147 lines
7.1 KiB
Plaintext
147 lines
7.1 KiB
Plaintext
# Nmap 7.99 scan initiated Tue Apr 14 03:42:34 2026 as: /usr/lib/nmap/nmap -vv --reason -Pn -T4 -sV -p 443 "--script=banner,(http* or ssl*) and not (brute or broadcast or dos or external or http-slowloris* or fuzzer)" -oN /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/tcp_443_https_nmap.txt -oX /root/results/kuma.lan.ddnsgeek.com/scans/tcp443/xml/tcp_443_https_nmap.xml kuma.lan.ddnsgeek.com
|
|
Nmap scan report for kuma.lan.ddnsgeek.com (101.180.16.105)
|
|
Host is up, received user-set (0.037s latency).
|
|
rDNS record for 101.180.16.105: cpe-101-180-16-105.nb10.nsw.asp.telstra.net
|
|
Scanned at 2026-04-14 03:42:37 UTC for 357s
|
|
|
|
PORT STATE SERVICE REASON VERSION
|
|
443/tcp open ssl/https syn-ack ttl 53
|
|
|_http-jsonp-detection: Couldn't find any JSONP endpoints.
|
|
| ssl-enum-ciphers:
|
|
| TLSv1.2:
|
|
| ciphers:
|
|
| TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|
|
| TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|
|
| TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|
|
| TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A
|
|
| TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A
|
|
| compressors:
|
|
| NULL
|
|
| cipher preference: server
|
|
| warnings:
|
|
| Key exchange (secp256r1) of lower strength than certificate key
|
|
| TLSv1.3:
|
|
| ciphers:
|
|
| TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (X25519MLKEM768) - A
|
|
| TLS_AKE_WITH_AES_128_GCM_SHA256 (X25519MLKEM768) - A
|
|
| TLS_AKE_WITH_AES_256_GCM_SHA384 (X25519MLKEM768) - A
|
|
| cipher preference: server
|
|
|_ least strength: A
|
|
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|
|
|_http-date: Tue, 14 Apr 2026 03:42:53 GMT; -5s from local time.
|
|
|_http-wordpress-enum: Nothing found amongst the top 100 resources,use --script-args search-limit=<number|all> for deeper analysis)
|
|
| http-security-headers:
|
|
| Strict_Transport_Security:
|
|
| HSTS not configured in HTTPS Server
|
|
| X_Content_Type_Options:
|
|
| Header: X-Content-Type-Options: nosniff
|
|
|_ Description: Will prevent the browser from MIME-sniffing a response away from the declared content-type.
|
|
| http-errors:
|
|
| Spidering limited to: maxpagecount=40; withinhost=kuma.lan.ddnsgeek.com
|
|
| Found the following error pages:
|
|
|
|
|
| Error Code: 404
|
|
|_ http://kuma.lan.ddnsgeek.com:443/
|
|
| http-sitemap-generator:
|
|
| Directory structure:
|
|
| Longest directory structure:
|
|
| Depth: 0
|
|
| Dir: /
|
|
| Total files found (by extension):
|
|
|_
|
|
| http-vhosts:
|
|
|_128 names had status 404
|
|
| http-useragent-tester:
|
|
| Status for browser useragent: 404
|
|
| Allowed User Agents:
|
|
| Mozilla/5.0 (compatible; Nmap Scripting Engine; https://nmap.org/book/nse.html)
|
|
| libwww
|
|
| lwp-trivial
|
|
| libcurl-agent/1.0
|
|
| PHP/
|
|
| Python-urllib/2.5
|
|
| GT::WWW
|
|
| Snoopy
|
|
| MFC_Tear_Sample
|
|
| HTTP::Lite
|
|
| PHPCrawl
|
|
| URI::Fetch
|
|
| Zend_Http_Client
|
|
| http client
|
|
| PECL::HTTP
|
|
| Wget/1.13.4 (linux-gnu)
|
|
|_ WWW-Mechanize/1.34
|
|
|_http-chrono: Request times for /; avg: 501.71ms; min: 433.96ms; max: 693.82ms
|
|
|_http-malware-host: Host appears to be clean
|
|
|_http-referer-checker: Couldn't find any cross-domain scripts.
|
|
|_http-fetch: Please enter the complete path of the directory to save data in.
|
|
|_http-mobileversion-checker: No mobile version detected.
|
|
|_http-dombased-xss: Couldn't find any DOM based XSS.
|
|
|_http-wordpress-users: [Error] Wordpress installation was not found. We couldn't find wp-login.php
|
|
|_ssl-date: TLS randomness does not represent time
|
|
|_http-title: Site doesn't have a title (text/plain; charset=utf-8).
|
|
|_http-comments-displayer: Couldn't find any comments.
|
|
|_http-litespeed-sourcecode-download: Request with null byte did not work. This web server might not be vulnerable
|
|
|_http-devframework: Couldn't determine the underlying framework or CMS. Try increasing 'httpspider.maxpagecount' value to spider more pages.
|
|
|_http-drupal-enum: Nothing found amongst the top 100 resources,use --script-args number=<number|all> for deeper analysis)
|
|
| ssl-cert: Subject: commonName=kuma.lan.ddnsgeek.com
|
|
| Subject Alternative Name: DNS:kuma.lan.ddnsgeek.com
|
|
| Issuer: commonName=R13/organizationName=Let's Encrypt/countryName=US
|
|
| Public Key type: rsa
|
|
| Public Key bits: 4096
|
|
| Signature Algorithm: sha256WithRSAEncryption
|
|
| Not valid before: 2026-04-01T19:44:43
|
|
| Not valid after: 2026-06-30T19:44:42
|
|
| MD5: 4503 8f10 fe7f f545 fff2 813b 5a8f 7631
|
|
| SHA-1: a08d 7799 f3ef cb17 9052 958c 43c5 eeb5 d6b5 59c1
|
|
| SHA-256: 0c92 3f5e b861 8c91 b8a8 f4bf 1cb8 7d80 f07a ddc8 3c4b 8ed9 5478 90cf b482 512b
|
|
| -----BEGIN CERTIFICATE-----
|
|
| MIIGATCCBOmgAwIBAgISBYYKHnpmPDpUPJjaOPK93fSHMA0GCSqGSIb3DQEBCwUA
|
|
| MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD
|
|
| EwNSMTMwHhcNMjYwNDAxMTk0NDQzWhcNMjYwNjMwMTk0NDQyWjAgMR4wHAYDVQQD
|
|
| ExVrdW1hLmxhbi5kZG5zZ2Vlay5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw
|
|
| ggIKAoICAQC2bNy5QjaE52KGlHDyiggwMm0YUU1SlAUrH1Awn3efLnnU2CKuF/NT
|
|
| pLP2ahkt7Js/bURSHJgISI7D8tQ3uT1+D7ZZjljYkaXQhdrLRdCSNCNDi3cmBEcR
|
|
| WUD8cnS2jXZgwV6C9sU2nXgxiDNEnFy3AOJppuUo6TU2eipfYMHwsz+FIz/ghD3Z
|
|
| lTf+T8HO70cGQLBRQP/4cu1Kc5sL+xDOk88SB/91j6FapUmXrsLaIaLeX7EQm7Yy
|
|
| 2pBkaXe/6UxzNuCAAPqxtkuMPi9Tcmm7X9fqo3ErMcc8BtZqeGcp2Zwm1sg3pYjF
|
|
| MjTLTsGAcxfMBWvQi8nhQ92Ah+Vm7O0SddUEFNRvoOioG9dR32C+v6w0E004Upt+
|
|
| BY0UWt9EgUrC4I8awGBrL4/E5qgnl6Hi5ho2Q6Px28ybIuoSQ7aeJtS8g5nBjCzp
|
|
| 5n81UcTtD98lhZKWRRJObFPh9YP/lxYz41GSIrRgBg6PtxU/1nJ0rZZvfwiuigxr
|
|
| NdoMo561ghayd607GVZ0JPKvY7sbxEkJ6XQ45E2MP5KF8EaPdvc+V2rP9Djy80+D
|
|
| XUq5FsmhM+YK1FfCw6S9cN7JRD9F1wZYmdHtHdS7Nmpag2/8w42UJQgN93WsflEx
|
|
| JKdNOuS9JWj95j84WmLkgWugWjZcrgk11PL6WkN6cecDt8+jbmWjvQIDAQABo4IC
|
|
| IDCCAhwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
|
|
| EwEB/wQCMAAwHQYDVR0OBBYEFFXeRi9gTjL3dXj8UCJJQeJ90UeeMB8GA1UdIwQY
|
|
| MBaAFOernw8sM6BT015PeMiyhA471pIzMDMGCCsGAQUFBwEBBCcwJTAjBggrBgEF
|
|
| BQcwAoYXaHR0cDovL3IxMy5pLmxlbmNyLm9yZy8wIAYDVR0RBBkwF4IVa3VtYS5s
|
|
| YW4uZGRuc2dlZWsuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMC0GA1UdHwQmMCQw
|
|
| IqAgoB6GHGh0dHA6Ly9yMTMuYy5sZW5jci5vcmcvOC5jcmwwggEKBgorBgEEAdZ5
|
|
| AgQCBIH7BIH4APYAdQAWgy2r8KklDw/wOqVF/8i/yCPQh0v2BCkn+OcfMxP1+gAA
|
|
| AZ1KyTc0AAAEAwBGMEQCIFgwfeRhONb6T5LOG5a3CEnv5uU9GgHReu3FgCbNWvaO
|
|
| AiB4qoUik6olE6a7XgyMymRtow3pT+b51p8jdt+BaxswPAB9AKgmy+MKxjUSRlM/
|
|
| 4GXxTxnZbhkIE8Qd2W15ALMSPFUnAAABnUrJOMEACAAABQAFK3PIBAMARjBEAiAh
|
|
| 2KriLcSsAzvAqrucXzHSrZgfFf5tgwdSAYBbsUQxgAIgMhTKcEpKu31cvaY5rjEI
|
|
| 3CRiSD0zRDpz0muR3ED0Vi0wDQYJKoZIhvcNAQELBQADggEBADbjfbibh5H8hw6L
|
|
| 2KKxOcEGi787TIgm058gYlsm/2skqK1VqvS3Qmoj5IA05Yr5QpMFQFf6Z1kAy78P
|
|
| DH8qfadIgAU2Nbe1cK9o5f4LhTU9wM58C9Ti7e5aiNHA1UCsrwnvJnH523uxEVcG
|
|
| HCrne4Bewvtpfyb6M1RoRp3W4lHS4d7thHm6LXLEEJgBCFA5Yz6ez6mtainST5sU
|
|
| 6j4s+Jt5BQ2zTka2y2ao18OTfkeLtGqUDfB3oZWMNqK/m6m90FKTKYSTyoBtdESc
|
|
| nq9c8G6psGHa8K0O0t+cPwXHZQlZi2nAVN2UhV3GrwfAakzw3Bu31z8nS8OoFxRv
|
|
| ssZpBGM=
|
|
|_-----END CERTIFICATE-----
|
|
|_http-feed: Couldn't find any feeds.
|
|
| http-headers:
|
|
| Content-Type: text/plain; charset=utf-8
|
|
| X-Content-Type-Options: nosniff
|
|
| Date: Tue, 14 Apr 2026 03:43:08 GMT
|
|
| Content-Length: 19
|
|
| Connection: close
|
|
|
|
|
|_ (Request type: GET)
|
|
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|
|
|
|
Read data files from: /usr/share/nmap
|
|
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
|
|
# Nmap done at Tue Apr 14 03:48:35 2026 -- 1 IP address (1 host up) scanned in 361.55 seconds
|