# Nmap 7.98 scan initiated Sun Apr  5 09:22:26 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/searxng.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml searxng.lan.ddnsgeek.com
Nmap scan report for searxng.lan.ddnsgeek.com (167.179.167.166)
Host is up, received user-set (0.014s latency).
rDNS record for 167.179.167.166: 167-179-167-166.a7b3a7.bne.nbn.aussiebb.net
Scanned at 2026-04-05 09:22:31 UTC for 1160s

PORT    STATE SERVICE  REASON         VERSION
443/tcp open  ssl/http syn-ack ttl 55 Golang net/http server (Go-IPFS json-rpc or InfluxDB API)
| http-headers: 
|   Content-Length: 6340
|   Content-Type: text/html; charset=utf-8
|   Date: Sun, 05 Apr 2026 09:27:01 GMT
|   Referrer-Policy: no-referrer
|   Server: granian
|   Server-Timing: total;dur=27.312, render;dur=20.734
|   Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|   X-Content-Type-Options: nosniff
|   X-Download-Options: noopen
|   X-Frame-Options: SAMEORIGIN
|   X-Robots-Tag: noindex, nofollow
|   X-Xss-Protection: 1; mode=block
|   Connection: close
|   
|_  (Request type: HEAD)
| http-useragent-tester: 
|   Status for browser useragent: 200
|   Allowed User Agents: 
|     Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|     libwww
|     lwp-trivial
|     libcurl-agent/1.0
|     PHP/
|     Python-urllib/2.5
|     GT::WWW
|     Snoopy
|     MFC_Tear_Sample
|     HTTP::Lite
|     PHPCrawl
|     URI::Fetch
|     Zend_Http_Client
|     http client
|     PECL::HTTP
|     Wget/1.13.4 (linux-gnu)
|_    WWW-Mechanize/1.34
|_http-feed: Couldn't find any feeds.
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|_http-server-header: granian
| http-waf-detect: IDS/IPS/WAF detected:
|_searxng.lan.ddnsgeek.com:443/?p4yl04d3=<script>alert(document.cookie)</script>
| http-vhosts: 
| auth.lan.ddnsgeek.com : 200
|_127 names had status 404
| http-security-headers: 
|   Strict_Transport_Security: 
|     Header: Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|   X_Frame_Options: 
|     Header: X-Frame-Options: SAMEORIGIN
|     Description: The browser must not display this content in any frame from a page of different origin than the content itself.
|   X_XSS_Protection: 
|     Header: X-XSS-Protection: 1; mode=block
|     Description: The browser will prevent the rendering of the page when XSS is detected.
|   X_Content_Type_Options: 
|     Header: X-Content-Type-Options: nosniff
|_    Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type. 
| http-sitemap-generator: 
|   Directory structure:
|     /
|       Other: 4; json: 1; xml: 1
|     /info/en/
|       Other: 1
|     /static/themes/simple/
|       css: 1; js: 1
|   Longest directory structure:
|     Depth: 3
|     Dir: /static/themes/simple/
|   Total files found (by extension):
|_    Other: 5; css: 1; js: 1; json: 1; xml: 1
|_http-referer-checker: Couldn't find any cross-domain scripts.
| http-sql-injection: 
|   Possible sqli for forms:
|     Form at path: /search, form's action: /search. Fields that might be vulnerable:
|       q
|     Form at path: /, form's action: /search. Fields that might be vulnerable:
|_      q
|_ssl-date: TLS randomness does not represent time
|_http-malware-host: Host appears to be clean
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
| http-php-version: Logo query returned unknown hash 4a17502ae0c6bf21a2cfc344d4356de9
|_Credits query returned unknown hash 4a17502ae0c6bf21a2cfc344d4356de9
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
| ssl-cert: Subject: commonName=searxng.lan.ddnsgeek.com
| Subject Alternative Name: DNS:searxng.lan.ddnsgeek.com
| Issuer: commonName=R12/organizationName=Let's Encrypt/countryName=US
| Public Key type: rsa
| Public Key bits: 4096
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2026-02-05T19:02:34
| Not valid after:  2026-05-06T19:02:33
| MD5:     d452 b841 8ae5 9c53 aae2 46be 8019 715e
| SHA-1:   121d b257 a1bb cab9 334f 2b22 a6a4 56ee c043 067d
| SHA-256: 932a 826c f2c5 58ed 9bb5 1c11 7af8 4f92 fcfe c32c 7cea d546 1b54 2e04 350f 40b7
| -----BEGIN CERTIFICATE-----
| MIIGFDCCBPygAwIBAgISBlZiftnDPAhsaH/H+7tDcyKkMA0GCSqGSIb3DQEBCwUA
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
| EwNSMTIwHhcNMjYwMjA1MTkwMjM0WhcNMjYwNTA2MTkwMjMzWjAjMSEwHwYDVQQD
| ExhzZWFyeG5nLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4IC
| DwAwggIKAoICAQC2Nco6YK5yss+y5+fA0w93a1CMjv2yqZKNZsWXnl9ac2FNpmf2
| kU9yWr9o+vjxhlFiyAsDIZlI+1pnObefQs41bvxCmVzzvFE9pYnBsMoZkaUKDXLn
| /shOh1XA/9yU8U/kDlGF8l9a4a64Dt/vnIJeudu7/zCtaTV0cITF9Oe5iBoYNbtr
| 2V81YeUc/egUrkpLJv+BOLXCSFbAMbbx6RuIZEjj/4oB0kZa0+D7hARsYN2wpsEt
| lggem4xr3RoeHodr0rM5hQNg7OvazMUB1d+R6kgBndVrhv+TzGW4GAvxF/bcKZyV
| 832TsDOoWIisgqKaDiArbv4NBwyhaY6kf577rxkz7spq4ogQBnvq7YL0CDnNWQL4
| CczJIzYjoHy66hDnpq2j/5Ng7vWcjvL6tlC8LRsU5C2xtCJJj7wecrzGHc10UzRs
| 849h9q7NDxkdUaoHS24vmuXbEuhExrDF0XYiIDjNDaf4OUtYGHYjDkmgxqqT8qzu
| 8J26oGDRf66gQ2zMBCQCSbGjuA+dVdFkeFY9ofwXPhf773iDq/kMEbScdkxUK704
| ZWO/NwJ4nb73//igiQb5Lg8OCt1Lfov30T3uRPJuWCrXy0JESEIvDl7fRv4ayFZc
| M8RW30mJyvJP2pvT4eZvt1EFLKa9cMCWwqidccWNnd3sRt4ME4fzzWj8YwIDAQAB
| o4ICMDCCAiwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
| BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQFXVj+MJo4fhyXCZcGODA6
| 73UeSTAfBgNVHSMEGDAWgBQAtSnyLY5vMeibTK14Pvrc6QzR0jAzBggrBgEFBQcB
| AQQnMCUwIwYIKwYBBQUHMAKGF2h0dHA6Ly9yMTIuaS5sZW5jci5vcmcvMCMGA1Ud
| EQQcMBqCGHNlYXJ4bmcubGFuLmRkbnNnZWVrLmNvbTATBgNVHSAEDDAKMAgGBmeB
| DAECATAuBgNVHR8EJzAlMCOgIaAfhh1odHRwOi8vcjEyLmMubGVuY3Iub3JnLzM3
| LmNybDCCAQwGCisGAQQB1nkCBAIEgf0EgfoA+AB2AGQRxGykEuyniRyiAi4AvKtP
| KAfUHjUnq+r+1QPJfc3wAAABnC9k2UcAAAQDAEcwRQIhAKVGx7XzgAVqrDTK3qsG
| JX/jiybYX2Hvxgm0W++qoIbmAiB7Pmuf0z35gA3Lla7iyepOsiR8UQrbD3OaaY6C
| eAtMnAB+AKXJeJJdV0YXgocN2IlmC1xVZIt9AEDy7AdoUdGIaRn3AAABnC9k2z4A
| CAAABQAxQN/aBAMARzBFAiEA6Xphv+k9t0JiJ1svG9bhk1mDzXppmeDElTKCY49B
| nO4CIA3WnzRPiAXKQCsGoq+uSn/Anm1S9/7QoPxWPeyOaZmLMA0GCSqGSIb3DQEB
| CwUAA4IBAQAHYFjcVlOzGUj3F0qROoW96jCVbJd5NIYi99RERwM5OwKEdN4TpZ+v
| oF2K4ukI+J1RrW1JLKNymUkLbY/jCZh2bPrIijWQO7BT5GICFEcJWgRu6+Z6TopT
| QMcIqZZegLvQOTAdlK2LonBT4/IY5ND8Nw/WoPAF3kkC/wN2dz6W9wA/K85fj0zC
| 4+31dDr7ir7bjbLpjVV60FgeNSooGmiMpffKSUCztteydblWqCZzgBQowu/+A2IA
| 3CTF5DTIlu1sqUnCnOsgAgycj15zOocoOsAFqpGJ/tUuKOJe1MpgjIR6a1uOmW1+
| klw9aGAiKU/uWVAmYe1YUJ5eMXv52tNo
|_-----END CERTIFICATE-----
|_http-mobileversion-checker: No mobile version detected.
| http-methods: 
|_  Supported Methods: GET HEAD POST OPTIONS
| http-robots.txt: 4 disallowed entries 
|_/stats /image_proxy /preferences /*?*q=*
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-date: Sun, 05 Apr 2026 09:27:02 GMT; -2s from local time.
| ssl-enum-ciphers: 
|   TLSv1.2: 
|     ciphers: 
|       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|       TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|     compressors: 
|       NULL
|     cipher preference: client
|     warnings: 
|       Key exchange (secp256r1) of lower strength than certificate key
|   TLSv1.3: 
|     ciphers: 
|       TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|       TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|       TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|     cipher preference: server
|_  least strength: A
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|_http-chrono: Request times for /; avg: 7141.21ms; min: 820.07ms; max: 15815.55ms
| http-csrf: 
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=searxng.lan.ddnsgeek.com
|   Found the following possible CSRF vulnerabilities: 
|     
|     Path: http://searxng.lan.ddnsgeek.com:443/
|     Form id: search
|     Form action: /search
|     
|     Path: http://searxng.lan.ddnsgeek.com:443/search
|     Form id: search
|     Form action: /search
|     
|     Path: https://searxng.lan.ddnsgeek.com:443/
|     Form id: search
|_    Form action: /search
|_http-fetch: Please enter the complete path of the directory to save data in.
| http-comments-displayer: 
| Spidering limited to: maxdepth=3; maxpagecount=20; withinhost=searxng.lan.ddnsgeek.com
|     
|     Path: https://searxng.lan.ddnsgeek.com:443/static/themes/simple/sxng-ltr.min.css
|     Line number: 1
|     Comment: 
|_        /*! normalize.css v8.0.1 | MIT License | github.com/necolas/normalize.css */
|_http-favicon: Unknown favicon MD5: 39D42DD43FA010D699534A85CCA0881B
|_http-title: SearXNG
|_http-dombased-xss: Couldn't find any DOM based XSS.
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
| http-errors: 
| Spidering limited to: maxpagecount=40; withinhost=searxng.lan.ddnsgeek.com
|   Found the following error pages: 
|   
|   Error Code: 404
|   	http://searxng.lan.ddnsgeek.com:443/info/en/search-syntax
|   
|   Error Code: 404
|_  	http://searxng.lan.ddnsgeek.com:443/None

Read data files from: /usr/share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Sun Apr  5 09:41:52 2026 -- 1 IP address (1 host up) scanned in 1166.52 seconds