
||||
| g+Oymtv7OUPWOcJrJF6I7/be21Gcv691xRY6ff60c0Op4TDKrgaQaukyD8aecLN7
|
||||
| fg3hoDKDR2ex+CQlDlSizMqxVNfUpTmN6vuy5uQTRFEtl9K6Q62RXaVlvDLyRvKd
|
||||
| 8+8kfi8uh+4EjgVFVNiiZ2rOS98AUJccUH7XAEGQ2DagWU/tSMGv5C0XzUt6iGDV
|
||||
| Un3rl7KL/qvsqj0MEmWIKGkfvjqU3ag/6Tmzto+PZCUOhLcI73UBrNdhUSug50jw
|
||||
| oTGj3mlk7tR6vk/w8EjKiromakRLHU2OWzRu/eUyy6mbsKn6EFTIzwKrOIBrATNz
|
||||
| XNmVDbwlfwWaV+2mu9A=
|
||||
|_-----END CERTIFICATE-----
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-favicon: Unknown favicon MD5: 201CC5A3633DB9EDF3FF294B124BCC5D
|
||||
|_http-trane-info: Problem with XML parsing of /evox/about
|
||||
|_http-server-header: nginx/1.29.7
|
||||
|_http-title: Chrona \xC2\xB7 Intelligent shift tracking
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD
|
||||
|_http-title: Did not follow redirect to https://shifts.lan.ddnsgeek.com/
|
||||
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
|
||||
Device type: general purpose
|
||||
Running (JUST GUESSING): Linux 5.X (91%)
|
||||
@@ -78,38 +24,38 @@ OS fingerprint not ideal because: Missing a closed TCP port so results incomplet
|
||||
Aggressive OS guesses: Linux 5.4 (91%)
|
||||
No exact OS matches for host (test conditions non-ideal).
|
||||
TCP/IP fingerprint:
|
||||
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D22CAD%P=x86_64-pc-linux-gnu)
|
||||
SEQ()
|
||||
SEQ(SP=107%GCD=1%ISR=109%TI=Z%TS=A)
|
||||
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBF14%P=x86_64-pc-linux-gnu)
|
||||
SEQ(SP=105%GCD=1%ISR=10E%TI=Z%TS=A)
|
||||
SEQ(SP=108%GCD=1%ISR=10B%TI=Z%TS=A)
|
||||
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
|
||||
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
|
||||
ECN(R=N)
|
||||
T1(R=N)
|
||||
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
|
||||
T2(R=N)
|
||||
T3(R=N)
|
||||
T4(R=N)
|
||||
T6(R=Y%DF=Y%TG=40%W=1FA%S=O%A=O%F=A%O=NNT11%RD=0%Q=)
|
||||
U1(R=N)
|
||||
IE(R=N)
|
||||
|
||||
Uptime guess: 16.998 days (since Thu Mar 19 09:37:52 2026)
|
||||
Uptime guess: 49.692 days (since Mon Feb 23 11:37:20 2026)
|
||||
Network Distance: 8 hops
|
||||
TCP Sequence Prediction: Difficulty=263 (Good luck!)
|
||||
TCP Sequence Prediction: Difficulty=261 (Good luck!)
|
||||
IP ID Sequence Generation: All zeros
|
||||
|
||||
TRACEROUTE (using port 80/tcp)
|
||||
HOP RTT ADDRESS
|
||||
1 0.11 ms 10.216.0.161
|
||||
1 0.10 ms 10.216.0.161
|
||||
2 0.25 ms 10.216.35.11
|
||||
3 2.63 ms 10.216.32.2
|
||||
3 29.53 ms 10.216.32.1
|
||||
4 0.38 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
|
||||
5 2.91 ms 4764.syd.equinix.com (45.127.173.7)
|
||||
6 11.85 ms 10.241.1.187
|
||||
7 12.60 ms 10.241.2.71
|
||||
8 14.37 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
5 4.24 ms as4764.syd.edgeix.net.au (202.77.88.3)
|
||||
6 11.64 ms 10.241.1.185
|
||||
7 20.39 ms 10.241.2.26
|
||||
8 14.23 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 09:34:38 2026 -- 1 IP address (1 host up) scanned in 403.17 seconds
|
||||
# Nmap done at Tue Apr 14 04:14:12 2026 -- 1 IP address (1 host up) scanned in 47.46 seconds
|
||||
|
||||
```
|
||||
+1
-2
@@ -10,7 +10,7 @@ accept-ranges: bytes
|
||||
cache-control: no-store
|
||||
content-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
|
||||
content-type: text/plain
|
||||
date: Sun, 05 Apr 2026 09:41:54 GMT
|
||||
date: Tue, 14 Apr 2026 04:51:20 GMT
|
||||
etag: "69c9ee89-17"
|
||||
last-modified: Mon, 30 Mar 2026 03:31:21 GMT
|
||||
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
|
||||
@@ -24,5 +24,4 @@ content-length: 23
|
||||
|
||||
User-agent: *
|
||||
Allow: /
|
||||
|
||||
```
|
||||
@@ -10,7 +10,7 @@ accept-ranges: bytes
|
||||
cache-control: no-store
|
||||
content-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
|
||||
content-type: text/html
|
||||
date: Sun, 05 Apr 2026 10:07:13 GMT
|
||||
date: Tue, 14 Apr 2026 04:51:20 GMT
|
||||
etag: "69c9ee89-234"
|
||||
last-modified: Mon, 30 Mar 2026 03:31:21 GMT
|
||||
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
|
||||
@@ -37,5 +37,4 @@ content-length: 564
|
||||
</body>
|
||||
</html>
|
||||
|
||||
|
||||
```
|
||||
+1
@@ -294,6 +294,7 @@ Configuration {
|
||||
404 GET 2l 12w 64c https://shifts.lan.ddnsgeek.com/.well-known/host-meta.json
|
||||
404 GET 2l 12w 64c https://shifts.lan.ddnsgeek.com/.well-known/jwks.json
|
||||
200 GET 34l 196w 13829c https://shifts.lan.ddnsgeek.com/favicon.ico
|
||||
200 GET 0l 0w 564c https://shifts.lan.ddnsgeek.com/linux.html
|
||||
200 GET 2l 4w 23c https://shifts.lan.ddnsgeek.com/robots.txt
|
||||
200 GET 19l 68w 497c https://shifts.lan.ddnsgeek.com/50x.html
|
||||
|
||||
|
||||
+1
-2
@@ -10,7 +10,7 @@ accept-ranges: bytes
|
||||
cache-control: no-store
|
||||
content-security-policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
|
||||
content-type: text/html
|
||||
date: Sun, 05 Apr 2026 10:07:12 GMT
|
||||
date: Tue, 14 Apr 2026 04:51:20 GMT
|
||||
etag: "69c9ee89-234"
|
||||
last-modified: Mon, 30 Mar 2026 03:31:21 GMT
|
||||
permissions-policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
|
||||
@@ -36,5 +36,4 @@ content-length: 564
|
||||
<div id="root"></div>
|
||||
</body>
|
||||
</html>
|
||||
|
||||
```
|
||||
+6
-304
@@ -5,315 +5,17 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
|
||||
[/root/results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:07:38 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml shifts.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:51:19 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml shifts.lan.ddnsgeek.com
|
||||
Nmap scan report for shifts.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.014s latency).
|
||||
Host is up, received user-set.
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:07:42 UTC for 158s
|
||||
Scanned at 2026-04-14 04:51:20 UTC for 2s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
| http-comments-displayer:
|
||||
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=shifts.lan.ddnsgeek.com
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 9
|
||||
| Comment:
|
||||
| /**
|
||||
| * @license React
|
||||
| * react-jsx-runtime.production.min.js
|
||||
| *
|
||||
| * Copyright (c) Facebook, Inc. and its affiliates.
|
||||
| *
|
||||
| * This source code is licensed under the MIT license found in the
|
||||
| * LICENSE file in the root directory of this source tree.
|
||||
| */
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 1
|
||||
| Comment:
|
||||
| /**
|
||||
| * @license React
|
||||
| * react.production.min.js
|
||||
| *
|
||||
| * Copyright (c) Facebook, Inc. and its affiliates.
|
||||
| *
|
||||
| * This source code is licensed under the MIT license found in the
|
||||
| * LICENSE file in the root directory of this source tree.
|
||||
| */
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 25
|
||||
| Comment:
|
||||
| /**
|
||||
| * @license React
|
||||
| * react-dom.production.min.js
|
||||
| *
|
||||
| * Copyright (c) Facebook, Inc. and its affiliates.
|
||||
| *
|
||||
| * This source code is licensed under the MIT license found in the
|
||||
| * LICENSE file in the root directory of this source tree.
|
||||
| */
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 49
|
||||
| Comment:
|
||||
| /**
|
||||
| * React Router v6.28.0
|
||||
| *
|
||||
| * Copyright (c) Remix Software Inc.
|
||||
| *
|
||||
| * This source code is licensed under the MIT license found in the
|
||||
| * LICENSE.md file in the root directory of this source tree.
|
||||
| *
|
||||
| * @license MIT
|
||||
| */
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 40
|
||||
| Comment:
|
||||
| /**
|
||||
| * @remix-run/router v1.21.0
|
||||
| *
|
||||
| * Copyright (c) Remix Software Inc.
|
||||
| *
|
||||
| * This source code is licensed under the MIT license found in the
|
||||
| * LICENSE.md file in the root directory of this source tree.
|
||||
| *
|
||||
| * @license MIT
|
||||
| */
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 75
|
||||
| Comment:
|
||||
| /*! @gera2ld/tarjs v0.3.1 | MIT License */
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 49
|
||||
| Comment:
|
||||
| /*"),'Route path "'+e+'" will be treated as if it were '+('"'+e.replace(/\*$/,"/*")+'" because the `*` character must ')+"always follow a `/` in the pattern. To get rid of this warning, "+('please change the route path to "'+e.replace(/\*$/,"/*")+'".'));let r=[],a="^"+e.replace(/\/*\*?$/,"").replace(/^\/*/
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 58
|
||||
| Comment:
|
||||
| /*/,"/"),f=_.useMemo(()=>({basename:c,navigator:i,static:s,future:al({v7_relativeSplatPath:!1},u)}),[c,u,i,s]);typeof r=="string"&&(r=Ws(r));let{pathname:g="/",search:p="",hash:w="",state:N=null,key:C="default"}=r,E=_.useMemo(()=>{let I=Ms(g,c);return I==null?null:{location:{pathname:I,search:p,hash:w,state:N,key:C},navigationType:a}},[c,g,p,w,N,C,a]);return E==null?null:_.createElement(qa.Provider,{value:f},_.createElement(Jc.Provider,{children:n,value:E}))}function L_(e){let{children:t,location:n}=e;return w_(zh(t),n)}new Promise(()=>{});function zh(e,t){t===void 0&&(t=[]);let n=[];return _.Children.forEach(e,(r,a)=>{if(!_.isValidElement(r))return;let i=[...t,a];if(r.type===_.Fragment){n.push.apply(n,zh(r.props.children,i));return}r.type!==Ku&&St(!1),!r.props.index||!r.props.children||St(!1);let s={id:r.props.id||i.join("-"),caseSensitive:r.props.caseSensitive,element:r.props.element,Component:r.props.Component,index:r.props.index,path:r.props.path,loader:r.props.loader,action:r.props.action,errorElement:r.props.errorElement,ErrorBoundary:r.props.ErrorBoundary,hasErrorBoundary:r.props.ErrorBoundary!=null||r.props.errorElement!=null,shouldRevalidate:r.props.shouldRevalidate,handle:r.props.handle,lazy:r.props.lazy};r.props.children&&(s.children=zh(r.props.children,i)),n.push(s)}),n}/**
|
||||
| * React Router DOM v6.28.0
|
||||
| *
|
||||
| * Copyright (c) Remix Software Inc.
|
||||
| *
|
||||
| * This source code is licensed under the MIT license found in the
|
||||
| * LICENSE.md file in the root directory of this source tree.
|
||||
| *
|
||||
| * @license MIT
|
||||
| */
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 49
|
||||
| Comment:
|
||||
| /*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):n?a+="\\/*$":e!==""&&e!=="/"&&(a+="(?:(?=\\/|$))"),[new RegExp(a,t?void 0:"i"),r]}function l_(e){try{return e.split("/").map(t=>decodeURIComponent(t).replace(/\//g,"%2F")).join("/")}catch(t){return Gx(!1,'The URL path "'+e+'" could not be decoded because it is is a malformed URL segment. This is probably due to a bad percent '+("encoding ("+t+").")),e}}function Ms(e,t){if(t==="/")return e;if(!e.toLowerCase().startsWith(t.toLowerCase()))return null;let n=t.endsWith("/")?t.length-1:t.length,r=e.charAt(n);return r&&r!=="/"?null:e.slice(n)||"/"}function u_(e,t){t===void 0&&(t="/");let{pathname:n,search:r="",hash:a=""}=typeof e=="string"?Ws(e):e;return{pathname:n?n.startsWith("/")?n:c_(n,t):t,search:h_(r),hash:m_(a)}}function c_(e,t){let n=t.replace(/\/+$/,"").split("/");return e.split("/").forEach(a=>{a===".."?n.length>1&&n.pop():a!=="."&&n.push(a)}),n.length>1?n.join("/"):"/"}function ff(e,t,n,r){return"Cannot include a '"+e+"' character in a manually specified "+("`to."+t+"` field ["+JSON.stringify(r)+"]. Please separate it out to the ")+("`to."+n+"` field. Alternatively you may provide the full path as ")+'a string in <Link to="..."> and the router will parse it for you.'}function d_(e){return e.filter((t,n)=>n===0||t.route.path&&t.route.path.length>0)}function ew(e,t){let n=d_(e);return t?n.map((r,a)=>a===n.length-1?r.pathname:r.pathnameBase):n.map(r=>r.pathnameBase)}function tw(e,t,n,r){r===void 0&&(r=!1);let a;typeof e=="string"?a=Ws(e):(a=rl({},e),St(!a.pathname||!a.pathname.includes("?"),ff("?","pathname","search",a)),St(!a.pathname||!a.pathname.includes("#"),ff("#","pathname","hash",a)),St(!a.search||!a.search.includes("#"),ff("#","search","hash",a)));let i=e===""||a.pathname==="",s=i?"/":a.pathname,u;if(s==null)u=n;else{let p=t.length-1;if(!r&&s.startsWith("..")){let w=s.split("/");for(;w[0]==="..";)w.shift(),p-=1;a.pathname=w.join("/")}u=p>=0?t[p]:"/"}let c=u_(a,u),f=s&&s!=="/"&&s.endsWith("/"),g=(i||s===".")&&n.endsWith("/");return!c.pathname.endsWith("/")&&(f||g)&&(c.pathname+="/"),c}const Ma=e=>e.join("/").replace(/\/\/+/g,"/"),f_=e=>e.replace(/\/+$/,"").replace(/^\/*/
|
||||
|
|
||||
| Path: https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js
|
||||
| Line number: 17
|
||||
| Comment:
|
||||
| /**
|
||||
| * @license React
|
||||
| * scheduler.production.min.js
|
||||
| *
|
||||
| * Copyright (c) Facebook, Inc. and its affiliates.
|
||||
| *
|
||||
| * This source code is licensed under the MIT license found in the
|
||||
| * LICENSE file in the root directory of this source tree.
|
||||
|_ */
|
||||
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-date: Sun, 05 Apr 2026 10:08:12 GMT; -3s from local time.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-favicon: Unknown favicon MD5: 201CC5A3633DB9EDF3FF294B124BCC5D
|
||||
| http-php-version: Logo query returned unknown hash efc923f7ea125c3d88ff2eb2668a7f29
|
||||
|_Credits query returned unknown hash efc923f7ea125c3d88ff2eb2668a7f29
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
| http-grep:
|
||||
| (1) https://shifts.lan.ddnsgeek.com:443/assets/index-Cj6Lw8yT.js:
|
||||
| (1) ip:
|
||||
|_ + 147.083.22.127
|
||||
|_http-malware-host: false
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| /
|
||||
| Other: 1; webmanifest: 1
|
||||
| /assets/
|
||||
| css: 1; js: 1
|
||||
| Longest directory structure:
|
||||
| Depth: 1
|
||||
| Dir: /assets/
|
||||
| Total files found (by extension):
|
||||
|_ Other: 1; css: 1; js: 1; webmanifest: 1
|
||||
|_http-vuln-cve2017-1001000: ERROR: Script execution failed (use -d to debug)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
| Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
| Content_Security_Policy:
|
||||
| Header: Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
|
||||
| Description: Define the base uri for relative uri.
|
||||
| Description: Define loading policy for all resources type in case of a resource type dedicated directive is not defined (fallback).
|
||||
| Description: Define which scripts the protected resource can execute.
|
||||
| Description: Define from where the protected resource can load plugins.
|
||||
| Description: Define which styles (CSS) the user applies to the protected resource.
|
||||
| Description: Define from where the protected resource can load images.
|
||||
| Description: Define from where the protected resource can be embedded in frames.
|
||||
| Description: Define from where the protected resource can load fonts.
|
||||
| Description: Define which URIs the protected resource can load using script interfaces.
|
||||
| Description: Define which URIs can be used as the action of HTML form elements.
|
||||
| Cache_Control:
|
||||
|_ Header: Cache-Control: no-store
|
||||
|_http-title: Chrona \xC2\xB7 Intelligent shift tracking
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
| ssl-cert: Subject: commonName=shifts.lan.ddnsgeek.com
|
||||
| Subject Alternative Name: DNS:shifts.lan.ddnsgeek.com
|
||||
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
||||
| Public Key type: rsa
|
||||
| Public Key bits: 4096
|
||||
| Signature Algorithm: sha256WithRSAEncryption
|
||||
| Not valid before: 2026-03-31T03:04:05
|
||||
| Not valid after: 2026-06-29T03:04:04
|
||||
| MD5: c3d1 fb74 73dc 5b68 6f54 b13a dac8 86c2
|
||||
| SHA-1: 3fa4 51ca 75eb 6f8c a112 3b2e 14c9 9f5b bec8 8ad3
|
||||
| SHA-256: bc5f 25c2 95e4 bd28 c356 90a0 e1e4 b558 e9e8 21c5 1148 3965 540d 5c25 fe5f 208a
|
||||
| -----BEGIN CERTIFICATE-----
|
||||
| MIIGCjCCBPKgAwIBAgISBsLb1bx7gFH5NhOK7fPJaGtyMA0GCSqGSIb3DQEBCwUA
|
||||
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
||||
| EwNSMTMwHhcNMjYwMzMxMDMwNDA1WhcNMjYwNjI5MDMwNDA0WjAiMSAwHgYDVQQD
|
||||
| ExdzaGlmdHMubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
|
||||
| ADCCAgoCggIBAOFTQguvhZIWkVyicive/yfgrKHyxBdvR8+c1zcvxV9xPx2VTweK
|
||||
| RDxR+GLs6rNN+Oo/Zk+S8w0qYKAKZ/Jeen+8U2QsvMYtzOTRRtLLWCelRJHpkRXI
|
||||
| e7xvvYdb36X/G+fcdiMbXKo64ITh+zhA6PXRfvdv3hJz8ibX2pcZJQQQjD2DdhAU
|
||||
| dGXut1h37BXD4ZpQ3dgKZ9mCgv8rOXvPCsSoi3ueOZ1dL5Bt8vzF0SwgHlWEcO/V
|
||||
| iUhxNyPMY3ORt9uDzcudtgpUyyoaWHSKMIs5JEpNmsuaDP50AWSKTnWMrj9RLu1o
|
||||
| jJZgFzm3e01RDVJilcMccvLzxZJfhcaTXmU5g0iD7c5vyiCo0rNWsGmMDAcRGMCs
|
||||
| b+H8aklOPgc8yvD7e8p08LSU6i6mwVkjsRWjaw4+sLnKgag5au1x7y15CL3+6nVt
|
||||
| F7o/lNuUbIUCP9xqlzzNNB70fSU11yCUUx4EpOnn6u33XN/O9eNyc2MoeZbeFoFM
|
||||
| WLU0ASPhitO9YXXXzFIsdKuzBh82x2zRvSPaJh0oiYpxGOPCmRtHA8jIqhc4evsj
|
||||
| N8351FbwwUkXFztbhgU1gC09e3gGF9/73HD2S0xccF5GjQkcSHN5yloIGf0+MqBw
|
||||
| Lpf3vYqOvNiqSDU0B7XxxzvmxSKM7aRnTlqSO5h545JTNhR0SH8z0helAgMBAAGj
|
||||
| ggInMIICIzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYD
|
||||
| VR0TAQH/BAIwADAdBgNVHQ4EFgQUh9xjMBozVdPfLtVnzdCS0ZSLOJQwHwYDVR0j
|
||||
| BBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMGCCsG
|
||||
| AQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAiBgNVHREEGzAZghdzaGlm
|
||||
| dHMubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAvBgNVHR8E
|
||||
| KDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzExNS5jcmwwggENBgor
|
||||
| BgEEAdZ5AgQCBIH+BIH7APkAfwCoJsvjCsY1EkZTP+Bl8U8Z2W4ZCBPEHdlteQCz
|
||||
| EjxVJwAAAZ1CDsFSAAgAAAUABOYyUgQDAEgwRgIhAK1V3FZ4YQCDzeJU3pB81bAD
|
||||
| LG+6Qxi2Q06zKewS34hWAiEAvOnMiYZHXkydYeqK5RmTUthlAfsr/VeM8uEXiknX
|
||||
| i3YAdgDRbqmlaAd+ZjWgPzel3bwDpTxBEhTUiBj16TGzI8uVBAAAAZ1CDr/GAAAE
|
||||
| AwBHMEUCIQDeQsHb4m3Avs/mXWBHrJrYRtZn7fx8N8cb8rmuT5kaCQIgFZTwg0AH
|
||||
| juXF8+Eep1ES1OhTt9TyhTrF/YKgjFLh5zowDQYJKoZIhvcNAQELBQADggEBAFHP
|
||||
| g+Oymtv7OUPWOcJrJF6I7/be21Gcv691xRY6ff60c0Op4TDKrgaQaukyD8aecLN7
|
||||
| fg3hoDKDR2ex+CQlDlSizMqxVNfUpTmN6vuy5uQTRFEtl9K6Q62RXaVlvDLyRvKd
|
||||
| 8+8kfi8uh+4EjgVFVNiiZ2rOS98AUJccUH7XAEGQ2DagWU/tSMGv5C0XzUt6iGDV
|
||||
| Un3rl7KL/qvsqj0MEmWIKGkfvjqU3ag/6Tmzto+PZCUOhLcI73UBrNdhUSug50jw
|
||||
| oTGj3mlk7tR6vk/w8EjKiromakRLHU2OWzRu/eUyy6mbsKn6EFTIzwKrOIBrATNz
|
||||
| XNmVDbwlfwWaV+2mu9A=
|
||||
|_-----END CERTIFICATE-----
|
||||
| http-vuln-cve2011-3192:
|
||||
| VULNERABLE:
|
||||
| Apache byterange filter DoS
|
||||
| State: VULNERABLE
|
||||
| IDs: CVE:CVE-2011-3192 BID:49303
|
||||
| The Apache web server is vulnerable to a denial of service attack when numerous
|
||||
| overlapping byte ranges are requested.
|
||||
| Disclosure date: 2011-08-19
|
||||
| References:
|
||||
| https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192
|
||||
| https://seclists.org/fulldisclosure/2011/Aug/175
|
||||
| https://www.tenable.com/plugins/nessus/55976
|
||||
|_ https://www.securityfocus.com/bid/49303
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_ssl-date: TLS randomness does not represent time
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-headers:
|
||||
| Accept-Ranges: bytes
|
||||
| Cache-Control: no-store
|
||||
| Content-Length: 564
|
||||
| Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
|
||||
| Content-Type: text/html
|
||||
| Date: Sun, 05 Apr 2026 10:07:58 GMT
|
||||
| Etag: "69c9ee89-234"
|
||||
| Last-Modified: Mon, 30 Mar 2026 03:31:21 GMT
|
||||
| Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
|
||||
| Referrer-Policy: no-referrer
|
||||
| Server: nginx/1.29.7
|
||||
| Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X-Content-Type-Options: nosniff
|
||||
| X-Frame-Options: SAMEORIGIN
|
||||
| X-Xss-Protection: 1; mode=block
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: HEAD)
|
||||
| http-vhosts:
|
||||
| 127 names had status 404
|
||||
|_auth.lan.ddnsgeek.com : 200
|
||||
|_http-server-header: nginx/1.29.7
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-chrono: Request times for /; avg: 7783.07ms; min: 953.73ms; max: 19054.87ms
|
||||
| ssl-enum-ciphers:
|
||||
| TLSv1.2:
|
||||
| ciphers:
|
||||
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|
||||
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|
||||
| compressors:
|
||||
| NULL
|
||||
| cipher preference: client
|
||||
| warnings:
|
||||
| Key exchange (secp256r1) of lower strength than certificate key
|
||||
| TLSv1.3:
|
||||
| ciphers:
|
||||
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|
||||
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|
||||
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
||||
| cipher preference: server
|
||||
|_ least strength: A
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp filtered https no-response
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 10:10:20 2026 -- 1 IP address (1 host up) scanned in 162.01 seconds
|
||||
# Nmap done at Tue Apr 14 04:51:22 2026 -- 1 IP address (1 host up) scanned in 2.66 seconds
|
||||
|
||||
```
|
||||
+1
-1
@@ -6,7 +6,7 @@ sslscan --show-certificate --no-colour shifts.lan.ddnsgeek.com:443 2>&1
|
||||
|
||||
```
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
OpenSSL 3.5.5 27 Jan 2026
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
|
||||
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://shifts.lan.ddnsgee
|
||||
[/root/results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/shifts.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -18,7 +37,7 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://shifts.lan.ddnsgee
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R13
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 10:07:24 (GMT0)
|
||||
+ Start Time: 2026-04-14 04:51:23 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: nginx/1.29.7
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
|
||||
+1
-1
@@ -77,7 +77,7 @@ HTTP Headers:
|
||||
Content-Length: 564
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
|
||||
Content-Type: text/html
|
||||
Date: Sun, 05 Apr 2026 10:08:55 GMT
|
||||
Date: Tue, 14 Apr 2026 04:51:33 GMT
|
||||
Etag: "69c9ee89-234"
|
||||
Last-Modified: Mon, 30 Mar 2026 03:31:21 GMT
|
||||
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
|
||||
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://shifts.lan.ddnsgeek.com:80/robots.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://shifts.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 09:38:07 GMT
|
||||
Date: Tue, 14 Apr 2026 04:14:14 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
@@ -7,7 +7,7 @@ curl -sSik http://shifts.lan.ddnsgeek.com:80/
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://shifts.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 09:38:08 GMT
|
||||
Date: Tue, 14 Apr 2026 04:14:15 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+5
-5
@@ -297,17 +297,17 @@ Configuration {
|
||||
200 GET 2l 4w 23c https://shifts.lan.ddnsgeek.com/robots.txt
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[ => https://shifts.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.txt => https://shifts.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.html => https://shifts.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.php => https://shifts.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/] => https://shifts.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.asp => https://shifts.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.html => https://shifts.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].txt => https://shifts.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.php => https://shifts.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].html => https://shifts.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.aspx => https://shifts.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.jsp => https://shifts.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].php => https://shifts.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.asp => https://shifts.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.aspx => https://shifts.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].asp => https://shifts.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].aspx => https://shifts.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.jsp => https://shifts.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].jsp => https://shifts.lan.ddnsgeek.com/].jsp
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/plain] => https://shifts.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/plain].txt => https://shifts.lan.ddnsgeek.com/plain].txt
|
||||
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://shifts.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://shifts.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 09:38:06 GMT
|
||||
Date: Tue, 14 Apr 2026 04:14:14 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+31
-32
@@ -5,15 +5,22 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
|
||||
[/root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 09:41:54 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml shifts.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:14:17 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml shifts.lan.ddnsgeek.com
|
||||
Nmap scan report for shifts.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.021s latency).
|
||||
Host is up, received user-set (0.014s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 09:41:58 UTC for 385s
|
||||
Scanned at 2026-04-14 04:14:24 UTC for 502s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-chrono: Request times for /; avg: 709.54ms; min: 401.60ms; max: 1152.97ms
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://shifts.lan.ddnsgeek.com/
|
||||
@@ -21,6 +28,8 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
@@ -32,38 +41,29 @@ PORT STATE SERVICE REASON VERSION
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
| WWW-Mechanize/1.34
|
||||
| Change in Status Code:
|
||||
| PHP/: 404
|
||||
|_ libcurl-agent/1.0: false
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-date: Tue, 14 Apr 2026 04:14:37 GMT; -1s from local time.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-title: Did not follow redirect to https://shifts.lan.ddnsgeek.com/
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
| http-headers:
|
||||
| Location: https://shifts.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 09:42:19 GMT
|
||||
| Date: Tue, 14 Apr 2026 04:14:59 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-date: Sun, 05 Apr 2026 09:42:10 GMT; -2s from local time.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-title: Did not follow redirect to https://shifts.lan.ddnsgeek.com/
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
@@ -71,11 +71,10 @@ PORT STATE SERVICE REASON VERSION
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-chrono: Request times for /; avg: 733.58ms; min: 216.14ms; max: 971.14ms
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 09:48:23 2026 -- 1 IP address (1 host up) scanned in 388.85 seconds
|
||||
# Nmap done at Tue Apr 14 04:22:47 2026 -- 1 IP address (1 host up) scanned in 511.31 seconds
|
||||
|
||||
```
|
||||
+59340
-59206
File diff suppressed because it is too large.
Load diff
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://shifts.lan.ddnsgeek
|
||||
[/root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://shifts.lan.ddnsgeek
|
||||
+ Target Hostname: shifts.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 09:38:21 (GMT0)
|
||||
+ Start Time: 2026-04-14 04:14:29 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [999979] /.tools/webmail: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7901 requests: 17 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 10:08:27 (GMT0) (1806 seconds)
|
||||
+ 7889 requests: 4 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-14 04:29:25 (GMT0) (896 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
|
||||
@@ -23,7 +23,7 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://shifts.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 09:48:49 GMT
|
||||
Date: Tue, 14 Apr 2026 04:17:24 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
@@ -99,7 +99,7 @@ HTTP Headers:
|
||||
Content-Length: 564
|
||||
Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
|
||||
Content-Type: text/html
|
||||
Date: Sun, 05 Apr 2026 09:48:56 GMT
|
||||
Date: Tue, 14 Apr 2026 04:17:46 GMT
|
||||
Etag: "69c9ee89-234"
|
||||
Last-Modified: Mon, 30 Mar 2026 03:31:21 GMT
|
||||
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
|
||||
|
||||
Reference in new issue
Block a user