fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,15 +0,0 @@
|
||||
HTTP/2 302
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 10:50:46 GMT
|
||||
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2Frobots.txt&rm=GET
|
||||
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
referrer-policy: strict-origin-when-cross-origin
|
||||
set-cookie: authelia_session=Cl#vzzWN7^QGCs1OaLHBQH*uuwMFVoSL; expires=Sun, 05 Apr 2026 11:50:47 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-dns-prefetch-control: off
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 120
|
||||
|
||||
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2Frobots.txt&rm=GET">302 Found</a>
|
||||
@@ -1,15 +1 @@
|
||||
HTTP/2 302
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 10:50:48 GMT
|
||||
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
referrer-policy: strict-origin-when-cross-origin
|
||||
set-cookie: authelia_session=RKJapJnTebLWd2pBV55OQBlwW_wlbEsM; expires=Sun, 05 Apr 2026 11:50:49 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-dns-prefetch-control: off
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 110
|
||||
|
||||
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET">302 Found</a>
|
||||
@@ -283,11 +283,3 @@ Configuration {
|
||||
unique: false,
|
||||
response_size_limit: 4194304,
|
||||
}
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.txt
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.html
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.php
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.asp
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.aspx
|
||||
404 GET 2l 12w 64c https://traefik.lan.ddnsgeek.com/metrics.jsp
|
||||
302 GET 0l 0w 117c https://traefik.lan.ddnsgeek.com/rgo.asp => https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2Frgo.asp&rm=GET
|
||||
@@ -1,15 +0,0 @@
|
||||
HTTP/2 302
|
||||
content-type: text/html; charset=utf-8
|
||||
date: Sun, 05 Apr 2026 10:50:45 GMT
|
||||
location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F.well-known%2Fsecurity.txt&rm=GET
|
||||
permissions-policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
referrer-policy: strict-origin-when-cross-origin
|
||||
set-cookie: authelia_session=7H#z5Mouk0%rDjaIRxB-iLlvjHAS$^dm; expires=Sun, 05 Apr 2026 11:50:46 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
strict-transport-security: max-age=15552000; includeSubDomains; preload
|
||||
x-content-type-options: nosniff
|
||||
x-dns-prefetch-control: off
|
||||
x-frame-options: SAMEORIGIN
|
||||
x-xss-protection: 1; mode=block
|
||||
content-length: 136
|
||||
|
||||
<a href="https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F.well-known%2Fsecurity.txt&rm=GET">302 Found</a>
|
||||
@@ -1,20 +1,23 @@
|
||||
perl: warning: Setting locale failed.
|
||||
perl: warning: Please check that your locale settings:
|
||||
LANGUAGE = (unset),
|
||||
LC_ALL = (unset),
|
||||
LC_CTYPE = (unset),
|
||||
LC_NUMERIC = "en_AU.UTF-8",
|
||||
LC_COLLATE = (unset),
|
||||
LC_TIME = "en_AU.UTF-8",
|
||||
LC_MESSAGES = (unset),
|
||||
LC_MONETARY = "en_AU.UTF-8",
|
||||
LC_ADDRESS = "en_AU.UTF-8",
|
||||
LC_IDENTIFICATION = "en_AU.UTF-8",
|
||||
LC_MEASUREMENT = "en_AU.UTF-8",
|
||||
LC_PAPER = "en_AU.UTF-8",
|
||||
LC_TELEPHONE = "en_AU.UTF-8",
|
||||
LC_NAME = "en_AU.UTF-8",
|
||||
LANG = "en_US.UTF-8"
|
||||
are supported and installed on your system.
|
||||
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").
|
||||
- Nikto v2.6.0
|
||||
---------------------------------------------------------------------------
|
||||
+ Your Nikto installation is out of date.
|
||||
+ Target IP: 167.179.167.166
|
||||
+ Target Hostname: traefik.lan.ddnsgeek.com
|
||||
+ Target Port: 443
|
||||
---------------------------------------------------------------------------
|
||||
+ SSL Info: Subject: /CN=traefik.lan.ddnsgeek.com
|
||||
CN: traefik.lan.ddnsgeek.com
|
||||
SAN: traefik.lan.ddnsgeek.com
|
||||
Ciphers: TLS_AES_128_GCM_SHA256
|
||||
Issuer: /C=US/O=Let's Encrypt/CN=R12
|
||||
+ Platform: Unknown
|
||||
+ Start Time: 2026-04-05 10:53:13 (GMT0)
|
||||
---------------------------------------------------------------------------
|
||||
+ Server: No banner retrieved
|
||||
+ No CGI Directories found (use '-C all' to force check all possible dirs). CGI tests skipped.
|
||||
+ [013587] /: Suggested security header missing: referrer-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referrer-Policy
|
||||
+ [013587] /: Suggested security header missing: permissions-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Permissions-Policy
|
||||
+ [013587] /: Suggested security header missing: content-security-policy. See: https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP
|
||||
+ [FAIL] Unable to connect to traefik.lan.ddnsgeek.com:443.
|
||||
@@ -1,93 +1,12 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:53:10 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:34:01 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com
|
||||
Nmap scan report for traefik.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.017s latency).
|
||||
Host is up, received user-set.
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:53:15 UTC for 545s
|
||||
Scanned at 2026-04-14 04:34:17 UTC for 1s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-auth:
|
||||
| HTTP/1.1 401 Unauthorized\x0D
|
||||
|_ Server returned status 401 but no WWW-Authenticate header.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-chrono: Request times for /; avg: 577.30ms; min: 452.32ms; max: 654.90ms
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_ssl-ccs-injection: No reply from server (TIMEOUT)
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Sun, 05 Apr 2026 10:53:55 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=traefik.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ https://traefik.lan.ddnsgeek.com:443/
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 401
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-iis-webdav-vuln: Could not determine vulnerability, since root folder is password protected
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-vhosts:
|
||||
| 127 names had status 404
|
||||
|_auth.lan.ddnsgeek.com : 200
|
||||
|_http-date: Sun, 05 Apr 2026 10:53:55 GMT; -1s from local time.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_traefik.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp filtered https no-response
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 11:02:20 2026 -- 1 IP address (1 host up) scanned in 551.09 seconds
|
||||
# Nmap done at Tue Apr 14 04:34:24 2026 -- 1 IP address (1 host up) scanned in 23.83 seconds
|
||||
Whitespace-only changes.
@@ -1,144 +1 @@
|
||||
WhatWeb report for https://traefik.lan.ddnsgeek.com:443
|
||||
Status : 302 Found
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : Cookies[authelia_session], HttpOnly[authelia_session], RedirectLocation[https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ Cookies ]
|
||||
Display the names of cookies in the HTTP headers. The
|
||||
values are not returned to save on space.
|
||||
|
||||
String : authelia_session
|
||||
|
||||
[ HttpOnly ]
|
||||
If the HttpOnly flag is included in the HTTP set-cookie
|
||||
response header and the browser supports it then the cookie
|
||||
cannot be accessed through client side script - More Info:
|
||||
http://en.wikipedia.org/wiki/HTTP_cookie
|
||||
|
||||
String : authelia_session
|
||||
|
||||
[ RedirectLocation ]
|
||||
HTTP Server string location. used with http-status 301 and
|
||||
302
|
||||
|
||||
String : https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET (from location)
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 302 Found
|
||||
Content-Length: 110
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 11:00:07 GMT
|
||||
Location: https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
Set-Cookie: authelia_session=PqJBSGYImDEc8A6BDrhX1zglOcf2LmYw; expires=Sun, 05 Apr 2026 12:00:08 GMT; domain=lan.ddnsgeek.com; path=/; HttpOnly; secure; SameSite=Lax
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Dns-Prefetch-Control: off
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
WhatWeb report for https://auth.lan.ddnsgeek.com/?rd=https%3A%2F%2Ftraefik.lan.ddnsgeek.com%2F&rm=GET
|
||||
Status : 200 OK
|
||||
Title : <None>
|
||||
IP : 167.179.167.166
|
||||
Country : NEW ZEALAND, NZ
|
||||
|
||||
Summary : HTML5, Script[module], Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
||||
|
||||
Detected Plugins:
|
||||
[ HTML5 ]
|
||||
HTML version 5, detected by the doctype declaration
|
||||
|
||||
|
||||
[ Script ]
|
||||
This plugin detects instances of script HTML elements and
|
||||
returns the script language/type.
|
||||
|
||||
String : module
|
||||
|
||||
[ Strict-Transport-Security ]
|
||||
Strict-Transport-Security is an HTTP header that restricts
|
||||
a web browser from accessing a website without the security
|
||||
of the HTTPS protocol.
|
||||
|
||||
String : max-age=15552000; includeSubDomains; preload
|
||||
|
||||
[ UncommonHeaders ]
|
||||
Uncommon HTTP server headers. The blacklist includes all
|
||||
the standard headers and many non standard but common ones.
|
||||
Interesting but fairly common headers should have their own
|
||||
plugins, eg. x-powered-by, server and x-aspnet-version.
|
||||
Info about headers can be found at www.http-stats.com
|
||||
|
||||
String : content-security-policy,permissions-policy,referrer-policy,x-content-type-options,x-dns-prefetch-control (from headers)
|
||||
|
||||
[ X-Frame-Options ]
|
||||
This plugin retrieves the X-Frame-Options value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : SAMEORIGIN
|
||||
|
||||
[ X-XSS-Protection ]
|
||||
This plugin retrieves the X-XSS-Protection value from the
|
||||
HTTP header. - More Info:
|
||||
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
||||
aspx
|
||||
|
||||
String : 1; mode=block
|
||||
|
||||
HTTP Headers:
|
||||
HTTP/1.1 200 OK
|
||||
Content-Length: 2675
|
||||
Content-Security-Policy: default-src 'self'; base-uri 'self'; connect-src 'self'; frame-ancestors 'none'; frame-src 'none'; object-src 'none'; script-src 'self'; style-src 'self' 'nonce-4SVdMNrcuMIwrLwLMYSUVWMa5r99kiIF' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='
|
||||
Content-Type: text/html; charset=utf-8
|
||||
Date: Sun, 05 Apr 2026 11:00:14 GMT
|
||||
Permissions-Policy: accelerometer=(), autoplay=(), camera=(), display-capture=(), geolocation=(), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), screen-wake-lock=(), sync-xhr=(), xr-spatial-tracking=(), interest-cohort=()
|
||||
Referrer-Policy: strict-origin-when-cross-origin
|
||||
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Dns-Prefetch-Control: off
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-Xss-Protection: 1; mode=block
|
||||
Connection: close
|
||||
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
Version: 2.1.5
|
||||
OpenSSL 3.5.3 16 Sep 2025
|
||||
OpenSSL 3.5.5 27 Jan 2026
|
||||
|
||||
Connected to 167.179.167.166
|
||||
|
||||
|
||||
@@ -1,98 +1,45 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE nmaprun>
|
||||
<?xml-stylesheet href="file:///usr/share/nmap/nmap.xsl" type="text/xsl"?>
|
||||
<!-- Nmap 7.98 scan initiated Sun Apr 5 10:53:10 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com" start="1775386390" startstr="Sun Apr 5 10:53:10 2026" version="7.98" xmloutputversion="1.05">
|
||||
<!-- Nmap 7.99 scan initiated Tue Apr 14 04:34:01 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com -->
|
||||
<nmaprun scanner="nmap" args="/usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com" start="1776141241" startstr="Tue Apr 14 04:34:01 2026" version="7.99" xmloutputversion="1.05">
|
||||
<scaninfo type="syn" protocol="tcp" numservices="1" services="443"/>
|
||||
<verbose level="2"/>
|
||||
<debugging level="0"/>
|
||||
<taskbegin task="NSE" time="1775386394"/>
|
||||
<taskend task="NSE" time="1775386394"/>
|
||||
<taskbegin task="NSE" time="1775386394"/>
|
||||
<taskend task="NSE" time="1775386394"/>
|
||||
<taskbegin task="NSE" time="1775386394"/>
|
||||
<taskend task="NSE" time="1775386394"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775386394"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775386394"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1775386394"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1775386394"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1775386394"/>
|
||||
<taskend task="SYN Stealth Scan" time="1775386395" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1775386396"/>
|
||||
<taskend task="Service scan" time="1775386409" extrainfo="1 service on 1 host"/>
|
||||
<taskbegin task="NSE" time="1775386409"/>
|
||||
<taskprogress task="NSE" time="1775386440" percent="83.71" remaining="7" etc="1775386446"/>
|
||||
<taskprogress task="NSE" time="1775386470" percent="99.35" remaining="1" etc="1775386470"/>
|
||||
<taskprogress task="NSE" time="1775386505" percent="99.68" remaining="1" etc="1775386505"/>
|
||||
<taskprogress task="NSE" time="1775386547" percent="99.68" remaining="1" etc="1775386547"/>
|
||||
<taskprogress task="NSE" time="1775386586" percent="99.68" remaining="1" etc="1775386587"/>
|
||||
<taskprogress task="NSE" time="1775386676" percent="99.68" remaining="1" etc="1775386677"/>
|
||||
<taskprogress task="NSE" time="1775386715" percent="99.68" remaining="1" etc="1775386716"/>
|
||||
<taskprogress task="NSE" time="1775386745" percent="99.68" remaining="2" etc="1775386746"/>
|
||||
<taskprogress task="NSE" time="1775386775" percent="99.68" remaining="2" etc="1775386776"/>
|
||||
<taskprogress task="NSE" time="1775386805" percent="99.68" remaining="2" etc="1775386806"/>
|
||||
<taskend task="NSE" time="1775386826"/>
|
||||
<taskbegin task="NSE" time="1775386826"/>
|
||||
<taskprogress task="NSE" time="1775386857" percent="52.94" remaining="28" etc="1775386885"/>
|
||||
<taskprogress task="NSE" time="1775386887" percent="82.35" remaining="14" etc="1775386900"/>
|
||||
<taskprogress task="NSE" time="1775386917" percent="94.12" remaining="6" etc="1775386923"/>
|
||||
<taskend task="NSE" time="1775386919"/>
|
||||
<taskbegin task="NSE" time="1775386919"/>
|
||||
<taskend task="NSE" time="1775386940"/>
|
||||
<host starttime="1775386395" endtime="1775386940"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<taskbegin task="NSE" time="1776141256"/>
|
||||
<taskend task="NSE" time="1776141256"/>
|
||||
<taskbegin task="NSE" time="1776141256"/>
|
||||
<taskend task="NSE" time="1776141256"/>
|
||||
<taskbegin task="NSE" time="1776141256"/>
|
||||
<taskend task="NSE" time="1776141256"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776141256"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776141256"/>
|
||||
<taskbegin task="Parallel DNS resolution of 1 host." time="1776141256"/>
|
||||
<taskend task="Parallel DNS resolution of 1 host." time="1776141257"/>
|
||||
<taskbegin task="SYN Stealth Scan" time="1776141257"/>
|
||||
<taskend task="SYN Stealth Scan" time="1776141258" extrainfo="1 total ports"/>
|
||||
<taskbegin task="Service scan" time="1776141263"/>
|
||||
<taskbegin task="NSE" time="1776141263"/>
|
||||
<taskend task="NSE" time="1776141263"/>
|
||||
<taskbegin task="NSE" time="1776141263"/>
|
||||
<taskend task="NSE" time="1776141263"/>
|
||||
<taskbegin task="NSE" time="1776141263"/>
|
||||
<taskend task="NSE" time="1776141263"/>
|
||||
<host starttime="1776141257" endtime="1776141258"><status state="up" reason="user-set" reason_ttl="0"/>
|
||||
<address addr="167.179.167.166" addrtype="ipv4"/>
|
||||
<hostnames>
|
||||
<hostname name="traefik.lan.ddnsgeek.com" type="user"/>
|
||||
<hostname name="167-179-167-166.a7b3a7.bne.nbn.aussiebb.net" type="PTR"/>
|
||||
</hostnames>
|
||||
<ports><port protocol="tcp" portid="443"><state state="open" reason="syn-ack" reason_ttl="55"/><service name="http" product="Golang net/http server" extrainfo="Go-IPFS json-rpc or InfluxDB API" tunnel="ssl" method="probed" conf="10"><cpe>cpe:/a:protocol_labs:go-ipfs</cpe></service><script id="http-stored-xss" output="Couldn't find any stored XSS vulnerabilities."/><script id="http-auth" output="
HTTP/1.1 401 Unauthorized
 Server returned status 401 but no WWW-Authenticate header.
"/><script id="http-malware-host" output="Host appears to be clean"/><script id="http-csrf" output="Couldn't find any CSRF vulnerabilities."/><script id="http-security-headers" output="
 Strict_Transport_Security: 
 Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
 X_Frame_Options: 
 Header: X-Frame-Options: SAMEORIGIN
 Description: The browser must not display this content in any frame from a page of different origin than the content itself.
 X_XSS_Protection: 
 Header: X-XSS-Protection: 1; mode=block
 Description: The browser will prevent the rendering of the page when XSS is detected.
 X_Content_Type_Options: 
 Header: X-Content-Type-Options: nosniff
 Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. "><table key="Strict_Transport_Security">
|
||||
<elem>Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload</elem>
|
||||
</table>
|
||||
<table key="X_Frame_Options">
|
||||
<elem>Header: X-Frame-Options: SAMEORIGIN</elem>
|
||||
<elem>Description: The browser must not display this content in any frame from a page of different origin than the content itself.</elem>
|
||||
</table>
|
||||
<table key="X_XSS_Protection">
|
||||
<elem>Header: X-XSS-Protection: 1; mode=block</elem>
|
||||
<elem>Description: The browser will prevent the rendering of the page when XSS is detected.</elem>
|
||||
</table>
|
||||
<table key="X_Content_Type_Options">
|
||||
<elem>Header: X-Content-Type-Options: nosniff</elem>
|
||||
<elem>Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. </elem>
|
||||
</table>
|
||||
</script><script id="http-drupal-enum" output="Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)"/><script id="http-litespeed-sourcecode-download" output="Request with null byte did not work. This web server might not be vulnerable"/><script id="http-chrono" output="Request times for /; avg: 577.30ms; min: 452.32ms; max: 654.90ms"/><script id="http-wordpress-enum" output="Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)"/><script id="http-referer-checker" output="Couldn't find any cross-domain scripts."/><script id="ssl-ccs-injection" output="No reply from server (TIMEOUT)"/><script id="http-headers" output="
 Content-Type: text/plain; charset=utf-8
 X-Content-Type-Options: nosniff
 Date: Sun, 05 Apr 2026 10:53:55 GMT
 Content-Length: 19
 Connection: close
 
 (Request type: GET)
"/><script id="http-title" output="Site doesn't have a title (text/plain; charset=utf-8)."></script><script id="http-fetch" output="Please enter the complete path of the directory to save data in."><elem key="ERROR">Please enter the complete path of the directory to save data in.</elem>
|
||||
</script><script id="http-errors" output="
Spidering limited to: maxpagecount=40; withinhost=traefik.lan.ddnsgeek.com
 Found the following error pages: 
 
 Error Code: 404
 	https://traefik.lan.ddnsgeek.com:443/
"/><script id="http-useragent-tester" output="
 Status for browser useragent: 401
 Allowed User Agents: 
 Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
 libwww
 lwp-trivial
 libcurl-agent/1.0
 PHP/
 Python-urllib/2.5
 GT::WWW
 Snoopy
 MFC_Tear_Sample
 HTTP::Lite
 PHPCrawl
 URI::Fetch
 Zend_Http_Client
 http client
 PECL::HTTP
 Wget/1.13.4 (linux-gnu)
 WWW-Mechanize/1.34"><elem key="Status for browser useragent">401</elem>
|
||||
<table key="Allowed User Agents">
|
||||
<elem>Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)</elem>
|
||||
<elem>libwww</elem>
|
||||
<elem>lwp-trivial</elem>
|
||||
<elem>libcurl-agent/1.0</elem>
|
||||
<elem>PHP/</elem>
|
||||
<elem>Python-urllib/2.5</elem>
|
||||
<elem>GT::WWW</elem>
|
||||
<elem>Snoopy</elem>
|
||||
<elem>MFC_Tear_Sample</elem>
|
||||
<elem>HTTP::Lite</elem>
|
||||
<elem>PHPCrawl</elem>
|
||||
<elem>URI::Fetch</elem>
|
||||
<elem>Zend_Http_Client</elem>
|
||||
<elem>http client</elem>
|
||||
<elem>PECL::HTTP</elem>
|
||||
<elem>Wget/1.13.4 (linux-gnu)</elem>
|
||||
<elem>WWW-Mechanize/1.34</elem>
|
||||
</table>
|
||||
</script><script id="http-sitemap-generator" output="
 Directory structure:
 Longest directory structure:
 Depth: 0
 Dir: /
 Total files found (by extension):
 
"/><script id="http-iis-webdav-vuln" output="Could not determine vulnerability, since root folder is password protected"/><script id="http-feed" output="Couldn't find any feeds."/><script id="http-dombased-xss" output="Couldn't find any DOM based XSS."/><script id="http-mobileversion-checker" output="No mobile version detected."/><script id="http-comments-displayer" output="Couldn't find any comments."/><script id="http-devframework" output="Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages."/><script id="http-vhosts" output="
127 names had status 404
auth.lan.ddnsgeek.com : 200"/><script id="http-date" output="Sun, 05 Apr 2026 10:53:55 GMT; -1s from local time."><elem key="date">2026-04-05T10:53:55+00:00</elem>
|
||||
<elem key="delta">-1.0</elem>
|
||||
</script><script id="http-wordpress-users" output="[Error] Wordpress installation was not found. We couldn't find wp-login.php"/><script id="http-jsonp-detection" output="Couldn't find any JSONP endpoints."/><script id="http-waf-detect" output="IDS/IPS/WAF detected:
traefik.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>"/></port>
|
||||
<ports><port protocol="tcp" portid="443"><state state="filtered" reason="no-response" reason_ttl="0"/><service name="https" method="table" conf="3"/></port>
|
||||
</ports>
|
||||
<times srtt="17154" rttvar="17154" to="100000"/>
|
||||
</host>
|
||||
<taskbegin task="NSE" time="1775386940"/>
|
||||
<taskend task="NSE" time="1775386940"/>
|
||||
<taskbegin task="NSE" time="1775386940"/>
|
||||
<taskend task="NSE" time="1775386940"/>
|
||||
<taskbegin task="NSE" time="1775386940"/>
|
||||
<taskend task="NSE" time="1775386940"/>
|
||||
<runstats><finished time="1775386940" timestr="Sun Apr 5 11:02:20 2026" summary="Nmap done at Sun Apr 5 11:02:20 2026; 1 IP address (1 host up) scanned in 551.09 seconds" elapsed="551.09" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
<taskbegin task="NSE" time="1776141263"/>
|
||||
<taskend task="NSE" time="1776141263"/>
|
||||
<taskbegin task="NSE" time="1776141263"/>
|
||||
<taskend task="NSE" time="1776141263"/>
|
||||
<taskbegin task="NSE" time="1776141263"/>
|
||||
<taskend task="NSE" time="1776141263"/>
|
||||
<runstats><finished time="1776141264" timestr="Tue Apr 14 04:34:24 2026" summary="Nmap done at Tue Apr 14 04:34:24 2026; 1 IP address (1 host up) scanned in 23.83 seconds" elapsed="23.83" exit="success"/><hosts up="1" down="0" total="1"/>
|
||||
</runstats>
|
||||
</nmaprun>
|
||||
Reference in new issue
Block a user