fresh autorecon run
This commit is contained in:
beatzaplenty committed
1 parent
c8f17a17e6
commit
3c3a192c79
1252 files changed
+4574573
-1993899
No files matched your search
@@ -1,93 +1,12 @@
|
||||
# Nmap 7.98 scan initiated Sun Apr 5 10:53:10 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com
|
||||
# Nmap 7.99 scan initiated Tue Apr 14 04:34:01 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/traefik.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml traefik.lan.ddnsgeek.com
|
||||
Nmap scan report for traefik.lan.ddnsgeek.com (167.179.167.166)
|
||||
Host is up, received user-set (0.017s latency).
|
||||
Host is up, received user-set.
|
||||
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
|
||||
Scanned at 2026-04-05 10:53:15 UTC for 545s
|
||||
Scanned at 2026-04-14 04:34:17 UTC for 1s
|
||||
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp open ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
|
||||
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
||||
| http-auth:
|
||||
| HTTP/1.1 401 Unauthorized\x0D
|
||||
|_ Server returned status 401 but no WWW-Authenticate header.
|
||||
|_http-malware-host: Host appears to be clean
|
||||
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
||||
| http-security-headers:
|
||||
| Strict_Transport_Security:
|
||||
| Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
||||
| X_Frame_Options:
|
||||
| Header: X-Frame-Options: SAMEORIGIN
|
||||
| Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|
||||
| X_XSS_Protection:
|
||||
| Header: X-XSS-Protection: 1; mode=block
|
||||
| Description: The browser will prevent the rendering of the page when XSS is detected.
|
||||
| X_Content_Type_Options:
|
||||
| Header: X-Content-Type-Options: nosniff
|
||||
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
||||
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
||||
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
||||
|_http-chrono: Request times for /; avg: 577.30ms; min: 452.32ms; max: 654.90ms
|
||||
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
||||
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
||||
|_ssl-ccs-injection: No reply from server (TIMEOUT)
|
||||
| http-headers:
|
||||
| Content-Type: text/plain; charset=utf-8
|
||||
| X-Content-Type-Options: nosniff
|
||||
| Date: Sun, 05 Apr 2026 10:53:55 GMT
|
||||
| Content-Length: 19
|
||||
| Connection: close
|
||||
|
|
||||
|_ (Request type: GET)
|
||||
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
||||
|_http-fetch: Please enter the complete path of the directory to save data in.
|
||||
| http-errors:
|
||||
| Spidering limited to: maxpagecount=40; withinhost=traefik.lan.ddnsgeek.com
|
||||
| Found the following error pages:
|
||||
|
|
||||
| Error Code: 404
|
||||
|_ https://traefik.lan.ddnsgeek.com:443/
|
||||
| http-useragent-tester:
|
||||
| Status for browser useragent: 401
|
||||
| Allowed User Agents:
|
||||
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
||||
| libwww
|
||||
| lwp-trivial
|
||||
| libcurl-agent/1.0
|
||||
| PHP/
|
||||
| Python-urllib/2.5
|
||||
| GT::WWW
|
||||
| Snoopy
|
||||
| MFC_Tear_Sample
|
||||
| HTTP::Lite
|
||||
| PHPCrawl
|
||||
| URI::Fetch
|
||||
| Zend_Http_Client
|
||||
| http client
|
||||
| PECL::HTTP
|
||||
| Wget/1.13.4 (linux-gnu)
|
||||
|_ WWW-Mechanize/1.34
|
||||
| http-sitemap-generator:
|
||||
| Directory structure:
|
||||
| Longest directory structure:
|
||||
| Depth: 0
|
||||
| Dir: /
|
||||
| Total files found (by extension):
|
||||
|_
|
||||
|_http-iis-webdav-vuln: Could not determine vulnerability, since root folder is password protected
|
||||
|_http-feed: Couldn't find any feeds.
|
||||
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
||||
|_http-mobileversion-checker: No mobile version detected.
|
||||
|_http-comments-displayer: Couldn't find any comments.
|
||||
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
||||
| http-vhosts:
|
||||
| 127 names had status 404
|
||||
|_auth.lan.ddnsgeek.com : 200
|
||||
|_http-date: Sun, 05 Apr 2026 10:53:55 GMT; -1s from local time.
|
||||
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
||||
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
||||
| http-waf-detect: IDS/IPS/WAF detected:
|
||||
|_traefik.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
|
||||
PORT STATE SERVICE REASON VERSION
|
||||
443/tcp filtered https no-response
|
||||
|
||||
Read data files from: /usr/share/nmap
|
||||
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
||||
# Nmap done at Sun Apr 5 11:02:20 2026 -- 1 IP address (1 host up) scanned in 551.09 seconds
|
||||
# Nmap done at Tue Apr 14 04:34:24 2026 -- 1 IP address (1 host up) scanned in 23.83 seconds
|
||||
Reference in new issue
Block a user