fresh autorecon run

This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899

No files matched your search

@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://shifts.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 09:38:07 GMT
Date: Tue, 14 Apr 2026 04:14:14 GMT
Content-Length: 17
Moved Permanently
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://shifts.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:38:08 GMT
Date: Tue, 14 Apr 2026 04:14:15 GMT
Content-Length: 17
Moved Permanently
@@ -290,17 +290,17 @@ Configuration {
200 GET 2l 4w 23c https://shifts.lan.ddnsgeek.com/robots.txt
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[ => https://shifts.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.txt => https://shifts.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.html => https://shifts.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.php => https://shifts.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/] => https://shifts.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.asp => https://shifts.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.html => https://shifts.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].txt => https://shifts.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.php => https://shifts.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].html => https://shifts.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.aspx => https://shifts.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.jsp => https://shifts.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].php => https://shifts.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.asp => https://shifts.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.aspx => https://shifts.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].asp => https://shifts.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].aspx => https://shifts.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/[.jsp => https://shifts.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/].jsp => https://shifts.lan.ddnsgeek.com/].jsp
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/plain] => https://shifts.lan.ddnsgeek.com/plain]
301 GET 1l 2w 17c http://shifts.lan.ddnsgeek.com/plain].txt => https://shifts.lan.ddnsgeek.com/plain].txt
@@ -1,6 +1,6 @@
HTTP/1.1 301 Moved Permanently
Location: https://shifts.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 09:38:06 GMT
Date: Tue, 14 Apr 2026 04:14:14 GMT
Content-Length: 17
Moved Permanently
@@ -1,3 +1,22 @@
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -5,19 +24,19 @@
+ Target Hostname: shifts.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 09:38:21 (GMT0)
+ Start Time: 2026-04-14 04:14:29 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [999979] /.tools/webmail: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7901 requests: 17 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 10:08:27 (GMT0) (1806 seconds)
+ 7889 requests: 4 errors and 8 items reported on the remote host
+ End Time: 2026-04-14 04:29:25 (GMT0) (896 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
@@ -1,12 +1,19 @@
# Nmap 7.98 scan initiated Sun Apr 5 09:41:54 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml shifts.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:14:17 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml shifts.lan.ddnsgeek.com
Nmap scan report for shifts.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.021s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:41:58 UTC for 385s
Scanned at 2026-04-14 04:14:24 UTC for 502s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-comments-displayer: Couldn't find any comments.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-chrono: Request times for /; avg: 709.54ms; min: 401.60ms; max: 1152.97ms
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: https://shifts.lan.ddnsgeek.com/
@@ -14,6 +21,8 @@ PORT STATE SERVICE REASON VERSION
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
| Python-urllib/2.5
| GT::WWW
| Snoopy
@@ -25,38 +34,29 @@ PORT STATE SERVICE REASON VERSION
| http client
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
| PHP/: 404
|_ libcurl-agent/1.0: false
|_ WWW-Mechanize/1.34
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-date: Tue, 14 Apr 2026 04:14:37 GMT; -1s from local time.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-title: Did not follow redirect to https://shifts.lan.ddnsgeek.com/
|_http-malware-host: Host appears to be clean
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-feed: Couldn't find any feeds.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-errors: Couldn't find any error pages.
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-vhosts:
|_128 names had status 308
| http-headers:
| Location: https://shifts.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 09:42:19 GMT
| Date: Tue, 14 Apr 2026 04:14:59 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-date: Sun, 05 Apr 2026 09:42:10 GMT; -2s from local time.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
| http-vhosts:
|_128 names had status 308
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-errors: Couldn't find any error pages.
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-malware-host: Host appears to be clean
|_http-feed: Couldn't find any feeds.
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://shifts.lan.ddnsgeek.com/
|_http-comments-displayer: Couldn't find any comments.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|_http-mobileversion-checker: No mobile version detected.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
@@ -64,9 +64,8 @@ PORT STATE SERVICE REASON VERSION
| Dir: /
| Total files found (by extension):
|_
|_http-chrono: Request times for /; avg: 733.58ms; min: 216.14ms; max: 971.14ms
|_http-mobileversion-checker: No mobile version detected.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:48:23 2026 -- 1 IP address (1 host up) scanned in 388.85 seconds
# Nmap done at Tue Apr 14 04:22:47 2026 -- 1 IP address (1 host up) scanned in 511.31 seconds
@@ -16,7 +16,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://shifts.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:48:49 GMT
Date: Tue, 14 Apr 2026 04:17:24 GMT
Content-Length: 17
Connection: close
@@ -92,7 +92,7 @@ HTTP Headers:
Content-Length: 564
Content-Security-Policy: default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self' https://date.nager.at; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; worker-src 'self'; manifest-src 'self'
Content-Type: text/html
Date: Sun, 05 Apr 2026 09:48:56 GMT
Date: Tue, 14 Apr 2026 04:17:46 GMT
Etag: "69c9ee89-234"
Last-Modified: Mon, 30 Mar 2026 03:31:21 GMT
Permissions-Policy: accelerometer=(), ambient-light-sensor=(), autoplay=(), battery=(), camera=(), display-capture=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), usb=()
@@ -1,46 +1,61 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE nmaprun>
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
<!-- Nmap 7.98 scan initiated Sun Apr 5 09:41:54 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml shifts.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml shifts.lan.ddnsgeek.com" start="1775382114" startstr="Sun Apr 5 09:41:54 2026" version="7.98" xmloutputversion="1.05">
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:14:17 2026 as: /usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml shifts.lan.ddnsgeek.com -->
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv -&#45;reason -Pn -T4 -sV -p 80 &quot;-&#45;script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)&quot; -oN /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/shifts.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml shifts.lan.ddnsgeek.com" start="1776140057" startstr="Tue Apr 14 04:14:17 2026" version="7.99" xmloutputversion="1.05">
<scaninfo type="syn" protocol="tcp" numservices="1" services="80"/>
<verbose level="2"/>
<debugging level="0"/>
<taskbegin task="NSE" time="1775382117"/>
<taskend task="NSE" time="1775382117"/>
<taskbegin task="NSE" time="1775382117"/>
<taskend task="NSE" time="1775382117"/>
<taskbegin task="NSE" time="1775382117"/>
<taskend task="NSE" time="1775382117"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775382117"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775382117"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1775382117"/>
<taskend task="Parallel DNS resolution of 1 host." time="1775382117"/>
<taskbegin task="SYN Stealth Scan" time="1775382117"/>
<taskend task="SYN Stealth Scan" time="1775382118" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1775382119"/>
<taskend task="Service scan" time="1775382125" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1775382125"/>
<taskprogress task="NSE" time="1775382162" percent="98.38" remaining="1" etc="1775382163"/>
<taskprogress task="NSE" time="1775382238" percent="98.06" remaining="3" etc="1775382240"/>
<taskprogress task="NSE" time="1775382482" percent="99.35" remaining="3" etc="1775382484"/>
<taskend task="NSE" time="1775382502"/>
<taskbegin task="NSE" time="1775382502"/>
<taskend task="NSE" time="1775382503"/>
<taskbegin task="NSE" time="1775382503"/>
<taskend task="NSE" time="1775382503"/>
<host starttime="1775382118" endtime="1775382503"><status state="up" reason="user-set" reason_ttl="0"/>
<taskbegin task="NSE" time="1776140064"/>
<taskend task="NSE" time="1776140064"/>
<taskbegin task="NSE" time="1776140064"/>
<taskend task="NSE" time="1776140064"/>
<taskbegin task="NSE" time="1776140064"/>
<taskend task="NSE" time="1776140064"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776140064"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776140064"/>
<taskbegin task="Parallel DNS resolution of 1 host." time="1776140064"/>
<taskend task="Parallel DNS resolution of 1 host." time="1776140064"/>
<taskbegin task="SYN Stealth Scan" time="1776140064"/>
<taskend task="SYN Stealth Scan" time="1776140064" extrainfo="1 total ports"/>
<taskbegin task="Service scan" time="1776140066"/>
<taskend task="Service scan" time="1776140073" extrainfo="1 service on 1 host"/>
<taskbegin task="NSE" time="1776140073"/>
<taskprogress task="NSE" time="1776140104" percent="94.48" remaining="2" etc="1776140106"/>
<taskprogress task="NSE" time="1776140134" percent="99.68" remaining="1" etc="1776140134"/>
<taskprogress task="NSE" time="1776140164" percent="99.68" remaining="1" etc="1776140164"/>
<taskprogress task="NSE" time="1776140194" percent="99.68" remaining="1" etc="1776140194"/>
<taskprogress task="NSE" time="1776140224" percent="99.68" remaining="1" etc="1776140224"/>
<taskprogress task="NSE" time="1776140254" percent="99.68" remaining="1" etc="1776140255"/>
<taskprogress task="NSE" time="1776140284" percent="99.68" remaining="1" etc="1776140285"/>
<taskprogress task="NSE" time="1776140314" percent="99.68" remaining="1" etc="1776140315"/>
<taskprogress task="NSE" time="1776140344" percent="99.68" remaining="1" etc="1776140345"/>
<taskprogress task="NSE" time="1776140374" percent="99.68" remaining="1" etc="1776140375"/>
<taskprogress task="NSE" time="1776140404" percent="99.68" remaining="2" etc="1776140405"/>
<taskprogress task="NSE" time="1776140434" percent="99.68" remaining="2" etc="1776140435"/>
<taskprogress task="NSE" time="1776140464" percent="99.68" remaining="2" etc="1776140465"/>
<taskprogress task="NSE" time="1776140494" percent="99.68" remaining="2" etc="1776140495"/>
<taskprogress task="NSE" time="1776140524" percent="99.68" remaining="2" etc="1776140525"/>
<taskprogress task="NSE" time="1776140554" percent="99.68" remaining="2" etc="1776140556"/>
<taskend task="NSE" time="1776140565"/>
<taskbegin task="NSE" time="1776140565"/>
<taskend task="NSE" time="1776140566"/>
<taskbegin task="NSE" time="1776140566"/>
<taskend task="NSE" time="1776140566"/>
<host starttime="1776140064" endtime="1776140566"><status state="up" reason="user-set" reason_ttl="0"/>
<address addr="167.179.167.166" addrtype="ipv4"/>
<hostnames>
<hostname name="shifts.lan.ddnsgeek.com" type="user"/>
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
</hostnames>
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: https://shifts.lan.ddnsgeek.com/&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34&#xa; Change in Status Code: &#xa; PHP/: 404&#xa; libcurl-agent/1.0: false"><elem key="Status for browser useragent">200</elem>
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-chrono" output="Request times for /; avg: 709.54ms; min: 401.60ms; max: 1152.97ms"/><script id="http-useragent-tester" output="&#xa; Status for browser useragent: 200&#xa; Redirected To: https://shifts.lan.ddnsgeek.com/&#xa; Allowed User Agents: &#xa; Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)&#xa; libwww&#xa; lwp-trivial&#xa; libcurl-agent/1.0&#xa; PHP/&#xa; Python-urllib/2.5&#xa; GT::WWW&#xa; Snoopy&#xa; MFC_Tear_Sample&#xa; HTTP::Lite&#xa; PHPCrawl&#xa; URI::Fetch&#xa; Zend_Http_Client&#xa; http client&#xa; PECL::HTTP&#xa; Wget/1.13.4 (linux-gnu)&#xa; WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
<elem key="Redirected To">https://shifts.lan.ddnsgeek.com/</elem>
<table key="Allowed User Agents">
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
<elem>libwww</elem>
<elem>lwp-trivial</elem>
<elem>libcurl-agent/1.0</elem>
<elem>PHP/</elem>
<elem>Python-urllib/2.5</elem>
<elem>GT::WWW</elem>
<elem>Snoopy</elem>
@@ -54,30 +69,26 @@
<elem>Wget/1.13.4 (linux-gnu)</elem>
<elem>WWW-Mechanize/1.34</elem>
</table>
<table key="Change in Status Code">
<elem key="PHP/">404</elem>
<elem key="libcurl-agent/1.0">false</elem>
</table>
</script><script id="http-headers" output="&#xa; Location: https://shifts.lan.ddnsgeek.com/&#xa; Date: Sun, 05 Apr 2026 09:42:19 GMT&#xa; Content-Length: 17&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/><script id="http-dombased-xss" output="Couldn&apos;t find any DOM based XSS."/><script id="http-security-headers" output=""></script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-date" output="Sun, 05 Apr 2026 09:42:10 GMT; -2s from local time."><elem key="date">2026-04-05T09:42:10+00:00</elem>
<elem key="delta">-2.0</elem>
</script><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-vhosts" output="&#xa;128 names had status 308"/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn&apos;t find wp-login.php"/><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-referer-checker" output="Couldn&apos;t find any cross-domain scripts."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args number=&lt;number|all&gt; for deeper analysis)"/><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
</script><script id="http-stored-xss" output="Couldn&apos;t find any stored XSS vulnerabilities."/><script id="http-date" output="Tue, 14 Apr 2026 04:14:37 GMT; -1s from local time."><elem key="date">2026-04-14T04:14:37+00:00</elem>
<elem key="delta">-1.0</elem>
</script><script id="http-methods" output="&#xa; Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
<elem>GET</elem>
<elem>HEAD</elem>
<elem>POST</elem>
<elem>OPTIONS</elem>
</table>
</script><script id="http-title" output="Did not follow redirect to https://shifts.lan.ddnsgeek.com/"><elem key="redirect_url">https://shifts.lan.ddnsgeek.com/</elem>
</script><script id="http-comments-displayer" output="Couldn&apos;t find any comments."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-chrono" output="Request times for /; avg: 733.58ms; min: 216.14ms; max: 971.14ms"/><script id="http-mobileversion-checker" output="No mobile version detected."/></port>
</script><script id="http-security-headers" output=""></script><script id="http-csrf" output="Couldn&apos;t find any CSRF vulnerabilities."/><script id="http-title" output="Did not follow redirect to https://shifts.lan.ddnsgeek.com/"><elem key="redirect_url">https://shifts.lan.ddnsgeek.com/</elem>
</script><script id="http-malware-host" output="Host appears to be clean"/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use -&#45;script-args search-limit=&lt;number|all&gt; for deeper analysis)"/><script id="http-feed" output="Couldn&apos;t find any feeds."/><script id="http-jsonp-detection" output="Couldn&apos;t find any JSONP endpoints."/><script id="http-errors" output="Couldn&apos;t find any error pages."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
</script><script id="http-vhosts" output="&#xa;128 names had status 308"/><script id="http-headers" output="&#xa; Location: https://shifts.lan.ddnsgeek.com/&#xa; Date: Tue, 14 Apr 2026 04:14:59 GMT&#xa; Content-Length: 17&#xa; Connection: close&#xa; &#xa; (Request type: GET)&#xa;"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-sitemap-generator" output="&#xa; Directory structure:&#xa; Longest directory structure:&#xa; Depth: 0&#xa; Dir: /&#xa; Total files found (by extension):&#xa; &#xa;"/><script id="http-devframework" output="Couldn&apos;t determine the underlying framework or CMS. Try increasing &apos;httpspider.maxpagecount&apos; value to spider more pages."/></port>
</ports>
<times srtt="20927" rttvar="20927" to="104635"/>
<times srtt="14129" rttvar="14129" to="100000"/>
</host>
<taskbegin task="NSE" time="1775382503"/>
<taskend task="NSE" time="1775382503"/>
<taskbegin task="NSE" time="1775382503"/>
<taskend task="NSE" time="1775382503"/>
<taskbegin task="NSE" time="1775382503"/>
<taskend task="NSE" time="1775382503"/>
<runstats><finished time="1775382503" timestr="Sun Apr 5 09:48:23 2026" summary="Nmap done at Sun Apr 5 09:48:23 2026; 1 IP address (1 host up) scanned in 388.85 seconds" elapsed="388.85" exit="success"/><hosts up="1" down="0" total="1"/>
<taskbegin task="NSE" time="1776140567"/>
<taskend task="NSE" time="1776140567"/>
<taskbegin task="NSE" time="1776140567"/>
<taskend task="NSE" time="1776140567"/>
<taskbegin task="NSE" time="1776140567"/>
<taskend task="NSE" time="1776140567"/>
<runstats><finished time="1776140567" timestr="Tue Apr 14 04:22:47 2026" summary="Nmap done at Tue Apr 14 04:22:47 2026; 1 IP address (1 host up) scanned in 511.31 seconds" elapsed="511.31" exit="success"/><hosts up="1" down="0" total="1"/>
</runstats>
</nmaprun>