fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://traefik.lan.ddnsgeek.com:80/robots.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://traefik.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 10:38:16 GMT
|
||||
Date: Tue, 14 Apr 2026 04:29:53 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
@@ -7,7 +7,7 @@ curl -sSik http://traefik.lan.ddnsgeek.com:80/
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://traefik.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 10:38:17 GMT
|
||||
Date: Tue, 14 Apr 2026 04:29:55 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
-36
@@ -290,41 +290,5 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[ => https://traefik.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.txt => https://traefik.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.html => https://traefik.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/] => https://traefik.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.php => https://traefik.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].txt => https://traefik.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.asp => https://traefik.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].html => https://traefik.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.aspx => https://traefik.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].php => https://traefik.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/[.jsp => https://traefik.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].asp => https://traefik.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].aspx => https://traefik.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/].jsp => https://traefik.lan.ddnsgeek.com/].jsp
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.txt
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.html
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.php
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.asp
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.aspx
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.jsp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain] => https://traefik.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].txt => https://traefik.lan.ddnsgeek.com/plain].txt
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].html => https://traefik.lan.ddnsgeek.com/plain].html
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].php => https://traefik.lan.ddnsgeek.com/plain].php
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].asp => https://traefik.lan.ddnsgeek.com/plain].asp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].aspx => https://traefik.lan.ddnsgeek.com/plain].aspx
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/plain].jsp => https://traefik.lan.ddnsgeek.com/plain].jsp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote] => https://traefik.lan.ddnsgeek.com/quote]
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].txt => https://traefik.lan.ddnsgeek.com/quote].txt
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].html => https://traefik.lan.ddnsgeek.com/quote].html
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].php => https://traefik.lan.ddnsgeek.com/quote].php
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].asp => https://traefik.lan.ddnsgeek.com/quote].asp
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].aspx => https://traefik.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://traefik.lan.ddnsgeek.com/quote].jsp => https://traefik.lan.ddnsgeek.com/quote].jsp
|
||||
302 GET 0l 0w 122c https://traefik.lan.ddnsgeek.com/advertorials => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2Fadvertorials&rm=GET
|
||||
|
||||
```
|
||||
+1
-1
@@ -7,7 +7,7 @@ curl -sSikf http://traefik.lan.ddnsgeek.com:80/.well-known/security.txt
|
||||
```
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://traefik.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 10:38:16 GMT
|
||||
Date: Tue, 14 Apr 2026 04:29:50 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
|
||||
+37
-39
@@ -5,43 +5,17 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
|
||||
|
||||
```
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:38:17 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml traefik.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:29:59 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml traefik.lan.ddnsgeek.com
|
||||
Nmap scan report for traefik.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.014s latency).
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:38:24 UTC for 1272s
|
||||
Scanned at 2026-04-14 04:30:14 UTC for 582s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_traefik.lan.ddnsgeek.com:80/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-headers:
|
||||
| Location: https://traefik.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 10:47:39 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 401
|
||||
| Status for browser useragent: false
|
||||
| Redirected To: https://traefik.lan.ddnsgeek.com/
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
@@ -61,22 +35,46 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-chrono: Request times for /; avg: 558.23ms; min: 429.82ms; max: 772.34ms
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-date: Sun, 05 Apr 2026 10:47:24 GMT; -1s from local time.
|
||||
|_http-title: Did not follow redirect to https://traefik.lan.ddnsgeek.com/
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-date: Tue, 14 Apr 2026 04:30:42 GMT; -2s from local time.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-chrono: Request times for /; avg: 470.74ms; min: 157.63ms; max: 709.00ms
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
| http-headers:
|
||||
| Location: https://traefik.lan.ddnsgeek.com/
|
||||
| Date: Tue, 14 Apr 2026 04:30:50 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 10:59:36 2026 -- 1 IP address (1 host up) scanned in 1280.49 seconds
|
||||
# Nmap done at Tue Apr 14 04:39:57 2026 -- 1 IP address (1 host up) scanned in 600.46 seconds
|
||||
|
||||
```
|
||||
+59629
-59476
File diff suppressed because it is too large.
Load diff
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://traefik.lan.ddnsgee
|
||||
[/root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/traefik.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
|
||||
|
||||
```
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -12,21 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://traefik.lan.ddnsgee
|
||||
+ Target Hostname: traefik.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 10:47:24 (GMT0)
|
||||
+ Start Time: 2026-04-14 04:30:27 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ ERROR: *** Error limit (20) reached for host, giving up. Last error: error reading HTTP response. ***
|
||||
+ ERROR: *** Consider using mitmproxy to avoid TLS fingerprinting. ***
|
||||
- STATUS: Completed 7002 requests: currently in plugin 'Nikto Tests'
|
||||
- STATUS: Running average: Not enough data.
|
||||
+ Scan terminated: 20 errors and 5 items reported on the remote host
|
||||
+ End Time: 2026-04-05 11:14:58 (GMT0) (1654 seconds)
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7901 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-14 04:51:43 (GMT0) (1276 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
|
||||
|
||||
+1
-144
@@ -23,153 +23,10 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://traefik.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 10:47:36 GMT
|
||||
Date: Tue, 14 Apr 2026 04:32:05 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://traefik.lan.ddnsgeek.com/
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Cookies[authelia_session], HttpOnly[authelia_session], RedirectLocation[https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : authelia_session
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : authelia_session
|
||||
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 110
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 10:47:42 GMT
|
||||
Location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
Set-Cookie: authelia_session=WW-u0jR6Q2CNUU5uigYGQjXqNXy!XB*L; expires=Sun, 05 Apr 2026 11:47:43 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Dns-Prefetch-Control: off
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
Status : 200 OK
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Length: 2675
|
||||
Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-3bjhmHahIXcEjYvijrpCrOOzQbRKnM68' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 10:47:51 GMT
|
||||
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Dns-Prefetch-Control: off
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
|
||||
```
|
||||
Reference in new issue
Block a user