fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://stockfill.lan.ddnsgeek.com/robots.txt
|
||||
Date: Sun, 05 Apr 2026 10:10:40 GMT
|
||||
Date: Tue, 14 Apr 2026 04:17:47 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://stockfill.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 09:59:46 GMT
|
||||
Date: Tue, 14 Apr 2026 04:17:50 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
+25
-22
@@ -286,42 +286,44 @@ Configuration {
|
||||
200 GET 14l 19w 350c https://stockfill.lan.ddnsgeek.com/.well-known/assetlinks.json
|
||||
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/assets/
|
||||
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/icons/
|
||||
200 GET 2l 78w 2578c https://stockfill.lan.ddnsgeek.com/assets/EditableEntityList-D-b3NbYE.js
|
||||
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/templates/
|
||||
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/status.asp
|
||||
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/statistics.jsp
|
||||
200 GET 11l 353w 19437c https://stockfill.lan.ddnsgeek.com/assets/papaparse--HYnOrQZ.js
|
||||
200 GET 21l 8853w 411195c https://stockfill.lan.ddnsgeek.com/assets/zxing-ChT2UnX7.js
|
||||
200 GET 3l 258w 8867c https://stockfill.lan.ddnsgeek.com/assets/ImportExportScreen-8mKTDaOI.js
|
||||
200 GET 2l 33w 943c https://stockfill.lan.ddnsgeek.com/assets/HomeScreen-Cadr3bNt.js
|
||||
200 GET 2l 41w 1226c https://stockfill.lan.ddnsgeek.com/assets/dataHooks-Bvi9rXFx.js
|
||||
200 GET 2l 300w 14995c https://stockfill.lan.ddnsgeek.com/assets/ActivePickListScreen-DvSlACXD.js
|
||||
200 GET 2l 87w 2311c https://stockfill.lan.ddnsgeek.com/assets/ManageCategoriesScreen-DIKPVCrl.js
|
||||
200 GET 2l 81w 2399c https://stockfill.lan.ddnsgeek.com/assets/StartPickListScreen-DC4W1hvB.js
|
||||
200 GET 2l 166w 5899c https://stockfill.lan.ddnsgeek.com/assets/AddProductDialog-zoIJhILV.js
|
||||
200 GET 2l 8w 94c https://stockfill.lan.ddnsgeek.com/assets/Product-DDMI3nUP.js
|
||||
200 GET 3l 356w 11631c https://stockfill.lan.ddnsgeek.com/assets/index-DZWxa9kt.js
|
||||
200 GET 149l 10154w 574421c https://stockfill.lan.ddnsgeek.com/assets/vendor-2fCQKpJa.js
|
||||
200 GET 2l 48w 1109c https://stockfill.lan.ddnsgeek.com/assets/ManageAreasScreen-C_dyC1ZR.js
|
||||
200 GET 4l 2350w 95909c https://stockfill.lan.ddnsgeek.com/assets/dexie-DvMqvjyc.js
|
||||
200 GET 2l 192w 7623c https://stockfill.lan.ddnsgeek.com/assets/ManageProductsScreen-lC7YubhZ.js
|
||||
200 GET 2l 43w 1458c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerView-gw-FkEXE.js
|
||||
200 GET 2l 41w 1226c https://stockfill.lan.ddnsgeek.com/assets/dataHooks-Bvi9rXFx.js
|
||||
403 GET 2l 10w 63c https://stockfill.lan.ddnsgeek.com/templates/
|
||||
200 GET 3l 1527w 96806c https://stockfill.lan.ddnsgeek.com/assets/jszip-DyQewxn5.js
|
||||
200 GET 2l 87w 2311c https://stockfill.lan.ddnsgeek.com/assets/ManageCategoriesScreen-DIKPVCrl.js
|
||||
200 GET 2l 300w 14995c https://stockfill.lan.ddnsgeek.com/assets/ActivePickListScreen-DvSlACXD.js
|
||||
200 GET 4l 2350w 95909c https://stockfill.lan.ddnsgeek.com/assets/dexie-DvMqvjyc.js
|
||||
200 GET 2l 81w 2610c https://stockfill.lan.ddnsgeek.com/assets/PickListsScreen-DB9p0ztW.js
|
||||
200 GET 2l 33w 943c https://stockfill.lan.ddnsgeek.com/assets/HomeScreen-Cadr3bNt.js
|
||||
200 GET 2l 48w 1109c https://stockfill.lan.ddnsgeek.com/assets/ManageAreasScreen-C_dyC1ZR.js
|
||||
200 GET 2l 108w 3637c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerScreen-CCfqxMjB.js
|
||||
200 GET 2l 166w 5899c https://stockfill.lan.ddnsgeek.com/assets/AddProductDialog-zoIJhILV.js
|
||||
200 GET 2l 81w 2399c https://stockfill.lan.ddnsgeek.com/assets/StartPickListScreen-DC4W1hvB.js
|
||||
200 GET 3l 356w 11631c https://stockfill.lan.ddnsgeek.com/assets/index-DZWxa9kt.js
|
||||
200 GET 3l 258w 8867c https://stockfill.lan.ddnsgeek.com/assets/ImportExportScreen-8mKTDaOI.js
|
||||
200 GET 2l 78w 2578c https://stockfill.lan.ddnsgeek.com/assets/EditableEntityList-D-b3NbYE.js
|
||||
200 GET 2l 8w 94c https://stockfill.lan.ddnsgeek.com/assets/Product-DDMI3nUP.js
|
||||
200 GET 21l 8853w 411195c https://stockfill.lan.ddnsgeek.com/assets/zxing-ChT2UnX7.js
|
||||
200 GET 2l 192w 7623c https://stockfill.lan.ddnsgeek.com/assets/ManageProductsScreen-lC7YubhZ.js
|
||||
200 GET 4932l 17889w 4194304c https://stockfill.lan.ddnsgeek.com/stats.html (truncated to size limit)
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[ => https://stockfill.lan.ddnsgeek.com/[
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/] => https://stockfill.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.txt => https://stockfill.lan.ddnsgeek.com/[.txt
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].txt => https://stockfill.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.html => https://stockfill.lan.ddnsgeek.com/[.html
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.php => https://stockfill.lan.ddnsgeek.com/[.php
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/] => https://stockfill.lan.ddnsgeek.com/]
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.asp => https://stockfill.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].txt => https://stockfill.lan.ddnsgeek.com/].txt
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].html => https://stockfill.lan.ddnsgeek.com/].html
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.asp => https://stockfill.lan.ddnsgeek.com/[.asp
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].php => https://stockfill.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.aspx => https://stockfill.lan.ddnsgeek.com/[.aspx
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/[.jsp => https://stockfill.lan.ddnsgeek.com/[.jsp
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].php => https://stockfill.lan.ddnsgeek.com/].php
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].asp => https://stockfill.lan.ddnsgeek.com/].asp
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].aspx => https://stockfill.lan.ddnsgeek.com/].aspx
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/].jsp => https://stockfill.lan.ddnsgeek.com/].jsp
|
||||
200 GET 2l 108w 3637c https://stockfill.lan.ddnsgeek.com/assets/BarcodeScannerScreen-CCfqxMjB.js
|
||||
200 GET 2l 81w 2610c https://stockfill.lan.ddnsgeek.com/assets/PickListsScreen-DB9p0ztW.js
|
||||
200 GET 4932l 17889w 4194304c https://stockfill.lan.ddnsgeek.com/stats.html (truncated to size limit)
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/plain] => https://stockfill.lan.ddnsgeek.com/plain]
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/plain].txt => https://stockfill.lan.ddnsgeek.com/plain].txt
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/plain].html => https://stockfill.lan.ddnsgeek.com/plain].html
|
||||
@@ -336,4 +338,5 @@ Configuration {
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/quote].asp => https://stockfill.lan.ddnsgeek.com/quote].asp
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/quote].aspx => https://stockfill.lan.ddnsgeek.com/quote].aspx
|
||||
301 GET 1l 2w 17c http://stockfill.lan.ddnsgeek.com/quote].jsp => https://stockfill.lan.ddnsgeek.com/quote].jsp
|
||||
200 GET 0l 0w 523c https://stockfill.lan.ddnsgeek.com/Manager.aspx
|
||||
200 GET 19l 68w 497c https://stockfill.lan.ddnsgeek.com/50x.html
|
||||
@@ -1,6 +1,6 @@
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://stockfill.lan.ddnsgeek.com/.well-known/security.txt
|
||||
Date: Sun, 05 Apr 2026 10:10:39 GMT
|
||||
Date: Tue, 14 Apr 2026 04:17:45 GMT
|
||||
Content-Length: 17
|
||||
|
||||
Moved Permanently
|
||||
@@ -1,3 +1,22 @@
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
@@ -5,19 +24,19 @@
|
||||
+ Target Hostname: stockfill.lan.ddnsgeek.com
|
||||
+ Target Port: 80
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 10:02:36 (GMT0)
|
||||
+ Start Time: 2026-04-14 04:18:33 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: x-content-type-options. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: strict-transport-security. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
|
||||
+ [999979] http://100.100.100.200/latest/meta-data/: IP address found in the 'location' header. The IP is "100.100.100.200". See: https://portswigger.net/kb/issues/00600300_private-ip-addresses-disclosed
|
||||
+ [007342] /: X-Frame-Options header is deprecated and was replaced with the Content-Security-Policy HTTP header with the frame-ancestors directive. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/X-Frame-Options
|
||||
+ [007352] /: The X-Content-Type-Options header is not set. This could allow the user agent to render the content of the site in a different fashion to the MIME type. See: https://www.netsparker.com/web-vulnerability-scanner/vulnerabilities/missing-content-type-header/
|
||||
+ 7900 requests: 16 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-05 10:27:19 (GMT0) (1483 seconds)
|
||||
+ 7902 requests: 18 errors and 8 items reported on the remote host
|
||||
+ End Time: 2026-04-14 04:38:31 (GMT0) (1198 seconds)
|
||||
---------------------------------------------------------------------------
|
||||
+ 1 host(s) tested
|
||||
@@ -1,15 +1,47 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:10:42 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml stockfill.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:18:56 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml stockfill.lan.ddnsgeek.com
|
||||
Nmap scan report for stockfill.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.015s latency).
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:10:47 UTC for 292s
|
||||
Scanned at 2026-04-14 04:19:07 UTC for 645s
|
||||
|
||||
Bug in http-security-headers: no string output.
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
80/tcp open http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-chrono: Request times for /; avg: 817.16ms; min: 490.89ms; max: 1001.39ms
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
| http-methods:
|
||||
|_ Supported Methods: GET HEAD POST OPTIONS
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-date: Tue, 14 Apr 2026 04:19:37 GMT; -4s from local time.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-headers:
|
||||
| Location: https://stockfill.lan.ddnsgeek.com/
|
||||
| Date: Tue, 14 Apr 2026 04:19:54 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-title: Did not follow redirect to https://stockfill.lan.ddnsgeek.com/
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 200
|
||||
| Redirected To: https://stockfill.lan.ddnsgeek.com/
|
||||
@@ -31,41 +63,9 @@ PORT STATE SERVICE REASON VERSION
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-chrono: Request times for /; avg: 756.73ms; min: 374.40ms; max: 1113.38ms
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
| http-vhosts:
|
||||
|_128 names had status 308
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-date: Sun, 05 Apr 2026 10:11:01 GMT; -3s from local time.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
|_http-title: Did not follow redirect to https://stockfill.lan.ddnsgeek.com/
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
| http-headers:
|
||||
| Location: https://stockfill.lan.ddnsgeek.com/
|
||||
| Date: Sun, 05 Apr 2026 10:11:10 GMT
|
||||
| Content-Length: 17
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
|_http-errors: Couldn't find any error pages.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 10:15:39 2026 -- 1 IP address (1 host up) scanned in 297.93 seconds
|
||||
# Nmap done at Tue Apr 14 04:29:53 2026 -- 1 IP address (1 host up) scanned in 658.62 seconds
|
||||
+59518
-59392
File diff suppressed because it is too large.
Load diff
@@ -16,7 +16,7 @@ Detected Plugins:
|
||||
HTTP Headers:
|
||||
HTTP/1.1 301 Moved Permanently
|
||||
Location: https://stockfill.lan.ddnsgeek.com/
|
||||
Date: Sun, 05 Apr 2026 09:55:39 GMT
|
||||
Date: Tue, 14 Apr 2026 04:24:49 GMT
|
||||
Content-Length: 17
|
||||
Connection: close
|
||||
|
||||
@@ -90,7 +90,7 @@ HTTP Headers:
|
||||
Accept-Ranges: bytes
|
||||
Content-Length: 523
|
||||
Content-Type: text/html
|
||||
Date: Sun, 05 Apr 2026 09:55:46 GMT
|
||||
Date: Tue, 14 Apr 2026 04:25:09 GMT
|
||||
Etag: "69c9ef96-20b"
|
||||
Last-Modified: Mon, 30 Mar 2026 03:35:50 GMT
|
||||
Server: nginx/1.27.5
|
||||
|
||||
@@ -1,53 +1,68 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 10:10:42 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml stockfill.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml stockfill.lan.ddnsgeek.com" start="1775383842" startstr="Sun Apr 5 10:10:42 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:18:56 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml stockfill.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 80 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/tcp_80_http_nmap.txt -oX /root/results/stockfill.lan.ddnsgeek.com/scans/tcp80/xml/tcp_80_http_nmap.xml stockfill.lan.ddnsgeek.com" start="1776140336" startstr="Tue Apr 14 04:18:56 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="80"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775383846"/>
|
||||
<taskend task="NSE" time="1775383846"/>
|
||||
<taskbegin task="NSE" time="1775383846"/>
|
||||
<taskend task="NSE" time="1775383846"/>
|
||||
<taskbegin task="NSE" time="1775383846"/>
|
||||
<taskend task="NSE" time="1775383846"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775383846"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775383847"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775383847"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775383847"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775383847"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775383847" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775383849"/>
|
||||
<taskend task="Service scan" time="1775383855" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775383855"/>
|
||||
<taskprogress task="NSE" time="1775383886" percent="99.03" remaining="1" etc="1775383886"/>
|
||||
<taskprogress task="NSE" time="1775383916" percent="99.68" remaining="1" etc="1775383916"/>
|
||||
<taskprogress task="NSE" time="1775383946" percent="99.68" remaining="1" etc="1775383946"/>
|
||||
<taskprogress task="NSE" time="1775383976" percent="99.68" remaining="1" etc="1775383976"/>
|
||||
<taskprogress task="NSE" time="1775384006" percent="99.68" remaining="1" etc="1775384006"/>
|
||||
<taskprogress task="NSE" time="1775384036" percent="99.68" remaining="1" etc="1775384037"/>
|
||||
<taskprogress task="NSE" time="1775384066" percent="99.68" remaining="1" etc="1775384067"/>
|
||||
<taskprogress task="NSE" time="1775384096" percent="99.68" remaining="1" etc="1775384097"/>
|
||||
<taskprogress task="NSE" time="1775384126" percent="99.68" remaining="1" etc="1775384127"/>
|
||||
<taskend task="NSE" time="1775384139"/>
|
||||
<taskbegin task="NSE" time="1775384139"/>
|
||||
<taskend task="NSE" time="1775384139"/>
|
||||
<taskbegin task="NSE" time="1775384139"/>
|
||||
<taskend task="NSE" time="1775384139"/>
|
||||
<host starttime="1775383847" endtime="1775384139"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776140346"/>
|
||||
<taskend task="NSE" time="1776140346"/>
|
||||
<taskbegin task="NSE" time="1776140346"/>
|
||||
<taskend task="NSE" time="1776140346"/>
|
||||
<taskbegin task="NSE" time="1776140346"/>
|
||||
<taskend task="NSE" time="1776140346"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776140347"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776140347"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776140347"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776140347"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776140347"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776140347" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776140352"/>
|
||||
<taskend task="Service scan" time="1776140360" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1776140360"/>
|
||||
<taskprogress task="NSE" time="1776140391" percent="85.02" remaining="6" etc="1776140396"/>
|
||||
<taskprogress task="NSE" time="1776140421" percent="99.03" remaining="1" etc="1776140422"/>
|
||||
<taskprogress task="NSE" time="1776140451" percent="99.68" remaining="1" etc="1776140451"/>
|
||||
<taskprogress task="NSE" time="1776140481" percent="99.68" remaining="1" etc="1776140481"/>
|
||||
<taskprogress task="NSE" time="1776140511" percent="99.68" remaining="1" etc="1776140511"/>
|
||||
<taskprogress task="NSE" time="1776140541" percent="99.68" remaining="1" etc="1776140542"/>
|
||||
<taskprogress task="NSE" time="1776140571" percent="99.68" remaining="1" etc="1776140572"/>
|
||||
<taskprogress task="NSE" time="1776140601" percent="99.68" remaining="1" etc="1776140602"/>
|
||||
<taskprogress task="NSE" time="1776140631" percent="99.68" remaining="1" etc="1776140632"/>
|
||||
<taskprogress task="NSE" time="1776140661" percent="99.68" remaining="1" etc="1776140662"/>
|
||||
<taskprogress task="NSE" time="1776140691" percent="99.68" remaining="2" etc="1776140692"/>
|
||||
<taskprogress task="NSE" time="1776140721" percent="99.68" remaining="2" etc="1776140722"/>
|
||||
<taskprogress task="NSE" time="1776140751" percent="99.68" remaining="2" etc="1776140752"/>
|
||||
<taskprogress task="NSE" time="1776140781" percent="99.68" remaining="2" etc="1776140782"/>
|
||||
<taskprogress task="NSE" time="1776140813" percent="99.68" remaining="2" etc="1776140814"/>
|
||||
<taskprogress task="NSE" time="1776140858" percent="99.68" remaining="2" etc="1776140860"/>
|
||||
<taskprogress task="NSE" time="1776140893" percent="99.68" remaining="2" etc="1776140895"/>
|
||||
<taskprogress task="NSE" time="1776140923" percent="99.68" remaining="2" etc="1776140925"/>
|
||||
<taskprogress task="NSE" time="1776140953" percent="99.68" remaining="2" etc="1776140955"/>
|
||||
<taskprogress task="NSE" time="1776140983" percent="99.68" remaining="3" etc="1776140985"/>
|
||||
<taskend task="NSE" time="1776140990"/>
|
||||
<taskbegin task="NSE" time="1776140990"/>
|
||||
<taskend task="NSE" time="1776140992"/>
|
||||
<taskbegin task="NSE" time="1776140992"/>
|
||||
<taskend task="NSE" time="1776140992"/>
|
||||
<host starttime="1776140347" endtime="1776140992"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="stockfill.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-feed" output="Couldn't find any feeds."/><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<ports><port protocol="tcp" portid="80"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-chrono" output="Request times for /; avg: 817.16ms; min: 490.89ms; max: 1001.39ms"/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-security-headers" output=""></script><script id="http-methods" output="
 Supported Methods: GET HEAD POST OPTIONS"><table key="Supported Methods">
|
||||
<elem>GET</elem>
|
||||
<elem>HEAD</elem>
|
||||
<elem>POST</elem>
|
||||
<elem>OPTIONS</elem>
|
||||
</table>
|
||||
</script><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://stockfill.lan.ddnsgeek.com/
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
</script><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-date" output="Tue, 14 Apr 2026 04:19:37 GMT; -4s from local time."><elem key="date">2026-04-14T04:19:37+00:00</elem>
|
||||
<elem key="delta">-4.0</elem>
|
||||
</script><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-errors" output="Couldn't find any error pages."/><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-headers" output="
 Location: https://stockfill.lan.ddnsgeek.com/
 Date: Tue, 14 Apr 2026 04:19:54 GMT
 Content-Length: 17
 Connection: close
 
 (Request type: GET)
"/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-title" output="Did not follow redirect to https://stockfill.lan.ddnsgeek.com/"><elem key="redirect_url">https://stockfill.lan.ddnsgeek.com/</elem>
|
||||
</script><script id="http-vhosts" output="
128 names had status 308"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-useragent-tester" output="
 Status for browser useragent: 200
 Redirected To: https://stockfill.lan.ddnsgeek.com/
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">200</elem>
|
||||
<elem key="Redirected To">https://stockfill.lan.ddnsgeek.com/</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
@@ -68,20 +83,16 @@
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-chrono" output="Request times for /; avg: 756.73ms; min: 374.40ms; max: 1113.38ms"/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-vhosts" output="
128 names had status 308"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-date" output="Sun, 05 Apr 2026 10:11:01 GMT; -3s from local time."><elem key="date">2026-04-05T10:11:01+00:00</elem>
|
||||
<elem key="delta">-3.0</elem>
|
||||
</script><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-title" output="Did not follow redirect to https://stockfill.lan.ddnsgeek.com/"><elem key="redirect_url">https://stockfill.lan.ddnsgeek.com/</elem>
|
||||
</script><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-security-headers" output=""></script><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-headers" output="
 Location: https://stockfill.lan.ddnsgeek.com/
 Date: Sun, 05 Apr 2026 10:11:10 GMT
 Content-Length: 17
 Connection: close
 
 (Request type: GET)
"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-errors" output="Couldn't find any error pages."/><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/></port>
|
||||
</script><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/></port>
|
||||
</ports>
|
||||
<times srtt="14584" rttvar="14584" to="100000"/>
|
||||
<times srtt="14566" rttvar="14566" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775384139"/>
|
||||
<taskend task="NSE" time="1775384139"/>
|
||||
<taskbegin task="NSE" time="1775384139"/>
|
||||
<taskend task="NSE" time="1775384139"/>
|
||||
<taskbegin task="NSE" time="1775384139"/>
|
||||
<taskend task="NSE" time="1775384139"/>
|
||||
<runstats><finished time="1775384139" timestr="Sun Apr 5 10:15:39 2026" summary="Nmap done at Sun Apr 5 10:15:39 2026; 1 IP address (1 host up) scanned in 297.93 seconds" elapsed="297.93" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776140993"/>
|
||||
<taskend task="NSE" time="1776140993"/>
|
||||
<taskbegin task="NSE" time="1776140993"/>
|
||||
<taskend task="NSE" time="1776140993"/>
|
||||
<taskbegin task="NSE" time="1776140993"/>
|
||||
<taskend task="NSE" time="1776140993"/>
|
||||
<runstats><finished time="1776140993" timestr="Tue Apr 14 04:29:53 2026" summary="Nmap done at Tue Apr 14 04:29:53 2026; 1 IP address (1 host up) scanned in 658.62 seconds" elapsed="658.62" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user