127 lines
4.0 KiB
Plaintext
127 lines
4.0 KiB
Plaintext
WhatWeb report for http://gitea.lan.ddnsgeek.com:80
|
|
Status : 301 Moved Permanently
|
|
Title : <None>
|
|
IP : 167.179.167.166
|
|
Country : NEW ZEALAND, NZ
|
|
|
|
Summary : RedirectLocation[https://gitea.lan.ddnsgeek.com/]
|
|
|
|
Detected Plugins:
|
|
[ RedirectLocation ]
|
|
HTTP Server string location. used with http-status 301 and
|
|
302
|
|
|
|
String : https://gitea.lan.ddnsgeek.com/ (from location)
|
|
|
|
HTTP Headers:
|
|
HTTP/1.1 301 Moved Permanently
|
|
Location: https://gitea.lan.ddnsgeek.com/
|
|
Date: Tue, 14 Apr 2026 03:26:27 GMT
|
|
Content-Length: 17
|
|
Connection: close
|
|
|
|
WhatWeb report for https://gitea.lan.ddnsgeek.com/
|
|
Status : 200 OK
|
|
Title : Gitea: Git with a cup of tea
|
|
IP : 167.179.167.166
|
|
Country : NEW ZEALAND, NZ
|
|
|
|
Summary : Cookies[_csrf,i_like_gitea], HTML5, HttpOnly[_csrf,i_like_gitea], Meta-Author[Gitea - Git with a cup of tea], Open-Graph-Protocol[website], PoweredBy[Gitea], Script, Strict-Transport-Security[max-age=15552000; includeSubDomains; preload], UncommonHeaders[x-content-type-options], X-Frame-Options[SAMEORIGIN], X-XSS-Protection[1; mode=block]
|
|
|
|
Detected Plugins:
|
|
[ Cookies ]
|
|
Display the names of cookies in the HTTP headers. The
|
|
values are not returned to save on space.
|
|
|
|
String : i_like_gitea
|
|
String : _csrf
|
|
|
|
[ HTML5 ]
|
|
HTML version 5, detected by the doctype declaration
|
|
|
|
|
|
[ HttpOnly ]
|
|
If the HttpOnly flag is included in the HTTP set-cookie
|
|
response header and the browser supports it then the cookie
|
|
cannot be accessed through client side script - More Info:
|
|
http://en.wikipedia.org/wiki/HTTP_cookie
|
|
|
|
String : _csrf,i_like_gitea
|
|
|
|
[ Meta-Author ]
|
|
This plugin retrieves the author name from the meta name
|
|
tag - info:
|
|
http://www.webmarketingnow.com/tips/meta-tags-uncovered.html
|
|
#author
|
|
|
|
String : Gitea - Git with a cup of tea
|
|
|
|
[ Open-Graph-Protocol ]
|
|
The Open Graph protocol enables you to integrate your Web
|
|
pages into the social graph. It is currently designed for
|
|
Web pages representing profiles of real-world things .
|
|
things like movies, sports teams, celebrities, and
|
|
restaurants. Including Open Graph tags on your Web page,
|
|
makes your page equivalent to a Facebook Page.
|
|
|
|
Version : website
|
|
|
|
[ PoweredBy ]
|
|
This plugin identifies instances of 'Powered by x' text and
|
|
attempts to extract the value for x.
|
|
|
|
String : Gitea
|
|
|
|
[ Script ]
|
|
This plugin detects instances of script HTML elements and
|
|
returns the script language/type.
|
|
|
|
|
|
[ Strict-Transport-Security ]
|
|
Strict-Transport-Security is an HTTP header that restricts
|
|
a web browser from accessing a website without the security
|
|
of the HTTPS protocol.
|
|
|
|
String : max-age=15552000; includeSubDomains; preload
|
|
|
|
[ UncommonHeaders ]
|
|
Uncommon HTTP server headers. The blacklist includes all
|
|
the standard headers and many non standard but common ones.
|
|
Interesting but fairly common headers should have their own
|
|
plugins, eg. x-powered-by, server and x-aspnet-version.
|
|
Info about headers can be found at www.http-stats.com
|
|
|
|
String : x-content-type-options (from headers)
|
|
|
|
[ X-Frame-Options ]
|
|
This plugin retrieves the X-Frame-Options value from the
|
|
HTTP header. - More Info:
|
|
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
|
aspx
|
|
|
|
String : SAMEORIGIN
|
|
|
|
[ X-XSS-Protection ]
|
|
This plugin retrieves the X-XSS-Protection value from the
|
|
HTTP header. - More Info:
|
|
http://msdn.microsoft.com/en-us/library/cc288472%28VS.85%29.
|
|
aspx
|
|
|
|
String : 1; mode=block
|
|
|
|
HTTP Headers:
|
|
HTTP/1.1 200 OK
|
|
Cache-Control: max-age=0, private, must-revalidate, no-transform
|
|
Content-Type: text/html; charset=utf-8
|
|
Date: Tue, 14 Apr 2026 03:26:45 GMT
|
|
Set-Cookie: i_like_gitea=991d9185d7f13941; Path=/; HttpOnly; Secure; SameSite=Lax
|
|
Set-Cookie: _csrf=7ThFqtYl1C5wdrAjCZuOO_CwUdA6MTc3NjEzNzIwNTY0MTU4MTYxMw; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
|
|
Strict-Transport-Security: max-age=15552000; includeSubDomains; preload
|
|
X-Content-Type-Options: nosniff
|
|
X-Frame-Options: SAMEORIGIN
|
|
X-Xss-Protection: 1; mode=block
|
|
Connection: close
|
|
Transfer-Encoding: chunked
|
|
|
|
|