beatzaplenty/autorecon
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fresh autorecon run

Browse Source
This commit is contained in:
beatzaplenty committed 2026-04-14 17:49:38 +10:00
1 parent c8f17a17e6
commit 3c3a192c79
1252 files changed
+4574573 -1993899
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

results/stockfill.lan.ddnsgeek.com/report/notes.txt
+1 -1
View File
@@ -6,7 +6,7 @@
[*] unknown found on tcp/51413.
[*] tcpwrapped found on tcp/51413.
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Commands.md
+21 -21
View File
@@ -3,41 +3,41 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root/results/stockfill.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt" -oX "/root/results/stockfill.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml" stockfill.lan.ddnsgeek.com
whatweb --color=never --no-errors -a 3 -v http://stockfill.lan.ddnsgeek.com:80 2>&1
curl -sSik https://stockfill.lan.ddnsgeek.com:443/
feroxbuster -u https://stockfill.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://stockfill.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
curl -sSik http://stockfill.lan.ddnsgeek.com:80/
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" stockfill.lan.ddnsgeek.com
sslscan --show-certificate --no-colour stockfill.lan.ddnsgeek.com:443 2>&1
ffuf -u https://stockfill.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.stockfill.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_stockfill.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://stockfill.lan.ddnsgeek.com:80 2>&1 | tee "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt"
whatweb --color=never --no-errors -a 3 -v https://stockfill.lan.ddnsgeek.com:443 2>&1
feroxbuster -u http://stockfill.lan.ddnsgeek.com:80/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_feroxbuster_dirbuster.txt"
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/stockfill.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/stockfill.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" stockfill.lan.ddnsgeek.com
curl -sSikf http://stockfill.lan.ddnsgeek.com:80/.well-known/security.txt
curl -sSikf http://stockfill.lan.ddnsgeek.com:80/robots.txt
curl -sSik http://stockfill.lan.ddnsgeek.com:80/
nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://stockfill.lan.ddnsgeek.com:80 2>&1 | tee "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt"
nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt" -oX "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml" stockfill.lan.ddnsgeek.com
ffuf -u http://stockfill.lan.ddnsgeek.com:80/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.stockfill.lan.ddnsgeek.com" -mc all -fs 17 -r -noninteractive -s | tee "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_stockfill.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/stockfill.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt" -oX "/root/results/stockfill.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml" stockfill.lan.ddnsgeek.com
feroxbuster -u https://stockfill.lan.ddnsgeek.com:443/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_feroxbuster_dirbuster.txt"
nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt" -oX "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml" stockfill.lan.ddnsgeek.com
whatweb --color=never --no-errors -a 3 -v http://stockfill.lan.ddnsgeek.com:80 2>&1
curl -sSikf https://stockfill.lan.ddnsgeek.com:443/.well-known/security.txt
curl -sSikf https://stockfill.lan.ddnsgeek.com:443/robots.txt
sslscan --show-certificate --no-colour stockfill.lan.ddnsgeek.com:443 2>&1
ffuf -u https://stockfill.lan.ddnsgeek.com:443/ -t 10 -w /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt -H "Host: FUZZ.stockfill.lan.ddnsgeek.com" -mc all -fs 19 -r -noninteractive -s | tee "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_stockfill.lan.ddnsgeek.com_vhosts_subdomains-top1million-110000.txt"
whatweb --color=never --no-errors -a 3 -v https://stockfill.lan.ddnsgeek.com:443 2>&1
curl -sSik https://stockfill.lan.ddnsgeek.com:443/
nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://stockfill.lan.ddnsgeek.com:443 2>&1 | tee "/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt"
```
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - All TCP Ports.md
+26 -123
View File
@@ -5,129 +5,32 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN "/root
[/root/results/stockfill.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt](file:///root/results/stockfill.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:51:20 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/stockfill.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml stockfill.lan.ddnsgeek.com
Increasing send delay for 167.179.167.166 from 0 to 5 due to 50 out of 124 dropped probes since last increase.
# Nmap 7.99 scan initiated Tue Apr 14 04:17:12 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -p- -oN /root/results/stockfill.lan.ddnsgeek.com/scans/_full_tcp_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/xml/_full_tcp_nmap.xml stockfill.lan.ddnsgeek.com
Nmap scan report for stockfill.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.019s latency).
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:51:24 UTC for 9855s
Not shown: 65531 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
Scanned at 2026-04-14 04:17:25 UTC for 1844s
Not shown: 65532 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Did not follow redirect to https://stockfill.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://stockfill.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| ssl-cert: Subject: commonName=stockfill.lan.ddnsgeek.com
| Subject Alternative Name: DNS:stockfill.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-03-22T09:47:15
| Not valid after: 2026-06-20T09:47:14
| MD5: 9d58 137a 2924 26ef f9ca b56e d3f1 510b
| SHA-1: 3ea5 c9a0 5fdd 6b57 78ec 626f 0ba7 3928 aecc 1948
| SHA-256: 4825 5fb5 3b5f ed46 46ca 1163 227d c1d1 cd58 8935 8d3e 9ed1 f0c8 467d e434 ec66
| -----BEGIN CERTIFICATE-----
| MIIGDzCCBPegAwIBAgISBSCym2uC+hYb1Zc3qCjloXn/MA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMzIyMDk0NzE1WhcNMjYwNjIwMDk0NzE0WjAlMSMwIQYDVQQD
| ExpzdG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
| ggIPADCCAgoCggIBAMkuGHd6QoSNHjkX2/DxCURKhM2DBoA4pytDrL4q3UzA1sVh
| pxGljFi5MNjqLbW5P7aHDXHo08Ecb8XczJFcURIGHObNKYMBqIZAV9MvMCEZ1SvQ
| AlkBIDtoxwjd/BnOxfrkn9JNKCdQrvzvbLEUPw/dH9n9lbVY3aNtoBs+Epk4nwxc
| MOxgkAtUAgkywhSDk4FyNxq2MA73DA0kVXwydY1yfhI7Y8y5+7HiDxYr7J/Tsl7F
| QQazayYkTMeae6OiARc9XYQYBsn2GJMzZCWHErXSIO7SEUq4ih3AvlBQASRqMFH5
| bgBkqKWQ8ilwUIXXY0K7mZaLLIx/s4ScV2q4AHqxvivWnLu+Fv3lcRDTWq52T9qo
| ZOcwnBBAgj3A1inOXw2yGZN/KZrxoHQsgkY6MUXcMVEdHKsCJJX2iqm4q+BFFHiV
| fBpqJUpspv8GGuFHCDjSdvsMZhMm/7i3AjXBZUieNqnFvPEewntw6NqfjAF5L/V5
| XrJXChOc80RGEN6rE2Y14Yxi0StwgRQwVNFYw4XBwhUJPsBbs9Sjvrg38hdzTbXh
| qvkEKB7ickYcauEMa4gjc1xM2LObg8tkWdOyEMRGANwHMIgIB9Yj9H7hgHW/U2ts
| gnrjhNJVPlWPyluyOmpvsL/2NF3yEEdmaYJy98WEUa/NNeH91tNjVc5todYxAgMB
| AAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+yISCK1nywudpGX6q9z3xXkf2CUwHwYD
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpz
| dG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAv
| BgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEyOC5jcmww
| ggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAdgAWgy2r8KklDw/wOqVF/8i/yCPQh0v2
| BCkn+OcfMxP1+gAAAZ0VJp8HAAAEAwBHMEUCIQCK0OoRf+dUKEXKGEd+eW+m2V41
| qkDgZjaqzZjtrYvMgAIgJ1rcjrLxvuAlBzF0FfEjVVpudI9RoYXDlb9pQMafIzkA
| fgBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ0VJqAnAAgAAAUA
| A/bFjQQDAEcwRQIhAImeNgcMfLu9dxqVvvKk7MTJ/ZTswiLxMZeh5A9185s2AiBD
| msLUiD7sIyCrYnSKMGUjQQfcvSOd9Rjkdu5nlwGlLDANBgkqhkiG9w0BAQsFAAOC
| AQEACDWH5UifJkKtK+4iaunh6JhtkMzBhj2k7d3SCgbjDhpXo43pz2X+uCs/RNcL
| I98aVmxGwBU3qXK0WVxfGFSof/xlEYaklbGFO7zsI4KW1R/drb0M4PJoxVf999us
| 98/q3Sn6jHCzLSlsBGxSHcFIfBw5Et+DLSYrAzIrlzEMfgzPDyy+aqyrAcASqFRG
| keqdDnpieOgxMTvV1SKRBayAW272i1bTiVgCr0eknXh9OGaJ3ZWsuPjekLR176Vs
| 5Rd8w3xMbQD2g/2jPocCj/XkEQljNwVBNDxtekl4vkRlvgs+FDqZE3ppHuuJ2wmd
| OAAxNsovC6BHaQgaRRfMSGuOyw==
|_-----END CERTIFICATE-----
|_http-favicon: Unknown favicon MD5: 28F40B1513BB073E82914945B1920905
|_ssl-date: TLS randomness does not represent time
|_http-server-header: nginx/1.27.5
|_http-title: StockFill
| http-methods:
|_ Supported Methods: GET HEAD
20001/tcp closed microsan reset ttl 57
51413/tcp open unknown syn-ack ttl 56
| fingerprint-strings:
| TLSSessionReq:
| //O[By
| ;lUt
| xu^O
| AN,PX+
| 'k@.y
| z(J*0~
| N*~.
|_ F$Xl
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port51413-TCP:V=7.98%I=9%D=4/5%Time=69D25539%P=x86_64-pc-linux-gnu%r(TL
SF:SSessionReq,249,"a\x90\xf5\xa0\x18\x89\xd0\xee\xe1\x01\xc2V&\xa7\xe9\]!
SF:\xe2xT\?\x9ce\xde\xfe\xeftA\xf5L\xbf\(\x87a\x85\xef\xda\xde\xf9!'r\x93\
SF:xae\x85\x99\x8a\xb6\x92Q\xe2\xa7B\.\xd64\xcb\xb6cF\xce\x02\xeb9D!\xedG<
SF:;\xd3_\xad\t\^\x88\x8f\x8e\xcf\xed<\x89\x9c#\xe2\x13c4\xeb\xa55\xc2\xa5
SF:\xda\x80A\xea{\x80:\$\x0c\x82\xdb\x87\xfe\xba\xe6\xae\xf4\xb8\x0b\xd5\x
SF:9f\x1a\xa8'd\xcf\x9b\xd4\x92\xb8\xca\xa6\x95q\*x\xce\xa0\xed!\xe8k\xe7e
SF:\xc6\xb9U\xf0\x1f\xfc7\xf5\xbb\x1dG\*\xaf\xb5YYk\x03}o\xf5t\xd0\x9f\x1d
SF:\xac\x05\xa8\xc0f=\xef\xd6\xc7\x82\x86\]\x14//O\[By\xaa\xd2\xb6V\x0bgp\
SF:x1cp\xab4\xfb\x97\x20\x84\x87\x99z~\xbba_N\x90\xd7\xd7\xe2\x19>\x891\x9
SF:6\xa8\xeaI\xd3T\x1e\x03\xe5\xd3\x14d/\xa7\xfa\xa7Ivk\x90\x8c-#T\x8f\x19
SF:\xf4\xdc\xa46\xbc\x99\xb6G#e\xff\x83y\x82\x01;lUt\x8e\xeaR5\xfc\xb3\xb6
SF:\xfc9\xa7\0\xfb\x17E\x7f\x8f\x97\0\xda\xcf\xeb\x9c:\xd2j\xb08\xe8\xe7\x
SF:d9\x97,\xf1;\xe8>H\x1f\x7fVo\xca\xc2Q\xdbk\x80\xedy\x0b\xe8\x1e\x1e\x86
SF:\x987\xb0\xe7\xa3\xbc\xfa\xc1\xcb\x9a\t/g\x99\xa5\xd4\xf6\xfdq\xf0\x82\
SF:?F\xcf\x95\x89xu\^O\xc9`3\x06\xfd4\xcb\x1e\xa7\xc3\x8cm,\xf2\xeb\xa6\xb
SF:bAN,PX\+\xc2\xad\x13\xdc\xb1\xec\xcd\x99\xa9<\x15\[\x83wSR\x96\xdd\x8f`
SF:#u\xea\x19jl\xe5B;\xd0\xf6qB0\xea2\xdd\x8f\xb9\.\)\xf9\x0e\^\xdc\xe0\x1
SF:9\xaf\xd0\*\x19\xe0=lI\xf0v\x17\\'\xe5bq\x90\xa1bj\xb7\^E\xee9\x07\x9d\
SF:x88v\x92FW\xc1\xc7\x9f\xd5\xdc\xcf\x81fZb\0z\xa6\x17p\x8fn\xf6s\x974v\(
SF:\xb3\xd8x\n9\x0b\xd2\xfb\xfc\x1e\\M\x15\xedt\xba\x04\xaa\x9cDRz\xb4C\[j
SF:\x1e\xce\xdd\x83\[\xed\xab\xbc\x94\xbe\0\xbd\x8di/\xa5\x99\x1b\xcf\x88~
SF:x\xeb'k@\.y\xef\xc5\xf2\xf5\x12\x12\xdeY\x1d\xbf\xb7U\$6\x8dG\xa5z\(J\*
SF:0~\x0cE\x83\xb9\[3\xee<Z\x16c\xa0N\*~\.\xfaR\xca\xed\x1a5\x8ek}\xc6\x91
SF:F\$Xl\x88iR\x88\xda\x15\?E\xcfj\xe1")%r(SSLv23SessionReq,9C,"\xa3\xebb\
SF:xd2\xc4c\x0cW\xde\xc71l\x97\x9a\xba\xdb\x91\xa6\(:\x19ic\xd9\xab\x1b\xd
SF:1\x17R\x80\xc0Z\xcb\x87\xe4\$\xe9\x20\[\xe9Fo\x1f/\n\xf9\"N\x84T\x92\)\
SF:x12S\xfdLj\xe8\xfeP\(\xe2\xbdj\xaf\x08a\xfc\xe4\xc2Uo\xf5\xbbP\xbd\+\xf
SF:9=\xcb\xb22\xbb\xc19\x99\xcb\xbb\x81K\x96:\x8f\x15j\xcc\xc7\x1c\x9c\x82
SF:\xcb\xd4\x876\x0f\0\xd9x\(\xbd\x83\xd54<\xc4:\xb8G\xe5\xa8\xc7\.\xaf\xc
SF:0\r\xd1\xf8\.\xb9At\x92\xe0S:\xdce\xc8gPF\x02\xa3\x10\xa0sn\xd8\x07Dq\x
SF:81\xcf\x196\xcf");
20001/tcp closed microsan reset ttl 57
51413/tcp open tcpwrapped syn-ack ttl 56
Device type: general purpose
Running (JUST GUESSING): Linux 4.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:4
Running (JUST GUESSING): Linux 5.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
Aggressive OS guesses: Linux 4.19 - 5.15 (88%)
Aggressive OS guesses: Linux 5.4 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69D2571B%P=x86_64-pc-linux-gnu)
SEQ(SP=105%GCD=1%ISR=108%TI=Z%TS=A)
SEQ(SP=FC%GCD=1%ISR=10D%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=20001%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDC709%P=x86_64-pc-linux-gnu)
SEQ(SP=103%GCD=1%ISR=10C%TI=Z%TS=A)
SEQ(SP=106%GCD=1%ISR=106%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
ECN(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
@@ -138,24 +41,24 @@ T7(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 17.123 days (since Thu Mar 19 09:37:52 2026)
Uptime guess: 0.006 days (since Tue Apr 14 04:40:06 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=261 (Good luck!)
TCP Sequence Prediction: Difficulty=259 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 20001/tcp)
HOP RTT ADDRESS
1 0.06 ms 10.216.0.161
2 0.23 ms 10.216.35.11
3 0.83 ms 10.216.32.2
4 0.51 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.42 ms as4764.syd.edgeix.net.au (202.77.88.3)
1 0.11 ms 10.216.0.161
2 0.28 ms 10.216.35.12
3 0.87 ms 10.216.32.1
4 0.35 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 2.94 ms 4764.syd.equinix.com (45.127.173.7)
6 11.70 ms 10.241.1.187
7 12.71 ms 10.241.2.26
8 20.41 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
7 13.02 ms 10.241.2.26
8 13.75 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 12:35:39 2026 -- 1 IP address (1 host up) scanned in 9861.18 seconds
# Nmap done at Tue Apr 14 04:48:10 2026 -- 1 IP address (1 host up) scanned in 1866.85 seconds
```
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - Top 100 UDP Ports.md
+22 -19
View File
@@ -5,38 +5,41 @@ nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN "/root/results/stockfill.la
[/root/results/stockfill.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt](file:///root/results/stockfill.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 10:13:09 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/stockfill.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml stockfill.lan.ddnsgeek.com
WARNING: RST from 167.179.167.166 port -1 -- is this port really open?
WARNING: RST from 167.179.167.166 port -1 -- is this port really open?
WARNING: RST from 167.179.167.166 port -1 -- is this port really open?
WARNING: RST from 167.179.167.166 port -1 -- is this port really open?
# Nmap 7.99 scan initiated Tue Apr 14 04:17:37 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sU -A --top-ports 100 -oN /root/results/stockfill.lan.ddnsgeek.com/scans/_top_100_udp_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/xml/_top_100_udp_nmap.xml stockfill.lan.ddnsgeek.com
Nmap scan report for stockfill.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set.
Host is up, received user-set (2.0s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 10:13:17 UTC for 1449s
Scanned at 2026-04-14 04:17:54 UTC for 1682s
All 100 scanned ports on stockfill.lan.ddnsgeek.com (167.179.167.166) are in ignored states.
Not shown: 100 open|filtered udp ports (no-response)
Too many fingerprints match this host to give specific OS details
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing an open TCP port so results incomplete
Aggressive OS guesses: Billion 7404VGP-M ADSL router (91%), Fortinet FortiGate-50B or 310B firewall (91%), NetworksAOK network monitoring applicance (91%), APC Network Management Card 3 (85%), Asus WL-500gP wireless broadband router (85%), Cisco Aironet 3800-series WAP (85%), FreeBSD 13.1-RELEASE (85%), IBM i 7.4 (85%), Linksys WRT54G v8 wireless broadband router (85%), Linksys WRT54G2 WAP (85%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=%CT=%CU=%PV=N%G=N%TM=69D23B66%P=x86_64-pc-linux-gnu)
SCAN(V=7.99%E=4%D=4/14%OT=%CT=%CU=%PV=N%DS=14%DC=T%G=N%TM=69DDC685%P=x86_64-pc-linux-gnu)
SEQ()
T1(R=Y%DF=Y%TG=40%S=O%A=O%F=AP%RD=0%Q=)
T4(R=Y%DF=Y%TG=40%W=1F9%S=O%A=O%F=AP%O=NNT11%RD=0%Q=)
U1(R=N)
IE(R=N)
Network Distance: 14 hops
TRACEROUTE (using proto 1/icmp)
HOP RTT ADDRESS
1 0.07 ms 10.216.0.161
2 0.17 ms 10.216.35.11
3 6.58 ms 10.216.32.2
4 0.32 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.74 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.67 ms 10.241.1.187
7 12.53 ms 10.241.2.71
8 ... 30
HOP RTT ADDRESS
1 0.10 ms 10.216.0.161
2 0.20 ms 10.216.35.12
3 0.98 ms 10.216.32.2
4 0.35 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 2.34 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.88 ms 10.241.1.185
7 12.17 ms 10.241.2.26
8 ... 13
14 2046.23 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 10:37:26 2026 -- 1 IP address (1 host up) scanned in 1459.49 seconds
# Nmap done at Tue Apr 14 04:45:59 2026 -- 1 IP address (1 host up) scanned in 1710.60 seconds
```
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Port Scans/PortScan - Top TCP Ports.md
+27 -28
View File
@@ -5,23 +5,18 @@ nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN "/root/res
[/root/results/stockfill.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt](file:///root/results/stockfill.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:50:30 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/stockfill.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml stockfill.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:15:25 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -sC --version-all -A --osscan-guess -oN /root/results/stockfill.lan.ddnsgeek.com/scans/_quick_tcp_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/xml/_quick_tcp_nmap.xml stockfill.lan.ddnsgeek.com
Nmap scan report for stockfill.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.016s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:50:34 UTC for 41s
Scanned at 2026-04-14 04:15:33 UTC for 85s
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-title: Did not follow redirect to https://stockfill.lan.ddnsgeek.com/
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
|_http-title: Did not follow redirect to https://stockfill.lan.ddnsgeek.com/
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-favicon: Unknown favicon MD5: 28F40B1513BB073E82914945B1920905
|_ssl-date: TLS randomness does not represent time
|_http-server-header: nginx/1.27.5
| http-methods:
|_ Supported Methods: GET HEAD
| ssl-cert: Subject: commonName=stockfill.lan.ddnsgeek.com
| Subject Alternative Name: DNS:stockfill.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
@@ -68,22 +63,26 @@ PORT STATE SERVICE REASON VERSION
| 5Rd8w3xMbQD2g/2jPocCj/XkEQljNwVBNDxtekl4vkRlvgs+FDqZE3ppHuuJ2wmd
| OAAxNsovC6BHaQgaRRfMSGuOyw==
|_-----END CERTIFICATE-----
|_http-title: StockFill
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|_http-server-header: nginx/1.27.5
|_ssl-date: TLS randomness does not represent time
|_http-favicon: Unknown favicon MD5: 28F40B1513BB073E82914945B1920905
| http-methods:
|_ Supported Methods: GET HEAD
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (92%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Running (JUST GUESSING): Linux 5.X (91%)
OS CPE: cpe:/o:linux:linux_kernel:5.4
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.19 - 5.15 (92%), Linux 4.15 - 5.19 (85%), Linux 5.0 - 5.14 (85%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%)
Aggressive OS guesses: Linux 5.4 (91%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.98%E=4%D=4/5%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69D23093%P=x86_64-pc-linux-gnu)
SEQ(SP=105%GCD=1%ISR=10D%TI=Z%TS=A)
SEQ(SP=F8%GCD=1%ISR=10C%TI=Z%TS=A)
SCAN(V=7.99%E=4%D=4/14%OT=80%CT=%CU=%PV=N%DS=8%DC=T%G=N%TM=69DDBFBA%P=x86_64-pc-linux-gnu)
SEQ(SP=103%GCD=1%ISR=10B%TI=Z%TS=A)
SEQ(SP=108%GCD=1%ISR=106%TI=Z%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=7CD%O=NNT11%CC=N%Q=)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
ECN(R=N)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
@@ -91,24 +90,24 @@ T4(R=N)
U1(R=N)
IE(R=N)
Uptime guess: 17.009 days (since Thu Mar 19 09:37:52 2026)
Uptime guess: 49.694 days (since Mon Feb 23 11:37:20 2026)
Network Distance: 8 hops
TCP Sequence Prediction: Difficulty=261 (Good luck!)
TCP Sequence Prediction: Difficulty=259 (Good luck!)
IP ID Sequence Generation: All zeros
TRACEROUTE (using port 80/tcp)
HOP RTT ADDRESS
1 0.08 ms 10.216.0.161
2 0.25 ms 10.216.35.12
3 1.05 ms 10.216.32.2
4 0.31 ms lo0-0.gw2.syd1.au.linode.com (172.105.160.102)
5 2.32 ms 4764.syd.equinix.com (45.127.173.7)
6 11.67 ms 10.241.1.185
7 14.34 ms 10.241.2.26
8 14.02 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
1 0.09 ms 10.216.0.161
2 0.23 ms 10.216.35.11
3 0.96 ms 10.216.32.2
4 26.83 ms lo0-0.gw1.syd1.au.linode.com (172.105.160.101)
5 3.52 ms as4764.syd.edgeix.net.au (202.77.88.3)
6 11.61 ms 10.241.1.185
7 12.44 ms 10.241.2.71
8 14.21 ms 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net (167.179.167.166)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 09:51:15 2026 -- 1 IP address (1 host up) scanned in 48.07 seconds
# Nmap done at Tue Apr 14 04:16:58 2026 -- 1 IP address (1 host up) scanned in 101.05 seconds
```
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl Robots.md
+1 -1
View File
@@ -8,7 +8,7 @@ curl -sSikf https://stockfill.lan.ddnsgeek.com:443/robots.txt
HTTP/2 200
accept-ranges: bytes
content-type: text/html
date: Sun, 05 Apr 2026 10:15:44 GMT
date: Tue, 14 Apr 2026 04:28:29 GMT
etag: "69c9ef96-20b"
last-modified: Mon, 30 Mar 2026 03:35:50 GMT
server: nginx/1.27.5
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Curl.md
+1 -1
View File
@@ -8,7 +8,7 @@ curl -sSik https://stockfill.lan.ddnsgeek.com:443/
HTTP/2 200
accept-ranges: bytes
content-type: text/html
date: Sun, 05 Apr 2026 09:56:07 GMT
date: Tue, 14 Apr 2026 04:29:31 GMT
etag: "69c9ef96-20b"
last-modified: Mon, 30 Mar 2026 03:35:50 GMT
server: nginx/1.27.5
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Directory Buster.md
+23 -18
View File
@@ -293,27 +293,32 @@ Configuration {
200 GET 14l 19w 350c https://stockfill.lan.ddnsgeek.com/.well-known/assetlinks.json
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/assets/
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/icons/
200 GET 3l 1527w 96806c https://stockfill.lan.ddnsgeek.com/assets/jszip-DyQewxn5.js
200 GET 4l 2350w 95909c https://stockfill.lan.ddnsgeek.com/assets/dexie-DvMqvjyc.js
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/templates/
200 GET 2l 41w 1226c https://stockfill.lan.ddnsgeek.com/assets/dataHooks-Bvi9rXFx.js
200 GET 2l 8w 94c https://stockfill.lan.ddnsgeek.com/assets/Product-DDMI3nUP.js
200 GET 2l 87w 2311c https://stockfill.lan.ddnsgeek.com/assets/ManageCategoriesScreen-DIKPVCrl.js
200 GET 2l 43w 1458c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerView-gw-FkEXE.js
200 GET 2l 81w 2399c https://stockfill.lan.ddnsgeek.com/assets/StartPickListScreen-DC4W1hvB.js
200 GET 3l 258w 8867c https://stockfill.lan.ddnsgeek.com/assets/ImportExportScreen-8mKTDaOI.js
200 GET 2l 192w 7623c https://stockfill.lan.ddnsgeek.com/assets/ManageProductsScreen-lC7YubhZ.js
200 GET 2l 81w 2610c https://stockfill.lan.ddnsgeek.com/assets/PickListsScreen-DB9p0ztW.js
200 GET 2l 108w 3637c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerScreen-CCfqxMjB.js
200 GET 2l 166w 5899c https://stockfill.lan.ddnsgeek.com/assets/AddProductDialog-zoIJhILV.js
200 GET 149l 10154w 574421c https://stockfill.lan.ddnsgeek.com/assets/vendor-2fCQKpJa.js
200 GET 2l 33w 943c https://stockfill.lan.ddnsgeek.com/assets/HomeScreen-Cadr3bNt.js
200 GET 3l 356w 11631c https://stockfill.lan.ddnsgeek.com/assets/index-DZWxa9kt.js
200 GET 2l 48w 1109c https://stockfill.lan.ddnsgeek.com/assets/ManageAreasScreen-C_dyC1ZR.js
200 GET 21l 8853w 411195c https://stockfill.lan.ddnsgeek.com/assets/zxing-ChT2UnX7.js
200 GET 2l 300w 14995c https://stockfill.lan.ddnsgeek.com/assets/ActivePickListScreen-DvSlACXD.js
200 GET 11l 353w 19437c https://stockfill.lan.ddnsgeek.com/assets/papaparse--HYnOrQZ.js
200 GET 2l 192w 7623c https://stockfill.lan.ddnsgeek.com/assets/ManageProductsScreen-lC7YubhZ.js
200 GET 2l 41w 1226c https://stockfill.lan.ddnsgeek.com/assets/dataHooks-Bvi9rXFx.js
200 GET 149l 10154w 574421c https://stockfill.lan.ddnsgeek.com/assets/vendor-2fCQKpJa.js
200 GET 21l 8853w 411195c https://stockfill.lan.ddnsgeek.com/assets/zxing-ChT2UnX7.js
200 GET 2l 108w 3637c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerScreen-CCfqxMjB.js
200 GET 3l 356w 11631c https://stockfill.lan.ddnsgeek.com/assets/index-DZWxa9kt.js
200 GET 2l 81w 2610c https://stockfill.lan.ddnsgeek.com/assets/PickListsScreen-DB9p0ztW.js
200 GET 2l 8w 94c https://stockfill.lan.ddnsgeek.com/assets/Product-DDMI3nUP.js
200 GET 2l 300w 14995c https://stockfill.lan.ddnsgeek.com/assets/ActivePickListScreen-DvSlACXD.js
200 GET 4l 2350w 95909c https://stockfill.lan.ddnsgeek.com/assets/dexie-DvMqvjyc.js
200 GET 2l 166w 5899c https://stockfill.lan.ddnsgeek.com/assets/AddProductDialog-zoIJhILV.js
200 GET 3l 258w 8867c https://stockfill.lan.ddnsgeek.com/assets/ImportExportScreen-8mKTDaOI.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/BatterySaverSharp.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/HotelClassRounded.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/LightbulbRounded.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/node_modules/@mui/icons-material/esm/Battery6BarTwoTone.js
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/RequestQuoteRounded.js
200 GET 2l 43w 1458c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerView-gw-FkEXE.js
200 GET 3l 1527w 96806c https://stockfill.lan.ddnsgeek.com/assets/jszip-DyQewxn5.js
200 GET 2l 81w 2399c https://stockfill.lan.ddnsgeek.com/assets/StartPickListScreen-DC4W1hvB.js
200 GET 2l 33w 943c https://stockfill.lan.ddnsgeek.com/assets/HomeScreen-Cadr3bNt.js
200 GET 2l 78w 2578c https://stockfill.lan.ddnsgeek.com/assets/EditableEntityList-D-b3NbYE.js
200 GET 2l 87w 2311c https://stockfill.lan.ddnsgeek.com/assets/ManageCategoriesScreen-DIKPVCrl.js
200 GET 2l 48w 1109c https://stockfill.lan.ddnsgeek.com/assets/ManageAreasScreen-C_dyC1ZR.js
200 GET 4932l 17889w 4194304c https://stockfill.lan.ddnsgeek.com/stats.html (truncated to size limit)
200 GET 19l 68w 497c https://stockfill.lan.ddnsgeek.com/50x.html
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Known Security.md
+1 -1
View File
@@ -8,7 +8,7 @@ curl -sSikf https://stockfill.lan.ddnsgeek.com:443/.well-known/security.txt
HTTP/2 200
accept-ranges: bytes
content-type: text/html
date: Sun, 05 Apr 2026 10:15:42 GMT
date: Tue, 14 Apr 2026 04:28:26 GMT
etag: "69c9ef96-20b"
last-modified: Mon, 30 Mar 2026 03:35:50 GMT
server: nginx/1.27.5
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/Nmap HTTP.md
+152 -137
View File
@@ -5,26 +5,22 @@ nmap -vv --reason -Pn -T4 -sV -p 443 --script="banner,(http* or ssl*) and not (b
[/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt](file:///root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 09:59:47 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml stockfill.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:22:52 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml stockfill.lan.ddnsgeek.com
Nmap scan report for stockfill.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:59:51 UTC for 140s
Scanned at 2026-04-14 04:23:03 UTC for 523s
PORT STATE SERVICE REASON VERSION
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_ssl-date: TLS randomness does not represent time
|_http-malware-host: Host appears to be clean
|_http-mobileversion-checker: No mobile version detected.
|_http-chrono: Request times for /; avg: 6591.86ms; min: 2398.18ms; max: 10878.80ms
|_http-feed: Couldn't find any feeds.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-errors: Couldn't find any error pages.
|_http-favicon: Unknown favicon MD5: 28F40B1513BB073E82914945B1920905
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-headers:
| Accept-Ranges: bytes
| Content-Length: 523
| Content-Type: text/html
| Date: Sun, 05 Apr 2026 10:00:06 GMT
| Date: Tue, 14 Apr 2026 04:24:29 GMT
| Etag: "69c9ef96-20b"
| Last-Modified: Mon, 30 Mar 2026 03:35:50 GMT
| Server: nginx/1.27.5
@@ -35,11 +31,19 @@ PORT STATE SERVICE REASON VERSION
| Connection: close
|
|_ (Request type: HEAD)
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-server-header: nginx/1.27.5
| http-methods:
|_ Supported Methods: GET HEAD
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-sql-injection: ERROR: Script execution failed (use -d to debug)
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
| http-vuln-cve2011-3192:
| VULNERABLE:
| Apache byterange filter DoS
@@ -53,10 +57,18 @@ PORT STATE SERVICE REASON VERSION
| https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192
| https://seclists.org/fulldisclosure/2011/Aug/175
|_ https://www.securityfocus.com/bid/49303
|_http-date: Sun, 05 Apr 2026 10:00:08 GMT; -3s from local time.
| http-methods:
|_ Supported Methods: GET HEAD
|_http-errors: Couldn't find any error pages.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-unsafe-output-escaping: ERROR: Script execution failed (use -d to debug)
|_http-rfi-spider: ERROR: Script execution failed (use -d to debug)
|_http-feed: Couldn't find any feeds.
|_http-traceroute: ERROR: Script execution failed (use -d to debug)
| http-useragent-tester:
| Status for browser useragent: 200
| Allowed User Agents:
| libwww
| lwp-trivial
| libcurl-agent/1.0
| PHP/
@@ -73,109 +85,85 @@ PORT STATE SERVICE REASON VERSION
| Wget/1.13.4 (linux-gnu)
| WWW-Mechanize/1.34
| Change in Status Code:
| libwww: 404
|_ Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html): 404
|_http-dombased-xss: Couldn't find any DOM based XSS.
| http-security-headers:
| Strict_Transport_Security:
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
| X_Frame_Options:
| Header: X-Frame-Options: SAMEORIGIN
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
| X_XSS_Protection:
| Header: X-XSS-Protection: 1; mode=block
| Description: The browser will prevent the rendering of the page when XSS is detected.
| X_Content_Type_Options:
| Header: X-Content-Type-Options: nosniff
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|_ssl-date: TLS randomness does not represent time
|_http-server-header: nginx/1.27.5
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-default-accounts:
| [Arris 2307] at /logo_t.gif
|_ <blank>:<blank>
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-trane-info: Problem with XML parsing of /evox/about
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-date: Tue, 14 Apr 2026 04:24:43 GMT; 0s from local time.
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-php-version: Logo query returned unknown hash 28f40b1513bb073e82914945b1920905
|_Credits query returned unknown hash 28f40b1513bb073e82914945b1920905
|_http-chrono: Request times for /; avg: 32912.25ms; min: 2204.00ms; max: 56226.97ms
|_http-favicon: Unknown favicon MD5: 28F40B1513BB073E82914945B1920905
| http-vhosts:
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| ssl-cert: Subject: commonName=stockfill.lan.ddnsgeek.com
| Subject Alternative Name: DNS:stockfill.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-03-22T09:47:15
| Not valid after: 2026-06-20T09:47:14
| MD5: 9d58 137a 2924 26ef f9ca b56e d3f1 510b
| SHA-1: 3ea5 c9a0 5fdd 6b57 78ec 626f 0ba7 3928 aecc 1948
| SHA-256: 4825 5fb5 3b5f ed46 46ca 1163 227d c1d1 cd58 8935 8d3e 9ed1 f0c8 467d e434 ec66
| -----BEGIN CERTIFICATE-----
| MIIGDzCCBPegAwIBAgISBSCym2uC+hYb1Zc3qCjloXn/MA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMzIyMDk0NzE1WhcNMjYwNjIwMDk0NzE0WjAlMSMwIQYDVQQD
| ExpzdG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
| ggIPADCCAgoCggIBAMkuGHd6QoSNHjkX2/DxCURKhM2DBoA4pytDrL4q3UzA1sVh
| pxGljFi5MNjqLbW5P7aHDXHo08Ecb8XczJFcURIGHObNKYMBqIZAV9MvMCEZ1SvQ
| AlkBIDtoxwjd/BnOxfrkn9JNKCdQrvzvbLEUPw/dH9n9lbVY3aNtoBs+Epk4nwxc
| MOxgkAtUAgkywhSDk4FyNxq2MA73DA0kVXwydY1yfhI7Y8y5+7HiDxYr7J/Tsl7F
| QQazayYkTMeae6OiARc9XYQYBsn2GJMzZCWHErXSIO7SEUq4ih3AvlBQASRqMFH5
| bgBkqKWQ8ilwUIXXY0K7mZaLLIx/s4ScV2q4AHqxvivWnLu+Fv3lcRDTWq52T9qo
| ZOcwnBBAgj3A1inOXw2yGZN/KZrxoHQsgkY6MUXcMVEdHKsCJJX2iqm4q+BFFHiV
| fBpqJUpspv8GGuFHCDjSdvsMZhMm/7i3AjXBZUieNqnFvPEewntw6NqfjAF5L/V5
| XrJXChOc80RGEN6rE2Y14Yxi0StwgRQwVNFYw4XBwhUJPsBbs9Sjvrg38hdzTbXh
| qvkEKB7ickYcauEMa4gjc1xM2LObg8tkWdOyEMRGANwHMIgIB9Yj9H7hgHW/U2ts
| gnrjhNJVPlWPyluyOmpvsL/2NF3yEEdmaYJy98WEUa/NNeH91tNjVc5todYxAgMB
| AAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+yISCK1nywudpGX6q9z3xXkf2CUwHwYD
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpz
| dG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAv
| BgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEyOC5jcmww
| ggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAdgAWgy2r8KklDw/wOqVF/8i/yCPQh0v2
| BCkn+OcfMxP1+gAAAZ0VJp8HAAAEAwBHMEUCIQCK0OoRf+dUKEXKGEd+eW+m2V41
| qkDgZjaqzZjtrYvMgAIgJ1rcjrLxvuAlBzF0FfEjVVpudI9RoYXDlb9pQMafIzkA
| fgBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ0VJqAnAAgAAAUA
| A/bFjQQDAEcwRQIhAImeNgcMfLu9dxqVvvKk7MTJ/ZTswiLxMZeh5A9185s2AiBD
| msLUiD7sIyCrYnSKMGUjQQfcvSOd9Rjkdu5nlwGlLDANBgkqhkiG9w0BAQsFAAOC
| AQEACDWH5UifJkKtK+4iaunh6JhtkMzBhj2k7d3SCgbjDhpXo43pz2X+uCs/RNcL
| I98aVmxGwBU3qXK0WVxfGFSof/xlEYaklbGFO7zsI4KW1R/drb0M4PJoxVf999us
| 98/q3Sn6jHCzLSlsBGxSHcFIfBw5Et+DLSYrAzIrlzEMfgzPDyy+aqyrAcASqFRG
| keqdDnpieOgxMTvV1SKRBayAW272i1bTiVgCr0eknXh9OGaJ3ZWsuPjekLR176Vs
| 5Rd8w3xMbQD2g/2jPocCj/XkEQljNwVBNDxtekl4vkRlvgs+FDqZE3ppHuuJ2wmd
| OAAxNsovC6BHaQgaRRfMSGuOyw==
|_-----END CERTIFICATE-----
|_http-title: StockFill
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
| http-cakephp-version: Version of codebase: 1.1.x, 1.2.x
| Version of icons: 1.3.x
|_Default stylesheet has an unknown hash: 28f40b1513bb073e82914945b1920905
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
| http-waf-detect: IDS/IPS/WAF detected:
|_stockfill.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1
| /assets/
| Other: 2; js: 3
| Longest directory structure:
| Depth: 1
| Dir: /assets/
| Total files found (by extension):
|_ Other: 3; js: 3; json: 1
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-comments-displayer:
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=stockfill.lan.ddnsgeek.com
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 146
| Comment:
| /*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):o?s+="\\/*$":t!==""&&t!=="/"&&(s+="(?:(?=\\/|$))"),[new RegExp(s,a?void 0:"i"),i]}function _3(t){try{return t.split("/").map(a=>decodeURIComponent(a).replace(/\//g,"%2F")).join("/")}catch(a){return Ta(!1,`The URL path "${t}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${a}).`),t}}function xr(t,a){if(a==="/")return t;if(!t.toLowerCase().startsWith(a.toLowerCase()))return null;let o=a.endsWith("/")?a.length-1:a.length,i=t.charAt(o);return i&&i!=="/"?null:t.slice(o)||"/"}var j3=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i,U3=t=>j3.test(t);function H3(t,a="/"){let{pathname:o,search:i="",hash:s=""}=typeof t=="string"?Ii(t):t,u;if(o)if(U3(o))u=o;else{if(o.includes("//")){let f=o;o=o.replace(/\/\/+/g,"/"),Ta(!1,`Pathnames cannot have embedded double slashes - normalizing ${f} -> ${o}`)}o.startsWith("/")?u=fb(o.substring(1),"/"):u=fb(o,a)}else u=a;return{pathname:u,search:q3(i),hash:G3(s)}}function fb(t,a){let o=a.replace(/\/+$/,"").split("/");return t.split("/").forEach(s=>{s===".."?o.length>1&&o.pop():s!=="."&&o.push(s)}),o.length>1?o.join("/"):"/"}function gp(t,a,o,i){return`Cannot include a '${t}' character in a manually specified \`to.${a}\` field [${JSON.stringify(i)}]. Please separate it out to the \`to.${o}\` field. Alternatively you may provide the full path as a string in <Link to="..."> and the router will parse it for you.`}function I3(t){return t.filter((a,o)=>o===0||a.route.path&&a.route.path.length>0)}function aS(t){let a=I3(t);return a.map((o,i)=>i===a.length-1?o.pathname:o.pathnameBase)}function rS(t,a,o,i=!1){let s;typeof t=="string"?s=Ii(t):(s={...t},Ie(!s.pathname||!s.pathname.includes("?"),gp("?","pathname","search",s)),Ie(!s.pathname||!s.pathname.includes("#"),gp("#","pathname","hash",s)),Ie(!s.search||!s.search.includes("#"),gp("#","search","hash",s)));let u=t===""||s.pathname==="",f=u?"/":s.pathname,p;if(f==null)p=o;else{let v=a.length-1;if(!i&&f.startsWith("..")){let w=f.split("/");for(;w[0]==="..";)w.shift(),v-=1;s.pathname=w.join("/")}p=v>=0?a[v]:"/"}let m=H3(s,p),h=f&&f!=="/"&&f.endsWith("/"),g=(u||f===".")&&o.endsWith("/");return!m.pathname.endsWith("/")&&(h||g)&&(m.pathname+="/"),m}var yr=t=>t.join("/").replace(/\/\/+/g,"/"),V3=t=>t.replace(/\/+$/,"").replace(/^\/*/
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 20
| Comment:
| // handle system mode
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 148
| Comment:
| /*`}">.`)}let w=jo(),E;if(a){let z=typeof a=="string"?Ii(a):a;Ie(g==="/"||z.pathname?.startsWith(g),`When overriding the location using \`<Routes location>\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${g}" but pathname "${z.pathname}" was given in the \`location\` prop.`),E=z}else E=w;let x=E.pathname||"/",C=x;if(g!=="/"){let z=g.replace(/^\//,"").split("/");C="/"+x.replace(/^\//,"").split("/").slice(z.length).join("/")}let R=tS(t,{pathname:C});Ta(v||R!=null,`No routes matched location "${E.pathname}${E.search}${E.hash}" `),Ta(R==null||R[R.length-1].route.element!==void 0||R[R.length-1].route.Component!==void 0||R[R.length-1].route.lazy!==void 0,`Matched leaf route at location "${E.pathname}${E.search}${E.hash}" does not have an element or Component. This means it will render an <Outlet /> with a null value by default resulting in an "empty" page.`);let M=iz(R&&R.map(z=>Object.assign({},z,{params:Object.assign({},m,z.params),pathname:yr([g,u.encodeLocation?u.encodeLocation(z.pathname.replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:z.pathname]),pathnameBase:z.pathnameBase==="/"?g:yr([g,u.encodeLocation?u.encodeLocation(z.pathnameBase.replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:z.pathnameBase])})),f,o,i,s);return a&&M?b.createElement(bs.Provider,{value:{location:{pathname:"/",search:"",hash:"",state:null,key:"default",...E},navigationType:"POP"}},M):M}function nz(){let t=fz(),a=F3(t)?`${t.status} ${t.statusText}`:t instanceof Error?t.message:JSON.stringify(t),o=t instanceof Error?t.stack:null,i="rgba(200,200,200, 0.5)",s={padding:"0.5rem",backgroundColor:i},u={padding:"2px 4px",backgroundColor:i},f=null;return console.error("Error handled by React Router default ErrorBoundary:",t),f=b.createElement(b.Fragment,null,b.createElement("p",null,"\xF0\x9F\x92\xBF Hey developer \xF0\x9F\x91\x8B"),b.createElement("p",null,"You can provide a way better UX than this when your app throws errors by providing your own ",b.createElement("code",{style:u},"ErrorBoundary")," or"," ",b.createElement("code",{style:u},"errorElement")," prop on your route.")),b.createElement(b.Fragment,null,b.createElement("h2",null,"Unexpected Application Error!"),b.createElement("h3",{style:{fontStyle:"italic"}},a),o?b.createElement("pre",{style:s},o):null,f)}var az=b.createElement(nz,null),rz=class extends b.Component{constructor(t){super(t),this.state={location:t.location,revalidation:t.revalidation,error:t.error}}static getDerivedStateFromError(t){return{error:t}}static getDerivedStateFromProps(t,a){return a.location!==t.location||a.revalidation!=="idle"&&t.revalidation==="idle"?{error:t.error,location:t.location,revalidation:t.revalidation}:{error:t.error!==void 0?t.error:a.error,location:a.location,revalidation:t.revalidation||a.revalidation}}componentDidCatch(t,a){this.props.onError?this.props.onError(t,a):console.error("React Router caught the following error during render",t)}render(){return this.state.error!==void 0?b.createElement(Ma.Provider,{value:this.props.routeContext},b.createElement(Dm.Provider,{value:this.state.error,children:this.props.component})):this.props.children}};function oz({routeContext:t,match:a,children:o}){let i=b.useContext(Vi);return i&&i.static&&i.staticContext&&(a.route.errorElement||a.route.ErrorBoundary)&&(i.staticContext._deepestRenderedBoundaryId=a.route.id),b.createElement(Ma.Provider,{value:t},o)}function iz(t,a=[],o=null,i=null,s=null){if(t==null){if(!o)return null;if(o.errors)t=o.matches;else if(a.length===0&&!o.initialized&&o.matches.length>0)t=o.matches;else return null}let u=t,f=o?.errors;if(f!=null){let g=u.findIndex(v=>v.route.id&&f?.[v.route.id]!==void 0);Ie(g>=0,`Could not find a matching route for errors on route IDs: ${Object.keys(f).join(",")}`),u=u.slice(0,Math.min(u.length,g+1))}let p=!1,m=-1;if(o)for(let g=0;g<u.length;g++){let v=u[g];if((v.route.HydrateFallback||v.route.hydrateFallbackElement)&&(m=g),v.route.id){let{loaderData:w,errors:E}=o,x=v.route.loader&&!w.hasOwnProperty(v.route.id)&&(!E||E[v.route.id]===void 0);if(v.route.lazy||x){p=!0,m>=0?u=u.slice(0,m+1):u=[u[0]];break}}}let h=o&&i?(g,v)=>{i(g,{location:o.location,params:o.matches?.[0]?.params??{},errorInfo:v})}:void 0;return u.reduceRight((g,v,w)=>{let E,x=!1,C=null,R=null;o&&(E=f&&v.route.id?f[v.route.id]:void 0,C=v.route.errorElement||az,p&&(m<0&&w===0?(cS("route-fallback",!1,"No `HydrateFallback` element provided to render during initial hydration"),x=!0,R=null):m===w&&(x=!0,R=v.route.hydrateFallbackElement||null)));let M=a.concat(u.slice(0,w+1)),z=()=>{let O;return E?O=C:x?O=R:v.route.Component?O=b.createElement(v.route.Component,null):v.route.element?O=v.route.element:O=g,b.createElement(oz,{match:v,routeContext:{outlet:g,matches:M,isDataRoute:o!=null},children:O})};return o&&(v.route.ErrorBoundary||v.route.errorElement||w===0)?b.createElement(rz,{location:o.location,revaliLine truncated
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 146
| Comment:
| /*"),`Route path "${t}" will be treated as if it were "${t.replace(/\*$/,"/*")}" because the \`*\` character must always follow a \`/\` in the pattern. To get rid of this warning, please change the route path to "${t.replace(/\*$/,"/*")}".`);let i=[],s="^"+t.replace(/\/*\*?$/,"").replace(/^\/*/
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/index-DZWxa9kt.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/index-DZWxa9kt.js
| Line number: 3
| Comment:
|
| //# sourceMappingURL=index-DZWxa9kt.js.map
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/dexie-DvMqvjyc.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/dexie-DvMqvjyc.js
| Line number: 4
| Comment:
|
| //# sourceMappingURL=dexie-DvMqvjyc.js.map
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 9
| Comment:
| /*"+cs(a,_n-1)+"*"+mc(t===47?t:Kn())}function t2(t){for(;!ns(Ha());)Kn();return cs(t,_n)}function e2(t){return Ob(Yu("",null,null,null,[""],t=Mb(t),0,[0],t))}function Yu(t,a,o,i,s,u,f,p,m){for(var h=0,g=0,v=f,w=0,E=0,x=0,C=1,R=1,M=1,z=0,O="",A=s,k=u,$=i,P=O;R;)switch(x=z,z=Kn()){case 40:if(x!=108&&bn(P,v-1)==58){Sp(P+=ve(Fu(z),"&","&\f"),"&\f")!=-1&&(M=-1);break}case 34:case 39:case 91:P+=Fu(z);break;case 9:case 10:case 13:case 32:P+=QC(x);break;case 92:P+=ZC(Gu()-1,7);continue;case 47:switch(Ha()){case 42:case 47:Nu(n2(JC(Kn(),Gu()),a,o),m);break;default:P+="/"}break;case 123*C:p[h++]=Pa(P)*M;case 125*C:case 59:case 0:switch(z){case 0:case 125:R=0;case 59+g:M==-1&&(P=ve(P,/\f/g,"")),E>0&&Pa(P)-v&&Nu(E>32?$v(P+";",i,o,v-1):$v(ve(P," ","")+";",i,o,v-2),m);break;case 59:P+=";";default:if(Nu($=Dv(P,a,o,h,g,s,p,O,A=[],k=[],v),u),z===123)if(g===0)Yu(P,a,$,$,A,u,v,p,k);else switch(w===99&&bn(P,3)===110?100:w){case 100:case 108:case 109:case 115:Yu(t,$,$,i&&Nu(Dv(t,$,$,0,0,s,p,O,s,A=[],v),k),s,k,v,p,i?A:k);break;default:Yu(P,$,$,$,[""],k,0,p,k)}}h=g=E=0,C=M=1,O=P="",v=f;break;case 58:v=1+Pa(P),E=x;default:if(C<1){if(z==123)--C;else if(z==125&&C++==0&&KC()==125)continue}switch(P+=mc(z),z*C){case 38:M=g>0?1:(P+="\f",-1);break;case 44:p[h++]=(Pa(P)-1)*M,M=1;break;case 64:Ha()===45&&(P+=Fu(Kn())),w=Ha(),g=v=Pa(O=P+=t2(Gu())),z++;break;case 45:x===45&&Pa(P)==2&&(C=0)}}return u}function Dv(t,a,o,i,s,u,f,p,m,h,g){for(var v=s-1,w=s===0?u:[""],E=Qp(w),x=0,C=0,R=0;x<i;++x)for(var M=0,z=es(t,v+1,v=qC(C=f[x])),O=t;M<E;++M)(O=Tb(C>0?w[M]+" "+z:ve(z,/&\f/g,w[M])))&&(m[R++]=O);return gc(t,a,o,s===0?Xp:p,m,h,g)}function n2(t,a,o){return gc(t,a,o,Eb,mc(XC()),es(t,2,-2),0)}function $v(t,a,o,i){return gc(t,a,o,Kp,es(t,0,i),es(t,i+1,-1),i)}function Di(t,a){for(var o="",i=Qp(t),s=0;s<i;s++)o+=a(t[s],s,t,a)||"";return o}function a2(t,a,o,i){switch(t.type){case VC:if(t.children.length)break;case IC:case Kp:return t.return=t.return||t.value;case Eb:return"";case wb:return t.return=t.value+"{"+Di(t.children,i)+"}";case Xp:t.value=t.props.join(",")}return Pa(o=Di(t.children,i))?t.return=t.value+"{"+o+"}":""}function r2(t){var a=Qp(t);return function(o,i,s,u){for(var f="",p=0;p<a;p++)f+=t[p](o,i,s,u)||"";return f}}function o2(t){return function(a){a.root||(a=a.return)&&t(a)}}function Ab(t){var a=Object.create(null);return function(o){return a[o]===void 0&&(a[o]=t(o)),a[o]}}var i2=function(a,o,i){for(var s=0,u=0;s=u,u=Ha(),s===38&&u===12&&(o[i]=1),!ns(u);)Kn();return cs(a,_n)},l2=function(a,o){var i=-1,s=44;do switch(ns(s)){case 0:s===38&&Ha()===12&&(o[i]=1),a[i]+=i2(_n-1,o,i);break;case 2:a[i]+=Fu(s);break;case 4:if(s===44){a[++i]=Ha()===58?"&\f":"",o[i]=a[i].length;break}default:a[i]+=mc(s)}while(s=Kn());return a},s2=function(a,o){return Ob(l2(Mb(a),o))},Nv=new WeakMap,u2=function(a){if(!(a.type!=="rule"||!a.parent||a.length<1)){for(var o=a.value,i=a.parent,s=a.column===i.column&&a.line===i.line;i.type!=="rule";)if(i=i.parent,!i)return;if(!(a.props.length===1&&o.charCodeAt(0)!==58&&!Nv.get(i))&&!s){Nv.set(a,!0);for(var u=[],f=s2(o,u),p=i.props,m=0,h=0;m<f.length;m++)for(var g=0;g<p.length;g++,h++)a.props[h]=u[m]?f[m].replace(/&\f/g,p[g]):p[g]+" "+f[m]}}},c2=function(a){if(a.type==="decl"){var o=a.value;o.charCodeAt(0)===108&&o.charCodeAt(2)===98&&(a.return="",a.value="")}};function zb(t,a){switch(FC(t,a)){case 5103:return ye+"print-"+t+t;case 5737:case 4201:case 3177:case 3433:case 1641:case 4457:case 2921:case 5572:case 6356:case 5844:case 3191:case 6645:case 3005:case 6391:case 5879:case 5623:case 6135:case 4599:case 4855:case 4215:case 6389:case 5109:case 5365:case 5621:case 3829:return ye+t+t;case 5349:case 4246:case 4810:case 6968:case 2756:return ye+t+nc+t+En+t+t;case 6828:case 4268:return ye+t+En+t+t;case 6165:return ye+t+En+"flex-"+t+t;case 5187:return ye+t+ve(t,/(\w+).+(:[^]+)/,ye+"box-$1$2"+En+"flex-$1$2")+t;case 5443:return ye+t+En+"flex-item-"+ve(t,/flex-|-self/,"")+t;case 4675:return ye+t+En+"flex-line-pack"+ve(t,/align-content|flex-|-self/,"")+t;case 5548:return ye+t+En+ve(t,"shrink","negative")+t;case 5292:return ye+t+En+ve(t,"basis","preferred-size")+t;case 6060:return ye+"box-"+ve(t,"-grow","")+ye+t+En+ve(t,"grow","positive")+t;case 4554:return ye+ve(t,/([^-])(transform)/g,"$1"+ye+"$2")+t;case 6187:return ve(ve(ve(t,/(zoom-|grab)/,ye+"$1"),/(image-set)/,ye+"$1"),t,"")+t;case 5495:case 3959:return ve(t,/(image-set\([^]*)/,ye+"$1$`$1");case 4968:return ve(ve(t,/(.+:)(flex-)?(.*)/,ye+"box-pack:$3"+En+"flex-pack:$3"),/s.+-b[^;]+/,"justify")+ye+t+t;case 4095:case 3583:case 4068:case 2532:return ve(t,/(.+)-inline(.+)/,ye+"$1$2")+t;case 8116:case 7059:case 5753:case 5535:case 5445:case 5701:case 4933:case 4677:case 5533:case 5789:case 5021:case 4765:if(Pa(t)-1-a>6)switch(bn(t,a+1)){case 109:if(bn(t,a+4)!==45)break;case 102:return ve(t,/(.+:)(.+)-([^]+)/,"$1"+ye+"$2-$3$1"+nc+(bn(t,a+3)==108?"$3":"$2-$3"))+t;case 115:return~Sp(t,"stretch")?zb(ve(t,"stretch","fill-available"),a)+t:t}break;case 4949:if(bn(t,a+1)!==115)breaLine truncated
@@ -279,53 +267,80 @@ PORT STATE SERVICE REASON VERSION
| position: absolute;
| /* @noflip */
|
| Path: https://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 149
| Comment:
|
|_ //# sourceMappingURL=vendor-2fCQKpJa.js.map
| http-sitemap-generator:
| Directory structure:
| /
| Other: 1; json: 1
| /assets/
| Other: 2; js: 3
| Longest directory structure:
| Depth: 1
| Dir: /assets/
| Total files found (by extension):
|_ Other: 3; js: 3; json: 1
| http-php-version: Logo query returned unknown hash 28f40b1513bb073e82914945b1920905
|_Credits query returned unknown hash 28f40b1513bb073e82914945b1920905
| ssl-enum-ciphers:
| TLSv1.2:
| ciphers:
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
| compressors:
| NULL
| cipher preference: client
| warnings:
| Key exchange (secp256r1) of lower strength than certificate key
| TLSv1.3:
| ciphers:
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
| cipher preference: server
|_ least strength: A
|_http-majordomo2-dir-traversal: ERROR: Script execution failed (use -d to debug)
|_http-referer-checker: Couldn't find any cross-domain scripts.
| //# sourceMappingURL=vendor-2fCQKpJa.js.map
|
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 146
| Comment:
| /*"?"(.*)$":"(?:\\/(.+)|\\/*)$"):o?s+="\\/*$":t!==""&&t!=="/"&&(s+="(?:(?=\\/|$))"),[new RegExp(s,a?void 0:"i"),i]}function _3(t){try{return t.split("/").map(a=>decodeURIComponent(a).replace(/\//g,"%2F")).join("/")}catch(a){return Ta(!1,`The URL path "${t}" could not be decoded because it is a malformed URL segment. This is probably due to a bad percent encoding (${a}).`),t}}function xr(t,a){if(a==="/")return t;if(!t.toLowerCase().startsWith(a.toLowerCase()))return null;let o=a.endsWith("/")?a.length-1:a.length,i=t.charAt(o);return i&&i!=="/"?null:t.slice(o)||"/"}var j3=/^(?:[a-z][a-z0-9+.-]*:|\/\/)/i,U3=t=>j3.test(t);function H3(t,a="/"){let{pathname:o,search:i="",hash:s=""}=typeof t=="string"?Ii(t):t,u;if(o)if(U3(o))u=o;else{if(o.includes("//")){let f=o;o=o.replace(/\/\/+/g,"/"),Ta(!1,`Pathnames cannot have embedded double slashes - normalizing ${f} -> ${o}`)}o.startsWith("/")?u=fb(o.substring(1),"/"):u=fb(o,a)}else u=a;return{pathname:u,search:q3(i),hash:G3(s)}}function fb(t,a){let o=a.replace(/\/+$/,"").split("/");return t.split("/").forEach(s=>{s===".."?o.length>1&&o.pop():s!=="."&&o.push(s)}),o.length>1?o.join("/"):"/"}function gp(t,a,o,i){return`Cannot include a '${t}' character in a manually specified \`to.${a}\` field [${JSON.stringify(i)}]. Please separate it out to the \`to.${o}\` field. Alternatively you may provide the full path as a string in <Link to="..."> and the router will parse it for you.`}function I3(t){return t.filter((a,o)=>o===0||a.route.path&&a.route.path.length>0)}function aS(t){let a=I3(t);return a.map((o,i)=>i===a.length-1?o.pathname:o.pathnameBase)}function rS(t,a,o,i=!1){let s;typeof t=="string"?s=Ii(t):(s={...t},Ie(!s.pathname||!s.pathname.includes("?"),gp("?","pathname","search",s)),Ie(!s.pathname||!s.pathname.includes("#"),gp("#","pathname","hash",s)),Ie(!s.search||!s.search.includes("#"),gp("#","search","hash",s)));let u=t===""||s.pathname==="",f=u?"/":s.pathname,p;if(f==null)p=o;else{let v=a.length-1;if(!i&&f.startsWith("..")){let w=f.split("/");for(;w[0]==="..";)w.shift(),v-=1;s.pathname=w.join("/")}p=v>=0?a[v]:"/"}let m=H3(s,p),h=f&&f!=="/"&&f.endsWith("/"),g=(u||f===".")&&o.endsWith("/");return!m.pathname.endsWith("/")&&(h||g)&&(m.pathname+="/"),m}var yr=t=>t.join("/").replace(/\/\/+/g,"/"),V3=t=>t.replace(/\/+$/,"").replace(/^\/*/
|
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 148
| Comment:
| /*`}">.`)}let w=jo(),E;if(a){let z=typeof a=="string"?Ii(a):a;Ie(g==="/"||z.pathname?.startsWith(g),`When overriding the location using \`<Routes location>\` or \`useRoutes(routes, location)\`, the location pathname must begin with the portion of the URL pathname that was matched by all parent routes. The current pathname base is "${g}" but pathname "${z.pathname}" was given in the \`location\` prop.`),E=z}else E=w;let x=E.pathname||"/",C=x;if(g!=="/"){let z=g.replace(/^\//,"").split("/");C="/"+x.replace(/^\//,"").split("/").slice(z.length).join("/")}let R=tS(t,{pathname:C});Ta(v||R!=null,`No routes matched location "${E.pathname}${E.search}${E.hash}" `),Ta(R==null||R[R.length-1].route.element!==void 0||R[R.length-1].route.Component!==void 0||R[R.length-1].route.lazy!==void 0,`Matched leaf route at location "${E.pathname}${E.search}${E.hash}" does not have an element or Component. This means it will render an <Outlet /> with a null value by default resulting in an "empty" page.`);let M=iz(R&&R.map(z=>Object.assign({},z,{params:Object.assign({},m,z.params),pathname:yr([g,u.encodeLocation?u.encodeLocation(z.pathname.replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:z.pathname]),pathnameBase:z.pathnameBase==="/"?g:yr([g,u.encodeLocation?u.encodeLocation(z.pathnameBase.replace(/\?/g,"%3F").replace(/#/g,"%23")).pathname:z.pathnameBase])})),f,o,i,s);return a&&M?b.createElement(bs.Provider,{value:{location:{pathname:"/",search:"",hash:"",state:null,key:"default",...E},navigationType:"POP"}},M):M}function nz(){let t=fz(),a=F3(t)?`${t.status} ${t.statusText}`:t instanceof Error?t.message:JSON.stringify(t),o=t instanceof Error?t.stack:null,i="rgba(200,200,200, 0.5)",s={padding:"0.5rem",backgroundColor:i},u={padding:"2px 4px",backgroundColor:i},f=null;return console.error("Error handled by React Router default ErrorBoundary:",t),f=b.createElement(b.Fragment,null,b.createElement("p",null,"\xF0\x9F\x92\xBF Hey developer \xF0\x9F\x91\x8B"),b.createElement("p",null,"You can provide a way better UX than this when your app throws errors by providing your own ",b.createElement("code",{style:u},"ErrorBoundary")," or"," ",b.createElement("code",{style:u},"errorElement")," prop on your route.")),b.createElement(b.Fragment,null,b.createElement("h2",null,"Unexpected Application Error!"),b.createElement("h3",{style:{fontStyle:"italic"}},a),o?b.createElement("pre",{style:s},o):null,f)}var az=b.createElement(nz,null),rz=class extends b.Component{constructor(t){super(t),this.state={location:t.location,revalidation:t.revalidation,error:t.error}}static getDerivedStateFromError(t){return{error:t}}static getDerivedStateFromProps(t,a){return a.location!==t.location||a.revalidation!=="idle"&&t.revalidation==="idle"?{error:t.error,location:t.location,revalidation:t.revalidation}:{error:t.error!==void 0?t.error:a.error,location:a.location,revalidation:t.revalidation||a.revalidation}}componentDidCatch(t,a){this.props.onError?this.props.onError(t,a):console.error("React Router caught the following error during render",t)}render(){return this.state.error!==void 0?b.createElement(Ma.Provider,{value:this.props.routeContext},b.createElement(Dm.Provider,{value:this.state.error,children:this.props.component})):this.props.children}};function oz({routeContext:t,match:a,children:o}){let i=b.useContext(Vi);return i&&i.static&&i.staticContext&&(a.route.errorElement||a.route.ErrorBoundary)&&(i.staticContext._deepestRenderedBoundaryId=a.route.id),b.createElement(Ma.Provider,{value:t},o)}function iz(t,a=[],o=null,i=null,s=null){if(t==null){if(!o)return null;if(o.errors)t=o.matches;else if(a.length===0&&!o.initialized&&o.matches.length>0)t=o.matches;else return null}let u=t,f=o?.errors;if(f!=null){let g=u.findIndex(v=>v.route.id&&f?.[v.route.id]!==void 0);Ie(g>=0,`Could not find a matching route for errors on route IDs: ${Object.keys(f).join(",")}`),u=u.slice(0,Math.min(u.length,g+1))}let p=!1,m=-1;if(o)for(let g=0;g<u.length;g++){let v=u[g];if((v.route.HydrateFallback||v.route.hydrateFallbackElement)&&(m=g),v.route.id){let{loaderData:w,errors:E}=o,x=v.route.loader&&!w.hasOwnProperty(v.route.id)&&(!E||E[v.route.id]===void 0);if(v.route.lazy||x){p=!0,m>=0?u=u.slice(0,m+1):u=[u[0]];break}}}let h=o&&i?(g,v)=>{i(g,{location:o.location,params:o.matches?.[0]?.params??{},errorInfo:v})}:void 0;return u.reduceRight((g,v,w)=>{let E,x=!1,C=null,R=null;o&&(E=f&&v.route.id?f[v.route.id]:void 0,C=v.route.errorElement||az,p&&(m<0&&w===0?(cS("route-fallback",!1,"No `HydrateFallback` element provided to render during initial hydration"),x=!0,R=null):m===w&&(x=!0,R=v.route.hydrateFallbackElement||null)));let M=a.concat(u.slice(0,w+1)),z=()=>{let O;return E?O=C:x?O=R:v.route.Component?O=b.createElement(v.route.Component,null):v.route.element?O=v.route.element:O=g,b.createElement(oz,{match:v,routeContext:{outlet:g,matches:M,isDataRoute:o!=null},children:O})};return o&&(v.route.ErrorBoundary||v.route.errorElement||w===0)?b.createElement(rz,{location:o.location,revaliLine truncated
|
| Path: http://stockfill.lan.ddnsgeek.com:443/assets/vendor-2fCQKpJa.js
| Line number: 20
| Comment:
|_ // handle system mode
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-malware-host: false
|_http-vuln-cve2017-1001000: ERROR: Script execution failed (use -d to debug)
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
| ssl-cert: Subject: commonName=stockfill.lan.ddnsgeek.com
| Subject Alternative Name: DNS:stockfill.lan.ddnsgeek.com
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-03-22T09:47:15
| Not valid after: 2026-06-20T09:47:14
| MD5: 9d58 137a 2924 26ef f9ca b56e d3f1 510b
| SHA-1: 3ea5 c9a0 5fdd 6b57 78ec 626f 0ba7 3928 aecc 1948
| SHA-256: 4825 5fb5 3b5f ed46 46ca 1163 227d c1d1 cd58 8935 8d3e 9ed1 f0c8 467d e434 ec66
| -----BEGIN CERTIFICATE-----
| MIIGDzCCBPegAwIBAgISBSCym2uC+hYb1Zc3qCjloXn/MA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTMwHhcNMjYwMzIyMDk0NzE1WhcNMjYwNjIwMDk0NzE0WjAlMSMwIQYDVQQD
| ExpzdG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQAD
| ggIPADCCAgoCggIBAMkuGHd6QoSNHjkX2/DxCURKhM2DBoA4pytDrL4q3UzA1sVh
| pxGljFi5MNjqLbW5P7aHDXHo08Ecb8XczJFcURIGHObNKYMBqIZAV9MvMCEZ1SvQ
| AlkBIDtoxwjd/BnOxfrkn9JNKCdQrvzvbLEUPw/dH9n9lbVY3aNtoBs+Epk4nwxc
| MOxgkAtUAgkywhSDk4FyNxq2MA73DA0kVXwydY1yfhI7Y8y5+7HiDxYr7J/Tsl7F
| QQazayYkTMeae6OiARc9XYQYBsn2GJMzZCWHErXSIO7SEUq4ih3AvlBQASRqMFH5
| bgBkqKWQ8ilwUIXXY0K7mZaLLIx/s4ScV2q4AHqxvivWnLu+Fv3lcRDTWq52T9qo
| ZOcwnBBAgj3A1inOXw2yGZN/KZrxoHQsgkY6MUXcMVEdHKsCJJX2iqm4q+BFFHiV
| fBpqJUpspv8GGuFHCDjSdvsMZhMm/7i3AjXBZUieNqnFvPEewntw6NqfjAF5L/V5
| XrJXChOc80RGEN6rE2Y14Yxi0StwgRQwVNFYw4XBwhUJPsBbs9Sjvrg38hdzTbXh
| qvkEKB7ickYcauEMa4gjc1xM2LObg8tkWdOyEMRGANwHMIgIB9Yj9H7hgHW/U2ts
| gnrjhNJVPlWPyluyOmpvsL/2NF3yEEdmaYJy98WEUa/NNeH91tNjVc5todYxAgMB
| AAGjggIpMIICJTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
| DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU+yISCK1nywudpGX6q9z3xXkf2CUwHwYD
| VR0jBBgwFoAU56ufDywzoFPTXk94yLKEDjvWkjMwMwYIKwYBBQUHAQEEJzAlMCMG
| CCsGAQUFBzAChhdodHRwOi8vcjEzLmkubGVuY3Iub3JnLzAlBgNVHREEHjAcghpz
| dG9ja2ZpbGwubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAv
| BgNVHR8EKDAmMCSgIqAghh5odHRwOi8vcjEzLmMubGVuY3Iub3JnLzEyOC5jcmww
| ggEMBgorBgEEAdZ5AgQCBIH9BIH6APgAdgAWgy2r8KklDw/wOqVF/8i/yCPQh0v2
| BCkn+OcfMxP1+gAAAZ0VJp8HAAAEAwBHMEUCIQCK0OoRf+dUKEXKGEd+eW+m2V41
| qkDgZjaqzZjtrYvMgAIgJ1rcjrLxvuAlBzF0FfEjVVpudI9RoYXDlb9pQMafIzkA
| fgBs/lAZQ6heqRa8UtEz5NzJHvFBHH0lhCDRc4CeGBjrOgAAAZ0VJqAnAAgAAAUA
| A/bFjQQDAEcwRQIhAImeNgcMfLu9dxqVvvKk7MTJ/ZTswiLxMZeh5A9185s2AiBD
| msLUiD7sIyCrYnSKMGUjQQfcvSOd9Rjkdu5nlwGlLDANBgkqhkiG9w0BAQsFAAOC
| AQEACDWH5UifJkKtK+4iaunh6JhtkMzBhj2k7d3SCgbjDhpXo43pz2X+uCs/RNcL
| I98aVmxGwBU3qXK0WVxfGFSof/xlEYaklbGFO7zsI4KW1R/drb0M4PJoxVf999us
| 98/q3Sn6jHCzLSlsBGxSHcFIfBw5Et+DLSYrAzIrlzEMfgzPDyy+aqyrAcASqFRG
| keqdDnpieOgxMTvV1SKRBayAW272i1bTiVgCr0eknXh9OGaJ3ZWsuPjekLR176Vs
| 5Rd8w3xMbQD2g/2jPocCj/XkEQljNwVBNDxtekl4vkRlvgs+FDqZE3ppHuuJ2wmd
| OAAxNsovC6BHaQgaRRfMSGuOyw==
|_-----END CERTIFICATE-----
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
| http-vuln-cve2010-0738:
|_ /jmx-console/: Authentication was not required
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 10:02:11 2026 -- 1 IP address (1 host up) scanned in 144.55 seconds
# Nmap done at Tue Apr 14 04:31:47 2026 -- 1 IP address (1 host up) scanned in 536.44 seconds
```
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/SSL Scan.md
+1 -1
View File
@@ -6,7 +6,7 @@ sslscan --show-certificate --no-colour stockfill.lan.ddnsgeek.com:443 2>&1
```
Version: 2.1.5
OpenSSL 3.5.3 16 Sep 2025
OpenSSL 3.5.5 27 Jan 2026
Connected to 167.179.167.166
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/nikto.md
+25 -3
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://stockfill.lan.ddns
[/root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt](file:///root/results/stockfill.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -18,12 +37,15 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host https://stockfill.lan.ddns
Ciphers: TLS_AES_128_GCM_SHA256
Issuer: /C=US/O=Let's Encrypt/CN=R13
+ Platform: Unknown
+ Start Time: 2026-04-05 09:58:50 (GMT0)
+ Start Time: 2026-04-14 04:30:11 (GMT0)
---------------------------------------------------------------------------
+ Server: nginx/1.27.5
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [001869] /stats.html: This might be interesting.
+ [002743] /.bash_history: A user's home directory may be set to the web root, the shell history was retrieved. This should not be accessible via the web.
+ [002756] /.sh_history: A user's home directory may be set to the web root, the shell history was retrieved. This should not be accessible via the web.
```
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-443-http/whatweb.md
+1 -1
View File
@@ -75,7 +75,7 @@ HTTP Headers:
Accept-Ranges: bytes
Content-Length: 523
Content-Type: text/html
Date: Sun, 05 Apr 2026 10:07:30 GMT
Date: Tue, 14 Apr 2026 04:29:53 GMT
Etag: "69c9ef96-20b"
Last-Modified: Mon, 30 Mar 2026 03:35:50 GMT
Server: nginx/1.27.5
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl Robots.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://stockfill.lan.ddnsgeek.com:80/robots.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://stockfill.lan.ddnsgeek.com/robots.txt
Date: Sun, 05 Apr 2026 10:10:40 GMT
Date: Tue, 14 Apr 2026 04:17:47 GMT
Content-Length: 17
Moved Permanently
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Curl.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSik http://stockfill.lan.ddnsgeek.com:80/
```
HTTP/1.1 301 Moved Permanently
Location: https://stockfill.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:59:46 GMT
Date: Tue, 14 Apr 2026 04:17:50 GMT
Content-Length: 17
Moved Permanently
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Directory Buster.md
+25 -22
View File
@@ -293,42 +293,44 @@ Configuration {
200 GET 14l 19w 350c https://stockfill.lan.ddnsgeek.com/.well-known/assetlinks.json
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/assets/
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/icons/
200 GET 2l 78w 2578c https://stockfill.lan.ddnsgeek.com/assets/EditableEntityList-D-b3NbYE.js
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/templates/
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/status.asp
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/statistics.jsp
200 GET 11l 353w 19437c https://stockfill.lan.ddnsgeek.com/assets/papaparse--HYnOrQZ.js
200 GET 21l 8853w 411195c https://stockfill.lan.ddnsgeek.com/assets/zxing-ChT2UnX7.js
200 GET 3l 258w 8867c https://stockfill.lan.ddnsgeek.com/assets/ImportExportScreen-8mKTDaOI.js
200 GET 2l 33w 943c https://stockfill.lan.ddnsgeek.com/assets/HomeScreen-Cadr3bNt.js
200 GET 2l 41w 1226c https://stockfill.lan.ddnsgeek.com/assets/dataHooks-Bvi9rXFx.js
200 GET 2l 300w 14995c https://stockfill.lan.ddnsgeek.com/assets/ActivePickListScreen-DvSlACXD.js
200 GET 2l 87w 2311c https://stockfill.lan.ddnsgeek.com/assets/ManageCategoriesScreen-DIKPVCrl.js
200 GET 2l 81w 2399c https://stockfill.lan.ddnsgeek.com/assets/StartPickListScreen-DC4W1hvB.js
200 GET 2l 166w 5899c https://stockfill.lan.ddnsgeek.com/assets/AddProductDialog-zoIJhILV.js
200 GET 2l 8w 94c https://stockfill.lan.ddnsgeek.com/assets/Product-DDMI3nUP.js
200 GET 3l 356w 11631c https://stockfill.lan.ddnsgeek.com/assets/index-DZWxa9kt.js
200 GET 149l 10154w 574421c https://stockfill.lan.ddnsgeek.com/assets/vendor-2fCQKpJa.js
200 GET 2l 48w 1109c https://stockfill.lan.ddnsgeek.com/assets/ManageAreasScreen-C_dyC1ZR.js
200 GET 4l 2350w 95909c https://stockfill.lan.ddnsgeek.com/assets/dexie-DvMqvjyc.js
200 GET 2l 192w 7623c https://stockfill.lan.ddnsgeek.com/assets/ManageProductsScreen-lC7YubhZ.js
200 GET 2l 43w 1458c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerView-gw-FkEXE.js
200 GET 2l 41w 1226c https://stockfill.lan.ddnsgeek.com/assets/dataHooks-Bvi9rXFx.js
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/templates/
200 GET 3l 1527w 96806c https://stockfill.lan.ddnsgeek.com/assets/jszip-DyQewxn5.js
200 GET 2l 87w 2311c https://stockfill.lan.ddnsgeek.com/assets/ManageCategoriesScreen-DIKPVCrl.js
200 GET 2l 300w 14995c https://stockfill.lan.ddnsgeek.com/assets/ActivePickListScreen-DvSlACXD.js
200 GET 4l 2350w 95909c https://stockfill.lan.ddnsgeek.com/assets/dexie-DvMqvjyc.js
200 GET 2l 81w 2610c https://stockfill.lan.ddnsgeek.com/assets/PickListsScreen-DB9p0ztW.js
200 GET 2l 33w 943c https://stockfill.lan.ddnsgeek.com/assets/HomeScreen-Cadr3bNt.js
200 GET 2l 48w 1109c https://stockfill.lan.ddnsgeek.com/assets/ManageAreasScreen-C_dyC1ZR.js
200 GET 2l 108w 3637c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerScreen-CCfqxMjB.js
200 GET 2l 166w 5899c https://stockfill.lan.ddnsgeek.com/assets/AddProductDialog-zoIJhILV.js
200 GET 2l 81w 2399c https://stockfill.lan.ddnsgeek.com/assets/StartPickListScreen-DC4W1hvB.js
200 GET 3l 356w 11631c https://stockfill.lan.ddnsgeek.com/assets/index-DZWxa9kt.js
200 GET 3l 258w 8867c https://stockfill.lan.ddnsgeek.com/assets/ImportExportScreen-8mKTDaOI.js
200 GET 2l 78w 2578c https://stockfill.lan.ddnsgeek.com/assets/EditableEntityList-D-b3NbYE.js
200 GET 2l 8w 94c https://stockfill.lan.ddnsgeek.com/assets/Product-DDMI3nUP.js
200 GET 21l 8853w 411195c https://stockfill.lan.ddnsgeek.com/assets/zxing-ChT2UnX7.js
200 GET 2l 192w 7623c https://stockfill.lan.ddnsgeek.com/assets/ManageProductsScreen-lC7YubhZ.js
200 GET 4932l 17889w 4194304c https://stockfill.lan.ddnsgeek.com/stats.html (truncated to size limit)
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[ => https://stockfill.lan.ddnsgeek.com/[
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/] => https://stockfill.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.txt => https://stockfill.lan.ddnsgeek.com/[.txt
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].txt => https://stockfill.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.html => https://stockfill.lan.ddnsgeek.com/[.html
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.php => https://stockfill.lan.ddnsgeek.com/[.php
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/] => https://stockfill.lan.ddnsgeek.com/]
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.asp => https://stockfill.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].txt => https://stockfill.lan.ddnsgeek.com/].txt
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].html => https://stockfill.lan.ddnsgeek.com/].html
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.asp => https://stockfill.lan.ddnsgeek.com/[.asp
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].php => https://stockfill.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.aspx => https://stockfill.lan.ddnsgeek.com/[.aspx
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.jsp => https://stockfill.lan.ddnsgeek.com/[.jsp
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].php => https://stockfill.lan.ddnsgeek.com/].php
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].asp => https://stockfill.lan.ddnsgeek.com/].asp
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].aspx => https://stockfill.lan.ddnsgeek.com/].aspx
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].jsp => https://stockfill.lan.ddnsgeek.com/].jsp
200 GET 2l 108w 3637c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerScreen-CCfqxMjB.js
200 GET 2l 81w 2610c https://stockfill.lan.ddnsgeek.com/assets/PickListsScreen-DB9p0ztW.js
200 GET 4932l 17889w 4194304c https://stockfill.lan.ddnsgeek.com/stats.html (truncated to size limit)
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/plain] => https://stockfill.lan.ddnsgeek.com/plain]
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/plain].txt => https://stockfill.lan.ddnsgeek.com/plain].txt
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/plain].html => https://stockfill.lan.ddnsgeek.com/plain].html
@@ -343,6 +345,7 @@ Configuration {
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/quote].asp => https://stockfill.lan.ddnsgeek.com/quote].asp
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/quote].aspx => https://stockfill.lan.ddnsgeek.com/quote].aspx
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/quote].jsp => https://stockfill.lan.ddnsgeek.com/quote].jsp
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/Manager.aspx
200 GET 19l 68w 497c https://stockfill.lan.ddnsgeek.com/50x.html
```
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Known Security.md
+1 -1
View File
@@ -7,7 +7,7 @@ curl -sSikf http://stockfill.lan.ddnsgeek.com:80/.well-known/security.txt
```
HTTP/1.1 301 Moved Permanently
Location: https://stockfill.lan.ddnsgeek.com/.well-known/security.txt
Date: Sun, 05 Apr 2026 10:10:39 GMT
Date: Tue, 14 Apr 2026 04:17:45 GMT
Content-Length: 17
Moved Permanently
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Nmap HTTP.md
+37 -37
View File
@@ -5,18 +5,50 @@ nmap -vv --reason -Pn -T4 -sV -p 80 --script="banner,(http* or ssl*) and not (br
[/root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt](file:///root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt):
```
# Nmap 7.98 scan initiated Sun Apr 5 10:10:42 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml stockfill.lan.ddnsgeek.com
# Nmap 7.99 scan initiated Tue Apr 14 04:18:56 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml stockfill.lan.ddnsgeek.com
Nmap scan report for stockfill.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.015s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 10:10:47 UTC for 292s
Scanned at 2026-04-14 04:19:07 UTC for 645s
Bug in http-security-headers: no string output.
PORT STATE SERVICE REASON VERSION
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|_http-feed: Couldn't find any feeds.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-chrono: Request times for /; avg: 817.16ms; min: 490.89ms; max: 1001.39ms
|_http-mobileversion-checker: No mobile version detected.
|_http-malware-host: Host appears to be clean
| http-methods:
|_ Supported Methods: GET HEAD POST OPTIONS
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-date: Tue, 14 Apr 2026 04:19:37 GMT; -4s from local time.
|_http-comments-displayer: Couldn't find any comments.
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-errors: Couldn't find any error pages.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
| http-headers:
| Location: https://stockfill.lan.ddnsgeek.com/
| Date: Tue, 14 Apr 2026 04:19:54 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-feed: Couldn't find any feeds.
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-title: Did not follow redirect to https://stockfill.lan.ddnsgeek.com/
| http-vhosts:
|_128 names had status 308
|_http-referer-checker: Couldn't find any cross-domain scripts.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| http-useragent-tester:
| Status for browser useragent: 200
| Redirected To: https://stockfill.lan.ddnsgeek.com/
@@ -38,43 +70,11 @@ PORT STATE SERVICE REASON VERSION
| PECL::HTTP
| Wget/1.13.4 (linux-gnu)
|_ WWW-Mechanize/1.34
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-chrono: Request times for /; avg: 756.73ms; min: 374.40ms; max: 1113.38ms
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-comments-displayer: Couldn't find any comments.
| http-vhosts:
|_128 names had status 308
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|_http-malware-host: Host appears to be clean
|_http-date: Sun, 05 Apr 2026 10:11:01 GMT; -3s from local time.
|_http-mobileversion-checker: No mobile version detected.
|_http-fetch: Please enter the complete path of the directory to save data in.
|_http-title: Did not follow redirect to https://stockfill.lan.ddnsgeek.com/
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-headers:
| Location: https://stockfill.lan.ddnsgeek.com/
| Date: Sun, 05 Apr 2026 10:11:10 GMT
| Content-Length: 17
| Connection: close
|
|_ (Request type: GET)
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-sitemap-generator:
| Directory structure:
| Longest directory structure:
| Depth: 0
| Dir: /
| Total files found (by extension):
|_
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|_http-errors: Couldn't find any error pages.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr 5 10:15:39 2026 -- 1 IP address (1 host up) scanned in 297.93 seconds
# Nmap done at Tue Apr 14 04:29:53 2026 -- 1 IP address (1 host up) scanned in 658.62 seconds
```
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/Virtual Host Enumeration.md
+59518 -59392
View File
File diff suppressed because it is too large. Load diff
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/nikto.md
+24 -5
View File
@@ -5,6 +5,25 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://stockfill.lan.ddnsg
[/root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt](file:///root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nikto.txt):
```
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LC_CTYPE = (unset),
LC_NUMERIC = "en_AU.UTF-8",
LC_COLLATE = (unset),
LC_TIME = "en_AU.UTF-8",
LC_MESSAGES = (unset),
LC_MONETARY = "en_AU.UTF-8",
LC_ADDRESS = "en_AU.UTF-8",
LC_IDENTIFICATION = "en_AU.UTF-8",
LC_MEASUREMENT = "en_AU.UTF-8",
LC_PAPER = "en_AU.UTF-8",
LC_TELEPHONE = "en_AU.UTF-8",
LC_NAME = "en_AU.UTF-8",
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
- Nikto v2.6.0
---------------------------------------------------------------------------
+ Your Nikto installation is out of date.
@@ -12,20 +31,20 @@ nikto -ask=no -Tuning=x4567890ac -nointeractive -host http://stockfill.lan.ddnsg
+ Target Hostname: stockfill.lan.ddnsgeek.com
+ Target Port: 80
+ Platform: Unknown
+ Start Time: 2026-04-05 10:02:36 (GMT0)
+ Start Time: 2026-04-14 04:18:33 (GMT0)
---------------------------------------------------------------------------
+ Server: No banner retrieved
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
+ 7900 requests: 16 errors and 8 items reported on the remote host
+ End Time: 2026-04-05 10:27:19 (GMT0) (1483 seconds)
+ 7902 requests: 18 errors and 8 items reported on the remote host
+ End Time: 2026-04-14 04:38:31 (GMT0) (1198 seconds)
---------------------------------------------------------------------------
+ 1 host(s) tested
results/stockfill.lan.ddnsgeek.com/report/report.md/stockfill.lan.ddnsgeek.com/Services/Service - tcp-80-http/whatweb.md
+2 -2
View File
@@ -23,7 +23,7 @@ Detected Plugins:
HTTP Headers:
HTTP/1.1 301 Moved Permanently
Location: https://stockfill.lan.ddnsgeek.com/
Date: Sun, 05 Apr 2026 09:55:39 GMT
Date: Tue, 14 Apr 2026 04:24:49 GMT
Content-Length: 17
Connection: close
@@ -97,7 +97,7 @@ HTTP Headers:
Accept-Ranges: bytes
Content-Length: 523
Content-Type: text/html
Date: Sun, 05 Apr 2026 09:55:46 GMT
Date: Tue, 14 Apr 2026 04:25:09 GMT
Etag: "69c9ef96-20b"
Last-Modified: Mon, 30 Mar 2026 03:35:50 GMT
Server: nginx/1.27.5