Domain 1.int-vk.ecom.crmbox.skillum.ru
Russia
Software information
nginx
tcp/443
-
Symfony developement panel enabled
The application has Symfony profiling enabled.
It enables an attacker to access the following sensitive content :
- System configuration
- Request log, including POST request with credentials and/or api keys
IP: 185.151.243.84
Domain: 1.int-vk.ecom.crmbox.skillum.ru
Port: 443
URL: https://1.int-vk.ecom.crmbox.skillum.ru/_profiler/empty/search/resultsFirst seen 2022-12-12 07:53
Last seen 2024-05-08 19:38
Open for 513 days-
Fingerprint: 407cf4363b0e62fafca67e0714b933bc14b933bc14b933bc14b933bc14b933bc
Symfony profiler enabled: https://1.int-vk.ecom.crmbox.skillum.ru/_profiler/empty/search/results
Found on 2024-05-08 19:38
-
Open service 185.151.243.84:443 · 1.int-vk.ecom.crmbox.skillum.ru
2024-05-08 19:38
HTTP/1.1 200 OK Server: nginx Date: Wed, 08 May 2024 19:38:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, must-revalidate, private pragma: no-cache Expires: Wed, 08 May 2024 19:38:20 GMT X-Debug-Token: e47caa X-Debug-Token-Link: http://1.int-vk.ecom.crmbox.skillum.ru/_profiler/e47caa X-Robots-Tag: noindex Set-Cookie: PHPSESSID=ba93c5bdc37edd857c0b27c27877076a; path=/; httponly; samesite=lax Access-Control-Allow-Origin: null Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With Content-Security-Policy: frame-ancestors vk.com m.vk.com connect.vk.com id.vk.com vk.ru *.mvk.com *.vk.com *.vk.ru Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
Found 2024-05-08 by HttpPluginCreate report
-
Open service 185.151.243.84:443 · 1.int-vk.ecom.crmbox.skillum.ru
2024-05-01 00:58
HTTP/1.1 200 OK Server: nginx Date: Wed, 01 May 2024 00:59:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, must-revalidate, private pragma: no-cache Expires: Wed, 01 May 2024 00:59:04 GMT X-Debug-Token: 0b5939 X-Debug-Token-Link: http://1.int-vk.ecom.crmbox.skillum.ru/_profiler/0b5939 X-Robots-Tag: noindex Set-Cookie: PHPSESSID=fd3b893c85242f9c88d15626077f6a7c; path=/; httponly; samesite=lax Access-Control-Allow-Origin: null Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With Content-Security-Policy: frame-ancestors vk.com m.vk.com connect.vk.com id.vk.com vk.ru *.mvk.com *.vk.com *.vk.ru Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
Found 2024-05-01 by HttpPluginCreate report
-
Open service 185.151.243.84:443 · 1.int-vk.ecom.crmbox.skillum.ru
2024-04-28 23:27
HTTP/1.1 200 OK Server: nginx Date: Sun, 28 Apr 2024 23:27:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=0, must-revalidate, private pragma: no-cache Expires: Sun, 28 Apr 2024 23:27:55 GMT X-Debug-Token: 755d7a X-Debug-Token-Link: http://1.int-vk.ecom.crmbox.skillum.ru/_profiler/755d7a X-Robots-Tag: noindex Set-Cookie: PHPSESSID=feca36939c1865b22feab3b63b2842ac; path=/; httponly; samesite=lax Access-Control-Allow-Origin: null Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS Access-Control-Allow-Headers: Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With Content-Security-Policy: frame-ancestors vk.com m.vk.com connect.vk.com id.vk.com vk.ru *.mvk.com *.vk.com *.vk.ru Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
Found 2024-04-28 by HttpPluginCreate report